374 matches found
Microsoft SQL Server 2012 SP2 11.0.5500.0 through 11.0.5592.0 Multiple Vulnerabilities (3045319)
Binary data 9827.prm...
Microsoft SQL Server 2008 R2 SP3 10.50.6500.0 through 10.50.6525.0 Multiple Vulnerabilities (3045314)
Binary data 9818.prm...
Linux kernel denial of service vulnerability (CNVD-2016-09488)
The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A security vulnerability exists in the mm/memory.c file in Linux kernel versions prior to 4.1.4, which stems from a program's failure to properly handle anonymous pages. A loc...
Qemu: virtio: unbounded memory allocation on host via guest leading to DoS
Quick Emulator QEMU built with the virtio framework is vulnerable to an unbounded memory allocation issue. It was found that a malicious guest user could submit more requests than the virtqueue size permits. Processing a request allocates a VirtQueueElement results in unbounded memory allocation ...
Apple OS X El Capitan IOSurface Memory Misreference Vulnerability
Apple OS X is a specialized operating system developed for Mac computers. A memory misreference vulnerability exists in IOSurface for Apple OS X El Capitan 1, which can be exploited by a local attacker to elevate privileges...
The vulnerability of the Firefox browser, which allows a malicious actor to compromise the confidentiality of protected information
The vulnerability exists in Mozilla Firefox due to improper initialization of memory intended for displaying GIFs. Exploiting this vulnerability allows malicious actors to gain access to confidential information from the process’s memory by using a specially crafted web script that interacts with...
spice: Host memory access from guest with invalid primary surface parameters
A memory access flaw was found in the way spice handled certain guests using crafted primary surface parameters. A user in a guest could use this flaw to read from and write to arbitrary memory locations on the host...
DEBIAN-CVE-2016-1669
The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before 50.0.2661.102, does not properly determine when to expand certain memory allocations, which allows remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impa...
The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or cause other effects.
The vulnerability of the Google Chrome browser extension is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure the continued use of resources after they are freed or have other effects through t...
Microsoft Internet Explorer Memory Error Reference Remote Code Execution Vulnerability (CNVD-2016-01536)
Internet Explorer is a web browser from Microsoft. A vulnerability in the handling of "range" type HTML input elements in some versions of Internet Explorer can be exploited by an attacker with a malicious web page or file to reuse a freed memory structure to execute arbitrary code in the context...
Adobe Flash Player Memory Error Referencing Arbitrary Code Execution Vulnerability (CNVD-2015-08260)
Adobe Flash Player is a widely used, proprietary multimedia program player. It was originally written by Macromedia and continued to be developed and distributed by Adobe after Macromedia was acquired by Adobe. A memory misreference vulnerability exists in Adobe Flash Player's handling of special...
Design/Logic Flaw
The 1 libxlsetmemorytarget function in tools/libxl/libxl.c and 2 libxlbuildpost function in tools/libxl/libxldom.c in Xen 3.4.x through 4.6.x do not properly calculate the balloon size when using the populate-on-demand PoD system, which allows local HVM guest users to cause a denial of service...
Apple Safari/iTunes WebKit Memory Corruption Vulnerability (CNVD-2015-07109)
IOS is an operating system developed by Apple for mobile devices; Safari is the latest operating system for Apple computers; the browser in Mac OS X; and iTunes is a digital media playback application. A security vulnerability exists in WebKit in Apple iOS versions prior to 9.1, Safari versions...
The vulnerabilities of PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, as well as PDF viewing programs like Adobe Reader and Adobe Reader Document Cloud, allow attackers to execute arbitrary code.
The vulnerabilities of PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, as well as PDF viewing programs like Adobe Reader and Adobe Reader Document Cloud, are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow a malicious actor to...
The vulnerability of the Kaspersky Anti-Virus antivirus protection allows a hacker to trigger a service failure.
The vulnerability of Kaspersky Anti-Virus lies in a flaw in its memory processing mechanism when dealing with compressed executable files. Exploiting this vulnerability can allow an attacker to cause service interruptions...
The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code
The vulnerability of the Flash Player software is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code
The vulnerability of the Flash Player software arises from the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Acrobat text viewer program allows a hacker to execute arbitrary code.
The vulnerability of the Acrobat text viewer arises from the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the Internet Explorer browser, which allows a hacker to execute arbitrary code or trigger a service failure.
The Internet Explorer browser contains a vulnerability related to memory handling errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using a specially crafted web page...
The vulnerability of the Internet Explorer browser, which allows a hacker to execute arbitrary code or trigger a service failure.
The Internet Explorer browser contains a vulnerability related to memory handling errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using a specially crafted web page...