Buffer Overflow Vulnerability in Multiple NETGEAR Products (CNVD-2021-67653)

NETGEAR D7800 is a wireless modem, NETGEAR R7500 is a wireless router, NETGEAR WNDR4300 is a wireless router, and NETGEAR D7800 is a wireless modem. A buffer overflow vulnerability exists in multiple NETGEAR products. The vulnerability stems from a networked system or product that does not proper...

NETGEAR R7800 Buffer Overflow Vulnerability (CNVD-2020-23427)

The NETGEAR R7800 is a wireless router from NETGEAR. A buffer overflow vulnerability exists in the NETGEAR R7800 prior to version 1.0.2.52. The vulnerability originates when a network system or product performs an operation on memory without properly validating data boundaries, resulting in an...

CVE-2019-15663

An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120404 in KfeCo10X64.sys fails to validate an offset passed as a parameter during a memory operation, leading to an out-of-bounds read that can be used as part of a chain to escalate privileges issue 1 of 2...

CVE-2019-15664

An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120404 in KfeCo10X64.sys fails to validate an offset passed as a parameter during a memory operation, leading to an out-of-bounds read that can be used as part of a chain to escalate privileges issue 2 of 2...

CVE-2019-15662

An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120444 in KfeCo10X64.sys fails to validate an offset passed as a parameter during a memory operation, leading to an arbitrary read primitive that can be used as part of a chain to escalate privileges...

Buffer overflow

An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120444 in KfeCo10X64.sys fails to validate an offset passed as a parameter during a memory operation, leading to an arbitrary read primitive that can be used as part of a chain to escalate privileges...

CVE-2019-15665

The CVE-2019-15665 entry affects Rivet Killer Control Center

CVE-2019-15664

An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120404 in KfeCo10X64.sys fails to validate an offset passed as a parameter during a memory operation, leading to an out-of-bounds read that can be used as part of a chain to escalate privileges issue 2 of 2...

CVE-2019-15662

An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120444 in KfeCo10X64.sys fails to validate an offset passed as a parameter during a memory operation, leading to an arbitrary read primitive that can be used as part of a chain to escalate privileges...

CVE-2015-1607

kbx/keybox-search.c in GnuPG before 1.4.19, 2.0.x before 2.0.27, and 2.1.x before 2.1.2 does not properly handle bitwise left-shifts, which allows remote attackers to cause a denial of service invalid read operation via a crafted keyring file, related to sign extensions and "memcpy with overlappi...

GDB Debugger Code Execution

The vulnerability of the GDB debugger’s gdb module relates to the execution of an operation outside the buffer in memory. Exploiting this vulnerability allows a perpetrator to execute arbitrary code or trigger a service failure using a specially created ELF file...

Cisco IOS and IOS XE Information Disclosure Vulnerability (CNVD-2019-14438)

Cisco IOS and IOS XE are a set of operating systems developed by Cisco for its network devices. An information disclosure vulnerability exists in the secure storage feature of Cisco IOS and IOS XE, which arises from an incorrect memory operation performed by the program during encryption. A local...

VLC (European Commission - DIGIT): Buffer overflow in libavi_plugin memmove() call

Summary: When parsing an invalid AVI file, a buffer overflow might occur. Description: The ReadFrame function in the avi.c file uses a variable iwidthbytes, which is obtained directly from the file. It is a signed integer. It does not do a strict check before the memory operationmemmove, memcpy,...

PT-2018-1871

Name of the Vulnerable Software and Affected Versions Microsoft Outlook affected versions not specified Description The issue is related to a remote code execution problem in Microsoft Outlook, caused by an out-of-bounds memory operation. This can be exploited by a remote attacker using a special...

PT-2018-1873

Name of the Vulnerable Software and Affected Versions Microsoft Outlook affected versions not specified Description The issue is related to a remote code execution problem in Microsoft Outlook, caused by an out-of-bounds memory operation. This can be exploited by a remote attacker using a special...

Oracle GoldenGate Monitoring Manager Full Control

The vulnerability of the Monitoring Manager component in the real-time data synchronization tool Oracle GoldenGate arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to gain full control over the application using a TCP...

PT-2018-1317

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description The issue is caused by an out-of-bounds memory operation in Microsoft Office software. This can be exploited by a remote attacker using a specially crafted docx file, allowing them t...

ChakraCore Buffer Overflow RCE

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Design/Logic Flaw

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is a result of untrusted input that is used to calculate an array index; the...

Android NAS DoS

The vulnerability of the Android operating system’s NAS component arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failure remotely...