Updated pcre packages fix security vulnerabilities

The compilebracketmatchingpath function in pcrejitcompile.c in PCRE through 8.x before revision 1680 e.g., the PHP 7.1.1 bundled version allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted regular expression CVE-2017-6004. A vulnerability wa...

PT-2018-6841 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.14.8 Description: The issue arises from improper validation of the sigevent-sigev notify field in the timer create syscall implementation. This leads to out-of-bounds access when the show timer function is...

CVE-2017-14821

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

lcms2: Out-of-bounds read in Type_MLU_Read()

The TypeMLURead function in cmstypes.c in Little CMS aka lcms2 allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read...

UBUNTU-CVE-2017-16910

An error within the "LibRaw::xtransinterpolate" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.6 can be exploited to cause an invalid read memory access and subsequently a Denial of Service condition...

CVE-2017-16377

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is due to a computation that accesses a pointer that has not been initialized in...

CVE-2017-16378

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is due to a computation that accesses a pointer that has not been initialized; t...

chromium-browser: integer overflow in icu

Integer overflow in international date handling in International Components for Unicode ICU for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

CVE-2017-15422

Integer overflow in international date handling in International Components for Unicode ICU for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

CVE-2017-15422

Integer overflow in international date handling in International Components for Unicode ICU for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

CVE-2017-15938

dwarf2.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, miscalculates DWFORMrefaddr die refs in the case of a relocatable object file, which allows remote attackers to cause a denial of service findabstractinstancename invalid memory read, segmentation...

PT-2017-15604 · Libxls · Libxls

Name of the Vulnerable Software and Affected Versions: libxls versions 1.3.4 through 1.4.0 Description: An out-of-bounds write vulnerability exists in the xls mergedCells function of libxls, allowing a specially crafted XLS file to cause memory corruption, potentially resulting in remote code...

USN-3477-1 firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, read uninitialized memory, obtain sensitive information, bypass same-origin restrictions, bypass CSP...

Adobe Digital Editions Out-of-Bounds Memory Read Vulnerability (CNVD-2017-37096)

Adobe Digital Editions software offers an engaging way to help you view and manage eBooks and other digital publications. An out-of-bounds memory read vulnerability exists in Adobe Digital Editions versions 4.5.6 and earlier. An attacker could exploit this vulnerability to view memory address...

Adobe Digital Editions Out-of-Bounds Memory Read Vulnerability (CNVD-2017-37095)

Adobe Digital Editions software offers an engaging way to help you view and manage eBooks and other digital publications. An out-of-bounds memory read vulnerability exists in Adobe Digital Editions versions 4.5.6 and earlier. An attacker could exploit this vulnerability to view memory address...

Adobe Digital Editions out-of-bounds memory read vulnerability (CNVD-2017-37097)

Adobe Digital Editions software offers an engaging way to help you view and manage eBooks and other digital publications. An out-of-bounds memory read vulnerability exists in Adobe Digital Editions versions 4.5.6 and earlier. An attacker could exploit this vulnerability to view memory address...

Adobe Digital Editions out-of-bounds memory read vulnerability (CNVD-2017-37098)

Adobe Digital Editions software offers an engaging way to help you view and manage eBooks and other digital publications. An out-of-bounds memory read vulnerability exists in Adobe Digital Editions versions 4.5.6 and earlier. An attacker could exploit this vulnerability to view memory address...

Privilege escalation

An elevation of privilege vulnerability exists in the NVIDIA GPU driver gm20bclkthrotsetcdevstate, where an out of bound memory read is used as a function pointer could lead to code execution in the kernel.This issue is rated as high because it could allow a local malicious application to execute...

CVE-2017-6264

CVE-2017-6264 is an elevation-of-privilege vulnerability in the NVIDIA GPU driver used on Android, specifically within the gm20b_clk_throt_set_cdev_state path. An out-of-bounds memory read can be used as a function pointer, potentially allowing a local attacker to execute arbitrary code in kernel...

CVE-2017-13842

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...