376 matches found
CVE-2017-1000381
The c-ares function aresparsenaptrreply, which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way...
Apple macOS Sierra WindowServer Memory Read Vulnerability
Apple macOS is a set of operating systems that run on Apple's Macintosh line of computers. A memory read vulnerability exists in Apple macOS Sierra WindowServer, which can be exploited by a remote attacker to submit a special application that reads sensitive memory information...
USN-3260-2: Firefox regression
USN-3260-1 fixed vulnerabilities in Firefox. The update caused the date picker panel and form validation errors to close immediately on opening. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered in Firefox. If a...
Design/Logic Flaw
V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android was missing a neutering check, which allowed a remote attacker to read values in memory via a crafted HTML page...
Adobe Reader DC Collab shareFile Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
The vulnerability of the Windows operating system allows a perpetrator to obtain confidential information from the process memory.
The vulnerability of the Uniscribe component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to obtain confidential information from the process’s memory through a specially crafted...
Microsoft Office Information Disclosure Vulnerability (CNVD-2016-12364)
Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. An information disclosure vulnerability exists in Microsoft Office. An attacker can exploit this...
Microsoft Office Information Disclosure Vulnerability (CNVD-2016-12366)
Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. An information disclosure vulnerability exists in Microsoft Office. An attacker can exploit this...
Microsoft Office Excel Multiple Vulnerabilities (3204068)
This host is missing a critical security update according to Microsoft Bulletin MS16-148. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
PHP 7 is due: the deserialization vulnerability case studies and analysis,-vulnerability warning-the black bar safety net
Leak the pointer In a typical PHP-5 deserialization of use, we will use a dispenser to cover a pointer to the string contents of the pointer, thus reading the next stack slot. However, in PHP-7,The internal string representation is different. In PHP-7, The basic structure of the struct zval...
Oracle Java Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to leak arbitrary information on vulnerable installations of Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...
Design/Logic Flaw
The rtnlfilllinkifmap function in net/core/rtnetlink.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory by reading a Netlink message...
Foxit Reader JBIG2 Out-Of-Bounds Read Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within JBIG2 parsing. A...
MGASA-2016-0003 Updated armagetron package fixes security vulnerabilities
A practically exploitable bug was fixed in the network error handling. In client mode, any received packet that causes an exception during processing would terminate the connection to the server. Another theoretically exploitable bug was fixed that allowed very short UDP packets to cause a memory...
Updated armagetron package fixes security vulnerabilities
A practically exploitable bug was fixed in the network error handling. In client mode, any received packet that causes an exception during processing would terminate the connection to the server. Another theoretically exploitable bug was fixed that allowed very short UDP packets to cause a memory...
The vulnerability of the PostgreSQL database management system allows a attacker to cause a service failure or read arbitrary portions of the server’s memory.
The vulnerability of the crypt function in the contrib/pgcrypto component of the PostgreSQL database management system is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor to cause service failures or read arbitrary portions of the...
Citrix XenServer Multiple Vulnerabilities (CTX200892)
The version of Citrix XenServer installed on the remote host is affected by multiple vulnerabilities : - A flaw exists in the VGA emulator in QEMU that allows a local guest user to read host memory by setting the display to a high resolution. CVE-2014-3615 - A flaw exists in the setpixelformat...
Mandriva Linux Security Advisory : python3 (MDVSA-2015:076)
Updated python3 packages fix security vulnerabilities : ZipExtFile.read goes into 100% CPU infinite loop on maliciously binary edited zips CVE-2013-7338. A vulnerability was reported in Python's socket module, due to a boundary error within the sockrecvfrominto function, which could be exploited ...
