libarchive LHA/LZH parser heap out-of-bounds read vulnerability

libarchive is a multi-format archive and compression library. A security vulnerability exists in libarchive's LHA/LZH parser that can be exploited by an attacker to cause a heap out-of-bounds read...

Ruby: StringIO strio_getline() can divulge arbitrary memory

originally send by e-mail on 4 Jun 2016 The problem is this line in ext/stringio/stringio.c striogetline: c 1002 if limit 0 && s + limit pos = n = RSTRINGLENptr-string 997 return Qnil; 998 a wrong 'len' parameter to this function doesn't matter as it will correct it itself: c 98 static VALUE 99...

CVE-2016-4580

CVE-2016-4580 affects the Linux kernel up to version 4.5.4 (pre-4.5.5). The vulnerability arises in x25_negotiate_facilities() inside net/x25/x25_facilities.c where a data structure is not properly initialized, enabling an attacker to read sensitive data from kernel stack memory via an X.25 Call ...

The vulnerabilities of PDF viewer programs such as Adobe Reader, Adobe Reader Document Cloud, and PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat allow attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader, Adobe Reader Document Cloud, and PDF editing programs like Adobe Acrobat Document Cloud are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow a malicious actor to execute arbitrary code...

The vulnerabilities of PDF viewer programs such as Adobe Reader, Adobe Reader Document Cloud, and PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat allow attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader, Adobe Reader Document Cloud, and PDF editing programs like Adobe Acrobat Document Cloud are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow a malicious actor to execute arbitrary code...

Win32k Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or...

CVE-2016-4076

epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 2.0.x before 2.0.3 does not properly initialize memory for search patterns, which allows remote attackers to cause a denial of service application crash via a crafted packet...

Information disclosure

Hyper-V in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows 10 allows guest OS users to obtain sensitive information from host OS memory via a crafted application, aka "Hyper-V Information Disclosure Vulnerability."...

MS16-048: Security Update for CSRSS (3148528)

The remote Windows host is missing a security update. It is, therefore, affected by a security feature bypass vulnerability in the Client-Server Run-time Subsystem CSRSS due to improper management of process tokens in memory. A local attacker can exploit this vulnerability, via a specially crafte...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the wificleanup function bcmdhd/wifihal/wifihal.cpp in the Android operating system’s Wi-Fi component is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to increase their privileges by gaining access to the local physical...

The vulnerabilities of Adobe Integrated Runtime and Flash Player software allow a perpetrator to execute arbitrary code.

The vulnerability of Adobe Integrated Runtime and Flash Player programs is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted MPEG-4 data...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or cause other effects.

The vulnerability of the StyleResolver::appendCSSStyleSheet function WebKit/Source/core/css/resolver/StyleResolver.cpp in the Blink engine of Google Chrome browser is related to the use of memory after its release. Exploiting this vulnerability could allow a malicious actor to cause service...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or cause other effects.

The vulnerability of the browser/extensions/api/webrtcaudioprivate/webrtcaudioprivateapi.cc implementation of the WebRTC Audio Private API in Google Chrome Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause servi...

The vulnerability of the Flash Player and Adobe Integrated Runtime software allows a perpetrator to execute arbitrary code.

The vulnerability of the Flash Player and Adobe Integrated Runtime programming platforms is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted MPEG-4 data...

CVE-2016-0109

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0102, CVE-2016-0103,...

The vulnerabilities of Adobe Acrobat and Adobe Acrobat Document Cloud, as well as Adobe Reader and Adobe Reader Document Cloud, allow a perpetrator to execute arbitrary code.

The vulnerability of the AGM.dll library in PDF editing programs from Adobe Acrobat and Adobe Acrobat Document Cloud, as well as PDF viewing programs like Adobe Reader and Adobe Reader Document Cloud, is caused by a buffer overflow in dynamic memory. Exploiting this vulnerability allows an attack...

Foxit Reader GpRuntime::GpLock::GpLock Memory Misreference Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. A security vulnerability exists in the way Foxit Reader uses the Gdiplus API, constructing PDFs that force the use of suspended pointers that have been released in GpRuntime::GpLock::GpLock. An attacker could exploit this...

The vulnerability of the PHP interpreter, which allows attackers to trigger a service failure or exert other effects.

The vulnerability of the Collator::sortWithSortKeys function ext/intl/collator/collatorsort.c in the PHP interpreter is related to the use of memory after it is freed. Exploiting this vulnerability may allow a remote attacker to cause a service failure termination of the application, or possibly...

CVE-2016-0055

Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

The vulnerability of the Flash Player and Adobe Integrated Runtime software allows a perpetrator to execute arbitrary code.

The vulnerability of the Flash Player and Adobe Integrated Runtime software-related programs is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...