CVE-2016-7053 CMS Null dereference

In OpenSSL 1.1.0 before 1.1.0c, applications parsing invalid CMS structures can crash with a NULL pointer dereference. This is caused by a bug in the handling of the ASN.1 CHOICE type in OpenSSL 1.1.0 which can result in a NULL value being passed to the structure callback if an attempt is made to...

UBUNTU-CVE-2017-7225

The findnearestline function in addr2line in GNU Binutils 2.28 does not handle the case where the main file name and the directory name are both empty, triggering a NULL pointer dereference and an invalid write, and leading to a program crash...

CVE-2017-0016

Microsoft Windows 10 Gold, 1511, and 1607; Windows 8.1; Windows RT 8.1; Windows Server 2012 R2, and Windows Server 2016 do not properly handle certain requests in SMBv2 and SMBv3 packets, which allows remote attackers to execute arbitrary code via a crafted SMBv2 or SMBv3 packet to the Server...

CVE-2017-0016

Microsoft Windows 10 Gold, 1511, and 1607; Windows 8.1; Windows RT 8.1; Windows Server 2012 R2, and Windows Server 2016 do not properly handle certain requests in SMBv2 and SMBv3 packets, which allows remote attackers to execute arbitrary code via a crafted SMBv2 or SMBv3 packet to the Server...

CVE-2017-0016

Microsoft Windows 10 Gold, 1511, and 1607; Windows 8.1; Windows RT 8.1; Windows Server 2012 R2, and Windows Server 2016 do not properly handle certain requests in SMBv2 and SMBv3 packets, which allows remote attackers to execute arbitrary code via a crafted SMBv2 or SMBv3 packet to the Server...

CVE-2017-0016

CVE-2017-0016 affects multiple Windows versions (Windows 10, 8.1, RT 8.1, Server 2012R2/2016) where SMBv2/v3 packet handling in the Server service is flawed, enabling a remote attacker to potentially cause a crash or execute arbitrary code via a crafted SMB request. The issue is tied to SMBv2/SMB...

Mozilla Firefox HttpChannel Null Reference Cancellation Crash Vulnerability

Mozilla Firefox is an open source web browser. Mozilla Firefox has a security vulnerability. A web event listener can be released prematurely, resulting in a zero dereference...

Mozilla Firefox Security Advisories (MFSA2017-05, MFSA2017-07) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

UBUNTU-CVE-2017-5416

In certain circumstances a networking event listener can be prematurely released. This appears to result in a null dereference in practice. This vulnerability affects Firefox 52 and Thunderbird 52...

Security vulnerabilities fixed in Firefox 52 — Mozilla

JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. A crash triggerable by web content in which an ErrorResult references unassigned memory due to a logic error. The resulting crash may be exploitabl...

Type confusion

Type confusion in Histogram in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to potentially exploit a near null dereference via a crafted HTML page...

CVE-2017-5023

Removed by vendor...

openSUSE Security Update : libxml2 (openSUSE-2017-244)

This update for libxml2 fixes the following issues : - CVE-2016-4658: use-after-free error could lead to crash bsc1005544 - Fix NULL dereference in xpointer.c when in recovery mode bsc1014873 - CVE-2016-9597: An XML document with many opening tags could have caused a overflow of the stack not...

SUSE SLED12 / SLES12 Security Update : libxml2 (SUSE-SU-2017:0380-1)

This update for libxml2 fixes the following issues : - CVE-2016-4658: use-after-free error could lead to crash bsc1005544 - Fix NULL dereference in xpointer.c when in recovery mode bsc1014873 - CVE-2016-9597: An XML document with many opening tags could have caused a overflow of the stack not...

SUSE-SU-2017:0380-1 Security update for libxml2

This update for libxml2 fixes the following issues: CVE-2016-4658: use-after-free error could lead to crash bsc1005544 Fix NULL dereference in xpointer.c when in recovery mode bsc1014873 CVE-2016-9597: An XML document with many opening tags could have caused a overflow of the stack not detected b...

CVE-2017-5023

Type confusion in Histogram in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to potentially exploit a near null dereference via a crafted HTML page...

Fedora 24 : 2:qemu (2017-12394e2cc7)

CVE-2016-6836: vmxnet: Information leakage in vmxnet3completepacket bz 1366370 - CVE-2016-7909: pcnet: Infinite loop in pcnetrdraaddr bz 1381196 - CVE-2016-7994: virtio-gpu: memory leak in resourcecreate2d bz 1382667 - CVE-2016-8577: 9pfs: host memory leakage in v9fsread bz 1383286 -...

Autodesk Backburner Manager 3 < 2016.0.0.2150 - Null Dereference Denial of Service Exploit

Exploit for windows platform in category dos / poc import sys import datetime import socket import argparse import os import time remotehost = '' remoteport = '' def callExit: print "\n\t\t! exiting at %s .....\n" % datetime.datetime.now sys.exit1 def mySocket: try: s = socket.socketsocket.AFINET...

SUSE SLES11 Security Update : libxml2 (SUSE-SU-2017:0164-1)

This update for libxml2 fixes the following issues : - CVE-2016-9318: libxml2 did not offer a flag directly indicating that the current document may be read but other files may not be opened, which made it easier for remote attackers to conduct XML External Entity XXE attacks via a crafted docume...

SUSE-SU-2017:0164-1 Security update for libxml2

This update for libxml2 fixes the following issues: CVE-2016-9318: libxml2 did not offer a flag directly indicating that the current document may be read but other files may not be opened, which made it easier for remote attackers to conduct XML External Entity XXE attacks via a crafted document...