Lucene search
K

97 matches found

BDU FSTEC
BDU FSTEC
added 2017/11/23 12:0 a.m.3 views

The vulnerability of the ImagingResampleHorizontal function (libImaging/Resample.c) in the Pillow image processing library allows an attacker to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the ImagingResampleHorizontal function libImaging/Resample.c in the Pillow image processing library is due to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of data by setting t...

10CVSS7.9AI score0.07871EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/11/10 12:0 a.m.3 views

The vulnerability of the decode_digit function in the puny_decode.c library allows a hacker to trigger a service failure or exert other effects.

The vulnerability of the decodedigit function in the punydecode.c library is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker to cause service interruptions or other adverse effects from a remote location...

10CVSS6.9AI score0.03965EPSS
Exploits0References9Affected Software6
BDU FSTEC
BDU FSTEC
added 2017/11/03 12:0 a.m.3 views

The vulnerability of the media_server component of the Android operating system, which allows a hacker to trigger a service failure

The vulnerability of the mediaserver component in the Android operating system is caused by a numerical overflow condition. Exploiting this vulnerability allows an attacker to cause a service failure through a specially created application...

7.1CVSS5.9AI score0.00527EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2017/10/27 5:29 a.m.2 views

CVE-2017-5063

A numeric overflow in Skia in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

8.8CVSS7.3AI score0.01519EPSS
Exploits0References6
Prion
Prion
added 2017/10/27 5:29 a.m.19 views

Design/Logic Flaw

A numeric overflow in Skia in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

6.8CVSS8.1AI score0.01519EPSS
Exploits0References6Affected Software4
UbuntuCve
UbuntuCve
added 2017/10/27 5:29 a.m.24 views

CVE-2017-5063

A numeric overflow in Skia in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

8.8CVSS6.9AI score0.01519EPSS
Exploits0References2
NVD
NVD
added 2017/10/27 5:29 a.m.14 views

CVE-2017-5063

A numeric overflow in Skia in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

8.8CVSS8.4AI score0.01519EPSS
Exploits0References6
Debian CVE
Debian CVE
added 2017/10/27 5:0 a.m.20 views

CVE-2017-5063

Removed by vendor...

8.8CVSS8.7AI score0.01519EPSS
Exploits0
Cvelist
Cvelist
added 2017/10/27 5:0 a.m.17 views

CVE-2017-5063

A numeric overflow in Skia in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

8.3AI score0.01519EPSS
Exploits0References6
CVE
CVE
added 2017/10/27 5:0 a.m.92 views

CVE-2017-5063

A numeric overflow in Skia within Google Chrome prior to 58.0.3029.81 for Linux/Windows/macOS and 58.0.3029.83 for Android allows a remote attacker to cause an out-of-bounds memory read via a crafted HTML page. Affected component: Skia in Chrome. Root cause: numeric overflow. Impact: memory read ...

8.8CVSS6.6AI score0.01519EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/10/26 12:0 a.m.1 views

The vulnerability of the `xt_alloc_table_info` function in the kernel’s `net/netfilter/x_tables.c` file in the Linux operating system allows a hacker to escalate their privileges or cause service interruptions.

The vulnerability of the xtalloctableinfo function in the kernel’s net/netfilter/xtables.c file in the Linux operating system is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker, operating locally, to increase their privileges or cause a service failure memory...

7.8CVSS6.7AI score0.01009EPSS
Exploits1References20Affected Software1
CNVD
CNVD
added 2017/10/19 12:0 a.m.2 views

Artifex MuPDF Numeric Error Vulnerability

Artifex MuPDF is a free, lightweight PDF reader from Artifex Software. An integer overflow vulnerability exists in the pdfreadnewxrefsection of the pdf/pdf-xref.c file in Artifex MuPDF version 1.11. A remote attacker can exploit this vulnerability to write data to an arbitrary memory location...

7.8CVSS7.7AI score0.00997EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2017/09/01 12:0 a.m.3 views

The vulnerability of the Android CAF-release operating system’s supervisor allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Android CAF-release operating system’s supervisor is caused by a numerical overflow condition. Exploiting this vulnerability allows an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS7.8AI score0.00877EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2017/06/23 12:0 a.m.3 views

The vulnerability of the hw/virtio/virtio-crypto.c component of the QEMU hardware emulation driver allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the hw/virtio/virtio-crypto.c component of the QEMU hardware emulation software is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker acting locally to cause a service failure abrupt process termination or execute arbitrary code using a...

7.2CVSS7.2AI score0.00534EPSS
Exploits0References6
BDU FSTEC
BDU FSTEC
added 2017/06/15 12:0 a.m.3 views

The vulnerability of the soundtrigger/ISoundTriggerHwService.cpp component in the Android operating system, which allows a hacker to trigger a service failure.

The vulnerability of the soundtrigger/ISoundTriggerHwService.cpp component in the Android operating system is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker to trigger a service failure using undefined vectors...

5CVSS7.3AI score0.00858EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/06/05 12:0 a.m.4 views

The vulnerability of Qualcomm’s TrustZone microprogramming software technology, which allows attackers to circumvent existing access control policies.

The vulnerability of Qualcomm’s TrustZone microprogramming software lies in a numerical overflow condition that causes an operation to escape outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to bypass existing access control policies...

9.3CVSS7.5AI score0.00654EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2017/06/05 12:0 a.m.4 views

The vulnerability of Qualcomm’s TrustZone microprogramming software technology allows a intruder to trigger a service failure or exert other effects on the system.

The vulnerability of Qualcomm’s TrustZone microprogramming software’s Android Secure Execution Environment from the CAF repository is due to a numerical overflow. Exploiting this vulnerability could allow an attacker to cause a system failure or otherwise affect the system...

9.3CVSS7.3AI score0.00606EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2017/06/05 12:0 a.m.3 views

The vulnerability of Qualcomm’s TrustZone microprogramming software technology allows a intruder to trigger a service failure or exert other effects on the system.

The vulnerability of the TrustZone technology a part of the DRM subsystem of Qualcomm’s Secure Execution Environment for Android, as provided in the CAF repository, is due to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause a system failure or exert...

9.3CVSS7.3AI score0.00656EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2017/06/05 12:0 a.m.3 views

The vulnerability of Novell GroupWise software for collaborative work allows a perpetrator to execute arbitrary code.

The vulnerability of Novell GroupWise software for collaborative work is due to a numerical overflow condition. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code using the long user name or password...

7.5CVSS8.2AI score0.05726EPSS
Exploits1References8Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/04/27 12:0 a.m.3 views

The vulnerabilities of programs for viewing and editing PDF files such as Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud allow attackers to execute arbitrary code.

The vulnerability of CCITT programs for viewing and editing PDF files, such as Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud, is due to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

9.3CVSS7.9AI score0.07576EPSS
Exploits0References3Affected Software2
Rows per page
Query Builder