NewStart CGSL MAIN 5.04 : curl Vulnerability (NS-SA-2019-0002)

The remote NewStart CGSL host, running version MAIN 5.04, has curl packages installed that are affected by a vulnerability: - A buffer overrun flaw was found in the IMAP handler of libcurl. By tricking an unsuspecting user into connecting to a malicious IMAP server, an attacker could exploit this...

ImageMagick ComplexImage Buffer Overflow DoS

The vulnerability of the ComplexImage function in the ImageMagick console-based graphics editor MagickCore/fourier.c is related to the execution of operations beyond the buffer’s boundaries. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its...

ImageMagick WritePNMImage Buffer Overflow

The vulnerability of the WritePNMImage function in the console-based image editing tool ImageMagick is related to the execution of operations beyond the buffer’s boundaries. Exploiting this vulnerability could allow a remote attacker to cause service interruptions or execute arbitrary code using ...

ImageMagick CompositeImage Code Execution

The vulnerability of the CompositeImage function in the ImageMagick console-based graphics editor MagickCore/composite.c is related to the execution of operations beyond the buffer’s boundaries. Exploiting this vulnerability could allow a malicious actor to cause service failures or execute...

Linux kernel buffer overflow vulnerability (CNVD-2019-25065)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A buffer overflow vulnerability exists in the drivers/net/mlx4/port.c file in versions of Linux kernel prior to 2.6.37. The vulnerability stems from a network system o...

ChakraCore Microsoft Edge Code Execution

The vulnerability of the ChakraCore JavaScript script handler in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, through a...

FreeBSD : PuTTY 0.72 -- buffer overflow in SSH-1 and integer overflow in SSH client (5914705c-ab03-11e9-a4f9-080027ac955c)

Simon Tatham reports : Vulnerabilities fixed in this release include : - A malicious SSH-1 server could trigger a buffer overrun by sending extremely short RSA keys, or certain bad packet length fields. Either of these could happen before host key verification, so even if you trust the server you...

PT-2019-20247

Name of the Vulnerable Software and Affected Versions rdesktop affected versions not specified Description The issue concerns buffer overflow and overrun problems in the rdesktop protocol handling, identified by Kaspersky Lab and the National Cyber Security Centre. The rdesktop now detects attemp...

Yubico libu2f-host DoS

The vulnerability of the devs.c file in the Yubico libu2f-host library arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures due to incorrect analysis of the init respon...

Windows Jet Database Engine Code Execution

The vulnerability of the Windows Jet Database Engine database management system relates to operations that go beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

curl: Integer overflow leading to heap-based buffer overflow in Curl_sasl_create_plain_message()

Curl versions 7.33.0 through 7.61.1 are vulnerable to a buffer overrun in the SASL authentication code that may lead to denial of service...

Microsoft Word Buffer Overflow Code Execution

The vulnerability of Microsoft Word relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

WebKitGTK Heap Buffer Overflow DoS

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page or file...

Office Memory Overflow Code Execution

The vulnerabilities of Microsoft Office and Office 365 packages, Office Online Server, and Microsoft Word occur due to the execution of an operation outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created file from a...

Jet Database Engine Code Execution

The vulnerability of the Jet Database Engine component of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

Jet Database Engine Code Execution

The vulnerability of the Jet Database Engine component of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

Jet Database Engine Code Execution

The vulnerability of the Jet Database Engine component of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

Jet Database Engine Code Execution

The vulnerability of the Jet Database Engine database management system for Windows operating systems relates to operations that go beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Jet Database Engine Code Execution

The vulnerability of the Jet Database Engine component of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

Jet Database Engine Code Execution

The vulnerability of the Jet Database Engine component of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...