The vulnerabilities of programs for viewing and editing PDF files such as Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud allow attackers to execute arbitrary code.

The vulnerability of the Product Representation Compact PRC parser programs for viewing and editing PDF files, such as Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud, arises from reading data beyond the specified buffer. Exploiting this vulnerability ca...

Fedora 24 : ming (2017-ed6b6a1d7a)

Release 0.4.8 no ABI or API changes - Add PHP7 compatibility - Fix C++ output of disassembler - Fix heap overflows in parser.c CVE-2017-7578 - Avoid division by zero in listmp3 when no valid frame was found CVE-2016-9265 - Don't try printing unknown block CVE-2016-9828 - Parse Protect tag's...

CVE-2014-8355

PCX parser code in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service out-of-bounds read...

Apple iOS/tvOS/macOS/watchOS Information Disclosure Vulnerability

iOS is a mobile operating system developed by Apple Inc. First announced at the Macworld conference on January 9, 2007, it was originally designed for use with the iPhone, and has since been applied to the iPod touch, iPad, and Apple TV. tvOS is an Apple-developed system based on iOS. tvOS is the...

Null pointer dereference

The doc/PdfPage.cpp:614:20 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PDF document...

Tcpdump ISAKMP parser buffer overflow vulnerability

Tcpdump is a popular network analysis program. Tcpdump ISAKMP parser print-isakmp.c:ikev2eprint suffers from a buffer overflow vulnerability that could be exploited by a remote attacker to crash an application by submitting a special request...

UBUNTU-CVE-2017-5482

The Q.933 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:q933print, a different vulnerability than CVE-2016-8575...

Wireshark DCERPC Parser Denial of Service Vulnerability

Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A denial of service vulnerability exists in the DCERPC parser in Wireshark versions 2.2....

Vulnerabilities of operating systems such as Mac OS X and iOS, which allow attackers to obtain confidential information from process memory

The vulnerability of the FontParser component in Mac OS X and iOS operating systems arises due to buffer overflow. Exploiting this vulnerability can allow a malicious actor to obtain confidential information from the process’s memory using a specially crafted font...

The vulnerability of the FortiOS operating system and the micro-programming software for network switches FortiSwitch allows a hacker to execute arbitrary code.

The vulnerability of the FortiOS operating system’s parser and the FortiSwitch network switch’s microprogramming software is due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted HTTP request...

libarchive: NULL pointer access in CAB parser

A vulnerability was found in libarchive. A specially crafted CAB file could cause the application dereference a NULL pointer, leading to a crash...

mysql: unspecified vulnerability in subcomponent: Server: Parser (CPU July 2016)

Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Parser...

mysql: unspecified vulnerability in subcomponent: Server: Parser (CPU July 2016)

Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Parser...

The vulnerability of the libxml2 library, which allows a hacker to cause a service failure or obtain confidential information

The vulnerability of the xmlSAX2TextNode function SAX2.c in the HTML parser of the libxml2 library is due to buffer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure application termination or obtain confidential information through specially crafted XML dat...

Cisco Adaptive Security Appliance Denial of Service Vulnerability (CNVD-2016-03383)

Cisco Adaptive Security Appliance ASA, Adaptive Security Appliance is a set of firewall appliances from the American company Cisco Cisco. The appliance also includes IPS Intrusion Prevention System, SSL VPN, IPSec VPN, anti-spam and other features. A security vulnerability exists in the XML parse...

Wireshark NFS Parser Denial of Service Vulnerability (CNVD-2016-02774)

Wireshark formerly known as Ethereal is a suite of network packet analysis software developed by the Wireshark team. A denial of service vulnerability exists in the NFS parser in Wireshark versions 2.0.2 prior to 2.x. A remote attacker can exploit this vulnerability to cause a denial of service...

Wireshark IEEE 802.11 parser denial of service vulnerability (CNVD-2016-02770)

Wireshark formerly known as Ethereal is a suite of network packet analysis software developed by the Wireshark team. A denial of service vulnerability exists in the epan/dissectors/packet-ieee80211.c file in the IEEE 802.11 parser in versions 2.x prior to Wireshark 2.0.2. A remote attacker can...

Wireshark NCP Parser Denial of Service Vulnerability (CNVD-2016-02649)

Wireshark formerly known as Ethereal is a suite of network packet analysis software developed by the Wireshark team. A security vulnerability in the epan/dissectors/packet-ncp2222.inc file in the NCP parser in versions 2.0.x prior to Wireshark 2.0.3 can be exploited by remote attackers to cause a...

Wireshark MS-WSP parser denial of service vulnerability (CNVD-2016-02654)

Wireshark formerly known as Ethereal is a suite of network packet analysis software developed by the Wireshark team. A security vulnerability in the epan/dissectors/packet-mswsp.c file in the MS-WSP parser in versions 2.0.x prior to Wireshark 2.0.3 can be exploited by remote attackers to cause a...

Wireshark ASN.1 BER Parser Denial of Service Vulnerability

Wireshark is the most popular network protocol parser. A denial of service vulnerability exists in the Wireshark ASN.1 BER parser, which can be exploited by an attacker to cause a denial of service out-of-bounds read and application crash...