Symantec Norton Security IDSvix86 PE Remote System Denial of Service Vulnerability

SUMMARY A denial of service vulnerability exists in the Portable Executable file scanning functionality of Symantec Norton Security. A specially crafted PE file can cause an access violation in IDSvix86 kernel driver resulting in denial of service. An attacker can trigger this vulnerability for...

[SECURITY] Fedora 22 Update: mingw-xerces-c-3.1.4-1.fc22

Xerces-C is a validating XML parser written in a portable subset of C++. Xerces-C makes it easy to give your application the ability to read and write XML data. A shared library is provided for parsing, generating, manipulating, and validating XML documents. Xerces-C is faithful to the XML 1.0...

The vulnerabilities in Acrobat software allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in Acrobat allows attackers to bypass the security mechanisms of PDF documents...

The vulnerability of the Linter Bastion database management system allows a malicious individual to execute arbitrary code.

Exploiting vulnerabilities in the libpng library version 1.0.6 allows a malicious individual to execute arbitrary code using an improperly created PNG file...

The vulnerability of the Thunderbird email client, which allows a malicious actor to execute arbitrary code

Mozilla Thunderbird’s email client contains a vulnerability related to errors in the implementation of the cairotruetypeindextoucs4 function in the Cairo library. Exploiting this vulnerability allows malicious actors to execute arbitrary code using a specially crafted extension that processes fon...

Vulnerability of the Windows operating system and the Microsoft Edge browser, allowing a perpetrator to execute arbitrary code

The vulnerability of the Windows operating system and the Microsoft Edge browser exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted PDF document from a remote location...

Vulnerability of the Windows operating system and the Microsoft Edge browser, allowing attackers to obtain confidential information

The vulnerability of the Windows operating system and the Microsoft Edge browser is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to obtain confidential information through a specially crafted PDF document...

Foxit Reader and Foxit PhantomPDF Remote Code Execution Vulnerability

Foxit Reader is China's Foxit Foxit Software Corporation produced a small PDF document viewing and printing program, PhantomPDF is a commercial version. A security vulnerability exists in Foxit Reader and PhantomPDF 7.3.4.311 and earlier versions, which can be triggered by a heap memory...

[SECURITY] Fedora 22 Update: webkitgtk4-2.12.3-1.fc22

WebKitGTK+ is the port of the portable web rendering engine WebKit to the GTK+ platform. This package contains WebKitGTK+ for GTK+ 3...

[SECURITY] Fedora 24 Update: docker-1.10.3-15.gitf476348.fc24

Docker is an open-source engine that automates the deployment of any application as a lightweight, portable, self-sufficient container that will run virtually anywhere. Docker containers can encapsulate any payload, and will run consistently on and between virtually any server. The same container...

ImageMagick: Crash due to out of bounds error in SpliceImage

The SpliceImage function in MagickCore/transform.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a denial of service application crash via a crafted png file...

CVE-2016-3201

Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and 1511, and Microsoft Edge allow remote attackers to obtain sensitive information from process memory via a crafted PDF document, aka "Windows PDF Information Disclosure Vulnerability," a different vulnerability than...

Microsoft Windows PDF Information Disclosure Vulnerability (CNVD-2016-04068)

Microsoft Windows and Microsoft Edge are both products of Microsoft Corporation USA. The former is a series of operating systems; the latter is a web browser that is the default browser that comes with the Windows 10 operating system. An information disclosure vulnerability exists in Microsoft...

Microsoft Windows and Microsoft Windows PDF Information Disclosure Vulnerability

Microsoft Windows and Microsoft Edge are both products of Microsoft Corporation USA. The former is a series of operating systems; the latter is a web browser that is the default browser that comes with the Windows 10 operating system. An information disclosure vulnerability exists in Microsoft...

Microsoft Windows PDF Information Disclosure Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. PDF library is one of the PDF library. An information disclosure vulnerability exists in the PDF library of Microsoft Windows, which allows a remote attacker to exploit the vulnerability by tricking a...

DLA-513-1 nspr - security update

Bulletin has no description...

CVE-2016-1951

Multiple integer overflows in io/prprf.c in Mozilla Netscape Portable Runtime NSPR before 4.12 allow remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impact via a long string to a PRprintf function...

UBUNTU-CVE-2016-1951

Multiple integer overflows in io/prprf.c in Mozilla Netscape Portable Runtime NSPR before 4.12 allow remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impact via a long string to a PRprintf function...

[SECURITY] Fedora 24 Update: webkitgtk4-2.12.3-1.fc24

WebKitGTK+ is the port of the portable web rendering engine WebKit to the GTK+ platform. This package contains WebKitGTK+ for GTK+ 3...

The vulnerabilities of PDF viewer programs such as Adobe Reader, Adobe Reader Document Cloud, and PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat allow attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader, Adobe Reader Document Cloud, and PDF editing programs like Adobe Acrobat Document Cloud are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow a malicious actor to execute arbitrary code...