CVE-2015-5237

protobuf allows remote authenticated attackers to cause a heap-based buffer overflow...

Integer Overflow

github.com/golang/protobuf is vulnerable to integer overflows. A malicious user can pass an integer larger than 64-bit to the system, causing an integer overflow and crashing the system...

x86 to LLVM Bitcode Translation Framework: McSema

x86 to LLVM Bitcode Translation Framework McSema lifts x86 and amd64 binaries to LLVM bitcode modules. McSema support both Linux and Windows binaries, and most x86 and amd64 instructions, including integer, FPU, and SSE operations. McSema is separated into two conceptual parts: control flow...

Arbitrary Code Execution

protobuf is vulnerable to arbitrary code execution. The protobuf compiler store size information in an int variable, which may truncate size values on 64-bit architectures, leading to a heap-based buffer overflow which results in arbitrary code execution. At the time of creation, the vendor has n...

PT-2015-3391 · Google +4 · Protobuf +4

Name of the Vulnerable Software and Affected Versions: protobuf affected versions not specified Description: The issue is related to a heap-based buffer overflow that can be caused by remote authenticated attackers. It is associated with an error in handling an integer variable during the...