CVE-2014-8612

Removed by vendor...

CVE-2014-8612

Multiple array index errors in the Stream Control Transmission Protocol SCTP module in FreeBSD 10.1 before p5, 10.0 before p17, 9.3 before p9, and 8.4 before p23 allow local users to 1 gain privileges via the stream id to the setsockopt function, when setting the SCTIPSSVALUE option, or 2 read...

Medium: libX11, libXcursor, libXfixes, libXi, libXrandr, libXrender, libXres, libXt, libXv, libXvMC, libXxf86dga, libXxf86vm, libdmx, xorg-x11-proto-devel

Issue Overview: Multiple integer overflow flaws, leading to heap-based buffer overflows, were found in the way various X11 client libraries handled certain protocol data. An attacker able to submit invalid protocol data to an X11 server via a malicious X11 client could use either of these flaws t...

RedHat Update for X11 client libraries RHSA-2014:1436-02

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-2602

Multiple array index errors in the MyHeritage SEQueryObject ActiveX control SearchEngineQuery.dll 1.0.2.0 allow remote attackers to execute arbitrary code via the 1 seTokensArray, or 2 seTokensValuesArray parameter to the AddTokens method; 3 seLastNameTokensArray parameter to the AddLastNameToken...

Security feature bypass

Multiple array index errors in the MyHeritage SEQueryObject ActiveX control SearchEngineQuery.dll 1.0.2.0 allow remote attackers to execute arbitrary code via the 1 seTokensArray, or 2 seTokensValuesArray parameter to the AddTokens method; 3 seLastNameTokensArray parameter to the AddLastNameToken...

CVE-2013-2602

Multiple array index errors in the MyHeritage SEQueryObject ActiveX control SearchEngineQuery.dll 1.0.2.0 allow remote attackers to execute arbitrary code via the 1 seTokensArray, or 2 seTokensValuesArray parameter to the AddTokens method; 3 seLastNameTokensArray parameter to the AddLastNameToken...

Kernel: HID: memory corruption flaw

Multiple array index errors in drivers/hid/hid-core.c in the Human Interface Device HID subsystem in the Linux kernel through 3.11 allow physically proximate attackers to execute arbitrary code or cause a denial of service heap memory corruption via a crafted device that provides an invalid Repor...

CVE-2014-0983

Multiple array index errors in programs that are automatically generated by VBox/HostServices/SharedOpenGL/crserverlib/serverdispatch.py in Oracle VirtualBox 4.2.x through 4.2.20 and 4.3.x before 4.3.8, when using 3D Acceleration, allow local guest OS users to execute arbitrary code on the Chromi...

Code injection

Multiple array index errors in programs that are automatically generated by VBox/HostServices/SharedOpenGL/crserverlib/serverdispatch.py in Oracle VirtualBox 4.2.x through 4.2.20 and 4.3.x before 4.3.8, when using 3D Acceleration, allow local guest OS users to execute arbitrary code on the Chromi...

CVE-2014-0983

Multiple array index errors in programs that are automatically generated by VBox/HostServices/SharedOpenGL/crserverlib/serverdispatch.py in Oracle VirtualBox 4.2.x through 4.2.20 and 4.3.x before 4.3.8, when using 3D Acceleration, allow local guest OS users to execute arbitrary code on the Chromi...

CVE-2014-0983

CVE-2014-0983 affects Oracle VirtualBox 4.2.x (through 4.2.20) and 4.3.x (before 4.3.8). It describes multiple array-index errors in VBox’s generated OpenGL/SharedOpenGL server code (server_dispatch.py) that, when 3D acceleration is enabled, permit local guest OS users to execute arbitrary code o...

CVE-2013-6123

Multiple array index errors in drivers/media/video/msm/server/msmcamserver.c in the MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allow attackers to gain privileges by leveraging camera device-node...

Code injection

Multiple array index errors in drivers/media/video/msm/server/msmcamserver.c in the MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allow attackers to gain privileges by leveraging camera device-node...

CVE-2013-6123

Multiple array index errors in drivers/media/video/msm/server/msmcamserver.c in the MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allow attackers to gain privileges by leveraging camera device-node...

CVE-2013-6123

CVE-2013-6123 affects the MSM camera driver in the Linux kernel 3.x (MSM CAM server). The root cause is multiple array index errors in msm_cam_server.c, related to handling of camera device-node input, involving the functions msm_ctrl_cmd_done , msm_ioctl_server , and msm_server_send_ctrl . This ...

Kernel: HID: memory corruption flaw

Multiple array index errors in drivers/hid/hid-core.c in the Human Interface Device HID subsystem in the Linux kernel through 3.11 allow physically proximate attackers to execute arbitrary code or cause a denial of service heap memory corruption via a crafted device that provides an invalid Repor...

CVE-2013-2897

Multiple array index errors in drivers/hid/hid-multitouch.c in the Human Interface Device HID subsystem in the Linux kernel through 3.11, when CONFIGHIDMULTITOUCH is enabled, allow physically proximate attackers to cause a denial of service heap memory corruption, or NULL pointer dereference and...

CVE-2013-2888

Multiple array index errors in drivers/hid/hid-core.c in the Human Interface Device HID subsystem in the Linux kernel through 3.11 allow physically proximate attackers to execute arbitrary code or cause a denial of service heap memory corruption via a crafted device that provides an invalid Repor...

Memory corruption

Multiple array index errors in drivers/hid/hid-core.c in the Human Interface Device HID subsystem in the Linux kernel through 3.11 allow physically proximate attackers to execute arbitrary code or cause a denial of service heap memory corruption via a crafted device that provides an invalid Repor...