3376 matches found
Code injection
Array index error in IOAcceleratorFamily in Apple OS X before 10.9.4 allows attackers to execute arbitrary code via a crafted application...
Null pointer dereference
Array index error in Dock in Apple OS X before 10.9.4 allows attackers to execute arbitrary code or cause a denial of service incorrect function-pointer dereference and application crash by leveraging access to a sandboxed application for sending a message...
CVE-2014-1371
The CVE-2014-1371 issue affects Apple OS X Dock prior to 10.9.4. An unvalidated array index in the Dock’s handling of messages from applications could lead to an invalid function-pointer dereference, enabling arbitrary code execution or a crash when a sandboxed app sends a message. The exploit re...
CVE-2014-1371
Array index error in Dock in Apple OS X before 10.9.4 allows attackers to execute arbitrary code or cause a denial of service incorrect function-pointer dereference and application crash by leveraging access to a sandboxed application for sending a message...
CVE-2014-1377
CVE-2014-1377 concerns the IOAcceleratorFamily in Apple OS X prior to 10.9.4. The vulnerability is an array indexing/bounds issue in the IOAccelerator driver that could allow an attacker to execute arbitrary code via a crafted application. Apple’s published fix (OS X 10.9.4 Security Update) addre...
CVE-2014-1371: Improper Restriction of Operations within the Bounds of a Memory Buffer
Array index error in Dock in Apple OS X before 10.9.4 allows attackers to execute arbitrary code or cause a denial of service incorrect function-pointer dereference and application crash by leveraging access to a sandboxed application for sending a message...
rsync 2.3/2.4/2.5 Signed Array Index Remote Code Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3958/info A vulnerability exists within some versions of rsync. Under some circumstances, a remotely supplied signed value is used as an array index, allowing NULL bytes to be written to arbitrary memory locations...
MATLAB R2009b 'dtoa' Implementation Memory Corruption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/37688/info MATLAB is prone to a memory-corruption vulnerability because the software fails to properly bounds-check data used as an array index. Attackers may exploit this issue to execute arbitrary code within the contex...
Mac OS X 10.x 'libc/strtod(3)' Memory Corruption Vulnerability
source: http://www.securityfocus.com/bid/37687/info Mac OS X is prone to a memory-corruption vulnerability because the software fails to properly bounds-check data used as an array index. Attackers may exploit this issue to execute arbitrary code within the context of affected applications. Mac O...
PT-2014-4156
Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.9.4 Description The issue is related to an array index error in the IOAcceleratorFamily component, which allows attackers to execute arbitrary code via a crafted application. Recommendations For Apple OS X...
CVE-2014-1377: Undefined Security Weakness
Array index error in IOAcceleratorFamily in Apple OS X before 10.9.4 allows attackers to execute arbitrary code via a crafted application...
CVE-2014-4616
Array index error in the scanstring function in the json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the rawdecode function...
CVE-2014-0206
Array index error in the aioreadeventsring function in fs/aio.c in the Linux kernel through 3.15.1 allows local users to obtain sensitive information from kernel memory via a large head value...
CVE-2014-0206
Array index error in the aioreadeventsring function in fs/aio.c in the Linux kernel through 3.15.1 allows local users to obtain sensitive information from kernel memory via a large head value...
DEBIAN-CVE-2014-0206
Array index error in the aioreadeventsring function in fs/aio.c in the Linux kernel through 3.15.1 allows local users to obtain sensitive information from kernel memory via a large head value...
CVE-2014-0206
Array index error in the aioreadeventsring function in fs/aio.c in the Linux kernel through 3.15.1 allows local users to obtain sensitive information from kernel memory via a large head value...
CVE-2014-0206
CVE-2014-0206 is an array index error in aio_read_events_ring (fs/aio.c) of the Linux kernel up to version 3.15.1. It enables local users to read sensitive data from kernel memory by supplying a large head value. The provided connected documents confirm the affected file and vulnerability type bu...
CVE-2014-0206: Undefined Security Weakness
Array index error in the aioreadeventsring function in fs/aio.c in the Linux kernel through 3.15.1 allows local users to obtain sensitive information from kernel memory via a large head value...
CVE-2014-0206
Array index error in the aioreadeventsring function in fs/aio.c in the Linux kernel through 3.15.1 allows local users to obtain sensitive information from kernel memory via a large head value...
qemu: virtio: buffer overrun on incoming migration
Array index error in the virtioload function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image...