Microsoft Windows GDI32.dll ASLR Bypass (MS16-005: CVE-2016-0008)

A vulnerability was discovered in Microsoft Word and Wordpad that could allow attackers to disclose internal memory information which can then be used to bypass security features such as ASLR. A security feature bypass vulnerability exists in the way that the Windows graphics device interface...

Microsoft Windows CVE-2016-0008 ASLR Security Bypass Vulnerability

Description Microsoft Windows is prone to a security-bypass vulnerability. An attacker can leverage this issue to bypass Address Space Layout Randomization ASLR protection mechanisms and gain access to sensitive information. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1 Microso...

Microsoft Edge Multiple Vulnerabilities (3084525)

This host is missing a critical security update according to Microsoft Bulletin MS15-091. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Edge Multiple Vulnerabilities (3104519)

This host is missing a critical security update according to Microsoft Bulletin MS15-113. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft .NET Framework ASLR Security Bypass (MS15-118: CVE-2015-6115)

A security feature bypass vulnerability exists in Microsoft .NET Framework. The vulnerability is due to a DLL file that was not compiled with Address Space Layout Randomization ASLR enabled. A remote attacker can exploit this vulnerability by enticing a target user to open a crafted document that...

Microsoft Windows Win32k 特权提升漏洞( MS15-010)

来源链接：http://www.freebuf.com/vuls/90501.html FreeBuf黑客与极客（FreeBuf.COM） 原文地址：http://hdwsec.fr/blog/CVE-2015-0057.html，编译/FB小编鸢尾 概述 这是一个use-after-free内核漏洞，它能获取一个专属的write primitive操作，之后侵染临近的一个对象。这个yields语句可以在内核空间或者用户空间随意写入。...

Windows kernel vulnerability MS15-0 1 0/CVE-2 0 1 5-0 0 5 7 analysis and use with the EXP-a vulnerability warning-the black bar safety net

Description Back in 2 0 1 5 early Udi Yavo1found that one affects Windows XP to Windows 1 0previewof the Windows kernel vulnerability, the following two article on the CVE-2 0 1 5-0 0 5 7 analysis of the article, we can refer to one of the two: 1. FireEye described some technical details about th...

CVE-2015-8579

Kaspersky Total Security 2015 15.0.2.361 allocates memory with Read, Write, Execute RWX permissions at predictable addresses when protecting user-mode processes, which allows attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors...

CVE-2015-8578

AVG Internet Security 2015 allocates memory with Read, Write, Execute RWX permissions at predictable addresses when protecting user-mode processes, which allows attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors...

CVE-2015-8577

The Buffer Overflow Protection BOP feature in McAfee VirusScan Enterprise before 8.8 Patch 6 allocates memory with Read, Write, Execute RWX permissions at predictable addresses on 32-bit platforms when protecting another application, which allows attackers to bypass the DEP and ASLR protection...

Buffer overflow

The Buffer Overflow Protection BOP feature in McAfee VirusScan Enterprise before 8.8 Patch 6 allocates memory with Read, Write, Execute RWX permissions at predictable addresses on 32-bit platforms when protecting another application, which allows attackers to bypass the DEP and ASLR protection...

Design/Logic Flaw

AVG Internet Security 2015 allocates memory with Read, Write, Execute RWX permissions at predictable addresses when protecting user-mode processes, which allows attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors...

Design/Logic Flaw

Kaspersky Total Security 2015 15.0.2.361 allocates memory with Read, Write, Execute RWX permissions at predictable addresses when protecting user-mode processes, which allows attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors...

CVE-2015-8577

Summary: CVE-2015-8577 affects McAfee VirusScan Enterprise prior to 8.8 Patch 6. The vulnerability lies in the Buffer Overflow Protection (BOP) feature, which allocates memory with Read/Write/Execute (RWX) permissions at predictable addresses on 32‑bit systems while protecting another application...

CVE-2015-8579

Kaspersky Total Security 2015 15.0.2.361 allocates memory with Read, Write, Execute RWX permissions at predictable addresses when protecting user-mode processes, which allows attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors...

CVE-2015-8577

The Buffer Overflow Protection BOP feature in McAfee VirusScan Enterprise before 8.8 Patch 6 allocates memory with Read, Write, Execute RWX permissions at predictable addresses on 32-bit platforms when protecting another application, which allows attackers to bypass the DEP and ASLR protection...

CVE-2015-8579

The CVE targets Kaspersky Total Security 2015 (version 15.0.2.361). The vulnerability arises from memory allocations that use Read, Write, Execute (RWX) permissions at predictable addresses while protecting user‑mode processes. This root cause enables bypass of DEP and ASLR protections. Details a...

CVE-2015-8578

AVG Internet Security 2015 is affected by an information disclosure/vulnerability where memory is allocated with Read, Write, Execute (RWX) permissions at predictable addresses when protecting user‑mode processes. This RWX/predictable-address pattern enables bypassing DEP and ASLR protections via...

CVE-2015-8578

AVG Internet Security 2015 allocates memory with Read, Write, Execute RWX permissions at predictable addresses when protecting user-mode processes, which allows attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors...

CVE-2015-7046

The Sandbox feature in xnu in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 does not properly implement privilege separation, which allows attackers to bypass the ASLR protection mechanism via a crafted app with root privileges...