ROS-2-1981

2.1981 Vulnerability in Mozilla Thunderbird email client CVE-2021-29964, CVE-2021-29967 1. Vulnerability description: CVE-2021-29964 A vulnerability in the Mozilla Thunderbird email client, is related to boundary conditions. Exploitation of the vulnerability could allow an attacker acting remotel...

HCC Embedded InterNiche 缓冲区错误漏洞

HCC Embedded InterNiche is a newsletter software. A security vulnerability exists in HCC Embedded InterNiche that originates from a boundary condition in the DNSv4 component. An attacker can exploit the vulnerability to trigger an out-of-bounds read error and cause a denial of service on the syst...

HCC Embedded InterNiche 缓冲区错误漏洞

InterNiche Technologies NicheStack is a small footprint, RFC-compliant embedded stack that is portable to commercial or proprietary non-MMU operating systems. InterNiche Technologies NicheStack suffers from an input validation error vulnerability that stems from a boundary condition in the ICMP...

PowerDNS Authoritative Server 缓冲区错误漏洞

Powerdns PowerDNS Authoritative Server is a DNS server from the Dutch company PowerDNS Powerdns. PowerDNS Authoritative Server suffers from a buffer error vulnerability that exists due to a boundary condition when processing DNS queries. A remote attacker could exploit the vulnerability could sen...

Apple macOS 缓冲区错误漏洞

Apple macOS is a suite of specialized operating systems developed by Apple Inc. for Mac computers. Apple macOS suffers from a buffer error vulnerability that stems from a boundary condition error in the ImageIO framework. A remote attacker can exploit the vulnerability to create a specially craft...

Mozilla Firefox 缓冲区错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox that originates from a boundary condition when drawing text on a canvas with WebRender disabled. A remote attacker can exploit the vulnerability to...

Apple macOS 缓冲区错误漏洞

Apple macOS is a suite of specialized operating systems developed by Apple Inc. for Mac computers. A buffer error vulnerability exists in macOS due to a boundary condition within the CoreAudio component. The following products and versions are affected: macOS: 11.0 20A2411, 11.0.1 20B29, 11.0.1...

Apple watchOS 缓冲区错误漏洞

Apple watchOS is an operating system for smartwatches from Apple. A buffer error vulnerability exists in watchOS due to a boundary condition within the kernel. The following products and versions are affected: watchOS: 7.0 18R382, 7.0.1 18R395, 7.0.2 18R402, 7.0.3 18R410, 7.1 18R590, 7.2 18S564,...

Apple macOS 缓冲区错误漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A buffer error vulnerability exists in macOS that originates from a boundary condition within the ImageIO component. The following products and versions are affected: macOS: 11.0 20A2411, 11.0.1 20B29, 11.0.1...

Apple CoreMedia Buffer Error Vulnerability

Apple CoreMedia is an Apple Inc. core component used in mobile devices for processing media data. Apple CoreMedia suffers from a buffer error vulnerability that exists due to a boundary condition within the CoreMedia component in macOS. A remote attacker could create a specially crafted image and...

Boundary Condition Error

unixODBC is vulnerable to boundary condition error. A partially authorized attacker may cause a DoS or execute malicious code by entering a string over the limit in the DRIVER option in the SQLDriverConnect function in unixODBC...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the function in the android operating system’s sdcard/sdcard.c file is related to the violation of boundary conditions in the algorithm. Exploiting this vulnerability allows a remote attacker to enhance their privileges through a specially created application...

Microsoft Netmeeting 2.1/3.0.1 4.4.3385 CALLTO URL Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7639/info It has been reported that clicking a malformed 'callto:' URI in Internet Explorer will cause Windows 2000 systems to crash, resulting in a blue screen. This appears to be due to a boundary condition error in one...

myServer 0.6.2 math_sum.mscgi Multiple Parameter Remote Overflow

No description provided by source. source: http://www.securityfocus.com/bid/10831/info Reportedly MyServer is affected by multiple remote vulnerabilities in the 'mathsum.mscgi' example script. These issues are due to a boundary condition error and a failure to properly sanitize user-supplied URI...

Intrasrv 1.0 - Buffer Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

SasCam 2.6.5 - Remote HTTP Server Crash

No description provided by source. / DISCLAIMER THIS PROGRAM IS NOT INTENDED TO BE USED ON OTHER COMPUTERS AND IT IS DESTINED FOR PERSONAL RESEARCH ONLY!!!! Also the free software programs provided by fl0 fl0w may be freely distributed and that the disclaimer below is always attached to it. The...

Microsoft Internet Explorer 5 OBJECT Tag Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7806/info Microsoft Internet Explorer is prone to a boundary condition error when handling OBJECT tags in web pages. When a web page containing an OBJECT tag using a parameter containing excessive data is encountered by a...

wget <= 1.10.2 (Unchecked Boundary Condition) Denial of Service Exploit

No description provided by source. !/usr/bin/perl wget = 1.10.2 | Unchecked Boundary Condition Federico L. Bossi Bonin www.globalst.com.ar fbossiatglobalst.com.ar use strict; use IO::Socket; Resolving localhost... 127.0.0.1 Connecting to localhost|127.0.0.1|:21... connected. Logging in as anonymo...

PowerZip 7.21 (Build 4010) Stack Buffer Overflow

No description provided by source. / DISCLAIMER THIS PROGRAM IS NOT INTENDED TO BE USED ON OTHER COMPUTERS AND IT IS DESTINED FOR PERSONAL RESEARCH ONLY!!!! The programs are provided as is without any guarantees or warranty. The author is not responsible for any damage or losses of any kind cause...

GNU findutils 4.0/4.1 Locate Arbitrary Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3127/info GNU locate is an application that searches file databases for file names that match user-supplied patterns. A boundary condition error can occur when the program reads database files composed in an old format,...