11577 matches found
The vulnerability of the Flash Player software allows a perpetrator to trigger a service failure or execute arbitrary code.
The vulnerability of the Flash Player software arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely or cause a service failure memory corruption using uncertain vectors...
ImageMagick Remote Buffer Overflow Vulnerability
ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A buffer overflow vulnerability exists in ImageMagick, which stems from the program's failure to perform proper bounda...
Microsoft Azure Active Directory Passport CVE-2016-7191 Authentication Bypass Vulnerability
Description Microsoft Azure Active Directory Passport is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and gain unauthorized access to the application. Versions prior to Azure Active Directory Passport 1.4.6 and 2.0.1 a...
The vulnerabilities of browsers Internet Explorer and Microsoft Edge allow attackers to trigger service failures or execute arbitrary code.
The vulnerabilities of Internet Explorer and Microsoft Edge are caused by operations that go beyond the buffer boundaries in memory. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code or cause a service failure memory corruption through a specially crafted web pag...
Libdwarf Heap Buffer Overflow Vulnerability
libdwarf is a set of tools for reading and writing DWARF2 debugging information. A heap buffer overflow vulnerability exists in libdwarf, which stems from the program's failure to perform proper boundary checks on user-submitted input. An attacker could use this vulnerability to execute arbitrary...
irssi -- heap corruption and missing boundary checks
Irssi reports: Remote crash and heap corruption. Remote code execution seems difficult since only Nuls are written...
The vulnerability of the iOS operating system allows a perpetrator to trigger a service failure or obtain confidential information.
The vulnerability of the IOAcceleratorFamily component in the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker acting locally to obtain confidential information from the kernel’s memory or trigger a service failure...
Microsoft Windows CVE-2016-3352 Information Disclosure Vulnerability
Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to gain access to potentially sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10...
Microsoft Windows PDF Library CVE-2016-3370 Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can leverage this issue to obtain sensitive information. This may lead to other attacks. Technologies Affected Microsoft Edge Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10...
Microsoft Exchange Server CVE-2016-3379 Cross Site Scripting Vulnerability
Description Microsoft Exchange Server is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow...
Microsoft Windows CVE-2016-3368 Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code with elevated privileges. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft Windows 10 Version...
Microsoft Application Virtualization CVE-2016-0137 Information Disclosure Vulnerability
Description Microsoft Application Virtualization is prone to an information-disclosure vulnerability. An attacker can leverage this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Office 2013 Service Pack 1 32-bit editions Microsoft Office 20...
Microsoft Windows Graphics Component CVE-2016-3354 Information Disclosure Vulnerability
Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 16...
Microsoft Windows Graphics CVE-2016-3355 Remote Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the kernel privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...
Microsoft Windows CVE-2016-3369 Denial of Service Vulnerability
Description Microsoft Windows is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. Technologies Affected Microsoft Windows 10 for 32-bit Systems Microsoft Windows 10 for x64-based Systems Microsoft Windows 10 version 1511...
Microsoft Office CVE-2016-0141 Information Disclosure Vulnerability
Description Microsoft Application Virtualization is prone to an information-disclosure vulnerability. An attacker can leverage this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Office 2007 SP3 Microsoft Office 2010 Service Pack 2 32-bit...
NECROSOFT NScan Local Buffer Vulnerability
NECROSOFT NScan is a scanning tool for large networks to scan and collect relevant network/host information. A local buffer vulnerability exists in NECROSOFT NScan version 0.9.1 due to the program failing to properly filter the boundary-checks parameter. This allows an attacker to exploit the...
Microsoft Windows Netlogon CVE-2016-3300 Remote Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges within the context of the affected system. Technologies Affected Microsoft Windows 8.1 for 32-bit Systems Microsoft Windows 8.1 for x64-based Syste...
Microsoft Windows and Edge CVE-2016-3319 Remote Code Execution Vulnerability
Description Microsoft Windows and Edge are prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affecte...
OpenJDK: incorrect boundary check in JPEG decoder (AWT, 8139017)
An out-of-bounds write flaw was found in the JPEG image format decoder in the AWT component in OpenJDK. A specially crafted JPEG image could cause a Java application to crash or, possibly execute arbitrary code. An untrusted Java application or applet could use this flaw to bypass Java sandbox...