The vulnerability in the application for the Android camera driver from the CAF repository, which allows a intruder to trigger a reread of dynamic memory buffers.

The vulnerability in the Android camera driver application from the CAF repository arises from an operation that goes beyond the buffer boundaries in memory when processing the frame/command component with invalid values. Exploiting this vulnerability allows a remote attacker to trigger the...

The vulnerability of the ReadOneMNGImage function in the console-based ImageMagick graphics editor allows a hacker to perform read operations beyond the memory limit.

The vulnerability of the ReadOneMNGImage function in the coder/png.c file of the console image editing tool ImageMagick arises from reading data beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to read data beyond the memory limit of the MNG CLIP section...

The vulnerability of the get_subexp function in the uClibc library, which allows a perpetrator to perform read operations beyond the buffer boundaries.

The vulnerability of the getsubexp function in the uClibc library is related to the processing of regular expressions. Exploiting this vulnerability allows a remote attacker to perform out-of-memory reading using a specially crafted regular expression...

The vulnerability of the Microsoft Edge browser’s scripting engine, allowing a hacker to execute arbitrary code

The vulnerability of the Microsoft Edge browser’s scripting engine arises from an operation that goes beyond the buffer boundaries in memory a memory corruption that occurs when working with objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the...

The vulnerability in the JavaScript kernel of Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability in the Microsoft Edge JavaScript kernel is caused by an operation going beyond the buffer boundaries in memory memory corruption due to a script error. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, as a resul...

Vulnerability of object handlers in Microsoft Edge and Internet Explorer browsers’ memory, allowing attackers to execute arbitrary code

The vulnerability of object handlers in the memory of Microsoft Edge and Internet Explorer arises from the execution of operations beyond the buffer boundaries in memory memory corruption. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the curre...

CVE-2017-1000100

When doing a TFTP transfer and curl/libcurl is given a URL that contains a very long file name longer than about 515 bytes, the file name is truncated to fit within the buffer boundaries, but the buffer size is still wrongly updated to use the untruncated length. This too large value is then used...

The vulnerability of JavaScript handlers in the Microsoft Edge browser for the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of Microsoft Edge’s JavaScript handlers arises from an operation going beyond the buffer boundaries due to a memory object processing error. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the context of the current user...

The vulnerability of JavaScript handlers in the Microsoft Edge browser for the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of Microsoft Edge’s JavaScript handlers arises from an operation going beyond the buffer boundaries due to a memory object processing error. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the context of the current user...

Vulnerability of Internet Explorer browser scripting handlers on the Windows operating system, allowing a hacker to execute arbitrary code

The vulnerability of Internet Explorer script handlers arises from an operation going beyond the buffer boundaries due to a memory object processing error. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the context of the current user...

The vulnerability of the avcodec codec in the VideoLAN Media Player allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the avcodec codec in the VideoLAN Media Player media player arises from an operation that goes beyond buffer boundaries in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure termination of the applicatio...

The vulnerability in the JavaScript kernel of Microsoft Edge’s browser allows a hacker to trigger memory corruption.

The vulnerability in the Microsoft Edge JavaScript kernel is caused by a race condition that occurs outside of the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to induce memory corruption from a remote perspective...

The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code

The vulnerability of the BitmapData class in the Flash Player software platform arises from the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotely...

The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code

The vulnerability of the AVC kernel of the Adobe Flash Player arises from an operation that occurs outside the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotely...

The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code

The vulnerability of the ConvolutionFilter class in the Flash Player software platform arises from the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code memory corruption...

The vulnerability of the Linux operating system, which allows a perpetrator to trigger a service failure or cause other effects

The vulnerability in the driver drivers/net/usb/rtl8150.c of the Linux operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a local attacker to improperly interact with the CONFIGVMAPSTACK parameter, resulting in a servic...

The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code

The vulnerability of the ActionScript2 parser in the Flash Player software arises from reading data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotely...

The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code

The vulnerability in the development tools of the Primetime software platform, Flash Player, arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotely...

Important: Red Hat Security Advisory: qemu-kvm-rhev security update

Updated qemu-kvm-rhev packages that fix one security issue are now available for Red Hat Enterprise Linux OpenStack Platform 4.0 and 5.0 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS...

qemu: cirrus: insufficient blit region checks

It was found that the Cirrus blit region checks were insufficient. A privileged guest user could use this flaw to write outside of VRAM-allocated buffer boundaries in the host's QEMU process address space with attacker-provided data...