Medium: R

Issue Overview: An exploitable buffer overflow vulnerability exists in the LoadEncoding functionality of the R programming language version 3.3.0. A specially crafted R script can cause a buffer overflow resulting in a memory corruption. An attacker can send a malicious R script to trigger this...

PCMAN FTP Server 2.0.7 ACCT Buffer Overflow

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'PCMAN FTP Server Buffer Overflow - ACCT Command', 'Description' = %q This module exploits a buffer overflow vulnerability found...

PCMAN FTP Server 2.0.7 NLST Buffer Overflow

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'PCMAN FTP Server Buffer Overflow - NLST Command', 'Description' = %q This module exploits a buffer overflow vulnerability found...

The vulnerability of the QEMU hardware emulation software, which allows a hacker to trigger a service failure

The vulnerability of the NetRxPkt component of the QEMU hardware emulation software is caused by a buffer overflow. Exploiting this vulnerability allows an attacker to cause a service failure by engaging in actions related to VLANs...

Fedora 24 : tcpreplay (2017-7980b5e846)

Here is what is fixed in this release : - Fix reporting of rates 1Mbps 348 - Option --unique-ip not working properly 346 ---- Features and fixes include : - MAC rewriting capabilities by Pedro Arthur 313 - Fix several issues identified by Coverity 305 - Packet distortion --fuzz-seed option by...

Microsoft Internet Information Services Buffer Overflow Vulnerability

Microsoft Internet Information Services is prone to a buffer overflow vulnerability because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized memory buffer. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a...

CVE-2017-7310

A buffer overflow vulnerability in Import Command in SyncBreeze before 10.6, DiskSorter before 10.6, DiskBoss before 8.9, DiskPulse before 10.6, DiskSavvy before 10.6, DupScout before 10.6, and VX Search before 10.6 allows attackers to execute arbitrary code via a crafted XML file containing a lo...

Fatek Automation PLC Ethernet Module Stack Buffer Overflow Vulnerability

Fatek Automation PLC is a controller developed by Fatek Automation. A stack-based buffer overflow vulnerability exists in the Fatek Automation PLC Ethernet Module. A remote attacker could use this vulnerability to execute arbitrary code in the context of the affected application, which could also...

RedHat Update for glibc RHSA-2017:0680-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-6023

An issue was discovered in Fatek Automation PLC Ethernet Module. The affected Ethercfg software configuration tool runs on the following Fatek PLCs: CBEH versions prior to V3.6 Build 170215, CBE versions prior to V3.6 Build 170215, CM55E versions prior to V3.6 Build 170215, and CM25E versions pri...

CVE-2016-8714

An exploitable buffer overflow vulnerability exists in the LoadEncoding functionality of the R programming language version 3.3.0. A specially crafted R script can cause a buffer overflow resulting in a memory corruption. An attacker can send a malicious R script to trigger this vulnerability...

PT-2017-16798 · Zziplib +3 · Zziplib +3

Name of the Vulnerable Software and Affected Versions: zziplib versions 0.13.56 through 0.13.62 Description: The issue is related to a heap-based buffer overflow in the zzip get32 function, located in the fetch.c file of zziplib. This allows remote attackers to cause a denial of service, resultin...

PDFMate PDF Converter Pro 1.7.5.0 Buffer Overflow

Document Title: =============== PDFMate PDF Converter Pro 1.7.5.0 - Buffer Overflow Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2029 Release Date: ============= 2017-01-30 Vulnerability Laboratory ID VL-ID:...

PT-2017-03: Buffer Overflow in Checker ATM Security

The specialists of the Positive Research center have detected a Buffer Overflow vulnerability in hecker ATM Security. An attacker able to spoof the control server can cause a buffer overflow and execute arbitrary code. How to fix Update your software up to the latest version Advisory status...

SUSE-SU-2016:3272-1 Security update for samba

This update for samba fixes the following issues: Security issues fixed: - CVE-2016-2125: Don't send delegated credentials to all servers. bsc1014441. - CVE-2016-2126: Denial of service due to a client triggered crash in the winbindd parent process. bsc1014442. - CVE-2016-2123: Heap-based Buffer...

Netgear WNR2000 Remote Code Execution

Stack buffer overflow vulnerability in NETGEAR WNR2000 router Discovered by Pedro Ribeiro [email protected], Agile Information Security ========================================================================== Disclosure: 20/12/2016 / Last updated: 20/12/2016 Background on the affected products:...

CVE-2016-9033

Joyent SmartOS Hyprlofs file system contains a local buffer overflow in the Ioctl HYPRLOFS_ADD_ENTRIES path. The vulnerability arises in hyprlofs_vnops.c where a stack-allocated path buffer size MAXPATHLEN (1024) can be overrun due to a length check of e[i].hle_plen using > MAXPATHLEN instead ...

Disk Savvy Enterprise Server <= 9.4.18 Buffer Overflow Vulnerability

Disk Savvy Enterprise Server is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Huawei Play 5C phone TP touchscreen driver suffers from buffer overflow vulnerability

Huawei Play 5C is a smartphone from Huawei. A buffer overflow vulnerability exists in the TP touchscreen driver of the Huawei Play 5C phone. Due to the lack of parameter checking in the TP touchscreen driver, an attacker who gains root privileges and exploits the vulnerability can construct...

CVE-2016-9533

tifpixarlog.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers. Reported as MSVR 35094, aka "PixarLog horizontalDifference heap-buffer-overflow."...