4861 matches found
Buffer Overrun
Microsoft.NETCore.Runtime.CoreCLR is vulnerable to buffer overrun. The library does not properly handle the dwCode variable in the GetDebugCodeName method, leading to a buffer overrun that can cause information in the buffer to be overwritten or disclosed...
Android sdp_copy_raw_data Code Execution
The vulnerability of the sdpcopyrawdata function sdpdiscovery.cc in the Android operating system is related to writing beyond the buffer boundaries into memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using Bluetooth...
Android Bluetooth Service Disclosure
The vulnerability of the rfcprocessmxmessage function in the Bluetooth service of the Android operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to disclose information...
Intel Active Management Technology Code Execution
The vulnerability of the Intel AMT microprogramming software, the Intel Converged Security and Manageability Engine CSME, and the Intel Management Engine ME, arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability can allow a perpetrator to execute arbitrary...
PT-2018-1976
Name of the Vulnerable Software and Affected Versions Curl versions 7.33.0 through 7.61.1 Description The issue is related to a buffer overrun in the SASL authentication code, which may lead to denial of service. This buffer overrun is located in the Curl auth create plain message function and...
EulerOS Virtualization 2.5.0 : curl (EulerOS-SA-2018-1237)
According to the version of the curl package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A buffer overrun flaw was found in the IMAP handler of libcurl. By tricking an unsuspecting user into connecting to a malicious IMAP...
ChakraCore Buffer Overflow
The vulnerability of the ChakraCore JavaScript script handler arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute malicious code...
FL SWITCH Buffer Overflow Privilege Escalation
The vulnerability of the microprogrammed software for controlled switches from FL SWITCH from Phoenix Contact arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to the device’s operating...
Schneider Electric Modicon Buffer Overflow DoS
The vulnerability of microprogrammed software in Schneider Electric’s Modicon Premium, Modicon Quantum, Modicon M340, and Modicon BMXNOR0200 programmable logic controllers arises from the execution of an operation outside the buffer boundaries in memory. Exploiting this vulnerability can allow a...
Adobe Photoshop Buffer Overflow
The vulnerability of the Adobe Photoshop graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
cURL (libcurl) NTLM Authentication Code Buffer Overrun Vulnerability
curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curlntlmcoremknthash multiplies the length of the password by two SUM to figure out how large temporary storage area to allocate from the heap. The length value is then subsequently...
CVE-2018-14618
curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curlntlmcoremknthash multiplies the length of the password by two SUM to figure out how large temporary storage area to allocate from the heap. The length value is then subsequently...
ALPINE-CVE-2018-14618
curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curlntlmcoremknthash multiplies the length of the password by two SUM to figure out how large temporary storage area to allocate from the heap. The length value is then subsequently...
CVE-2018-14618
curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curlntlmcoremknthash multiplies the length of the password by two SUM to figure out how large temporary storage area to allocate from the heap. The length value is then subsequently...
Integer overflow
curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curlntlmcoremknthash multiplies the length of the password by two SUM to figure out how large temporary storage area to allocate from the heap. The length value is then subsequently...
CVE-2018-14618
CVE-2018-14618 affects curl/libcurl NTLM authentication. The vulnerability arises from an integer overflow in Curl_ntlm_core_mk_nt_hash (32-bit size_t) that overflows when password length > 2 GB, causing heap buffer overflow due to under-allocated temporary storage. Affects curl prior to 7.61....
CVE-2018-14618
curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curlntlmcoremknthash multiplies the length of the password by two SUM to figure out how large temporary storage area to allocate from the heap. The length value is then subsequently...
CVE-2018-14618
curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curlntlmcoremknthash multiplies the length of the password by two SUM to figure out how large temporary storage area to allocate from the heap. The length value is then subsequently...
CVE-2018-14618
curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curlntlmcoremknthash multiplies the length of the password by two SUM to figure out how large temporary storage area to allocate from the heap. The length value is then subsequently...
CVE-2018-14618
curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curlntlmcoremknthash multiplies the length of the password by two SUM to figure out how large temporary storage area to allocate from the heap. The length value is then subsequently...