libsoup security update

2.56.0-4 - Fix chunked decoding buffer overrun CVE-2017-2885 rh 1479322...

ImageMagick parse8BIMW format8BIM Memory Access Violation

The vulnerability of the parse8BIMW and format8BIM functions in the coders/meta.c file related to the WriteImage function in coders/meta.c in the console-based graphic editor ImageMagick arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability could...

Action Script 3 Flash Player Code Execution

The vulnerability of the data model created using Action Script 3, on the Flash Player software platform, arises from the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotely...

Internet Explorer Memory Handler Code Execution

The vulnerability of the Internet Explorer browser’s memory handler in the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

freeradius: Out-of-bounds read/write due to improper output buffer size check in make_secret()

An out-of-bounds read and write flaw was found in the way FreeRADIUS server handled RADIUS packets. A remote attacker could use this flaw to crash the FreeRADIUS server by sending a specially crafted RADIUS packet...

iOS Mac OS X Kernel Privilege Escalation

The vulnerability of the Kernel component in iOS and Mac OS X operating systems arises from the execution of an operation outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context, or to cause a service failure memory...

Intel Graphics Driver Privilege Escalation

The vulnerability of the Intel Graphics Driver for the Mac OS X operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context or cause a service failure memory...

Mac OS X Bluetooth Privilege Escalation

The vulnerability of the Bluetooth component of the Mac OS X operating system arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context or cause a service failure memory corruption throu...

SQLite getNodeSize Heap Buffer Overflow

The vulnerability of the getNodeSize function in the SQLite database management system arises from the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to exert other effects using the reduced size of RTree blobs within the...

Firefox Buffer Overflow DoS

The vulnerability in Firefox ESR and Firefox relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Linux kernel snd_msnd Interrupt DoS

The vulnerability of the sndmsnd Interrupt function in the Linux operating system’s kernel is due to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure or have other adverse effects...

Flash Player Code Execution

The vulnerability of the PNG image analyzer in the Flash Player software is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotely...

Internet Explorer Code Execution

The vulnerability of the Internet Explorer browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Microsoft Outlook Code Execution

The vulnerability of the Microsoft Outlook email client arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through specially crafted email messages from a remote location...

Android Mediaserver Memory Corruption

The vulnerability of the Android operating system’s Mediaserver service arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to inject arbitrary code using a specially created file, which can cause memory corruption duri...

CVE-2017-8781

XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted JPEG 2000 file that is mishandled during the opening of a directory in "Browser" mode, because of a "Stack Buffer Overrun" issue...

CVE-2017-8781

XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted JPEG 2000 file that is mishandled during the opening of a directory in "Browser" mode, because of a "Stack Buffer Overrun" issue...

CVE-2017-10745

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Stack Buffer Overrun /GS Exception starting at ntdll77df0000!RtlProcessFlsData+0x00000000000000b0."...

CVE-2017-10743

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Stack Buffer Overrun /GS Exception starting at ntdll77df0000!LdrpInitializeNode+0x000000000000015b."...

CVE-2017-10745

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Stack Buffer Overrun /GS Exception starting at ntdll77df0000!RtlProcessFlsData+0x00000000000000b0."...