Framework Privilege Escalation

The vulnerability of the Accessibility Framework component of the Mac OS X operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context, or cause a service failure...

HDR Android Component DoS

The vulnerability of the HDR component of the Android operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure remotely...

Chakra JavaScript Engine Code Execution

The vulnerability in the Chakra JavaScript engine of Microsoft Edge occurs due to an operation going beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause memory corruption...

Chakra JavaScript Engine Code Execution

The vulnerability in the Chakra JavaScript engine of Microsoft Edge occurs due to an operation going beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause memory corruption...

Flash Player Code Execution

The vulnerability of the Flash Player software arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption remotely...

Flash Player Code Execution

The vulnerability of the Flash Player software arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption remotely...

TL1 language code Execution

The vulnerability of the TL1 operation code in the Cisco IOS operating system arises from the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a system reboot remotely...

AVG InternetSecurity Memory Corruption

The vulnerability of the AVG InternetSecurity antivirus software arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause memory corruption by analyzing a specially created Mach-O file...

openSUSE Security Update : git (openSUSE-2017-624)

This update for git fixes the following issues : - git 2.12.3 : - CVE-2017-8386: Fix git-shell not to escape with the starting dash name bsc1038395 - Fix for potential segv introduced in v2.11.0 and later - Misc fixes and cleanups. - git 2.12.2 : - CLI output fixes - 'Dump http' transport fixes -...

CVE-2016-10377

Open vSwitch (OvS) 2.5.0 is affected by CVE-2016-10377. The vulnerability lies in the lib/flow.c function miniflow_extract, where an unsigned integer underflow when processing a malformed IP packet can cause the switch to read past the end of the packet buffer. This permits remote bypass of the s...

Asterisk Multiple DoS Vulnerabilities (May 2017)

Asterisk is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

FreeBSD : asterisk -- Buffer Overrun in PJSIP transaction layer (0537afa3-3ce0-11e7-bf9d-001999f8d30b)

The Asterisk project reports : A remote crash can be triggered by sending a SIP packet to Asterisk with a specially crafted CSeq header and a Via header with no branch parameter. The issue is that the PJSIP RFC 2543 transaction key generation algorithm does not allocate a large enough buffer. By...

SUSE SLES12 Security Update : git (SUSE-SU-2017:1357-1)

This update for git fixes the following issues : - git 2.12.3 : - CVE-2017-8386: Fix git-shell not to escape with the starting dash name bsc1038395 - Fix for potential segv introduced in v2.11.0 and later - Misc fixes and cleanups. - git 2.12.2 : - CLI output fixes - 'Dump http' transport fixes -...

Flash Player Code Execution

The vulnerability of the Flash Player class in the software platform arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotely...

Android DoS

The vulnerability of the Android operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a system failure...

ImageMagick DoS

The vulnerability of the ReadBMPImage function in the ImageMagick console graphics editor’s bmp.c file arises from the execution of an operation outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure loss of access to memory b...

ImageMagick DoS

The vulnerability of the ReadPICTImage function in the pict.c file of the ImageMagick console graphic editor is caused by the execution of an operation outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure loss of access to...

McAfee VirusScan Enterprise DoS

The vulnerability of the McAfee VirusScan Enterprise antivirus software arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to cause a service failure in the active Internet Explorer browser tab through a specially...

Linux DoS

The vulnerability in the driver drivers/media/usb/dvb-usb-v2/dvbusbcore.c of the Linux operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor, operating locally, to improperly interact with the...

Linux DoS

The vulnerability in the driver drivers/media/usb/dvb-usb/dvb-usb-firmware.c of the Linux operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor, operating locally, to improperly interact with the...