CVE-2015-3777

CVE-2015-3777 : A buffer overflow in Apple OS X blued (Bluetooth) allows a local user to gain privileges via XPC messages. Affected: OS X before 10.10.5. Impact: local privilege escalation. Mitigation: update to macOS OS X 10.10.5 (security update HT205031) or later. Note: exploitation details ar...

Security update for MozillaFirefox (important)

update to Firefox 40.0 bnc940806 Added protection against unwanted software downloads Suggested Tiles show sites of interest, based on categories from your recent browsing history Hello allows adding a link to conversations to provide context on what the conversation will be about New style for...

Fedora 22 : pcre-8.37-3.fc22 (2015-12921)

This release fixes buffer overflows when compiling certain expressions. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Debian DSA-3333-1 : iceweasel - security update

Multiple security issues have been found in Iceweasel, Debian's version of the Mozilla Firefox web browser: Multiple memory safety errors, integer overflows, buffer overflows, use-after-frees and other implementation errors may lead to the execution of arbitrary code, bypass of the same-origin...

Lenovo Caught Using Rootkit to Secretly Install Unremovable Software

Two years ago Chinese firm Lenovo got banned from supplying equipment for networks of the intelligence and defense services various countries due to hacking and spying concerns. Earlier this year, Lenovo was caught red-handed for selling laptops pre-installed with Superfish malware. One of the mo...

DSA-3333-1 iceweasel - security update

Bulletin has no description...

USN-2702-1: Firefox vulnerabilities

Gary Kwong, Christian Holler, Byron Campen, Tyson Smith, Bobby Holley, Chris Coulson, and Eric Rahm discovered multiple memory safety issues in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service via...

Buffer overflows on Libvpx when decoding WebM video — Mozilla

Security researcher Abhishek Arya Inferno of the Google Chrome Security Team used the Address Sanitizer tool to discover two buffer overflow issues in the Libvpx library used for WebM video when decoding a malformed WebM video file. These buffer overflows result in potentially exploitable crashes...

libvpx -- multiple buffer overflows

The Mozilla Project reports: Security researcher Abhishek Arya Inferno of the Google Chrome Security Team used the Address Sanitizer tool to discover two buffer overflow issues in the Libvpx library used for WebM video when decoding a malformed WebM video file. These buffer overflows result in...

CVE-2015-3832

Multiple buffer overflows in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I allow remote attackers to execute arbitrary code via invalid size values of NAL units in MP4 data, aka internal bug 19641538...

Debian Security Advisory DSA 3323-1 (icu - security update)

Several vulnerabilities were discovered in the International Components for Unicode ICU library. CVE-2014-8146 The Unicode Bidirectional Algorithm implementation does not properly track directionally isolated pieces of text, which allows remote attackers to cause a denial of service heap-based...

Debian DLA-283-1 : icu security update

A vulnerability has been found in the International Components for Unicode ICU library : CVE-2015-4760 It was discovered that ICU Layout Engine was missing multiple boundary checks. These could lead to buffer overflows and memory corruption. A specially crafted file could cause an application usi...

[SECURITY] [DLA 283-1] icu security update

Package : icu Version : 4.4.1-8+squeeze4 CVE ID : CVE-2015-4760 A vulnerability has been found in the International Components for Unicode ICU library: CVE-2015-4760 It was discovered that ICU Layout Engine was missing multiple boundary checks. These could lead to buffer overflows and memory...

DLA-283-1 icu - security update

Bulletin has no description...

FreeBSD : sox -- input sanitization errors (92cda470-30cb-11e5-a4a5-002590263bf5)

oCERT reports : The sox command line tool is affected by two heap-based buffer overflows, respectively located in functions startread and AdpcmReadBlock. A specially crafted wav file can be used to trigger the vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

Flash Player < 13.0.0.302 / 18.0.0.203 Multiple Vulnerabilities (APSB15-16)

Binary data 8821.prm...

The vulnerability of the Adobe Reader PDF viewer program allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Reader PDF viewer program is related to buffer overflows in dynamic memory, caused by integer overflows. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Adobe Reader DC PDF viewer program, which allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Reader DC PDF viewer program is related to buffer overflows in the dynamic memory, caused by integer overflows. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Firefox browser, which allows a violator to trigger a service failure

The vulnerability of the nsXMLHttpRequest::AppendToResponseText method in Firefox browsers is caused by buffer overflows in dynamic memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Fedora 21 : pcre-8.35-12.fc21 (2015-11019)

This release fixes two heap buffer overflows when compiling certain regular expressions: CVE-2015-3210 and CVE-2015-5073. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...