Apple iOS multiple security vulnerabilities

Buffer overflows, DoS, memory corruption, restrictions bypass, weak cryptography...

CVE-2015-1065

Multiple buffer overflows in iCloud Keychain in Apple iOS before 8.2 and Apple OS X through 10.10.2 allow man-in-the-middle attackers to execute arbitrary code by modifying the client-server data stream during keychain recovery...

Apple Fixes FREAK Bug, iCloud Flaw in iOS 8.2

Apple has patched the FREAK SSL vulnerability, along with a nasty bug that could’ve allowed a remote attacker to restart a user’s iPhone via SMS, with the release of iOS 8.2. The new version of Apple’s mobile operating system contains a number of vulnerability fixes, with the FREAK patch being th...

Fedora 21 : libpng10-1.0.63-1.fc21 (2015-2863)

This update addresses a couple of buffer overflows that might allow context-dependent attackers to execute arbitrary code via very wide PNG images. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 20 : libpng10-1.0.63-1.fc20 (2015-2830)

This update addresses a couple of buffer overflows that might allow context-dependent attackers to execute arbitrary code via very wide PNG images. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

CVE-2015-2097

Multiple buffer overflows in WebGate Embedded Standard Protocol WESP SDK allow remote attackers to execute arbitrary code via unspecified vectors to the 1 LoadImage or 2 LoadImageEx function in the WESPMonitor.WESPMonitorCtrl.1 control, 3 ChangePassword function in the WESPCONFIGLib.UserItem...

CVE-2015-2097

CVE-2015-2097 describes multiple buffer overflow vulnerabilities in WebGate WebGate eDVR Manager components using the WebGate Embedded Standard Protocol (WESP) SDK. The advisories identify insufficient input validation/boundary checks in several controls (notably WESPMonitorCtrl LoadImage/LoadIma...

CVE-2015-2097

Multiple buffer overflows in WebGate Embedded Standard Protocol WESP SDK allow remote attackers to execute arbitrary code via unspecified vectors to the 1 LoadImage or 2 LoadImageEx function in the WESPMonitor.WESPMonitorCtrl.1 control, 3 ChangePassword function in the WESPCONFIGLib.UserItem...

WEBGATE ActiveX Controls Multiple Buffer Overflows

The remote host contains one or more of the following WEBGATE ActiveX controls : - Control Center : - FileConverter.FileConverterCtrl.1 - LoginContoller.LoginControllerCtrl.1 - WESPDiscovery.WESPDiscoveryCtrl.1 - WESPPlayback.WESPPlaybackCtrl.1 - eDVR Manager : - WESPDiscovery.WESPDiscoveryCtrl.1...

F5 Networks BIG-IP : NTP vulnerability (SOL15936)

Multiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers to execute arbitrary code via a crafted packet, related to 1 the cryptorecv function when the Autokey Authentication feature is used, 2 the ctlputdata function, and 3 the configure function. C Tenable Network...

UnZip multiple security vulnerabilities

Few buffer overflows...

CVE-2015-1500

Multiple stack-based buffer overflows in the TSUnicodeGraphEditorControl in SolarWinds Server and Application Monitor SAM allow remote attackers to execute arbitrary code via unspecified vectors to 1 graphManager.load or 2 factory.load...

CVE-2015-1495

Multiple stack-based buffer overflows in Motorola Scanner SDK allow remote attackers to execute arbitrary code via a crafted string to the Open method in 1 IOPOSScanner.ocx or 2 IOPOSScale.ocx...

Stack overflow

Multiple stack-based buffer overflows in Motorola Scanner SDK allow remote attackers to execute arbitrary code via a crafted string to the Open method in 1 IOPOSScanner.ocx or 2 IOPOSScale.ocx...

CVE-2015-1500

Multiple stack-based buffer overflows in the TSUnicodeGraphEditorControl in SolarWinds Server and Application Monitor SAM allow remote attackers to execute arbitrary code via unspecified vectors to 1 graphManager.load or 2 factory.load...

CVE-2015-1495

Multiple stack-based buffer overflows in Motorola Scanner SDK allow remote attackers to execute arbitrary code via a crafted string to the Open method in 1 IOPOSScanner.ocx or 2 IOPOSScale.ocx...

CVE-2015-1500

Summary: CVE-2015-1500 affects SolarWinds Server and Application Monitor (SAM) via the TSUnicodeGraphEditorControl. The two identified attack surfaces are the graphManager.load and the factory.loadExtensionFactory paths. The root cause is stack-based buffer overflows caused by insufficient valida...

vlc multiple security vulnerabilities

Integer overflows, buffer overflows...

SuSE 11.3 Security Update : jasper (SAT Patch Number 10261)

This update for jasper fixes the following security issues : - Double free in jasiccattrvaldestroy. Double call to free allowed attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. bsc909474. CVE-2014-8137 - Heap overflow in jasdecode. This could b...

CVE-2015-0243

Multiple buffer overflows in contrib/pgcrypto in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allow remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via unspecified vectors...