CVE-2017-0898: Use of Externally-Controlled Format String

Ruby before 2.4.2, 2.3.5, and 2.2.8 is vulnerable to a malicious format string which contains a precious specifier with a huge minus value. Such situation can lead to a buffer overrun, resulting in a heap memory corruption or an information disclosure from the heap...

Advantech WebAccess Buffer Overflow DoS

The vulnerability of Advantech WebAccess remote monitoring software arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures...

Venkman Script Debugger Code Execution

The vulnerability of the Venkman script debugger in the Firefox browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Network Time Protocol NTP Refclock Code Execution

The vulnerability of the datal driver parameter of the Network Time Protocol refclock protocol is caused by an operation going beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code or cause a service failure by using a negative...

Android CAF USB Interface Code Execution

The vulnerability of the Android operating system from the CAF repository arises from the execution of an operation outside the buffer boundaries. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, due to insufficient protection of the USB interface during...

Android CAF-release TrustZone Data Compromise

The vulnerability of the TrustZone system call in the Android CAF-release operating system arises from the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

Android CAF-release Buffer Overflow Memory Leak

The vulnerability of the Android CAF-release operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to trigger a memory leak when a connection is denied for the clientHello message, which is a cryptographi...

Microsoft Edge Code Execution

The vulnerability in the Microsoft Edge JavaScript kernel is caused by an operation going beyond the buffer boundaries in memory memory corruption in the kernel. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, as a result of...

PDF JPEG Parser Code Execution

The vulnerability in the JPEG parser of PDF editing software like Adobe Acrobat Document Cloud, Adobe Acrobat, and PDF viewing software like Adobe Reader and Foxit Reader arises due to an operation going beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to...

Microsoft Edge Code Execution

The vulnerability in the Microsoft Edge JavaScript kernel is caused by an operation going beyond the buffer boundaries in memory memory corruption in the kernel. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, as a result of...

Microsoft Edge Code Execution

The vulnerability in the Microsoft Edge JavaScript kernel is caused by an operation going beyond the buffer boundaries in memory a memory corruption in the kernel script. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, as a resu...

Microsoft Windows PDF Library Code Execution

The vulnerability of the Microsoft Windows PDF Library on the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code when objects in memory are processed incorrectly...

Quick Heal Code Execution

The vulnerability of anti-virus software programs such as Quick Heal Internet Security, Quick Heal Total Security, and Quick Heal AntiVirus Pro arises from writing beyond the buffer boundaries in dynamic memory. This vulnerability exists due to insufficient checking of the dwCompressionSize...

Quick Heal Memory Corruption

The vulnerability of the anti-virus software programs Quick Heal Internet Security, Quick Heal Total Security, and Quick Heal AntiVirus Pro arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause memor...

[slackware-security] libsoup

New libsoup packages are available for Slackware 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/libsoup-2.52.2-i586-3slack14.2.txz: Rebuilt. Fixed a chunked decoding buffer overrun that could be exploited against either...

libsoup security update

2.56.0-4 - Fix chunked decoding buffer overrun CVE-2017-2885 rh 1479322...

ImageMagick parse8BIMW format8BIM Memory Access Violation

The vulnerability of the parse8BIMW and format8BIM functions in the coders/meta.c file related to the WriteImage function in coders/meta.c in the console-based graphic editor ImageMagick arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability could...

Action Script 3 Flash Player Code Execution

The vulnerability of the data model created using Action Script 3, on the Flash Player software platform, arises from the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotely...

Internet Explorer Memory Handler Code Execution

The vulnerability of the Internet Explorer browser’s memory handler in the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

freeradius: Out-of-bounds read/write due to improper output buffer size check in make_secret()

An out-of-bounds read and write flaw was found in the way FreeRADIUS server handled RADIUS packets. A remote attacker could use this flaw to crash the FreeRADIUS server by sending a specially crafted RADIUS packet...