Flash Player Code Execution

The vulnerability of the Flash Player software arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption remotely...

TL1 language code Execution

The vulnerability of the TL1 operation code in the Cisco IOS operating system arises from the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a system reboot remotely...

AVG InternetSecurity Memory Corruption

The vulnerability of the AVG InternetSecurity antivirus software arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause memory corruption by analyzing a specially created Mach-O file...

openSUSE Security Update : git (openSUSE-2017-624)

This update for git fixes the following issues : - git 2.12.3 : - CVE-2017-8386: Fix git-shell not to escape with the starting dash name bsc1038395 - Fix for potential segv introduced in v2.11.0 and later - Misc fixes and cleanups. - git 2.12.2 : - CLI output fixes - 'Dump http' transport fixes -...

CVE-2016-10377

Open vSwitch (OvS) 2.5.0 is affected by CVE-2016-10377. The vulnerability lies in the lib/flow.c function miniflow_extract, where an unsigned integer underflow when processing a malformed IP packet can cause the switch to read past the end of the packet buffer. This permits remote bypass of the s...

Asterisk Multiple DoS Vulnerabilities (May 2017)

Asterisk is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

FreeBSD : asterisk -- Buffer Overrun in PJSIP transaction layer (0537afa3-3ce0-11e7-bf9d-001999f8d30b)

The Asterisk project reports : A remote crash can be triggered by sending a SIP packet to Asterisk with a specially crafted CSeq header and a Via header with no branch parameter. The issue is that the PJSIP RFC 2543 transaction key generation algorithm does not allocate a large enough buffer. By...

Flash Player Code Execution

The vulnerability of the Flash Player class in the software platform arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotely...

SUSE SLES12 Security Update : git (SUSE-SU-2017:1357-1)

This update for git fixes the following issues : - git 2.12.3 : - CVE-2017-8386: Fix git-shell not to escape with the starting dash name bsc1038395 - Fix for potential segv introduced in v2.11.0 and later - Misc fixes and cleanups. - git 2.12.2 : - CLI output fixes - 'Dump http' transport fixes -...

Android DoS

The vulnerability of the Android operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a system failure...

McAfee VirusScan Enterprise DoS

The vulnerability of the McAfee VirusScan Enterprise antivirus software arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to cause a service failure in the active Internet Explorer browser tab through a specially...

ImageMagick DoS

The vulnerability of the ReadBMPImage function in the ImageMagick console graphics editor’s bmp.c file arises from the execution of an operation outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure loss of access to memory b...

ImageMagick DoS

The vulnerability of the ReadPICTImage function in the pict.c file of the ImageMagick console graphic editor is caused by the execution of an operation outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure loss of access to...

Linux DoS

The vulnerability in the Linux operating system’s crypto/ccm.c driver arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a local attacker to improperly interact with the CONFIGVMAPSTACK parameter, resulting in a service failure system...

Linux DoS

The vulnerability in the driver drivers/net/usb/pegasus.c of the Linux operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a local attacker to improperly interact with the CONFIGVMAPSTACK parameter, resulting in a servic...

Linux DoS

The vulnerability in the driver drivers/media/usb/dvb-usb-v2/dvbusbcore.c of the Linux operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor, operating locally, to improperly interact with the...

Linux DoS

The vulnerability in the driver drivers/media/usb/dvb-usb/dvb-usb-firmware.c of the Linux operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor, operating locally, to improperly interact with the...

Adobe Reader PDF Execution Arbitrary Code

The vulnerability of the manipulation function for PDF files viewed and edited by Adobe Reader, Adobe Acrobat Document Cloud, Adobe Reader Document Cloud, and Adobe Acrobat is due to an operation going beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to execu...

PDF Viewer Code Execution

The vulnerability of the MakeAccessible plugin for PDF viewing and editing applications, such as Adobe Reader, Adobe Acrobat Document Cloud, Adobe Reader Document Cloud, and Adobe Acrobat, arises due to an operation that goes beyond the buffer in memory. Exploiting this vulnerability allows a...

Internet Explorer Code Execution

The vulnerability of the Internet Explorer browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...