The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the mp3dec/SoftMP3.cpp file in the libstagefright component of the Android operating system’s media server is related to the lack of additional checks for the ratio between the allocated memory size and the frame size. Exploiting this vulnerability allows a remote attacker to...

CVE-2016-2486

mp3dec/SoftMP3.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate the relationship between allocated memory and the frame size, which allows attackers to gain privileges via a crafted application, a...

CVE-2016-2478: Improper Input Validation

mm-video-v4l2/vidc/vdec/src/omxvdecmsm8974.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles pointers, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or...

CVE-2016-2477: Improper Input Validation

mm-video-v4l2/vidc/vdec/src/omxvdecmsm8974.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles pointers, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or...

CVE-2016-2486: Improper Input Validation

mp3dec/SoftMP3.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate the relationship between allocated memory and the frame size, which allows attackers to gain privileges via a crafted application, a...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the media/libmedia/IOMX.cpp function in the Android operating system’s mediaserver component is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to enhance their privileges through a specially created...

java-1.7.0-openjdk security update

1:1.7.0.101-2.6.6.1.0.1 - Update DISTRONAME in specfile 1:1.7.0.101-2.6.6.1 - added Patch666 fontpath.patch to fix tck regressions - Resolves: rhbz1325425 1:1.7.0.101-2.6.6.0 - Fix ztos handling in templateTableppc64.cpp to be same as others in 7. - Resolves: rhbz1325425 1:1.7.0.101-2.6.6.0 - Bum...

Fedora Update for qpid-cpp FEDORA-2016-120

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 23 : qpid-cpp-0.34-6.fc23 (2016-120b194a75)

Rebuilt against qpid-proton 0.12.0. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...

The vulnerability of the Android operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the SampleTable.cpp file of the Android operating system’s libstagefright component is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker, acting remotely, to compromise the confidentiality, integrity, and accessibility of the protected...

CVE-2015-6775: Undefined Security Weakness

fpdfsdk/src/jsapi/fxjsv8.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, does not use signatures, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."...

Android libstagefright number error vulnerability (CNVD-2015-06610)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. libstagefright is one of the libraries that supports hardcoding. An integer overflow vulnerability exists in the SampleTable.cpp file in libstagefright in Android 4.4.4 and earlier...

Oracle: Security Advisory (ELSA-2012-1269)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the Firefox browser, which allows a hacker to circumvent access restrictions to window elements

The vulnerability of the js/src/proxy/Proxy.cpp component of the Firefox browser is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass access restrictions to window elements by using a specially crafted web page...

Oracle: Security Advisory (ELSA-2011-0433)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Firefox js/src/proxy/Proxy.cpp Restriction Bypass Vulnerability

Mozilla Firefox is an open source web browser. The Mozilla Firefox js/src/proxy/Proxy.cpp file fails to properly handle the 'receiver' parameter. A remote attacker can exploit the vulnerability to bypass specific window access restrictions...

RHEL 7 : MRG (RHSA-2015:0660)

Updated qpid-cpp packages that fix multiple security issues and one bug are now available for Red Hat Enterprise MRG Messaging 2.5 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base score...

chromium-browser: Use-after-free in pdfium.

Multiple use-after-free vulnerabilities in fpdfsdk/src/javascript/Document.cpp in PDFium, as used in Google Chrome before 44.0.2403.89, allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document, related to the 1 Document::delay and 2...

Google Chrome PDFium Integer Overflow Vulnerability

Google Chrome is an open source WEB browser. An integer overflow vulnerability exists in the CJBig2Image::expand function in fxcodec/jbig2/JBig2Image.cpp in Google Chrome PDFium, which allows attackers to construct a malicious WEB page and trick users into parsing it, which can execute arbitrary...

Fedora 21 : qpid-cpp-0.32-4.fc21 (2015-9503)

Removed qpid-send and qpid-receive from qpid-cpp-client-devel. Include the qpid.tests module in python-qpid Bumped the release to force a build against Proton 0.9 in F22. Added qpidtoollibs to the qpid-tools package. Fixed path to qpid-ha in the systemd service descriptor. Resolves: BZ1186308 App...