1811 matches found
The vulnerability of the Microsoft Office software package, which allows a perpetrator to execute arbitrary code or cause a service failure.
The vulnerability of the Microsoft Office suite arises due to an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by using a specially crafted document...
The vulnerability of Adobe Reader software allows a malicious individual to compromise the confidentiality of protected information.
The vulnerability exists in Adobe Reader due to the incorrect implementation of the JavaScript API. Exploiting this vulnerability allows malicious actors, operating remotely, to gain access to confidential information through a specially crafted PDF document...
The vulnerability of Acrobat software allows a malicious individual to compromise the confidentiality of protected information.
The vulnerability exists in Acrobat due to incorrect implementation of the JavaScript API. Exploiting this vulnerability allows malicious actors, operating remotely, to gain access to confidential information through a specially crafted PDF document...
Vulnerability of the Windows operating system and the Microsoft Edge browser, allowing a perpetrator to execute arbitrary code
The vulnerability of the Windows operating system and the Microsoft Edge browser exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted PDF document from a remote location...
Microsoft Edge browser’s vulnerability, which allows a hacker to bypass content protection policies
The vulnerability of Microsoft Edge is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass content protection policies using a specially crafted document...
USN-3022-1 libreoffice vulnerability
It was discovered that LibreOffice incorrectly handled RTF document files. If a user were tricked into opening a specially crafted RTF document, a remote attacker could cause LibreOffice to crash, and possibly execute arbitrary code...
CVE-2016-0278
Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2016-0277, CVE-2016-0279, and CVE-2016-0301...
Heap overflow
Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2016-0277, CVE-2016-0278, and CVE-2016-0279...
libxml2: Heap use-after-free in htmlPArsePubidLiteral and htmlParseSystemiteral
Multiple use-after-free vulnerabilities in the 1 htmlPArsePubidLiteral and 2 htmlParseSystemiteral functions in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allow remote attackers to cause a denial of service via a...
libxml2: Heap-based buffer-overread in xmlNextChar
The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted XML document...
libxml2: Heap-based buffer overread in xmlDictAddString
The xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted XML document...
The vulnerability of the PHP interpreter, allowing attackers to execute XXE and XXL attacks
The vulnerability of the ext/libxml/libxml.c file in the PHP interpreter arises from the fact that, when using PHP-FPM, the isolation of individual data threads is not properly implemented. Exploiting this vulnerability allows a remote attacker to execute XXE and XXL attacks using a specially...
The vulnerability of the Expat scraping library allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of the Expat parsing library arises due to buffer overflow. Exploiting this vulnerability allows a remote attacker to cause a service failure or execute arbitrary code crashloop using a specially crafted document...
The vulnerability of the LibXLST transformation library allows a attacker to cause a service failure or exert other effects.
The vulnerability of the numbers.c file in the XLST transformation library LibXLST is related to incorrect processing of the xsl:number format. Exploiting this vulnerability can allow a malicious actor to cause service failures or other effects through a specially crafted document...
The vulnerability of the LibXLST transformation library allows a attacker to cause a service failure or exert other effects.
The vulnerability of the numbers.c file in the LibXLST library is related to errors in name space handling. Exploiting this vulnerability can allow a malicious actor to cause service failures or other effects through a specially crafted document...
CVE-2016-3233
Microsoft Excel 2007 SP3, Excel 2010 SP2, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...
Microsoft Windows PDF Information Disclosure Vulnerability (CNVD-2016-04068)
Microsoft Windows and Microsoft Edge are both products of Microsoft Corporation USA. The former is a series of operating systems; the latter is a web browser that is the default browser that comes with the Windows 10 operating system. An information disclosure vulnerability exists in Microsoft...
MS16-074: Description of the security update for Microsoft Graphics Component: June 14, 2016
None None...
MS16-074: Description of the security update for Microsoft Graphics Component: June 14, 2016
None None...
MS16-074: Security Update for Microsoft graphics component: June 14, 2016
Resolves vulnerabilities in Windows that could allow elevation of privilege if a user opens a specially crafted document or visits a specially crafted website.SummaryThis security update resolves vulnerabilities in Microsoft Windows. The most severe of the vulnerabilities could allow elevation of...