4484 matches found
nss: QuickDER decoder length issue
The definitelengthdecoder function in lib/util/quickder.c in Mozilla Network Security Services NSS before 3.16.2.4 and 3.17.x before 3.17.3 does not ensure that the DER encoding of an ASN.1 length is properly formed, which allows remote attackers to conduct data-smuggling attacks by using a long...
ClamAV upx.c pefromupx() UPX Decode Handling Remote Denial of Service Vulnerability
ClamAV is an anti-virus application. ClamAV upx.c pefromupx handles special files with a security vulnerability that allows remote attackers to exploit the vulnerability to crash the application...
Unmediated PCI command register access in qemu
ISSUE DESCRIPTION HVM guests are currently permitted to modify the memory and I/O decode bits in the PCI command register of devices passed through to them. Unless the device is an SR-IOV virtual function, after disabling one or both of these bits subsequent accesses to the MMIO or I/O port range...
OpenSSL 'EVP_DecodeUpdate' Denial of Service Vulnerability
OpenSSL is an open source implementation of SSL used to enable strong encryption of network communications and is now widely used in a variety of web applications. A denial of service vulnerability exists in OpenSSL. Due to an integer underflow within the EVPDecodeUpdate function located within...
FreeBSD : OpenSSL -- multiple vulnerabilities (9d15355b-ce7c-11e4-9db0-d050992ecde8) (FREAK)
OpenSSL project reports : - Reclassified: RSA silently downgrades to EXPORTRSA Client CVE-2015-0204. OpenSSL only. - Segmentation fault in ASN1TYPEcmp CVE-2015-0286 - ASN.1 structure reuse memory corruption CVE-2015-0287 - PKCS7 NULL pointer dereferences CVE-2015-0289 - Base64 decode CVE-2015-029...
DEBIAN-CVE-2015-0292
Integer underflow in the EVPDecodeUpdate function in crypto/evp/encode.c in the base64-decoding implementation in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact v...
Vulnerability in OpenSSL - Base64 decode
A vulnerability existed in previous versions of OpenSSL related to the processing of base64 encoded data. Any code path that reads base64 data from an untrusted source could be affected such as the PEM processing routines. Maliciously crafted base 64 data could trigger a segmenation fault or memo...
jasper: heap overflow in jp2_decode() (oCERT-2014-012)
A heap-based buffer overflow flaw was found in the way JasPer decoded JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash or, possibly, execute arbitrary code...
chromium-browser: Out-of-bounds read in vpxdecoder
The VpxVideoDecoder::VpxDecode function in media/filters/vpxvideodecoder.cc in the vpxdecoder implementation in Google Chrome before 41.0.2272.76 does not ensure that alpha-plane dimensions are identical to image dimensions, which allows remote attackers to cause a denial of service out-of-bounds...
PT-2015-4307
Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.5.2 Description The issue is related to the vmd decode function in libavcodec/vmdvideo.c, which does not validate the relationship between a certain length value and the frame width. This allows remote attackers to...
UBUNTU-CVE-2014-9843
The DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors...
PT-2014-1944
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.18.2 Description The issue is related to an off-by-one error in the ecryptfs decode from filename function in the eCryptfs subsystem. This error can be exploited by local users to cause a denial of service,...
phpyun v3.2 (20141222) 无需登录无视过滤注入一枚。
简要描述： 无需登录。 最新版本。 demo测试。 功能越多 bug越多 bug越多 rank越多。 详细说明： 在model/subscribe.class.php中 function certaction if$GET'id' $arr=@explode"|",base64decode$GET'id';//当时我就震惊了。。。 $email = $arr0; $code = $arr1; $nid=$this-obj-DBupdateall"subscribe","status='1'","email='".$email."' and code='".$code."'";...
jasper: heap overflow in jp2_decode() (oCERT-2014-012)
A heap-based buffer overflow flaw was found in the way JasPer decoded JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash or, possibly, execute arbitrary code...
PT-2014-8428
Name of the Vulnerable Software and Affected Versions JasPer versions 1.900.1 and earlier Description The issue is related to a heap-based buffer overflow in the jp2 decode function, which can be triggered by a crafted JPEG 2000 file. This can cause a denial of service crash or possibly allow...
DEBIAN-CVE-2014-1569
The definitelengthdecoder function in lib/util/quickder.c in Mozilla Network Security Services NSS before 3.16.2.4 and 3.17.x before 3.17.3 does not ensure that the DER encoding of an ASN.1 length is properly formed, which allows remote attackers to conduct data-smuggling attacks by using a long...
PT-2014-8931
Name of the Vulnerable Software and Affected Versions FFMpeg versions prior to 2.1.6 FFMpeg versions 2.2.x through 2.3.x FFMpeg versions 2.4.x prior to 2.4.4 Description The issue allows remote attackers to cause a denial of service and possibly have other unspecified impact via vectors related t...
PT-2014-8934
Name of the Vulnerable Software and Affected Versions FFMpeg versions prior to 2.1.6 FFMpeg versions 2.2.x through 2.3.x FFMpeg versions 2.4.x prior to 2.4.4 Description The issue allows remote attackers to cause a denial of service out-of-bounds access via a crafted .bit file. This is due to a...
PT-2014-8374
Name of the Vulnerable Software and Affected Versions Cisco OpenH264 versions 1.2.0 and earlier Description The issue is related to a use-after-free vulnerability in the decode slice.cpp file. This vulnerability allows remote attackers to execute arbitrary code via an encoded media file...