The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or cause other effects.

The vulnerability of the WebCursor::Deserialize function content/common/cursors/webcursor.cc in the Google Chrome browser is caused by a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure, or possibly have other effects through the use o...

McAfee ePolicy Orchestrator Java Object Deserialization RCE

The McAfee ePolicy Orchestrator ePO installed on the remote Windows host is affected by a remote code execution vulnerability due to unsafe deserialize calls of unauthenticated Java objects to the Apache Commons Collections ACC library. An unauthenticated, remote attacker can exploit this to...

Google Chrome Multiple Vulnerabilities (Jan 2016) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Google Chrome Multiple Vulnerabilities (Jan 2016) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

CVE-2015-8664

Integer overflow in the WebCursor::Deserialize function in content/common/cursors/webcursor.cc in Google Chrome before 47.0.2526.106 allows remote attackers to cause a denial of service or possibly have unspecified other impact via an RGBA pixel array with crafted dimensions, a different...

Integer overflow

Integer overflow in the WebCursor::Deserialize function in content/common/cursors/webcursor.cc in Google Chrome before 47.0.2526.106 allows remote attackers to cause a denial of service or possibly have unspecified other impact via an RGBA pixel array with crafted dimensions, a different...

CVE-2015-8664

CVE-2015-8664: Integer overflow in Chrome’s WebCursor::Deserialize (content/common/cursors/webcursor.cc) before 47.0.2526.106 allows remote DoS or unspecified impact via a crafted RGBA pixel array. It is a different vulnerability from CVE-2015-6792; no additional exploit details are provided in t...

CVE-2015-8664

Integer overflow in the WebCursor::Deserialize function in content/common/cursors/webcursor.cc in Google Chrome before 47.0.2526.106 allows remote attackers to cause a denial of service or possibly have unspecified other impact via an RGBA pixel array with crafted dimensions, a different...

CVE-2015-8664

Removed by vendor...

CVE-2015-8664: Undefined Security Weakness

Integer overflow in the WebCursor::Deserialize function in content/common/cursors/webcursor.cc in Google Chrome before 47.0.2526.106 allows remote attackers to cause a denial of service or possibly have unspecified other impact via an RGBA pixel array with crafted dimensions, a different...

Google Chrome integer overflow vulnerability (CNVD-2015-08480)

Google Chrome is a web browser developed by the American company Google Google. An integer overflow vulnerability exists in the 'WebCursor::Deserialize' function in the file content/common/cursors/webcursor.cc in Google Chrome versions prior to 47.0.2526.106. A remote attacker could exploit this...

UBUNTU-CVE-2015-8664

Integer overflow in the WebCursor::Deserialize function in content/common/cursors/webcursor.cc in Google Chrome before 47.0.2526.106 allows remote attackers to cause a denial of service or possibly have unspecified other impact via an RGBA pixel array with crafted dimensions, a different...

Google Chrome - Renderer Process to Browser Process Privilege Escalation

Google Chrome - Renderer Process to Browser Process Privilege Escalation Source: https://code.google.com/p/google-security-research/issues/detail?id=664 There is an overflow in the ui::PlatformCursor WebCursor::GetPlatformCursor method. In...

chromium-browser: Use-After-free in MidiHost

Integer overflow in the WebCursor::Deserialize function in content/common/cursors/webcursor.cc in Google Chrome before 47.0.2526.106 allows remote attackers to cause a denial of service or possibly have unspecified other impact via an RGBA pixel array with crafted dimensions, a different...

PT-2015-3160

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 47.0.2526.106 Opera versions prior to 47.0.2526.106 Description The issue is caused by an integer overflow in the WebCursor::Deserialize function, allowing remote attackers to cause a denial of service or possib...

CVE-2011-4104

CVE-2011-4104 affects Django Tastypie (older than 0.9.10). The vulnerability arises from the from_yaml deserialization in serializers.py, where YAML data is deserialized with yaml.load, allowing remote attackers to execute arbitrary Python code. The connected documents confirm the impact and vect...

Design/Logic Flaw

The readObject method in the DiskFileItem class in Apache Tomcat and JBoss Web, as used in Red Hat JBoss Enterprise Application Platform 6.1.0 and Red Hat JBoss Portal 6.0.0, allows remote attackers to write to arbitrary files via a NULL byte in a file name in a serialized instance, a similar iss...

CVE-2013-0277 rubygem-activerecord: Serialized Attributes YAML Vulnerability with Rails 2.3 and 3.0

ActiveRecord in Ruby on Rails before 2.3.17 and 3.x before 3.1.0 allows remote attackers to cause a denial of service or execute arbitrary code via crafted serialized attributes that cause the +serialize+ helper to deserialize arbitrary YAML...

Immunity Canvas: JAVA_DESERIALIZE_WIN32

Name| javadeserializewin32 ---|--- CVE| CVE-2008-5353 Exploit Pack| CANVAS Description| Java ZoneInfo deserialize exploit HTTP MOSDEF WIN32 Notes| CVE Name: CVE-2008-5353 VENDOR: Sun Repeatability: Infinite client side - no crash References:...

CVE-2005-1643

The CVE-2005-1643 entry affects Zoidcom 1.0 beta 4 and earlier . The vulnerability lies in the ZCom_BitStream::Deserialize function, where processing a crafted UDP packet with a large size value can trigger a memory allocation error or an out-of-bounds read, enabling a remote attacker to cause a ...