Ubuntu: Security Advisory (USN-2773-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Tablet Input Band Memory Misreference Vulnerability

Microsoft Windows is a popular operating system. A memory misreference vulnerability exists in Microsoft Windows Microsoft Tablet Input Band. The vulnerability allows remote attackers to construct special data to trick the user into loading it, which can trigger a post-release use of memory error...

Apple OS X intel graphics driver memory corruption vulnerability (CNVD-2015-06431)

Apple OS X is an operating system developed by Apple Inc. A memory corruption vulnerability exists in the Apple OS X Intel graphics driver, which can be exploited by a local attacker to execute arbitrary code with system privileges...

Apple OS X kernel memory corruption vulnerability (CNVD-2015-06427)

Apple OS X is an operating system developed by Apple Inc. A memory corruption vulnerability exists in the Apple OS X kernel, which can be exploited by a local attacker to execute arbitrary code in the kernel context...

The vulnerability of the multi-media player iTunes, allowing a intruder to execute arbitrary code or trigger a service failure

The vulnerability of the WebKit component in the multimedia player iTunes and the iOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using a specially crafted...

Mozilla Firefox and Firefox ESR 'ConvertDialogOptions' function buffer overflow vulnerability

Mozilla Firefox is an open source web browser. A buffer overflow vulnerability exists in the Mozilla Firefox 'ConvertDialogOptions' function, which allows attackers to construct a malicious web page and trick the user into parsing it, which could crash the application or execute arbitrary code...

Adobe Flash Player suffers from an unspecified memory corruption vulnerability (CNVD-2015-06317)

Adobe Flash Player is a Flash file processing program.Adobe AIR is a cross-operating system runtime library produced by Adobe, through which developers can take advantage of existing Web development technology. A memory corruption vulnerability exists in Adobe Flash Player that could allow an...

Apple iOS WebKit Memory Corruption Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in the Apple iOS WebKit engine, which allows remote attackers to construct a malicious web page and trick users into parsing it, which could crash the application ...

Apple iOS Webkit Memory Corruption Vulnerability (CNVD-2015-06147)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in Webkit used by Apple iOS, which allows attackers to construct a malicious web page and trick users into parsing it, which could crash the application or execute...

CVE-2015-5798

WebKit, as used in Apple iTunes before 12.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in...

Google V8 suffers from an unspecified vulnerability (CNVD-2015-05802)

Google Chrome is a WEB-based browser. A security vulnerability in the Google Chrome V8 engine allows remote attackers to construct malicious WEB pages that can be tricked into parsing by users, which can crash applications or execute arbitrary code...

Apple OS X dyld Path Checksum Vulnerability

Apple OS X is a BSD-based operating system distributed by Apple. A path-checking vulnerability in Apple OS X dyld allows local users to execute arbitrary code with system privileges...

Apple OS X QuickTime Memory Corruption Vulnerability

Apple OS X is a BSD-based operating system distributed by Apple. A memory corruption vulnerability exists in Apple OS X QuickTime Handling Special Files, which allows attackers to construct malicious files that can be tricked into parsing by the user, crashing the application or executing arbitra...

vBulletin Arbitrary File Upload Vulnerability

vBulletin is the United States Internet Brands and vBulletin Solutions, Inc. jointly developed an open source commercial Web forum program . An arbitrary file upload vulnerability exists in vBulletin. An attacker could exploit this vulnerability to upload arbitrary files to an affected computer a...

Apple OS X IOFireWireFamily memory corruption vulnerability (CNVD-2015-05549)

Apple OS X is a BSD-based operating system distributed by Apple. A memory corruption vulnerability exists in Apple OS X IOFireWireFamily, which could be exploited by a local user to execute arbitrary code with system privileges...

Apple OS X QuickTime memory corruption vulnerability (CNVD-2015-05382)

Apple OS X is a BSD-based operating system distributed by Apple. A memory corruption vulnerability exists in Apple OS X QuickTime Handling Special Files, which allows attackers to construct malicious files that can be tricked into parsing by the user, crashing the application or executing arbitra...

CVE-2015-3765

QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted file, a different vulnerability than CVE-2015-3779, CVE-2015-3788, CVE-2015-3789, CVE-2015-3790, CVE-2015-3791,...

The vulnerability of the Internet Explorer browser, which allows a hacker to execute arbitrary code or trigger a service failure.

The vulnerability of the Internet Explorer browser arises due to an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by using a specially crafted web page...

CVE-2015-2977

Webservice-DIC yoyakuv41 allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via unspecified vectors...

The vulnerability of the Adobe Acrobat DC PDF editing program allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Acrobat DC PDF editing program arises due to an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...