9843 matches found
ALPINE-CVE-2017-11406
In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the DOCSIS dissector could go into an infinite loop. This was addressed in plugins/docsis/packet-docsis.c by rejecting invalid Frame Control parameter values...
CVE-2017-11406
In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the DOCSIS dissector could go into an infinite loop. This was addressed in plugins/docsis/packet-docsis.c by rejecting invalid Frame Control parameter values...
CVE-2017-11406: Loop with Unreachable Exit Condition
In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the DOCSIS dissector could go into an infinite loop. This was addressed in plugins/docsis/packet-docsis.c by rejecting invalid Frame Control parameter values...
PT-2017-11987
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.0 through 2.0.13 Wireshark versions 2.2.0 through 2.2.7 Description The issue is related to the DOCSIS dissector in Wireshark, which could enter an infinite loop due to invalid Frame Control parameter values. This was...
PT-2017-4236
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.12.3 Description The issue is related to a buffer overflow in the brcmf cfg80211 mgmt tx function. This can be exploited to cause a denial of service, resulting in a system crash, or potentially to gain...
bluetoad.com XSS vulnerability
Vulnerable URL: http://www.bluetoad.com/publication/frame.php?i=376178==1"...
WakaTime: Clickjacking on authorized page https://wakatime.com/share/embed
Hii, https://wakatime.com/share/embed is vulnerabel to clickjaking. Description: I found the resource on https://wakatime.com/share/embed, which can be vulnerable to the Clickjacking. Impact The resource without X-Frame-Options potentially vulnerable to the Clickjacking. The vulnerability exist...
FFmpeg Memory Limit Recording
The vulnerability of the FFmpeg multimedia library arises from an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a malicious actor to perform write operations beyond the memory boundaries, related to the decodeframecommon function in libavcodec/pngdec.c...
UBUNTU-CVE-2017-9996
The cdxldecodeframe function in libavcodec/cdxl.c in FFmpeg 2.8.x before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 does not exclude the CHUNKY format, which allows remote attackers to cause a denial of service heap-based buffer overflow and...
ALPINE-CVE-2017-9996
The cdxldecodeframe function in libavcodec/cdxl.c in FFmpeg 2.8.x before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 does not exclude the CHUNKY format, which allows remote attackers to cause a denial of service heap-based buffer overflow and...
PT-2017-19324
Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.8.12 FFmpeg versions 3.0.x prior to 3.0.8 FFmpeg versions 3.1.x prior to 3.1.8 FFmpeg versions 3.2.x prior to 3.2.5 FFmpeg versions 3.3.x prior to 3.3.1 Description A heap-based buffer overflow issue exists in the xw...
PT-2017-19329
Name of the Vulnerable Software and Affected Versions FFmpeg versions 2.8.x through 2.8.11 FFmpeg versions 3.0.x through 3.0.7 FFmpeg versions 3.1.x through 3.1.7 FFmpeg versions 3.2.x through 3.2.4 FFmpeg versions 3.3.x through 3.3.0 Description The issue is related to the cdxl decode frame...
June 27, 2017—KB4032695 (OS Build 10240.17446)
None None...
June 27, 2017—KB4022723 (OS Build 14393.1378)
None None...
June 27, 2017—KB4022168 (Preview of Monthly Rollup)
None None...
June 27, 2017—KB4032693 (OS Build 10586.965)
None None...
Freeware Advanced Audio Coder 'faacEncOpen' Function Denial of Service Vulnerability
Freeware Advanced Audio Coder FAAC is a free advanced audio coder. A security vulnerability exists in the 'faacEncOpen' function in the libfaac/frame.c file in FAAC version 1.28. A remote attacker can exploit this vulnerability to cause a denial of service invalid memory read and application cras...
Foscam IP Video Camera Stack Buffer Overflow Vulnerability
Foscam IP Video Camera is a wireless HD IP camera from Foscam China. A stack buffer overflow vulnerability exists in the web management interface in the Foscam IP Video Camera. An attacker can exploit this vulnerability by sending an HTTP request to the device to overwrite data on an arbitrary...
Microsoft Windows - 'win32k!NtGdiExtGetObjectW' Kernel Stack Memory Disclosure
/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1178 We have discovered that it is possible to disclose portions of uninitialized kernel stack memory in Windows 7-10 through the win32k!NtGdiExtGetObjectW system call accessible via a documented GetObject API function to user-mo...
CVE-2017-2805
An exploitable stack-based buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera. A specially crafted http request can cause a stack-based buffer overflow resulting in overwriting arbitrary data on the stack frame. An attacker can simply send ...