1421 matches found
CVE-2016-9941
Heap-based buffer overflow in rfbproto.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a denial of service application crash or possibly execute arbitrary code via a crafted FramebufferUpdate message containing a subrectangle outside of the client drawing area...
FreeBSD -- bhyve - privilege escalation vulnerability
Problem Description: An unchecked array reference in the VGA device emulation code could potentially allow guests access to the heap of the bhyve process. Since the bhyve process is running as root, this may allow guests to obtain full control of the hosts they are running on. Impact: For bhyve...
CVE-2016-4654
IOMobileFrameBuffer in Apple iOS before 9.3.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...
Google Chrome Compromise Protected Information
The vulnerability exists in the WebGL implementation of Google Chrome due to improper interaction between calls to clear and the state of the draw buffer. Exploiting this vulnerability allows malicious actors to trigger a service failure reading uninitialized memory by using a specially crafted...
SUSE: Security Advisory for xorg-x11-server (SUSE-SU-2015:0045-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Apple iOS IOMobileFrameBuffer Memory Corruption Vulnerability
Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in Apple iOS IOMobileFrameBuffer, which allows local malicious attackers to exploit the vulnerability to execute arbitrary code...
Design/Logic Flaw
CoreAnimation in Apple iOS before 9 allows attackers to bypass intended IOSurface restrictions and obtain screen-framebuffer access via a crafted background app...
CVE-2015-5880
CoreAnimation in Apple iOS before 9 allows attackers to bypass intended IOSurface restrictions and obtain screen-framebuffer access via a crafted background app...
CVE-2015-5880
CVE-2015-5880 affects Apple iOS CoreAnimation, where a background app could bypass IOSurface restrictions and obtain screen-framebuffer access. The root cause is insufficient access control on IOSurfaces prior to the fix, enabling potential exposure of screen content. Public details in connected ...
CVE-2015-5880: Exposure of Sensitive Information to an Unauthorized Actor
CoreAnimation in Apple iOS before 9 allows attackers to bypass intended IOSurface restrictions and obtain screen-framebuffer access via a crafted background app...
PT-2015-2119
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue is related to a lack of protection for system data in the CoreAnimation component of the iOS operating system. This can be exploited by a remote attacker using a specially crafted background...
OpenSUSE Data Compromise
The vulnerability of the xorg-x11-Xvfb package in the operating system openSUSE can lead to violations of privacy, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...
kernel: integer overflow in fb_mmap
An integer overflow flaw was found in the way the Linux kernel's Frame Buffer device implementation mapped kernel memory to user space via the mmap syscall. A local user able to access a frame buffer device file /dev/fb could possibly use this flaw to escalate their privileges on the system...
kernel: integer overflow in fb_mmap
An integer overflow flaw was found in the way the Linux kernel's Frame Buffer device implementation mapped kernel memory to user space via the mmap syscall. A local user able to access a frame buffer device file /dev/fb could possibly use this flaw to escalate their privileges on the system...
DEBIAN-CVE-2014-6052
The HandleRFBServerMessage function in libvncclient/rfbproto.c in LibVNCServer 0.9.9 and earlier does not check certain malloc return values, which allows remote VNC servers to cause a denial of service application crash or possibly execute arbitrary code by specifying a large screen size in a 1...
libvncserver: NULL pointer dereference flaw in framebuffer setup
A NULL pointer dereference flaw was found in LibVNCServer's framebuffer setup. A malicious VNC server could use this flaw to cause a VNC client to crash...
UBUNTU-CVE-2014-6052
The HandleRFBServerMessage function in libvncclient/rfbproto.c in LibVNCServer 0.9.9 and earlier does not check certain malloc return values, which allows remote VNC servers to cause a denial of service application crash or possibly execute arbitrary code by specifying a large screen size in a 1...
PT-2014-1380
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 37.0.2062.94 Description The issue is related to the WebGL implementation in Google Chrome, where clear calls do not interact properly with the state of a draw buffer. This allows remote attackers to cause a...
[SECURITY] Fedora 20 Update: tpp-1.3.1-17.fc20
tpp stands for text presentation program and is a ncurses-based presentation tool. The presentation can be written with your favorite editor in a simple description format and then shown on any text terminal that is supported by ncurses - ranging from an old VT100 to the Linux framebuffer to an...
[SECURITY] Fedora 19 Update: tpp-1.3.1-17.fc19
tpp stands for text presentation program and is a ncurses-based presentation tool. The presentation can be written with your favorite editor in a simple description format and then shown on any text terminal that is supported by ncurses - ranging from an old VT100 to the Linux framebuffer to an...