5374 matches found
CVE-2013-3870
CVE-2013-3870 is a remote-code-execution vulnerability in Microsoft Outlook caused by a double-free in the S/MIME certificate parsing path. Affects Outlook 2007 SP3 and Outlook 2010 SP1/SP2 (Office/Outlook components). Exploitation could occur when processing specially crafted S/MIME email messag...
CVE-2013-3862
CVE-2013-3862 is a local privilege-escalation flaw in the Windows Service Control Manager (SCM) on Windows 7 and Windows Server 2008 R2 SP1. The root cause is a double-free in handling service descriptions within services.exe, allowing an attacker with local access to execute arbitrary code and g...
MS13-069 Microsoft Internet Explorer CCaret Use-After-Free
This module exploits a use-after-free vulnerability found in Internet Explorer, specifically in how the browser handles the caret text cursor object. In IE's standards mode, the caret handling's vulnerable state can be triggered by first setting up an editable page with an input field, and then w...
Amazon Linux AMI : kernel (ALAS-2013-200)
Heap-based buffer overflow in the tg3readvpd function in drivers/net/ethernet/broadcom/tg3.c in the Linux kernel before 3.8.6 allows physically proximate attackers to cause a denial of service system crash or possibly execute arbitrary code via crafted firmware that specifies a long string in the...
Mozilla Firefox onreadystatechange Event Use After Free
Added: 08/22/2013 CVE: CVE-2013-1690 BID: 60778 OSVDB: 94584 Background Firefox is a freely available web browser for multiple platforms including Windows, Linux, and Mac OS. Problem A use-after-free vulnerability is triggered when handling onreadystatechange events and Event or Page reloads at t...
Mozilla Firefox onreadystatechange Event Use After Free
Added: 08/22/2013 CVE: CVE-2013-1690 BID: 60778 OSVDB: 94584 Background Firefox is a freely available web browser for multiple platforms including Windows, Linux, and Mac OS. Problem A use-after-free vulnerability is triggered when handling onreadystatechange events and Event or Page reloads at t...
CVE-2013-2904
Use-after-free vulnerability in the Document::finishedParsing function in core/dom/Document.cpp in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via an onload event that changes an IFRAME element...
Design/Logic Flaw
Use-after-free vulnerability in the HTMLMediaElement::didMoveToNewDocument function in core/html/HTMLMediaElement.cpp in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving moving...
CVE-2013-2902
Use-after-free vulnerability in the XSLT ProcessingInstruction implementation in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to an applyXSLTransform call involving 1 an HTML...
Design/Logic Flaw
Use-after-free vulnerability in the Document::finishedParsing function in core/dom/Document.cpp in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via an onload event that changes an IFRAME element...
CVE-2013-2903
CVE-2013-2903 is a use-after-free in Blink’s HTMLMediaElement::didMoveToNewDocument. Affected software: Google Chrome (Blink) prior to 29.0.1547.57. Impact stated: remote attackers could cause a denial of service or other unspecified effects by moving audio/video elements between documents. Publi...
CVE-2013-2904
Removed by vendor...
Microsoft Internet Explorer CMarkup Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
CVE-2013-1704
CVE-2013-1704 : A use-after-free in Mozilla’s DOM path occurs in nsINode::GetParentNode during a SetBody mutation event, enabling remote attackers to cause memory corruption and possibly execute arbitrary code or crash the app. The connected advisory MFSA2013-64 confirms the vulnerability in Fire...
Design/Logic Flaw
Use-after-free vulnerability in the DOM implementation in Google Chrome before 28.0.1500.95 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to improper tracking of which document owns an Attr object...
CVE-2013-2885
Use-after-free vulnerability in Google Chrome before 28.0.1500.95 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to not properly considering focus during the processing of JavaScript events in the presence of a multiple-fields...
CVE-2013-4922
CVE-2013-4922 is a double free vulnerability in the Wireshark DCOM ISystemActivator dissector (function dissect_dcom_sysact.c) affecting Wireshark 1.10.x before 1.10.1, leading to denial of service via crafted packets. Remediation: upgrade to Wireshark 1.10.1 or apply vendor patches; affected adv...
Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2012-2043)
The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-2043 advisory. - hugepages: fix use after free bug in 'quota' handling Orabug: 15845276 CVE-2012-2133 - udf: Fortify loading of sparing table Orabug: 15845302...
Oracle Linux 5 : krb5 (ELSA-2010-0343)
The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0343 advisory. - add upstream patch to fix a few use-after-free bugs, including one in kadmind CVE-2010-0629, 578185 Tenable has extracted the preceding description block...