Xerces DTDScanner Memory Misreference Vulnerability

Xerces is the United States Apache Apache Software Foundation of an open source XML document parsing project , but also an open source XML syntax parser , it is currently available in a variety of languages , including JAVA, C++, PERL, COM and so on. A memory misreference vulnerability exists in...

The vulnerability of the Network Security Services library allows a perpetrator to trigger a service failure or exert other effects.

The vulnerability of the ssl3HandleECDHServerKeyExchange function in the Network Security Services library is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause service failures or other effects when establishing an SSL connection...

Microsoft Internet Explorer Memory Error Reference Remote Code Execution Vulnerability (CNVD-2016-01536)

Internet Explorer is a web browser from Microsoft. A vulnerability in the handling of "range" type HTML input elements in some versions of Internet Explorer can be exploited by an attacker with a malicious web page or file to reuse a freed memory structure to execute arbitrary code in the context...

FreeBSD : NSS -- multiple vulnerabilities (c4292768-5273-4f17-a267-c5fe35125ce4)

Mozilla Foundation reports : Security researcher Francis Gabriel reported a heap-based buffer overflow in the way the Network Security Services NSS libraries parsed certain ASN.1 structures. An attacker could create a specially crafted certificate which, when parsed by NSS, would cause it to cras...

Adobe Flash MPEG-4 Memory Error Referencing Remote Code Execution Vulnerability (CNVD-2016-01526)

Adobe FlashPlayer is a multimedia program player. Adobe Flash has a security vulnerability in the MPEG-4 parsing that can force the reuse of a freed dangling pointer. An attacker can exploit this vulnerability to execute arbitrary code in the context of the current process...

The vulnerabilities of PDF viewing and editing programs like Adobe Reader, Document Cloud, Adobe Reader, and Adobe Acrobat allow attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs like Adobe Reader, Document Cloud, Adobe Reader, and Adobe Acrobat lies in the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely using a multi-level PDF document...

PT-2015-3036

Name of the Vulnerable Software and Affected Versions Adobe Integrated Runtime and Flash Player affected versions not specified Description The issue is related to the use of memory after it has been freed, which can be exploited by a remote attacker to execute arbitrary code. Recommendations At...

PT-2015-3033

Name of the Vulnerable Software and Affected Versions Adobe Integrated Runtime and Flash Player affected versions not specified Description The issue is related to the use of memory after it has been freed, which can be exploited by a remote attacker to execute arbitrary code. Recommendations At...

PT-2015-3152

Name of the Vulnerable Software and Affected Versions Adobe Flash Player affected versions not specified Adobe Integrated Runtime affected versions not specified Description The issue is related to the use of memory after it has been freed, which can be exploited by a remote attacker to execute...

The vulnerability of the Flash Player and Adobe Integrated Runtime software allows a perpetrator to execute arbitrary code.

The vulnerability of the Flash Player and Adobe Integrated Runtime software-related programs is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted Video object...

JScript 5.7 RegExpBase::FBadHeader Use-After-Free

Recompiling the regular expression pattern during a replace can cause the code to reuse a freed string, but only if the string is freed from the cache by allocating and freeing a number of strings of certain size. CVE-2015-2482: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2482...

OracleVM 3.3 : openldap (OVMSA-2015-0123)

The remote OracleVM system is missing necessary patches to address critical security updates : - CVE-2015-6908 openldap: bergetnext denial of service vulnerability 1263171 - fix: nslcd segfaults due to incorrect mutex initialization 1144294 - fix: Updating openldap deletes database if slapd.conf ...

Microsoft Windows Kernel - 'bGetRealizedBrush' Use-After-Free (MS15-097)

Source: https://code.google.com/p/google-security-research/issues/detail?id=458 --- The attached testcase crashes Win 7 with Special Pool on win32k while accessing freed memory in bGetRealizedBrush. --- Proof of Concept:...

PT-2015-1742

Name of the Vulnerable Software and Affected Versions Adobe Integrated Runtime and Flash Player affected versions not specified Description The issue is related to the use of memory after it has been freed, which can be exploited by a remote attacker to execute arbitrary code. Recommendations At...

PT-2015-1727

Name of the Vulnerable Software and Affected Versions Adobe Integrated Runtime and Flash Player affected versions not specified Description The issue is related to the use of memory after it has been freed, which can be exploited by a remote attacker to execute arbitrary code. Recommendations At...

PT-2015-1731

Name of the Vulnerable Software and Affected Versions Adobe Integrated Runtime versions affected versions not specified Adobe Flash Player versions affected versions not specified Description The issue is related to the use of memory after it has been freed, which can be exploited by a remote...

Microsoft Internet Explorer CTreePos Memory Error References Remote Code Execution Vulnerability

Internet Explorer is a web browser from Microsoft. An arbitrary code execution vulnerability exists in the implementation of Microsoft Internet Explorer when handling CTreePos objects. A remote attacker can exploit this vulnerability by manipulating document elements to reuse a freed hanging...

Microsoft Internet Explorer CCurrentStyle Memory Error References Remote Code Execution Vulnerability

Internet Explorer is a web browser from Microsoft. An arbitrary code execution vulnerability exists in the implementation of Microsoft Internet Explorer when handling CCurrentStyle objects. A remote attacker can exploit this vulnerability by manipulating document elements to reuse a freed hanging...

Microsoft Office Excel table Tag Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to read freed memory on vulnerable installations of Microsoft Office Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within processing of...

The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code

The vulnerability of the Flash Player software is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...