CVE-2016-9630

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service global buffer overflow and crash via a crafted HTML page...

CVE-2016-9632

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service global buffer overflow and crash via a crafted HTML page...

CVE-2016-9632

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service global buffer overflow and crash via a crafted HTML page...

libass: Global-buffer-overflow in ass_strtod

Project: https://github.com/libass/libass.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5423111939817472 Target: libass Fuzzer: libFuzzerlibassfuzzer Fuzzer binary: libassfuzzer Job Type: libfuzzerasanlibass Platform Id: linux Crash Type: Global-buffer-overflow READ 8...

libtsm: Global-buffer-overflow in vte_write_debug

Project: git://people.freedesktop.org/dvdhrm/libtsm Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5429041452548096 Target: libtsm Fuzzer: libFuzzerlibtsmfuzzer Fuzzer binary: libtsmfuzzer Job Type: libfuzzerasanlibtsm Platform Id: linux Crash Type: Global-buffer-overflow...

libtsm: Global-buffer-overflow in vte_write_debug

Project: git://people.freedesktop.org/dvdhrm/libtsm Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5397754897498112 Target: libtsm Fuzzer: libFuzzerlibtsmfuzzer Fuzzer binary: libtsmfuzzer Job Type: libfuzzerasanlibtsm Platform Id: linux Crash Type: Global-buffer-overflow...

NVIDIA Driver - Missing Bounds Check in Escape 0x70000d5

NVIDIA Driver - Missing Bounds Check in Escape 0x70000d5 Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=944 The DxgkDdiEscape handler for 0x70000d5 lacks bounds checks: ... if gsavedsize escape-size = gsavedsize; if unsigned intgsavedsize 0 do v5 = v2++; escape-datav5 =...

NVIDIA Driver - Missing Bounds Check in Escape 0x70000d5

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=944 The DxgkDdiEscape handler for 0x70000d5 lacks bounds checks: ... if gsavedsize escape-size = gsavedsize; if unsigned intgsavedsize 0 do v5 = v2++; escape-datav5 = globalarrayv5 + 77; while v2 size 0 do ii = i++; globalarrayii +...

Global-buffer-overflow in ass_strtod

Project: https://github.com/libass/libass.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5993566283235328 Fuzzer: libFuzzerlibassfuzzer Job Type: libfuzzerasanlibass Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address: 0x000000843720 Crash State:...

FreeBSD : mozilla -- multiple vulnerabilities (2c57c47e-8bb3-4694-83c8-9fc3abad3964)

Mozilla Foundation reports : CVE-2016-2827 - Out-of-bounds read in mozilla::net::IsValidReferrerPolicy low CVE-2016-5256 - Memory safety bugs fixed in Firefox 49 critical CVE-2016-5257 - Memory safety bugs fixed in Firefox 49 and Firefox ESR 45.4 critical CVE-2016-5270 - Heap-buffer-overflow in...

mozilla -- multiple vulnerabilities

Mozilla Foundation reports: CVE-2016-2827 - Out-of-bounds read in mozilla::net::IsValidReferrerPolicy low CVE-2016-5256 - Memory safety bugs fixed in Firefox 49 critical CVE-2016-5257 - Memory safety bugs fixed in Firefox 49 and Firefox ESR 45.4 critical CVE-2016-5270 - Heap-buffer-overflow in...

Wireshark - dissect_oml_attrs Static Out-of-Bounds Read

Exploit for multiple platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=656 The following crash due to an out-of-bounds read from static memory can be observed in an ASAN build of Wireshark current git master, by feeding a malformed file to...

Wireshark - add_ff_vht_compressed_beamforming_report Static Out-of-Bounds Read

Wireshark - addffvhtcompressedbeamformingreport Static Out-of-Bounds Read Source: https://code.google.com/p/google-security-research/issues/detail?id=654 The following crash due to an out-of-bounds read from static memory can be observed in an ASAN build of Wireshark current git master, by feedin...

Wireshark - dissect_ber_set Static Out-of-Bounds Read

Wireshark - dissectberset Static Out-of-Bounds Read Source: https://code.google.com/p/google-security-research/issues/detail?id=648 The following crash due to a static out-of-bounds read can be observed in an ASAN build of Wireshark current git master, by feeding a malformed file to tshark "$...

Wireshark - dissect_ber_set Static Out-of-Bounds Read

Exploit for multiple platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=648 The following crash due to a static out-of-bounds read can be observed in an ASAN build of Wireshark current git master, by feeding a malformed file to tshark "$...

Wireshark - hiqnet_display_data Static Out-of-Bounds Read

Wireshark - hiqnetdisplaydata Static Out-of-Bounds Read Source: https://code.google.com/p/google-security-research/issues/detail?id=695 The following crash due to a static out-of-bounds read can be observed in an ASAN build of Wireshark current git master, by feeding a malformed file to tshark "$...

Wireshark - my_dgt_tbcd_unpack Static Buffer Overflow

Exploit for multiple platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=649 The following crash due to a static buffer overflow can be observed in an ASAN build of Wireshark current git master, by feeding a malformed file to tshark "$ ./tsha...

Wireshark - ascend_seek Static Out-of-Bounds Read

Wireshark - ascendseek Static Out-of-Bounds Read Source: https://code.google.com/p/google-security-research/issues/detail?id=646 The following crash due to a static out-of-bounds read can be observed in an ASAN build of Wireshark current git master, by feeding a malformed file to tshark "$ ./tsha...

Wireshark - dissct_rsl_ipaccess_msg Static Out-of-Bounds Read

Wireshark - dissctrslipaccessmsg Static Out-of-Bounds Read Source: https://code.google.com/p/google-security-research/issues/detail?id=660 The following crash due to a static out-of-bounds read can be observed in an ASAN build of Wireshark current git master, by feeding a malformed file to tshark...

Wireshark - dissect_zcl_pwr_prof_pwrprofstatersp Static Out-of-Bounds Read

Wireshark - dissectzclpwrprofpwrprofstatersp Static Out-of-Bounds Read Source: https://code.google.com/p/google-security-research/issues/detail?id=661 The following crash due to a static out-of-bounds read can be observed in an ASAN build of Wireshark current git master, by feeding a malformed fi...