Lucene search
+L

3738 matches found

NVD
NVD
added 2014/09/03 10:55 a.m.22 views

CVE-2014-1563

Use-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via an SVG animation...

10CVSS7.5AI score0.05801EPSS
SaveExploits0References13
Prion
Prion
added 2014/09/03 10:55 a.m.28 views

Design/Logic Flaw

Use-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via an SVG animation...

10CVSS8.1AI score0.05801EPSS
SaveExploits0References13Affected Software6
CVE
CVE
added 2014/09/03 10:00 a.m.144 views

CVE-2014-1563

Mozilla Firefox before 32.0 (and ESR 31.x before 31.1) and Thunderbird 31.x before 31.1 are affected by a use-after-free in mozilla::DOMSVGLength::GetTearOff triggered by an SVG animation with DOM interactions, enabling remote code execution or a denial of service via heap memory corruption. Upgr...

10CVSS9.5AI score0.05801EPSS
SaveExploits0References13Affected Software2
Cvelist
Cvelist
added 2014/09/03 10:00 a.m.39 views

CVE-2014-1563

Use-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via an SVG animation...

9.6AI score0.05801EPSS
SaveExploits0References13
UbuntuCve
UbuntuCve
added 2014/09/02 12:00 a.m.38 views

CVE-2014-1563

Use-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via an SVG animation...

10CVSS7AI score0.05801EPSS
SaveExploits0References4
NVD
NVD
added 2014/08/06 6:55 p.m.24 views

CVE-2014-3560

NetBIOS name services daemon nmbd in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows remote attackers to execute arbitrary code via unspecified vectors that modify heap memory, involving a sizeof operation on an incorrect variable in the unstrcpy macro in stringwrappers.h...

7.9CVSS7.5AI score0.56378EPSS
SaveExploits0References14
OSV
OSV
added 2014/08/06 6:55 p.m.12 views

CVE-2014-3560

NetBIOS name services daemon nmbd in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows remote attackers to execute arbitrary code via unspecified vectors that modify heap memory, involving a sizeof operation on an incorrect variable in the unstrcpy macro in stringwrappers.h...

7.5AI score
SaveExploits0References14
Cvelist
Cvelist
added 2014/08/06 6:00 p.m.46 views

CVE-2014-3560

NetBIOS name services daemon nmbd in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows remote attackers to execute arbitrary code via unspecified vectors that modify heap memory, involving a sizeof operation on an incorrect variable in the unstrcpy macro in stringwrappers.h...

7.3AI score0.56378EPSS
SaveExploits0References14
Debian CVE
Debian CVE
added 2014/08/06 6:00 p.m.29 views

CVE-2014-3560

NetBIOS name services daemon nmbd in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows remote attackers to execute arbitrary code via unspecified vectors that modify heap memory, involving a sizeof operation on an incorrect variable in the unstrcpy macro in stringwrappers.h...

7.9CVSS7.4AI score0.56378EPSS
SaveExploits0
CVE
CVE
added 2014/08/06 6:00 p.m.187 views

CVE-2014-3560

CVE-2014-3560 affects Samba’s NetBIOS name service daemon (nmbd). The issue lies in a heap-memory corruption caused by a sizeof operation on an incorrect variable in the unstrcpy macro in string_wrappers.h, impacting Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11. This enables remote code exec...

7.9CVSS7.5AI score0.56378EPSS
SaveExploits0References14Affected Software2
OSV
OSV
added 2014/08/01 12:00 a.m.20 views

UBUNTU-CVE-2014-3560

NetBIOS name services daemon nmbd in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows remote attackers to execute arbitrary code via unspecified vectors that modify heap memory, involving a sizeof operation on an incorrect variable in the unstrcpy macro in stringwrappers.h...

7.9CVSS7.6AI score0.56378EPSS
SaveExploits0References4
Veeam
Veeam
added 2014/07/29 12:00 a.m.64 views

Job Fails to Start Due to Timeout Caused by Desktop Heap Allocation Failure

Article Applicability The timeout error displayed in Veeam Backup & Replication can be caused by various factors. This article explicitly addresses a scenario where the Windows OS experiences a 'heap allocation' failure. Please note that the solution provided in this article is only applicable if...

6.8AI score
SaveExploits0
NVD
NVD
added 2014/07/23 11:12 a.m.24 views

CVE-2014-1550

Use-after-free vulnerability in the MediaInputPort class in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption by leveraging incorrect Web Audio control-message ordering...

10CVSS7.5AI score0.04904EPSS
SaveExploits0References8
Prion
Prion
added 2014/07/23 11:12 a.m.22 views

Design/Logic Flaw

Use-after-free vulnerability in the MediaInputPort class in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption by leveraging incorrect Web Audio control-message ordering...

10CVSS8.1AI score0.04904EPSS
SaveExploits0References8Affected Software2
CVE
CVE
added 2014/07/23 10:00 a.m.146 views

CVE-2014-1550

CVE-2014-1550 is a use-after-free in Mozilla Firefox (before 31.0) and Thunderbird (before 31.0) affecting the MediaInputPort class. The underlying issue is a heap memory corruption caused by incorrect Web Audio control-message ordering, which could allow a remote attacker to execute arbitrary co...

10CVSS9.5AI score0.04904EPSS
SaveExploits0References8Affected Software2
Cvelist
Cvelist
added 2014/07/23 10:00 a.m.38 views

CVE-2014-1550

Use-after-free vulnerability in the MediaInputPort class in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption by leveraging incorrect Web Audio control-message ordering...

9.6AI score0.04904EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
added 2014/07/22 12:00 a.m.34 views

CVE-2014-1550

Use-after-free vulnerability in the MediaInputPort class in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption by leveraging incorrect Web Audio control-message ordering...

10CVSS7AI score0.04904EPSS
SaveExploits0References4
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.18 views

Interaction SIP Proxy 3.0 - Remote Heap Corruption Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16001/info Interaction SIP Proxy is susceptible to a remote denial of service vulnerability. This issue is due to a failure of the application to properly bounds check user-supplied input data, resulting in a heap memory...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.24 views

CVS 1.11.x Directory Request Double Free Heap Corruption Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6650/info CVS is prone to a double free vulnerability in the Directory requests. An attacker may potentially take advantage of this issue to cause heap memory to be corrupted with attacker-supplied values, which may resul...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.28 views

File(1) <= 4.13 Command File_PrintF Integer Underflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/23021/info The file1 command is prone to an integer-underflow vulnerability because the command fails to adequately handle user-supplied data. An attacker can leverage this issue to corrupt heap memory and execute arbitra...

7.1AI score
SaveExploits0
Rows per page
Query Builder