Ubiquiti Inc.: Buffer Overflow in PHP of the AirMax Products

Vulnerability The function static int ubnormalizefilenamechar filename implemented by the patch 430-smart-post-upload.patch in the file uploadbuffer.c on the SDK.UBNT.v5.5 have the following code: static int ubnormalizefilenamechar filename char fwdslash; char backslash; sizet size; / Some commen...

Paintshop Pro X7 - .gif Conversion Heap Memory Corruption LZWMinimumCodeSize (Denial of Service)

Paintshop Pro X7 - .gif Conversion Heap Memory Corruption LZWMinimumCodeSize Denial of Service Application: Paintshop Pro X7 GIF Conversion Heap Memory Corruption Vulnerabilities LZWMinimumCodeSize Platforms: Windows Versions: The vulnerability is confirmed in version Paintshop Prox X7, Other...

Paintshop Pro X7 - '.gif' Conversion Heap Memory Corruption 'LZWMinimumCodeSize' (Denial of Service)

Application: Paintshop Pro X7 GIF Conversion Heap Memory Corruption Vulnerabilities LZWMinimumCodeSize Platforms: Windows Versions: The vulnerability is confirmed in version Paintshop Prox X7, Other versions may also be affected. Secunia: PRL: 2015-06 Author: Francis Provencher Protek Research...

CUPS < 2.0.3 Multiple Vulnerabilities

According to its banner, the CUPS printer service running on the remote host is a version prior to 2.0.3. It is, therefore, potentially affected by the following vulnerabilities : - A privilege escalation vulnerability exists due to a flaw in cupsd when handling printer job request errors. An...

Adobe Flash Player ASLR Protection Bypass Vulnerability

Adobe Flash Player is a Flash file handling program. A security vulnerability exists in Adobe Flash Player that allows remote attackers to perform unauthorized operations by exploiting a vulnerability that bypasses the memory address randomization restriction in Flash heap memory. 64 of windows 7...

cups: multiple issues

CVE-2015-1158 arbitrary code execution, privilege escalation An issue with how localized strings are handled in cupsd allows a reference counter to over-decrement when handling certain print job request errors. As a result, an attacker can prematurely free an arbitrary string of global scope,...

chromium-browser: Use-after-free in WebAudio.

Use-after-free vulnerability in content/renderer/media/webaudiocapturersource.cc in the WebAudio implementation in Google Chrome before 43.0.2357.65 allows remote attackers to cause a denial of service heap memory corruption or possibly have unspecified other impact by leveraging improper handlin...

CVE-2015-1255

Use-after-free vulnerability in content/renderer/media/webaudiocapturersource.cc in the WebAudio implementation in Google Chrome before 43.0.2357.65 allows remote attackers to cause a denial of service heap memory corruption or possibly have unspecified other impact by leveraging improper handlin...

CVE-2015-1255

CVE-2015-1255 affects Google Chrome up to version 43.0.2357.65 in the WebAudio capturer path (content/renderer/media/webaudio_capturer_source.cc). The vulnerability is a use-after-free that can enable a remote attacker to cause a denial of service via heap memory corruption, triggered by improper...

CVE-2015-1255

Removed by vendor...

CVE-2015-1255

Use-after-free vulnerability in content/renderer/media/webaudiocapturersource.cc in the WebAudio implementation in Google Chrome before 43.0.2357.65 allows remote attackers to cause a denial of service heap memory corruption or possibly have unspecified other impact by leveraging improper handlin...

CVE-2015-1255

Use-after-free vulnerability in content/renderer/media/webaudiocapturersource.cc in the WebAudio implementation in Google Chrome before 43.0.2357.65 allows remote attackers to cause a denial of service heap memory corruption or possibly have unspecified other impact by leveraging improper handlin...

F5 Networks BIG-IP : PHP vulnerability (SOL15169)

ext/xml/xml.c in PHP before 5.3.27 does not properly consider parsing depth, which allows remote attackers to cause a denial of service heap memory corruption or possibly have unspecified other impact via a crafted document that is processed by the xmlparseintostruct function. C Tenable Network...

CVE-2015-2713

Use-after-free vulnerability in the SetBreaks function in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via a document containing crafted text in...

Race condition

Race condition in the nsThreadManager::RegisterCurrentThread function in Mozilla Firefox before 38.0 allows remote attackers to execute arbitrary code or cause a denial of service use-after-free and heap memory corruption by leveraging improper Media Decoder Thread creation at the time of a...

CVE-2015-2713

CVE-2015-2713 is a use-after-free in Mozilla Firefox (SetBreaks) affecting Firefox before 38.0, Firefox ESR before 31.7, and Thunderbird before 31.7. An attacker could craft a document with specific CSS tokens for vertical text to cause heap memory corruption, enabling remote code execution or a ...

CVE-2015-2715

CVE-2015-2715 describes a race condition in Mozilla Firefox prior to 38.0 related to nsThreadManager::RegisterCurrentThread during shutdown when Media Decoder threads are created. This leads to use-after-free and heap memory corruption, enabling remote attackers to potentially execute arbitrary c...

CVE-2015-2713

Use-after-free vulnerability in the SetBreaks function in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via a document containing crafted text in...

CVE-2015-2713

Use-after-free vulnerability in the SetBreaks function in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via a document containing crafted text in...

openSUSE Security Update : dnsmasq (openSUSE-2015-359)

The DNS server dnsmasq was updated to fix one security issue. The following vulnerability was fixed : - CVE-2015-3294: A remote unauthenticated attacker could have caused a denial of service DoS or read heap memory, potentially disclosing information such as performed DNS queries or encryption...