Apple macOS 10.12.1 iOS Kernel - host_self_trap Use-After-Free

Apple macOS 10.12.1 iOS Kernel - hostselftrap Use-After-Free / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1034 The task struct has a lock itklockdata, taken via the itklock macros which is supposed to protect the task-itk ports. The hostselftrap mach trap accesses...

DEBIAN-CVE-2016-7905

The readgab2sub function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service NULL pointer used via a crafted AVI file...

chromium-browser: heap overflow in pdfium

Heap-based buffer overflow in the opjdwtinterleavev function in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to execute arbitrary code via crafted coordinate values in JPEG 2000 data...

DEBIAN-CVE-2016-5157

Heap-based buffer overflow in the opjdwtinterleavev function in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to execute arbitrary code via crafted coordinate values in JPEG 2000 data...

OpenJPEG opj_dwt_interleave_v heap overflow vulnerability

OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability exists in the opjdwtinterleavev function of OpenJPEG, which allows remote attackers to construct specially crafted JPEG 2000 images to trigger a heap overflow vulnerability that can be exploited for arbitrary code...

SUSE SLED12 / SLES12 Security Update : ntp (SUSE-SU-2016:1568-1)

ntp was updated to version 4.2.8p8 to fix 17 security issues. These security issues were fixed : - CVE-2016-4956: Broadcast interleave bsc982068. - CVE-2016-2518: Crafted addpeer with hmode 7 causes array wraparound with MATCHASSOC bsc977457. - CVE-2016-2519: ctlgetitem return value not always...

Security Advisory 0019

Security Advisory 0019 PDF Date: April 25th, 2018 Version: 1.1 Revision| Date| Changes ---|---|--- 1.0 | May 3rd, 2016 | Initial release 1.1 | April 25th, 2018 | Updated vulnerability information for CVE-2016-1549 Arista Products vulnerability report for security vulnerabilities announcement from...

Memory Corruption Vulnerability in PhotoLine's Handling of AVI Files

PhotoLine is a professional image editing software from Germany. A memory corruption vulnerability exists in the software's handling of the AVI format, which can be exploited by an attacker to construct malformed AVI files that can crash the program and cause a denial of service condition...

Microsoft Windows AVI Processing Malformed Header Code Execution (MS09-038) - Ver2 (CVE-2009-1545)

Audio Video Interleave AVI is a special case of Resource Interchange File Format RIFF. This file type used with applications that capture, edit, and play back audio-video sequences. A remote code execution vulnerability has been discovered in the way Microsoft Windows handles specially crafted AV...

DEBIAN-CVE-2011-3623

Multiple stack-based buffer overflows in VideoLAN VLC media player before 1.0.2 allow remote attackers to execute arbitrary code via 1 a crafted ASF file, related to the ASFObjectDumpDebug function in modules/demux/asf/libasf.c; 2 a crafted AVI file, related to the AVIChunkDumpDebuglevel function...

RealPlayer Plus 14.0.4.53 RealAudio Integer Division

Exploit for windows platform in category local exploits Title : RealPlayer Plus 14.0.4.53 RealAudio Integer Division By Zero CVE : 2012-3235 References : http://service.real.com/realplayer/security/06292012player/en/ Auther : Senator of Pirates E-Mail : email protected FaceBook :...

Interleave <= 5.5.0.2 'basicstats.php' Multiple XSS Vulnerabilities

Interleave is prone to multiple cross-site scripting XSS vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Interleave 'basicstats.php' Multiple Cross Site Scripting Vulnerabilities

Interleave is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the...

Interleave Detection

This host is running Interleave, an Open source Business Process Management software. OpenVAS Vulnerability Test $Id: gbinterleavedetect.nasl 5723 2017-03-24 15:46:34Z cfi $ Interleave Detection Authors: Michael Meyer Copyright: Copyright c 2011 Greenbone Networks GmbH This program is free...

Interleave Detection (HTTP)

HTTP based detection of Interleave. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.103111";...

Interleave 5.5.0.2 Cross Site Scripting

------------------------------------------------------------------------ Software................Interleave 5.5.0.2 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://www.interleave.nl/en/ Release Date............3/3/2011 Tested...

Interleave 5.5.0.2 - basicstats.php Multiple Cross-Site Scripting Vulnerabilities

Interleave 5.5.0.2 - basicstats.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/46771/info Interleave is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these...

Interleave 5.5.0.2 - 'basicstats.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46771/info Interleave is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Microsoft Windows AVI Media File Parsing Vulnerabilities (971557)

This host is missing a critical security update according to Microsoft Bulletin MS09-038. OpenVAS Vulnerability Test $Id: secpodms09-038.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft Windows AVI Media File Parsing Vulnerabilities 971557 Authors: Nikita MR Updated By: Madhuri D on 2010-11-30 ...

Microsoft Windows AVI Media File Parsing Vulnerabilities (971557)

This host is missing a critical security update according to Microsoft Bulletin MS09-038. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...