UBUNTU-CVE-2015-7509

fs/ext4/namei.c in the Linux kernel before 3.7 allows physically proximate attackers to cause a denial of service system crash via a crafted no-journal filesystem, a related issue to CVE-2013-2015...

Memory Corruption Vulnerability in China Knowledge CAJViewer Reader Processing PDF Format Files

CAJViewer is a specialized full-text format reader for the China Journal Network, which is very heavily used. The reader in the processing of PDF file format when there is a memory corruption vulnerability, the construction of malformed PDF file format can lead to a program crash, if successfully...

PT-2015-7556 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.7 Description: The issue allows physically proximate attackers to cause a denial of service, resulting in a system crash, by utilizing a crafted no-journal filesystem. Recommendations: For Linux kernel version...

Microsoft Windows Journal Heap Overflow Vulnerability

Microsoft Windows is a series of operating systems designed for personal computer and server users from the American company Microsoft. A journal heap overflow vulnerability exists in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,Windows 7 SP1. This allows remote attackers to...

CVE-2015-6097

Heap-based buffer overflow in Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted Journal .jnt file, aka "Windows Journal Heap Overflow Vulnerability."...

Heap overflow

Heap-based buffer overflow in Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted Journal .jnt file, aka "Windows Journal Heap Overflow Vulnerability."...

CVE-2015-6097

CVE-2015-6097 is a heap-based buffer overflow in Windows Journal’s handling of Journal (.jnt) files, affecting Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1. The flaw—improper parsing of journal files—allows remote code execution and has public exploit activity accordin...

CVE-2015-6097

Heap-based buffer overflow in Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted Journal .jnt file, aka "Windows Journal Heap Overflow Vulnerability."...

Microsoft Windows Journal Remote Code Execution Vulnerability (3100213)

This host is missing a critical security update according to Microsoft Bulletin MS15-114. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

November 2015 Patch Tuesday Brings 12 Updates, Four Critical

Microsoft today pushed out 12 bulletins as part of November’s Patch Tuesday, including four critical updates, all of which can lead to remote code execution. The update is rounded out by fixes for Windows, Lync, .NET, and Skype for Business, but there are two critical fixes that affect browsers o...

Microsoft Windows Journal Heap Overflow (MS15-114: CVE-2015-6097)

A remote code execution vulnerability has been reported in Microsoft Windows Journal. The vulnerability is due to the way Windows Journal processes specially crafted jnt files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted jnt file...

KLA10694 Multiple vulnerabilities in Microsoft Windows

Multiple serious vulnerabilities have been found in Microsoft Windows. Malicious users can exploit these vulnerabilities to spoof user interface, cause denial of service, gain privileges, bypass security restrictions, execute arbitrary code or obtain sensitive information. Below is a complete lis...

MS15-114: Security Update for Windows Journal to Address Remote Code Execution (3100213)

The remote Windows host is affected by a remote code execution vulnerability in Windows Journal due to improper parsing of Journal files. An unauthenticated, remote attacker can exploit this, via a crafted Journal file, to execute arbitrary code in the context of the current user. C Tenable Netwo...

MS15-114: Security update for Windows Journal to address remote code execution: November 10, 2015

None None...

SQL injection vulnerability in FrameSelect.aspx page Type parameter of Nanjing Jenohan Software Periodicals and Magazines System.

Nanjing Jenohan Software Technology Co., Ltd. is for the development of hospital full cost accounting decision support software system, hospital performance management information system and hospital customer management information system. There exists a second SQL injection vulnerability in...

CVE-2015-2530

Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to execute arbitrary code via a crafted .jnt file, aka "Windows Journal RCE...

CVE-2015-2519

Integer overflow in Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to execute arbitrary code via a crafted .jnt file, aka...

CVE-2015-2514

Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to execute arbitrary code via a crafted .jnt file, aka "Windows Journal RCE...

CVE-2015-2513

Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to execute arbitrary code via a crafted .jnt file, aka "Windows Journal RCE...

Design/Logic Flaw

Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to cause a denial of service data loss via a crafted .jnt file, aka "Windows...