340 matches found
The vulnerability of the ChakraCore JavaScript script handler, related to the execution of operations beyond the buffer boundaries in memory, allows attackers to execute arbitrary code.
The vulnerability of the ChakraCore JavaScript script handler is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Android operating system, related to the operation of data beyond the buffer in memory, allows a malicious actor to gain access to the device with root privileges.
The vulnerability of the Android operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to gain access to the device with root privileges...
The vulnerability of the Qualcomm Security Feature component in the Android operating system allows a hacker to trigger buffer overflows.
The vulnerability of the Qualcomm Security Feature component of the Android operating system is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to trigger a buffer overflow...
The vulnerability of the NVIDIA Libnvomx component in the Android operating system allows a hacker to gain elevated privileges.
The vulnerability of the NVIDIA Libnvomx component in the Android operating system is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain elevated privileges...
The vulnerability of the SCTP message verification mechanism in Huawei AR3200, Huawei AR1200, and Huawei AR120-S routers allows a hacker to trigger a system reboot.
The vulnerability of the SCTP message verification mechanism in microprogramming software routers of Huawei AR3200, Huawei AR1200, and Huawei AR120-S arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to trigger a...
The vulnerability of the Chrome Apps extension platform of Google Chrome allows a hacker to gain access to memory beyond the boundaries of the application.
The vulnerability of the Chrome Apps extension platform of Google Chrome is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to memory beyond the application’s boundaries using a specially crafted extensi...
The vulnerability in the JavaScript V8 engine of Google Chrome’s browser allows a hacker to gain access to memory areas beyond the boundaries of the application.
The vulnerability of the V8 component in Google Chrome browser is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to gain access to memory areas beyond the boundaries of the application, through a specially crafted HTML page...
VMware ESXi Out-of-Bounds Write Code Execution Vulnerability
VMware ESXi is a server virtualization platform that can be installed directly on physical servers. A security vulnerability exists in VMware ESXi that could be exploited by a remote attacker to submit a special request to write and execute arbitrary code across boundaries...
The vulnerability of the Linux operating system, which allows a perpetrator to trigger a service failure or cause other effects.
The vulnerability in the driver drivers/media/usb/dvb-usb-v2/dvbusbcore.c of the Linux operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor, operating locally, to improperly interact with the...
The vulnerability of the Internet Explorer browser, which allows a hacker to execute arbitrary code
The vulnerability of the JScript and VBScript engines in Internet Explorer arises from the execution of an operation outside the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the iOS operating system and the Safari browser allows attackers to trigger a service failure or execute arbitrary code.
The vulnerability of the WebKit component of the iOS operating system and the Safari browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption,...
The vulnerabilities of the Microsoft Office Web Apps package, the Microsoft Office Compatibility Pack, the Microsoft Word text editor, the Microsoft SharePoint Server corporate application, and certain Microsoft Office programs allow a perpetrator to cause service interruptions or execute arbitrary code.
The vulnerabilities of the Microsoft Office Web Apps, the Microsoft Office Compatibility Pack, the Microsoft Word text editor, the Microsoft SharePoint Server corporate application, and the Microsoft Office suite are caused by an operation that goes beyond the buffer boundaries in memory...
The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code
The vulnerability of the Flash Player software arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Microsoft Office Information Disclosure Vulnerability (CNVD-2016-12363)
Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. An information disclosure vulnerability exists in Microsoft Office. An attacker can exploit this...
Microsoft Office Information Disclosure Vulnerability (CNVD-2016-12362)
Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. An information disclosure vulnerability exists in Microsoft Office. An attacker can exploit this...
Microsoft Office Information Disclosure Vulnerability (CNVD-2016-12365)
Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. An information disclosure vulnerability exists in Microsoft Office. An attacker can exploit this...
The vulnerability of Microsoft Excel editors, along with the Microsoft Office Compatibility Pack, allows a perpetrator to execute arbitrary code.
The vulnerability of Microsoft Excel spreadsheet editors, as well as the Microsoft Office Compatibility Pack, is due to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted documen...
Microsoft Internet Explorer 8 - MSHTML 'SRunPointer::SpanQualifier/RunType' Out-Of-Bounds Read (MS15-009)
positionfixed position: fixed; positionrelative position: relative; floatleft float: left; complex float: left; width: 100%; complex:first-line clear: left; window.onload = function boom oElementfloatleft = document.createElement'floatleft'; oElementcomplex =...
Samba: Data disclosure
Background Samba is a suite of SMB and CIFS client/server programs. Description Samba does not properly check memory boundaries when handling trans, rans2, and nttrans requests. Impact A remote attacker could send specially crafted requests to a Samba daemon, leading to the disclosure of arbitrar...
GLSA-200801-06 : Xfce: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200801-06 Xfce: Multiple vulnerabilities Gregory Andersen reported that the Xfce4 panel does not correctly calculate memory boundaries, leading to a stack-based buffer overflow in the launcherupdatepanelentry function CVE-2007-653...