549 matches found
Firefox 54.0.1 - Denial of Service
Firefox 54.0.1 - Denial of Service + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/FIREFOX-v54.0.1-DENIAL-OF-SERVICE.txt + ISR: ApparitionSec Vendor: =============== www.mozilla.org Product: =============== Firefox v54.0....
Firefox 54.0.1 - Denial of Service Exploit
Exploit for windows platform in category dos / poc + Credits: John Page aka hyp3rlinx Vendor: =============== www.mozilla.org Product: =============== Firefox v54.0.1 Vulnerability Type: =================== Denial Of Service Security Issue: ================ Dynamically creating HTML elements...
Denial Of Service (DoS) Through Memory Leak
ImageMagick is vulnerable to denial of service DoS attacks. A malicious user can pass a MAT image file to the application to cause a memory leak. This can cause the application to run out of memory and crash...
ALPINE-CVE-2017-9469
In Irssi before 1.0.3, when receiving certain incorrectly quoted DCC files, it tries to find the terminating quote one byte before the allocated memory. Thus, remote attackers might be able to cause a crash...
UBUNTU-CVE-2017-9469
In Irssi before 1.0.3, when receiving certain incorrectly quoted DCC files, it tries to find the terminating quote one byte before the allocated memory. Thus, remote attackers might be able to cause a crash...
DEBIAN-CVE-2017-8313
Heap out-of-bound read in ParseJSS in VideoLAN VLC before 2.2.5 due to missing check of string termination allows attackers to read data beyond allocated memory and potentially crash the process via a crafted subtitles file...
DEBIAN-CVE-2017-2538
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted we...
Mozilla: Use-after-free in txExecutionState destructor during XSLT processing (MFSA 2017-11, MFSA 2017-12)
A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during matching while evaluating context, leading to objects being used when they no longer exist. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.1,...
CVE-2014-8716
The JPEG decoder in ImageMagick before 6.8.9-9 allows local users to cause a denial of service out-of-bounds memory access and crash...
Multiple Apple Products WebKit Denial of Service Vulnerability (CNVD-2017-05144)
Apple iOS, Safari and tvOS are all products of Apple Inc. Apple iOS is a set of operating systems developed for mobile devices; Apple Safari is a web browser that comes with Mac OS X and iOS operating systems as the default browser; WebKit is a set of open source web browser engines developed by...
Microsoft Windows - Uniscribe Font Processing Heap Memory Corruption in 'USP10!otlCacheManager::GlyphsSubstituted' (MS17-011)
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1025 We have encountered a crash in the Windows Uniscribe user-mode library, in the memset function called by USP10!otlCacheManager::GlyphsSubstituted, while trying to display text using a corrupted font file: --- 449c.6338: Access...
DEBIAN-CVE-2017-5977
The zzipmementryextrablock function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted ZIP file...
PT-2017-16801 · Zziplib +2 · Zziplib +2
Name of the Vulnerable Software and Affected Versions: zziplib version 0.13.62 Description: The issue allows remote attackers to cause a denial of service, resulting in an invalid memory read and crash, via a crafted ZIP file. This is due to a problem in the zzip mem entry extra block function in...
UBUNTU-CVE-2016-10207
The Xvnc server in TigerVNC allows remote attackers to cause a denial of service invalid memory access and crash by terminating a TLS handshake early...
CVE-2016-7477
The ffputpixels8xy2mmx function in rndtemplate.c in Libav 11.7 allows remote attackers to cause a denial of service invalid memory access and crash via a crafted mp3 file. NOTE: this issue was originally reported as involving a NULL pointer dereference...
UBUNTU-CVE-2017-5848
The gstpsdemuxparsepsm function in gst/mpegdemux/gstmpegdemux.c in gst-plugins-bad in GStreamer allows remote attackers to cause a denial of service invalid memory read and crash via vectors involving PSM parsing...
kernel: Slab out-of-bounds access in sctp_sf_ootb()
A flaw was found in the Linux kernel's implementation of the SCTP protocol. A remote attacker could trigger an out-of-bounds read with an offset of up to 64kB potentially causing the system to crash...
php: Use after free in WDDX Deserialize when processing XML data
Use-after-free vulnerability in wddx.c in the WDDX extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to cause a denial of service memory corruption and application crash or possibly have unspecified other impact by triggering a wddxdeserialize call on XML data...
USN-3123-1 curl vulnerabilities
It was discovered that curl incorrectly reused client certificates when built with NSS. A remote attacker could possibly use this issue to hijack the authentication of a TLS connection. CVE-2016-7141 Nguyen Vu Hoang discovered that curl incorrectly handled escaping certain strings. A remote...