Lucene search
K

984 matches found

CNVD
CNVD
added 2015/12/07 12:0 a.m.4 views

Google Chrome Denial of Service Vulnerability (CNVD-2015-07975)

Google Chrome is a web browser developed by the American company Google Google. The 'VideoFramePool::PoolImpl::CreateFrame' function in the media/base/videoframepool.cc file in Google Chrome versions prior to 47.0.2526.73 has a security vulnerability. Due to the program failing to properly...

10CVSS6.5AI score0.01349EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2015/12/07 12:0 a.m.47 views

Google Chrome Multiple Vulnerabilities-01 (Dec 2015) - Windows

google chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

10CVSS9.6AI score0.08115EPSS
Exploits6References3
CVE
CVE
added 2015/12/06 1:0 a.m.67 views

CVE-2015-8480

The CVE-2015-8480 entry relates to Google Chrome before 47.0.2526.73. The vulnerability arises because VideoFramePool::PoolImpl::CreateFrame does not initialize memory for a video-frame data structure, enabling remote attackers to trigger a denial of service via out-of-bounds memory access, poten...

10CVSS9.5AI score0.01349EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2015/12/02 12:0 a.m.4 views

PT-2015-7775 · Libraw +3 · Libraw +3

Name of the Vulnerable Software and Affected Versions: Libraw versions prior to 0.17.1 Description: The issue is related to memory object initialization in the phase one correct function, which can cause memory errors and potentially allow attackers to execute arbitrary code. Recommendations: For...

9.8CVSS7.5AI score0.05454EPSS
Exploits2References63
OSV
OSV
added 2015/12/02 12:0 a.m.2 views

UBUNTU-CVE-2015-8367

The phaseonecorrect function in Libraw before 0.17.1 allows attackers to cause memory errors and possibly execute arbitrary code, related to memory object initialization...

9.8CVSS7.5AI score0.05454EPSS
Exploits0References3
OSV
OSV
added 2015/09/06 2:59 a.m.2 views

DEBIAN-CVE-2015-6826

The ffrv34decodeinitthreadcopy function in libavcodec/rv34.c in FFmpeg before 2.7.2 does not initialize certain structure members, which allows remote attackers to cause a denial of service invalid pointer access or possibly have unspecified other impact via crafted 1 RV30 or 2 RV40 RealVideo dat...

7.5CVSS9.2AI score0.02482EPSS
Exploits0References1
CNVD
CNVD
added 2015/08/19 12:0 a.m.1 views

Apple iOS ImageIO Memory Information Disclosure Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory incorrect initialization vulnerability exists in Apple iOS ImageIO's handling of PNG files, which allows remote attackers to exploit the vulnerability to construct special files that can be parse...

4.3CVSS6.6AI score0.02016EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2015/07/15 12:0 a.m.63 views

Microsoft Windows Hyper-V Remote Code Execution Vulnerability (3072000)

This host is missing a critical security update according to Microsoft Bulletin MS15-068. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

7.2CVSS5AI score0.0202EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2015/07/15 12:0 a.m.52 views

MS15-068: Vulnerabilities in Windows Hyper-V Could Allow Remote Code Execution (3072000)

The remote Windows host is affected by multiple remote code execution vulnerabilities in Hyper-V : - An error exists in how Hyper-V handles packet size memory initialization in guest virtual machines. An authenticated attacker with access to a guest virtual machine can exploit this by running a...

7.2CVSS6.3AI score0.0202EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2015/06/05 12:0 a.m.3 views

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure.

The PDFium module of the Google Chrome browser incorrectly performs the memory initialization process, which may cause a service failure for users...

7.5CVSS7.7AI score0.01414EPSS
Exploits0References3Affected Software1
RedHat Linux
RedHat Linux
added 2015/05/25 3:25 a.m.2 views

chromium-browser: Uninitialized value in PDFium.

PDFium, as used in Google Chrome before 43.0.2357.65, does not properly initialize memory, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

7.5CVSS7.5AI score0.01414EPSS
Exploits0References5
CNVD
CNVD
added 2015/05/21 12:0 a.m.2 views

Google Chrome PDFium Code Injection Vulnerability

Google Chrome is the United States Google Google company developed a Web browser. PDFium is one of the open source PDF rendering engine. Google Chrome PDFium has a security vulnerability. Due to the program failed to properly initialize memory. A remote attacker can exploit the vulnerability to...

7.5CVSS6.7AI score0.01414EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2015/05/20 10:59 a.m.29 views

CVE-2015-1259

PDFium, as used in Google Chrome before 43.0.2357.65, does not properly initialize memory, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

7.5CVSS7.2AI score0.01414EPSS
Exploits0References3
Prion
Prion
added 2015/05/20 10:59 a.m.21 views

Design/Logic Flaw

PDFium, as used in Google Chrome before 43.0.2357.65, does not properly initialize memory, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

7.5CVSS7.5AI score0.01414EPSS
Exploits0References8Affected Software2
OSV
OSV
added 2015/05/20 10:59 a.m.0 views

UBUNTU-CVE-2015-1259

PDFium, as used in Google Chrome before 43.0.2357.65, does not properly initialize memory, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

7.5CVSS7.3AI score0.01414EPSS
Exploits0References4
Cvelist
Cvelist
added 2015/05/20 10:0 a.m.33 views

CVE-2015-1259

PDFium, as used in Google Chrome before 43.0.2357.65, does not properly initialize memory, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

6.9AI score0.01414EPSS
Exploits0References8
CVE
CVE
added 2015/05/20 10:0 a.m.90 views

CVE-2015-1259

The CVE-2015-1259 entry is confirmed in connected sources as a PDFium memory initialization issue in Google Chrome/Chromium prior to 43.0.2357.65. The root cause is an uninitialized memory condition in the PDFium component, which can allow a remote attacker to cause a denial of service or potenti...

7.5CVSS7AI score0.01414EPSS
Exploits0References8Affected Software1
Debian CVE
Debian CVE
added 2015/05/20 10:0 a.m.23 views

CVE-2015-1259

Removed by vendor...

7.5CVSS9.4AI score0.01414EPSS
Exploits0
Packet Storm
Packet Storm
added 2015/05/01 12:0 a.m.58 views

Adobe Flash Player UncompressViaZlibVariant Uninitialized Memory

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Adobe Flash Player UncompressViaZlibVariant Uninitialized Memory', 'Description' = %q This module exploits an unintialized memory...

10CVSS0.9AI score0.81943EPSS
Exploits5
OSV
OSV
added 2015/04/12 12:0 a.m.32 views

DLA-193-1 chrony - security update

Bulletin has no description...

6.5CVSS6.5AI score0.03439EPSS
Exploits0
Rows per page
Query Builder