416 matches found
Debian DLA-531-1 : spice security update
A vulnerability has been found in the Simple Protocol for Independent Computing Environments, SPICE. Frediano Ziglio from Red Hat discovered that SPICE allowed local guest OS users to read from or write to arbitrary host memory locations via crafted primary surface parameters. For Debian 7...
[SECURITY] [DLA 531-1] spice security update
Package : spice Version : 0.11.0-1+deb7u3 CVE ID : CVE-2016-2150 Debian Bug : 826584 A vulnerability has been found in the Simple Protocol for Independent Computing Environments, SPICE. Frediano Ziglio from Red Hat discovered that SPICE allowed local guest OS users to read from or write to...
MS15-1 0 6 JavaScript ArrayBuffer. slice any address read-vulnerability analysis-vulnerability warning-the black bar safety net
2 0 1 5 year 8 month 1 3 day, Microsoft released the Update Patch security bulletin MS15-1 0 6, which contains the About Internet Explorer multiple vulnerabilities. Before, we have explained how to attack the VBScript engine inside the Filter function in the presence of type confusion...
CVE-2016-2150
CVE-2016-2150 affects SPICE: a memory access flaw in handling crafted primary surface parameters allows a local guest OS user to read from or write to host memory. Root cause: improper handling of primary surface parameters in SPICE. Impact: confidentiality and integrity of host memory are HIGH, ...
CVE-2015-5261
Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to arbitrary memory locations on the host via guest QXL commands related to surface creation...
CVE-2015-5261
Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to arbitrary memory locations on the host via guest QXL commands related to surface creation...
Heap overflow
Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to arbitrary memory locations on the host via guest QXL commands related to surface creation...
CVE-2015-5261
Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to arbitrary memory locations on the host via guest QXL commands related to surface creation...
CVE-2015-5261
Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to arbitrary memory locations on the host via guest QXL commands related to surface creation...
CVE-2016-2150
A memory access flaw was found in the way spice handled certain guests using crafted primary surface parameters. A user in a guest could use this flaw to read from and write to arbitrary memory locations on the host...
Internet Bug Bounty: Out-of-bounds reads in zif_grapheme_stripos with negative offset
https://bugs.php.net/bug.php?id=72061 graphemestripos from the intl extension had a security issue when handling negative offsets, this allowed to read from arbitrary memory locations. Reported to developers on 2016-04-24, fixed 2016-04-29 and released at 2016-04-28, affected PHP 5.5 , 5.6 and 7...
MS15-133: Security update for Windows PGM to address elevation of privilege: December 8, 2015
Resolves a vulnerability in Windows that could allow elevation of privilege if an attacker logs on to a targeted system and runs a specially crafted application that, by way of a race condition, results in references to memory locations that have already been freed.SummaryThis security update...
CVE-2008-3895
LILO 22.6.1 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer...
CVE-2008-0010
The copyfromusermmapsem function in fs/splice.c in the Linux kernel 2.6.22 through 2.6.24 does not validate a certain userspace pointer before dereference, which allow local users to read from arbitrary kernel memory locations...
CVE-2013-6282
The 1 getuser and 2 putuser API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not validate certain addresses, which allows attackers to read or modify the contents of arbitrary kernel memory locations via a crafted application, as exploited in the wild against...
CVE-2009-2584
Off-by-one error in the optionswrite function in drivers/misc/sgi-gru/gruprocfs.c in the SGI GRU driver in the Linux kernel 2.6.30.2 and earlier on ia64 and x86 platforms might allow local users to overwrite arbitrary memory locations and gain privileges via a crafted count argument, which trigge...
CVE-2007-1883
PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows context-dependent attackers to read arbitrary memory locations via an interruption that triggers a user space error handler that changes a parameter to an arbitrary pointer, as demonstrated via the iptcembed function, which calls certain...
Microsoft Windows JScript ArrayBuffer.slice Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose the contents of arbitrary memory locations on applications using the JScript scripting language on vulnerable installations of Microsoft Windows. Microsoft Internet Explorer is an affected application. User interaction is required to exploit...
Debian DSA-3371-1 : spice - security update
Frediano Ziglio of Red Hat discovered several vulnerabilities in spice, a SPICE protocol client and server library. A malicious guest can exploit these flaws to cause a denial of service QEMU process crash, execute arbitrary code on the host with the privileges of the hosting QEMU process or read...