CVE-2021-22422

CVE-2021-22422 concerns HarmonyOS: a local integer overflow/wraparound vulnerability in a HarmonyOS component that can lead to memory overwriting. Connected reports reiterate the local-attack path and impact to confidentiality, integrity, and availability, but the documents do not specify the exa...

CVE-2020-9142

There is a heap base buffer overflow vulnerability in some Huawei smartphone.Successful exploitation of this vulnerability can cause heap overflow and memory overwriting when the system incorrectly processes the update file...

CVE-2020-9142

There is a heap base buffer overflow vulnerability in some Huawei smartphone.Successful exploitation of this vulnerability can cause heap overflow and memory overwriting when the system incorrectly processes the update file...

Heap overflow

There is a heap base buffer overflow vulnerability in some Huawei smartphone.Successful exploitation of this vulnerability can cause heap overflow and memory overwriting when the system incorrectly processes the update file...

CVE-2020-9142

There is a heap base buffer overflow vulnerability in some Huawei smartphone.Successful exploitation of this vulnerability can cause heap overflow and memory overwriting when the system incorrectly processes the update file...

Schneider Electric EcoStruxure Control Expert Incorrect Authorization Vulnerability

Schneider Electric EcoStruxure Control Expert is the universal programming, commissioning and operating software for the Modicon M340, M580, M580S, Premium, Momentum and Quantum series. An incorrect authorization vulnerability exists in PLC Simulator in Schneider Electric EcoStruxure Control...

Description of the Microsoft Office for Mac 2011 14.1.2 Update

Describes the Microsoft Office for Mac 2011 14.1.2 Update, that was released on June 14, 2011.IntroductionMicrosoft has released security bulletin MS11-045. This security bulletin contains all the relevant information about the security updates for Microsoft Office for Mac 2011. To view the...

DEBIAN-CVE-2013-1895

The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten...

Command injection

Firmware is getting into loop of overwriting memory when scan command is given from host because of improper validation. in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ807...

WinPCAPC packet capture layer privilege escalation

One of IOCTLS allows kernel memory regions overwriting...

[Reversemode Advisory] Symantec Antivirus Engine Privilege Escalation

Symantec Antivirus Engine is prone to a local privilege escalation vulnerability. Two Device Drivers are affected: NAVEX15.sys, NAVENG.sys. NAVEX15.sys LOW CONSTANT VALUE PAGE:0004B611 sub edx, 222AD3h PAGE:0004B617 push esi PAGE:0004B618 jz short loc4B63C loc4B63C: mov edx, ecx+3Ch PAGE:0004B63F...

CVE-2005-2119

The MIDLuserallocate function in the Microsoft Distributed Transaction Coordinator MSDTC proxy MSDTCPRX.DLL allocates a 4K page of memory regardless of the required size, which allows attackers to overwrite arbitrary memory locations using an incorrect size value that is provided to the NdrAlloca...

Linux Kernel 2.6.x - SYS_EPoll_Wait Local Integer Overflow Local Privilege Escalation (1)

Linux Kernel 2.6.x - SYSEPollWait Local Integer Overflow Local Privilege Escalation 1 / EDB Note: Updated exploit can be found here; https://www.exploit-db.com/exploits/25203/ source: https://www.securityfocus.com/bid/12763/info A Local integer overflow vulnerability affects the Linux kernel. Thi...

DSA-624-1 zip - buffer overflow

Bulletin has no description...

SUSE-SA:2003:030: radiusd-cistron

The remote host is missing the patch for the advisory SUSE-SA:2003:030 radiusd-cistron. The package radiusd-cistron is an implementation of the RADIUS protocol. Unfortunately the RADIUS server handles too large NAS numbers not correctly. This leads to overwriting internal memory of the server...

[Full-Disclosure] Code execution in the Unreal Engine through \secure\ packet

Luigi Auriemma Application: Unreal Engine http://unreal.epicgames.com Vulnerable games: - DeusEx = 1.112fm - Devastation = 390 - Mobile Forces = 20000 - Nerf Arena Blast = 1.2 - Postal 2 = 1337 - Rune = 107 - Tactical Ops = 3.4.0 - TNN Pro Hunter ? - Unreal 1 = 226f - Unreal II XMP = 7710 - Unrea...

CVE-2003-1310

The DeviceIoControl function in the Norton Device Driver NAVAP.sys in Symantec Norton AntiVirus 2002 allows local users to gain privileges by overwriting memory locations via certain control codes aka "Device Driver Attack"...

DSA-144 wwwoffle - improper input handling

Bulletin has no description...

FreeBSD 4.4 - AIO Library Cross Process Memory Write

// source: https://www.securityfocus.com/bid/3661/info aio.h is a library implementing the POSIX standard for asynchronous I/O. Support for AIO may be enabled in FreeBSD by compiling the kernel with the VFSAIO option. This option is not enabled in the default kernel configuration. Under some...

[SECURITY] [DSA-047-1] multiple kernel problems

-----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------------------ Debian Security Advisory DSA-047-1 [email protected] http://www.debian.org/security/ Wichert Akkerman April 16, 2001 -...