PT-2017-16275

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 57.0.2987.98 Description The issue is related to a use after free bug in GuestView, which allows a remote attacker to perform an out of bounds memory read via a crafted Chrome extension. This could potentially...

PT-2017-16271

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 57.0.2987.98 Opera versions prior to 57.0.2987.98 Description A use after free in PDFium allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file. Recommendations For Google Chrom...

PT-2017-16281

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 57.0.2987.98 Google Chrome for Android version 57.0.2987.108 and earlier Opera affected versions not specified Description The issue allows a remote attacker to perform an out of bounds memory read via a crafted...

PT-2017-16268

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 57.0.2987.98 Opera versions prior to 57.0.2987.98 note: exact version not specified, assuming similar to Chrome Description A use after free issue in ANGLE allowed a remote attacker to perform an out of bounds...

PT-2017-16280

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 57.0.2987.98 Opera affected versions not specified Description The issue is related to a use after free bug in GuestView, which allows a remote attacker to perform an out of bounds memory read via a crafted Chro...

Security Advisory - Arbitrary Memory Read Write Vulnerability in Huawei Smart Phones

There is a arbitrary memory read/write vulnerability in the hardware security module of some Huawei smart phones due to the input parameters validation. An attacker with the root privilege of the Android system could exploit this vulnerability to read and write memory data anywhere or execute...

PT-2017-3979

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 52.1 Firefox ESR versions prior to 52.1 Firefox ESR versions prior to 45.9 Firefox versions prior to 53 Description The issue is related to the parsing of "application/http-index-format" format content, where...

DEBIAN-CVE-2016-7409

The dbclient and server in Dropbear SSH before 2016.74, when compiled with DEBUGTRACE, allows local users to read process memory via the -v argument, related to a failed remote ident...

Design/Logic Flaw

The dbclient and server in Dropbear SSH before 2016.74, when compiled with DEBUGTRACE, allows local users to read process memory via the -v argument, related to a failed remote ident...

CVE-2016-7409

The dbclient and server in Dropbear SSH before 2016.74, when compiled with DEBUGTRACE, allows local users to read process memory via the -v argument, related to a failed remote ident...

UBUNTU-CVE-2016-7409

The dbclient and server in Dropbear SSH before 2016.74, when compiled with DEBUGTRACE, allows local users to read process memory via the -v argument, related to a failed remote ident...

Code injection

The jpcundoroi function in libjasper/jpc/jpcdec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted image...

Design/Logic Flaw

The zzipmementryextrablock function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted ZIP file...

CVE-2017-5504

The jpcundoroi function in libjasper/jpc/jpcdec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted image...

CVE-2017-5504

The jpcundoroi function in libjasper/jpc/jpcdec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted image...

CVE-2017-5977

The zzipmementryextrablock function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted ZIP file...

UBUNTU-CVE-2017-5977

The zzipmementryextrablock function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted ZIP file...

CVE-2017-5504

The jpcundoroi function in libjasper/jpc/jpcdec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted image...

CVE-2017-5504

CVE-2017-5504 is a vulnerability in JasPer where the function jpc_undo_roi in libjasper/jpc/jpc_dec.c (present in JasPer 1.900.27) can be exploited by a crafted image to cause a denial of service via an invalid memory read/crash. The connected documents indicate this CVE is discussed within Jaspe...

CVE-2017-5977

The zzipmementryextrablock function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted ZIP file...