5338 matches found
CVE-2017-7119
An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "IOFireWireFamily" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...
CVE-2017-7119
CVE-2017-7119 affects macOS prior to 10.13 in the IOFireWireFamily driver and allows a crafted app to bypass memory-read restrictions, potentially reading restricted memory locally (CVE demonstrated impact: high confidentiality risk). The issue is documented with both NVD details and Apple securi...
K7 Total Security 15.1.0.305 - Device Driver Arbitrary Memory Read
Vulnerability Summary The following advisory describes an Crash found in K7 Total Security. Credit An independent security researcher, Kyriakos Economou aka @kyREcon, has reported this vulnerability to Beyond Security’s SecuriTeam Secure Disclosure program Vendor response K7 has released patches ...
K7 Total Security 15.1.0.305 - Device Driver Arbitrary Memory Read
K7 Total Security 15.1.0.305 - Device Driver Arbitrary Memory Read Vulnerability Summary The following advisory describes an Crash found in K7 Total Security. Credit An independent security researcher, Kyriakos Economou aka @kyREcon, has reported this vulnerability to Beyond Security’s SecuriTeam...
chromium-browser: use after free in webaudio
A use after free in WebAudio in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...
CVE-2017-5129
A use after free in WebAudio in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...
CVE-2017-15388
Iteration through non-finite points in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...
CVE-2017-15302
In CPUID CPU-Z through 1.81, there are improper access rights to a kernel-mode driver e.g., cpuz143x64.sys for version 1.43 that can result in information disclosure or elevation of privileges, because of an arbitrary read of any physical address via ioctl 0x9C402604. Any application running on t...
GLSA-201710-14 : WebKitGTK+: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201710-14 WebKitGTK+: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in WebkitGTK+. Please review the references below for details. Impact : A remote attacker could execute arbitrary code, cause a Denial of...
WebKitGTK+: Multiple Vulnerabilities
Background WebKitGTK+ is a full-featured port of the WebKit rendering engine, suitable for projects requiring any kind of web integration, offers Webkit’s full functionality and is used on a wide range of systems. Description Multiple vulnerabilities have been discovered in WebkitGTK+. Please...
USN-3436-1 thunderbird vulnerabilities
Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted website in a browsing-like context, an attacker could potentially exploit these to read uninitialized memory, bypass phishing and malware protection, conduct cross-site scripting XSS...
Gemalto's HASP SRM Arbitrary Memory Read Vulnerability
Gemalto is a global leader in digital security, specializing in financial IC cards, payment security, mobile payment solutions, cloud authentication access services, identity and privacy protection, e-healthcare, e-government and other services. An arbitrary memory read vulnerability exists in...
DEBIAN-CVE-2017-1000101
curl supports "globbing" of URLs, in which a user can pass a numerical range to have the tool iterate over those numbers to do a sequence of transfers. In the globbing function that parses the numerical range, there was an omission that made curl read a byte beyond the end of the URL if given a...
CVE-2017-12820
Arbitrary memory read from controlled memory pointer in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leads to remote denial of service...
CVE-2017-12820
Arbitrary memory read from controlled memory pointer in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leads to remote denial of service...
CVE-2017-12820
Arbitrary memory read from controlled memory pointer in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leads to remote denial of service...
CVE-2017-12820
CVE-2017-12820 affects Gemalto SafeNet Sentinel stacks (HASP SRM, Sentinel HASP, Sentinel LDK) prior to Sentinel LDK RTE 7.55. The vulnerability is described as an arbitrary memory read from a controlled memory pointer, which could enable remote denial of service. Public advisories indicate the i...
CVE-2017-12820
Arbitrary memory read from controlled memory pointer in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leads to remote denial of service...
Adobe Flash - Out-of-Bounds Memory Read in MP4 Parsing Exploit
Exploit for multiple platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1321 The attached MP4 file causes an out-of-bounds memory access when played in flash player. 0day.today 2018-01-02...
