CVE-2017-5063

A numeric overflow in Skia in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

UBUNTU-CVE-2017-5444

A buffer overflow vulnerability while parsing "application/http-index-format" format content when the header contains improperly formatted data. This allows for an out-of-bounds read of data from memory. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox ESR 52.1, and Firefox ...

CVE-2017-5444

A buffer overflow vulnerability while parsing "application/http-index-format" format content when the header contains improperly formatted data. This allows for an out-of-bounds read of data from memory. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox ESR 52.1, and Firefox ...

openSUSE Security Update : gstreamer (openSUSE-2017-480)

This update for gstreamer fixes the following security issues : - A crafted AVI file could have caused an invalid memory read, possibly causing DoS or corruption bsc1024051, CVE-2017-5838 This update was imported from the SUSE:SLE-12-SP2:Update update project. %NASLMINLEVEL 70300 C Tenable Networ...

openSUSE: Security Advisory for pidgin (openSUSE-SU-2017:0973-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for pidgin (important)

This update for pidgin to version 2.12.0 fixes the following issues: This security issue was fixed: - CVE-2017-2640: Out of bounds memory read in purplemarkupunescapeentity boo1028835. These non-security issues were fixed: + libpurple: - Fix the use of uninitialised memory if running...

SUSE SLED12 / SLES12 Security Update : gstreamer (SUSE-SU-2017:0966-1)

This update for gstreamer fixes the following security issues : - A crafted AVI file could have caused an invalid memory read, possibly causing DoS or corruption bsc1024051, CVE-2017-5838 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...

SUSE-SU-2017:0967-1 Security update for gstreamer

This update for gstreamer fixes the following security issues: - A crafted AVI file could have caused an invalid memory read, possibly causing DoS or corruption bsc1024051, CVE-2017-5838...

SUSE-SU-2017:0966-1 Security update for gstreamer

This update for gstreamer fixes the following security issues: - A crafted AVI file could have caused an invalid memory read, possibly causing DoS or corruption bsc1024051, CVE-2017-5838...

openSUSE Security Update : pidgin (openSUSE-2017-431)

This update for pidgin fixes the following issues : Feature update : - Update to GNOME 3.20.2 fate318572. Security issues fixed : - CVE-2017-2640: Fix an out of bounds memory read in purplemarkupunescapeentity. boo1028835 - CVE-2014-3698: remote information leak via crafted XMPP message boo902408...

kernel: net: Out of bounds stack read in memcpy_fromiovec

A flaw was found in the Linux networking subsystem where a local attacker with CAPNETADMIN capabilities could cause an out-of-bounds memory access by creating a smaller-than-expected ICMP header and sending to its destination via sendto...

CVE-2017-7407

The ourWriteOut function in toolwriteout.c in curl 7.53.1 might allow physically proximate attackers to obtain sensitive information from process memory in opportunistic circumstances by reading a workstation screen during use of a --write-out argument ending in a '%' character, which leads to a...

chromium-browser: use after free in blink

A use after free in Blink in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

chromium-browser: use after free in printing

A use after free in printing in Google Chrome prior to 57.0.2987.133 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

CVE-2017-5056

A use after free in Blink in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

CVE-2017-5055

A use after free in printing in Google Chrome prior to 57.0.2987.133 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

CVE-2017-7244

The pcre32xclass function in pcrexclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service invalid memory read via a crafted file...

PCRE '_pcre32_xclass' Function Denial of Service Vulnerability

PCRE Perl Compatible Regular Expressions is a software developer Philip Hazel developed a use of C language written in open source regular expression library. A security vulnerability exists in the pcre32xclass function in the pcrexclass.c file of libpcre1 in PCRE version 8.40. A remote attacker...

CVE-2017-7244

CVE-2017-7244 affects Cloud Pak for Security (CP4S) in CP4S 1.7.2.0, 1.8.0.0, and 1.8.1.0. The CVE describes a PCRE/libpcre1 issue in the _pcre32_xclass function that can cause a denial of service via remote crafted input, due to an invalid memory read in pcre_xclass.c. The connected IBM CP4S adv...

CVE-2017-7244

The pcre32xclass function in pcrexclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service invalid memory read via a crafted file...