7700 matches found
CVE-2017-5063
A numeric overflow in Skia in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...
UBUNTU-CVE-2017-5444
A buffer overflow vulnerability while parsing "application/http-index-format" format content when the header contains improperly formatted data. This allows for an out-of-bounds read of data from memory. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox ESR 52.1, and Firefox ...
CVE-2017-5444
A buffer overflow vulnerability while parsing "application/http-index-format" format content when the header contains improperly formatted data. This allows for an out-of-bounds read of data from memory. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox ESR 52.1, and Firefox ...
PT-2017-3240
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 58.0.3029.81 for Linux, Windows, and Mac Google Chrome version prior to 58.0.3029.83 for Android Description A numeric overflow in the Skia library of Google Chrome allowed a remote attacker to perform an out of...
PT-2017-3245
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 58.0.3029.81 for Mac, Windows, and Linux Google Chrome version prior to 58.0.3029.83 for Android Description The issue is related to a type confusion in the PDFium component of Google Chrome, which can be...
openSUSE Security Update : gstreamer (openSUSE-2017-480)
This update for gstreamer fixes the following security issues : - A crafted AVI file could have caused an invalid memory read, possibly causing DoS or corruption bsc1024051, CVE-2017-5838 This update was imported from the SUSE:SLE-12-SP2:Update update project. %NASLMINLEVEL 70300 C Tenable Networ...
openSUSE: Security Advisory for pidgin (openSUSE-SU-2017:0973-1)
The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Security update for pidgin (important)
This update for pidgin to version 2.12.0 fixes the following issues: This security issue was fixed: - CVE-2017-2640: Out of bounds memory read in purplemarkupunescapeentity boo1028835. These non-security issues were fixed: + libpurple: - Fix the use of uninitialised memory if running...
SUSE SLED12 / SLES12 Security Update : gstreamer (SUSE-SU-2017:0966-1)
This update for gstreamer fixes the following security issues : - A crafted AVI file could have caused an invalid memory read, possibly causing DoS or corruption bsc1024051, CVE-2017-5838 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...
SUSE-SU-2017:0967-1 Security update for gstreamer
This update for gstreamer fixes the following security issues: - A crafted AVI file could have caused an invalid memory read, possibly causing DoS or corruption bsc1024051, CVE-2017-5838...
SUSE-SU-2017:0966-1 Security update for gstreamer
This update for gstreamer fixes the following security issues: - A crafted AVI file could have caused an invalid memory read, possibly causing DoS or corruption bsc1024051, CVE-2017-5838...
openSUSE Security Update : pidgin (openSUSE-2017-431)
This update for pidgin fixes the following issues : Feature update : - Update to GNOME 3.20.2 fate318572. Security issues fixed : - CVE-2017-2640: Fix an out of bounds memory read in purplemarkupunescapeentity. boo1028835 - CVE-2014-3698: remote information leak via crafted XMPP message boo902408...
kernel: net: Out of bounds stack read in memcpy_fromiovec
A flaw was found in the Linux networking subsystem where a local attacker with CAPNETADMIN capabilities could cause an out-of-bounds memory access by creating a smaller-than-expected ICMP header and sending to its destination via sendto...
CVE-2017-7407
The ourWriteOut function in toolwriteout.c in curl 7.53.1 might allow physically proximate attackers to obtain sensitive information from process memory in opportunistic circumstances by reading a workstation screen during use of a --write-out argument ending in a '%' character, which leads to a...
PT-2017-9794
Name of the Vulnerable Software and Affected Versions Huawei P9 versions earlier than EVA-AL10C00B352 Huawei P9 Lite versions VNS-L21C185B130 and earlier Huawei P8 Lite versions ALE-L02C636B150 and earlier Description The issue is related to an input validation problem in the TrustZone driver. Th...
CVE-2016-8764: Improper Input Validation
The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150 and earlier versions has an input validation vulnerability, which allows attackers to read and writ...
chromium-browser: use after free in blink
A use after free in Blink in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...
chromium-browser: use after free in printing
A use after free in printing in Google Chrome prior to 57.0.2987.133 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...
CVE-2017-5056
A use after free in Blink in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...