2436 matches found
Memory out-of-bounds access vulnerability in wps
WPS is an office software developed by Kingsoft Office Software. A memory out-of-bounds access vulnerability exists in WPS. The vulnerability is due to the docreader module did not take the length of the value of the more check due to, an attacker can use the vulnerability to obtain sensitive...
The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code
The vulnerability of the Flash Player software is related to the use of memory after it is freed during the execution of internal scripts. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2017-5465
An out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash and also allows for otherwise inaccessible memory being copied into SVG graphic content, which could then displayed. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox ESR 52.1, and...
Buffer Overflow Vulnerability
ImageMagick is vulnerable to denial of service DoS attacks and possibly other attacks. The vulnerabilities exists because too many exceptions can be caused in memory.c which can cause a buffer overflow...
CVE-2016-9958
game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations...
CVE-2017-0165
An elevation of privilege vulnerability exists when Microsoft Windows running on Windows 10, Windows 10 1511, Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2 fails to properly sanitize handles in memory, aka "Windows Elevation of Privilege Vulnerability."...
Microsoft Edge browser vulnerability, allowing a hacker to execute arbitrary code
The vulnerability of Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain control of the current user’s privileges and execute arbitrary code...
USN-3228-1: libevent vulnerabilities | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Description Guido Vranken discovered that libevent incorrectly handled memory when processing certain data. A remote attacker could possibly use this issue with an application that uses libevent to cause a denial of...
The vulnerability of the Windows operating system allows a perpetrator to obtain confidential information from the process memory.
The vulnerability of the Uniscribe component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, acting remotely, to obtain confidential information from the process’s memory through a specially crafted web...
The vulnerability of the Windows operating system allows a perpetrator to obtain confidential information from the process memory.
The vulnerability of the Uniscribe component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, acting remotely, to obtain confidential information from the process’s memory through a specially crafted web...
The vulnerability of the Windows operating system allows a perpetrator to obtain confidential information from the process memory.
The vulnerability of the Uniscribe component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, acting remotely, to obtain confidential information from the process’s memory through a specially crafted web...
The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code
The vulnerability of the ActionScript 2 Camera object in the Flash Player software platform is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
CVE-2017-0067
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An...
The vulnerability of the iOS operating system, Safari browser, and iTunes media player allows a perpetrator to trigger a service failure or execute arbitrary code.
The vulnerability of the WebKit component of the iOS operating system, Safari browser, and iTunes media player is due to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memor...
CVE-2016-7409
The dbclient and server in Dropbear SSH before 2016.74, when compiled with DEBUGTRACE, allows local users to read process memory via the -v argument, related to a failed remote ident...
CVE-2016-9830
The MagickRealloc function in memory.c in Graphicsmagick 1.3.25 allows remote attackers to cause a denial of service crash via large dimensions in a jpeg image...
Google Chrome Renderer Memory Error Referencing Code Execution Vulnerability
Google Chrome is a popular web browser. A memory misreference code execution vulnerability exists in Google Chrome Renderer, which allows remote attackers to exploit the vulnerability to construct a malicious WEB page and trick users into parsing it, which can crash the application or execute...
Memory Out-of-Bounds Read Vulnerability in WPS File Parsing
WPS Office is a set of office software developed by Beijing Kingsoft Office Software Company. A memory out-of-bounds read vulnerability exists in WPS file parsing. Due to the docReader module of WPS text, when calling the 'memcpy' function, the program fails to adequately perform boundary checkin...
CVE-2016-5796
CVE-2016-5796 affects Fatek Automation PM Designer V3 (2.1.2.2) and FV Designer (1.2.8.0). It is caused by Improper Restriction of Operations within the Bounds of a Memory Buffer, allowing remote attackers to crash or execute arbitrary code by sending additional valid packets. Public advisories n...
The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code
The vulnerability of the ActionScript FileReference class in the Flash Player software platform is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...