Adobe Reader and Acrobat Memory Error Referencing Code Execution Vulnerability (CNVD-2016-08946)

Adobe Reader is a free PDF file reader; Acrobat is a PDF file editing and conversion tool; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDFs. A memory misreference code execution vulnerability exists in Adobe Reader and Acrobat, which allows remote attackers to exploit...

ImageMagick 'MagickCore/memory.c' Denial of Service Vulnerability

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in ImageMagick. An attacker can exploit this vulnerability to cause a denial ...

The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code

The vulnerability of the Flash Player software is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using undefined vectors...

Apple OS X kernel memory corruption vulnerability (CNVD-2016-08100)

Apple OS X is a specialized operating system developed by Apple for Mac computers. kernel is one of the kernel components. A memory corruption vulnerability exists in the kernel in Apple OS X version 10.11.6. A local attacker can exploit this vulnerability to execute arbitrary code with kernel...

Apple iOS WebKit Memory Corruption Vulnerability (CNVD-2016-08099)

Apple iOS is the United States Apple Apple company for mobile devices developed by a set of operating systems. WebKit is KDE, Apple Apple, Google Google and other companies jointly developed a set of open source Web browser engine, currently used by Apple Safari and Google Chrome and other...

The vulnerability of the Debian GNU/Linux operating system and the DBD::mysql driver allows attackers to exert undefined effects.

The vulnerability of the mylogin function in the Debian GNU/Linux operating system and the DBD::mysql driver is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to have unpredictable effects by using the mysqlerrno function after the mylogin...

CVE-2016-3364

Microsoft Visio 2016 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."...

Mozilla Firefox and Firefox ESR 'CanonicalizeXPCOMParticipant' function memory misreference vulnerability

Mozilla Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A memory misreference vulnerability exists in the 'CanonicalizeXPCOMParticipant' function in Mozilla Firefox and Firefox, which can be exploited by a remote attacker to construct a malicious WEB...

The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code

The vulnerability of the Flash Player software is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code

The vulnerability of the Flash Player software is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code

The vulnerability of the Flash Player software is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Internet Bug Bounty: Use After Free Vulnerability in array_walk()/array_walk_recursive()

https://bugs.php.net/bug.php?id=70713 I think this bugs is still security issue since this bug can be still triggered remotely in some real world&apps. Example: https://github.com/zendframework/zend-loader/blob/ceb32b5129525e1f19b01f37dbbcc6398b0a9635/src/ClassMapAutoloader.phpL210-L215...

Millet bracelet memory vulnerability hackers can get private data-vulnerability warning-the black bar safety net

According to the Open Effect analysis, a common wearable devices in theory, there is an attack or data being intercepted possibilities. ! We have no concerns over wearable devices, the network security? From the Open Effect of the researchers conclusions may not be too optimistic. According to th...

Lepton memory corruption vulnerability (CNVD-2016-05180)

Lepton is a set of tools for lossless compression of JPEG format files. A memory corruption vulnerability exists in Lepton, which can be exploited by attackers to obtain sensitive information and cause a denial of service...

USN-3030-1 libgd2 vulnerabilities

It was discovered that the GD library incorrectly handled memory when using gdImageScaleTwoPass. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS. CVE-2013-7456 It was discovered that the GD library incorrectly handled certain...

The vulnerability of the IBM Domino electronic document management system allows a malicious actor to execute arbitrary code remotely.

The IBM Domino electronic document management system has a vulnerability related to memory errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the Windows operating system allows a malicious individual to compromise the confidentiality of protected information.

A vulnerability that allows access to confidential information exists in Windows and is related to kernel memory handling. Exploiting this vulnerability enables a malicious individual to obtain information about memory addresses or other details related to the kernel...

The vulnerability of Google Chrome browser allows a malicious actor to trigger a service failure.

Google Chrome browser contains a vulnerability related to memory usage after deallocation, known as a “use-after-free error,” in the RenderBlock::addChildIgnoringAnonymousColumnBlocks function in core/rendering/RenderBlock.cpp of Blink. Exploiting this vulnerability allows malicious actors to cau...

The vulnerability of the Internet Explorer browser, which allows a malicious individual to execute arbitrary code or trigger a service failure.

The Internet Explorer browser contains an unspecified vulnerability related to memory-related errors. Exploiting this vulnerability allows malicious actors, operating remotely, to execute arbitrary code in the context of the current user through a specially created website...

The vulnerability of the Internet Explorer browser, which allows a malicious individual to execute arbitrary code or trigger a service failure.

Internet Explorer browser contains a vulnerability related to memory management after deallocation. This issue, known as a “use-after-free error,” occurs when processing the CTreePos object. It allows attackers to execute arbitrary code or cause service interruptions through a specially created...