The vulnerability of the Adobe Digital Editions e-book reading program, caused by an operation that goes beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Digital Editions e-book reading program arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Multiple Huawei products IKEv2 protocol out-of-bounds writing vulnerability

Huawei IPS Module, NGFW Module, NIP6300/6600 series products and Secospace USG series are the new generation of professional intrusion prevention and firewall products launched by Huawei for enterprise, IDC, campus network and carrier customers. An out-of-bounds write vulnerability exists in the...

The vulnerability of the BigFix Platform, a management platform for IT equipment, relates to the use of memory after it is freed. This allows an attacker to execute arbitrary code.

The vulnerability of the BigFix Platform management platform is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

USN-3494-1: XML::LibXML vulnerability

It was discovered that XML::LibXML incorrectly handled memory when processing a replaceChild call. A remote attacker could possibly use this issue to execute arbitrary code...

USN-3493-1: Exim vulnerability

It was discovered that Exim incorrectly handled memory in the ESMTP CHUNKING extension. A remote attacker could use this issue to cause Exim to crash, resulting in a denial of service, or possibly execute arbitrary code. The default compiler options for affected releases should reduce the...

MGASA-2017-0424 Updated vlc packages fix security vulnerability

avcodec 2.2.x, as used in VideoLAN VLC media player before 2.2.7, allows out-of-bounds heap memory write due to calling memcpy with a wrong size, leading to a denial of service application crash or possibly code execution CVE-2017-10699. The VLC packages have been updated to version 2.2.8, which...

CVE-2017-8141

The CVE-2017-8141 entry concerns a memory double-free vulnerability in the Touch Panel (TP) driver of Huawei P10 Plus smartphones with software versions prior to VKY-AL00C00B153. Exploitation requires root privileges and tricking a user into installing a malicious app; the app can spawn multiple ...

CVE-2017-8140

CVE-2017-8140 affects Huawei P9 Plus devices with firmware versions older than VIE-AL10BC00B353, where the soundtrigger driver contains a memory double-free vulnerability. An attacker can entice a user to install a malicious app, which may create multiple threads and attempt to free specific memo...

CVE-2017-8140

The soundtrigger driver in P9 Plus smart phones with software versions earlier than VIE-AL10BC00B353 has a memory double free vulnerability. An attacker tricks a user into installing a malicious application, and the application can start multiple threads and try to free specific memory, which cou...

openSUSE Security Update : GraphicsMagick (openSUSE-2017-1276)

This update for GraphicsMagick fixes the following security issues : - CVE-2017-13776: denial of service issue in ReadXBMImage in a coders/xbm.c bsc1056429 - CVE-2017-13777: denial of service issue in ReadXBMImage in a coders/xbm.c bsc1056426 - CVE-2017-13134: heap-based buffer over-read allowing...

CVE-2017-11854

Microsoft Word 2007 Service Pack 3, Microsoft Word 2010 Service Pack 2, Microsoft Office 2010 Service Pack 2, and Microsoft Office Compatibility Pack Service Pack 3 allow an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka...

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to improper handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted web page...

The vulnerability of the Internet Explorer browser, related to improper handling of objects in memory, allows a malicious actor to execute arbitrary code.

The vulnerability of the Internet Explorer browser is related to improper handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted web page...

Microsoft Edge browser’s vulnerability, related to improper processing of JavaScript object instances in memory, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Edge relates to the improper handling of JavaScript objects in memory by the kernel. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted web page...

WPS docreader.dll Memory Out-of-Bounds Read Vulnerability

WPS Office is an office software suite developed independently by Kingsoft Corporation. A memory out-of-bounds read vulnerability exists in the drCreateSource3Ex function in docreader.dll in WPS, which is caused by the program failing to properly handle malformed wps files resulting in...

CVE-2017-2892

An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT packet can cause an arbitrary out-of-bounds memory read and write potentially resulting in information disclosure, denial of service and remote code...

Debian DLA-1162-1 : apr security update

It was discovered that there was an out-of-bounds memory vulnerability in apr, a support/portability library for various applications. When the aprexptime or aprosexptime functions were invoked with an invalid month field value, out of bounds memory may have been be accessed when converting this...

[SECURITY] [DLA 1162-1] apr security update

Package : apr Version : 1.4.6-3+deb7u2 CVE ID : CVE-2017-12613 Debian Bug : 879708 It was discovered that there was an out-of-bounds memory vulnerability in apr, a support/portability library for various applications. When the aprexptime or aprosexptime functions were invoked with an invalid mont...

Google Chrome memory misreference vulnerability (CNVD-2017-33590)

Google Chrome for Linux, Windows, Mac and Android is a web browser based on Linux, Windows, Mac and Android platforms developed by Google, Inc.IndexedDB is one of the built-in databases. A memory misreference vulnerability exists in IndexedDB in Google Chrome on Linux, Android, Windows and Mac...

Google Chrome memory misreference vulnerability (CNVD-2017-33602)

Google Chrome for Linux, Windows, Mac and Android is a web browser based on Linux, Windows, Mac and Android platforms developed by Google Google.V8 is one of the open source JavaScript engine. A memory misreference vulnerability exists in V8 in Google Chrome for Mac, Windows, Linux and Android...