2281 matches found
USN-3298-1 miniupnpc vulnerability
It was discovered that MiniUPnP incorrectly handled memory. A remote attacker could use this issue to cause a denial of service or possibly execute arbitrary code with privileges of the user running an application that uses the MiniUPnP library...
Memory out-of-bounds write vulnerability in WPS Text WordConvertDll module
WPS is an office software developed by Kingsoft Office Software. A memory out-of-bounds write vulnerability exists in the WPS text WordConvertDll module. The vulnerability is caused due to the program failing to validate the buffer length when the user uses the Traditional and Simplified Conversi...
The vulnerability of the Safari browser, which allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of the WebKit component of the Safari browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...
CVE-2017-0190
CVE-2017-0190 affects the GDI component in multiple Windows platforms (Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Windows 10 (Gold, 1511, 1607), and Windows Server 2016). The vulnerability allows remote attackers to obtain sensitive in...
jasper: incorrect handling of bufsize 0 in mem_resize()
Double free vulnerability in the memclose function in jasstream.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted BMP image to the imginfo command...
Memory out-of-bounds access vulnerability in wps
WPS is an office software developed by Kingsoft Office Software. A memory out-of-bounds access vulnerability exists in WPS. The vulnerability is due to the docreader module did not take the length of the value of the more check due to, an attacker can use the vulnerability to obtain sensitive...
The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code
The vulnerability of the Flash Player software is related to the use of memory after it is freed during the execution of internal scripts. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2017-5465
An out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash and also allows for otherwise inaccessible memory being copied into SVG graphic content, which could then displayed. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox ESR 52.1, and...
Buffer Overflow Vulnerability
ImageMagick is vulnerable to denial of service DoS attacks and possibly other attacks. The vulnerabilities exists because too many exceptions can be caused in memory.c which can cause a buffer overflow...
CVE-2016-9958
game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations...
CVE-2017-0165
An elevation of privilege vulnerability exists when Microsoft Windows running on Windows 10, Windows 10 1511, Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2 fails to properly sanitize handles in memory, aka "Windows Elevation of Privilege Vulnerability."...
Microsoft Edge browser vulnerability, allowing a hacker to execute arbitrary code
The vulnerability of Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain control of the current user’s privileges and execute arbitrary code...
USN-3228-1: libevent vulnerabilities | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Description Guido Vranken discovered that libevent incorrectly handled memory when processing certain data. A remote attacker could possibly use this issue with an application that uses libevent to cause a denial of...
The vulnerability of the Windows operating system allows a perpetrator to obtain confidential information from the process memory.
The vulnerability of the Uniscribe component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, acting remotely, to obtain confidential information from the process’s memory through a specially crafted web...
The vulnerability of the Windows operating system allows a perpetrator to obtain confidential information from the process memory.
The vulnerability of the Uniscribe component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, acting remotely, to obtain confidential information from the process’s memory through a specially crafted web...
The vulnerability of the Windows operating system allows a perpetrator to obtain confidential information from the process memory.
The vulnerability of the Uniscribe component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, acting remotely, to obtain confidential information from the process’s memory through a specially crafted web...
The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code
The vulnerability of the ActionScript 2 Camera object in the Flash Player software platform is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
CVE-2017-0067
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An...
The vulnerability of the iOS operating system, Safari browser, and iTunes media player allows a perpetrator to trigger a service failure or execute arbitrary code.
The vulnerability of the WebKit component of the iOS operating system, Safari browser, and iTunes media player is due to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memor...