9905 matches found
Adobe Reader DC JPEG2000 Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows an attacker to leak sensitive information on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...
Microsoft Windows GDI Component Information Disclosure (MS16-090: CVE-2016-3251)
An Information disclosure vulnerability exists in Windows GDI component. The vulnerability is due to the way Microsoft Graphics Component improperly discloses contents of its memory. An attacker who successfully exploited the vulnerabilities could obtain information to further compromise the user...
CVE-2016-3765
decoder/impeg2dbitstream.c in mediaserver in Android 6.x before 2016-07-01 allows attackers to obtain sensitive information from process memory or cause a denial of service out-of-bounds read via a crafted application, aka internal bug 28168413...
UBUNTU-CVE-2016-3765
decoder/impeg2dbitstream.c in mediaserver in Android 6.x before 2016-07-01 allows attackers to obtain sensitive information from process memory or cause a denial of service out-of-bounds read via a crafted application, aka internal bug 28168413...
UBUNTU-CVE-2014-9779
arch/arm/mach-msm/qdsp6v2/msmaudioion.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allows attackers to obtain sensitive information from kernel memory via a crafted offset, aka Android internal bug 28598347 and Qualcomm internal bug CR548679...
Vulnerability of Python software, which allows a malicious actor to compromise the confidentiality of protected information
In Python, integer overflow allows access to memory contents, provided that larger size and offset values are passed as arguments to the buffer type...
The vulnerability of the Firefox browser, which allows a malicious actor to compromise the confidentiality of protected information
The vulnerability exists in Mozilla Firefox due to improper initialization of memory intended for displaying GIFs. Exploiting this vulnerability allows malicious actors to gain access to confidential information from the process’s memory by using a specially crafted web script that interacts with...
The vulnerability in the Firefox ESR software allows a malicious individual to compromise the confidentiality of protected information.
A vulnerability exists in the mozilla::dom::AudioEventTimeline function within the implementation of the Web Audio API in Mozilla Firefox ESR, due to the improper creation of the audio data timeline. Exploiting this vulnerability allows malicious actors, operating remotely, to access confidential...
The vulnerability of the OpenSSL software allows a malicious attacker to compromise the confidentiality of protected information.
The vulnerability exists in the OBJobj2txt function in crypto/objects/objdat.c of OpenSSL. This vulnerability arises due to the absence of the '\0' character. Exploiting this vulnerability allows attackers to access confidential information from the stack memory of the process, by using the outpu...
The vulnerability of Thunderbird software allows a malicious attacker to compromise the confidentiality of protected information.
Vulnerability exists in Mozilla Firefox, Firefox ESR, and Thunderbird due to improper initialization of memory intended for displaying GIFs. Exploitation of this vulnerability allows malicious actors to gain access to confidential information from the process’s memory by using a specially crafted...
The vulnerability of the Firefox browser, which allows a malicious attacker to compromise the confidentiality of protected information
A vulnerability exists in the mozilla::dom::AudioEventTimeline function within the implementation of the Web Audio API in Mozilla Firefox, due to the improper creation of the audio data timeline. Exploiting this vulnerability allows malicious actors, operating remotely, to access confidential...
The vulnerability of the Firefox browser allows a malicious individual to execute arbitrary code, gain access to confidential information, or cause a service failure.
The Mozilla Firefox browser contains a vulnerability related to errors in the implementation of the mozilla::WaveReader::DecodeAudioData function. Exploiting this vulnerability allows malicious actors to gain access to confidential information from the dynamic memory of the process, trigger servi...
The vulnerability of the Linux operating system allows a malicious individual to gain access to confidential information from the kernel’s memory.
The vulnerability exists in the Linux kernel’s net/xfrm/xfrmuser.c file, due to the lack of initialization for certain structures. Exploiting this vulnerability allows local users to access confidential information from the kernel’s memory, using the privileged CAPNETADMIN privilege...
The vulnerability of the Linux operating system allows a malicious individual to gain access to confidential information from the kernel’s stack memory.
A vulnerability exists in the ccid3hctxgetsockopt function in the Linux kernel’s net/dccp/ccids/ccid3.c file, due to the lack of initialization for certain structures. Exploiting this vulnerability allows local users to access confidential information from the kernel’s stack memory through a...
The vulnerability of the Linux operating system allows a malicious individual to gain access to confidential information from the kernel’s memory.
The vulnerability exists in the Bluetooth subsystem of the Linux kernel due to incorrect initialization of data structures. Exploiting this vulnerability allows local users to access confidential information from the kernel’s memory, using a specially crafted system call called getsockopt. This...
The vulnerability of the Linux operating system allows a malicious individual to gain access to confidential information from the kernel’s stack memory.
The vulnerability exists in the implementation of the Linux kernel’s ATM layer, due to the lack of initialization for certain structures. Exploiting this vulnerability allows local users to access confidential information from the kernel’s stack memory, through a specially crafted application...
The vulnerability of the Firefox ESR browser allows a malicious individual to execute arbitrary code, gain access to confidential information, or cause a service failure.
The Mozilla Firefox ESR browser contains a vulnerability related to errors in the implementation of the libxul.so!gfxContext::Polygon function. Exploiting this vulnerability allows malicious actors to gain access to confidential information from the dynamic memory of the process, trigger service...
The vulnerability of the Firefox browser allows a malicious individual to execute arbitrary code, gain access to confidential information, or cause a service failure.
The Mozilla Firefox browser contains a vulnerability related to errors in the implementation of the libxul.so!gfxContext::Polygon function. Exploiting this vulnerability allows malicious actors to gain access to confidential information from the dynamic memory of the process, trigger service...
DLA-542-1 pidgin - security update
Bulletin has no description...
PHP 5.5.x < 5.5.37 Multiple Vulnerabilities
According to its banner, the version of PHP running on the remote web server is 5.5.x prior to 5.5.37. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists in the GD graphics library in the gdImageFillToBorder function within file gd.c when handling...