5384 matches found
UBUNTU-CVE-2016-10040
Stack-based buffer overflow in QXmlSimpleReader in Qt 4.8.5 allows remote attackers to cause a denial of service application crash via a xml file with multiple nested open tags...
Stack overflow
Stack-based buffer overflow in QXmlSimpleReader in Qt 4.8.5 allows remote attackers to cause a denial of service application crash via a xml file with multiple nested open tags...
CVE-2016-10040
CVE-2016-10040 : The connected Nessus/NVD-derived documents confirm a stack-based buffer overflow in QXmlSimpleReader of Qt 4.8.5, enabling a remote attacker to cause an application crash (DoS) via a crafted XML file with multiple nested open tags. The description explicitly ties this to Qt 4.8.5...
CVE-2016-10040
Stack-based buffer overflow in QXmlSimpleReader in Qt 4.8.5 allows remote attackers to cause a denial of service application crash via a xml file with multiple nested open tags...
Memory corruption
An issue was discovered in Magick++ in ImageMagick 6.9.7. A specially crafted file creating a nested exception could lead to a memory leak thus, a DoS...
CVE-2017-6499
An issue was discovered in Magick++ in ImageMagick 6.9.7. A specially crafted file creating a nested exception could lead to a memory leak thus, a DoS...
CVE-2017-6499
An issue was discovered in Magick++ in ImageMagick 6.9.7. A specially crafted file creating a nested exception could lead to a memory leak thus, a DoS...
UBUNTU-CVE-2017-6499
An issue was discovered in Magick++ in ImageMagick 6.9.7. A specially crafted file creating a nested exception could lead to a memory leak thus, a DoS...
GStreamer gst-plugins-base denial of service vulnerability (CNVD-2017-01449)
GStreamer is a set of frameworks for handling streaming media. A denial of service vulnerability exists in GStreamer gst-plugins-base, which allows remote attackers to cause a denial of service stack overflow and crash via a nested WAVEFORMATEX vector...
DEBIAN-CVE-2017-5839
The gstriffcreateaudiocaps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 does not properly limit recursion, which allows remote attackers to cause a denial of service stack overflow and crash via vectors involving nested WAVEFORMATEX...
UBUNTU-CVE-2017-5839
The gstriffcreateaudiocaps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 does not properly limit recursion, which allows remote attackers to cause a denial of service stack overflow and crash via vectors involving nested WAVEFORMATEX...
Linux Kernel Denial of Service Vulnerability (CNVD-2017-01335)
The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A security vulnerability exists in the nestedvmxcheckvmptr function in the arch/x86/kvm/vmx.c file in Linux kernel 4.9.8 and earlier. An attacker on the virtual machine side...
DEBIAN-CVE-2017-2596
The nestedvmxcheckvmptr function in arch/x86/kvm/vmx.c in the Linux kernel through 4.9.8 improperly emulates the VMXON instruction, which allows KVM L1 guest OS users to cause a denial of service host OS memory consumption by leveraging the mishandling of page references...
PT-2017-1185 · Linux +5 · Linux Kernel +5
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.9.8 Description: The issue is related to errors in resource management in the nested vmx check vmptr function of the Linux operating system. This can be exploited by a local attacker to cause a denial of...
CVE-2017-2596
Linux kernel built with the KVM visualization support CONFIGKVM, with nested visualizationnVMX feature enablednested=1, is vulnerable to host memory leakage issue. It could occur while emulating VMXON instruction in 'handlevmon'. An L1 guest user could use this flaw to leak host memory potentiall...
Nested, Targeted Attacks Built for Reconnaissance
Researchers say members of the North Atlantic Treaty Organization were targeted during the holidays by a unique document-based attack that evades discovery by lying dormant when it detects a security researcher’s test environment. Characteristics of this attack, according to researchers at Cisco...
UBUNTU-CVE-2013-7454
The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting XSS filter via nested forbidden strings...
UBUNTU-CVE-2013-7451
The validator module before 1.1.0 for Node.js allows remote attackers to bypass the XSS filter via a nested tag...