The vulnerabilities of PDF viewer programs such as Adobe Reader and Adobe Reader Document Cloud, as well as PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, allow attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Adobe Reader Document Cloud, as well as PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, are due to a numerical overflow condition. Exploiting these vulnerabilities allows an attacker to execute arbitrary...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the sound/soc/msm/qdsp6v2/q6lsm.c file of the Qualcomm Android operating system is due to a numerical overflow. Exploiting this vulnerability can allow an attacker, operating remotely, to increase their privileges through a specially created application...

The vulnerability of the Firefox browser, which allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the WebSocketChannel class in the Firefox WebSockets subsystem is caused by a numerical overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code or trigger a service failure memory corruption using specially crafted packets that cause incorrect...

The vulnerability of the Firefox browser, which allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the WebSocketChannel class in the Firefox WebSockets subsystem is caused by a numerical overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code or trigger a service failure memory corruption using specially crafted packets that cause incorrect...

The vulnerabilities of PDF viewer programs such as Adobe Reader and Adobe Reader Document Cloud, as well as PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, allow attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Adobe Reader Document Cloud, as well as PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, are due to a numerical overflow condition. Exploiting these vulnerabilities allows an attacker to execute arbitrary...

The vulnerability of Symantec’s antivirus protection tools allows a hacker to execute arbitrary code.

The vulnerability of the Dec2SS.dll file in Symantec’s anti-virus protection software is caused by a numerical overflow or buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially crafted file...

The vulnerability of the Adobe Photoshop graphic editor, which allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Photoshop graphic editor is related to a buffer overflow in the dynamic memory, caused by a numerical overflow. Exploiting this vulnerability allows an attacker acting locally to execute arbitrary code...

The vulnerability of the Adobe AIR software platform allows a perpetrator to execute arbitrary code.

The vulnerability of the Adobe AIR software platform is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

The vulnerability of the Flash Player software allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

A numerical overflow in the Adobe Flash Player allows a malicious individual to execute arbitrary code...

CVE-2016-3739

The 1 mbedconnectstep1 function in lib/vtls/mbedtls.c and 2 polarsslconnectstep1 function in lib/vtls/polarssl.c in cURL and libcurl before 7.49.0, when using SSLv3 or making a TLS connection to a URL that uses a numerical IP address, allow remote attackers to spoof servers via an arbitrary valid...

CVE-2016-3739

The 1 mbedconnectstep1 function in lib/vtls/mbedtls.c and 2 polarsslconnectstep1 function in lib/vtls/polarssl.c in cURL and libcurl before 7.49.0, when using SSLv3 or making a TLS connection to a URL that uses a numerical IP address, allow remote attackers to spoof servers via an arbitrary valid...

CVE-2016-3739

CVE-2016-3739 affects curl/libcurl prior to 7.49.0. The flaw exists in the mbed_connect_step1 (mbedtls.c) and polarssl_connect_step1 (polarssl.c) code paths when using SSLv3 or TLS for a URL that resolves to a numerical IP address. This can enable remote attackers to spoof the TLS/SSL server by p...

The vulnerability of Xen hypervisors allows a malicious actor to trigger a service failure or increase their privileges.

The vulnerability of Xen hypervisors arises due to a numerical overflow condition. Exploiting this vulnerability allows an attacker acting locally to cause a service failure or increase their privileges including forced termination of the host...

The vulnerability of the FuseISO disk mounting software allows a hacker to trigger a service failure or cause other adverse effects.

The vulnerability of the isofsrealreadzf function isofs.c in the FuseISO disk mounting software is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker to cause a service failure application termination, or possibly have other effects due to the large size of the ZF...

Vulnerabilities of iOS and Mac OS X operating systems, which allow a hacker to execute arbitrary code in a privileged context

The multiple vulnerabilities in the kernels of iOS and Mac OS X operating systems are caused by numerical overflows. Exploitation of these vulnerabilities allows a malicious actor to execute arbitrary code in a privileged context using a specially created application...

Vulnerabilities in the Android operating system that allow a hacker to increase their privileges

The multiple vulnerabilities in the libeffects library of the Android operating system’s mediaserver are caused by a numerical overflow. Exploiting these vulnerabilities could allow an attacker, operating remotely, to enhance their privileges through a specially created application...

The vulnerabilities of the software platforms Flash Player, Flash Player ESR, and Adobe Integrated Runtime allow attackers to execute arbitrary code.

The vulnerabilities of the software platforms Flash Player, Flash Player ESR, and Adobe Integrated Runtime are caused by a numerical overflow. Exploiting these vulnerabilities allows an attacker operating remotely to execute arbitrary code...

The vulnerabilities of the software platforms Flash Player, Flash Player ESR, and Adobe Integrated Runtime allow attackers to execute arbitrary code.

The vulnerabilities of the software platforms Flash Player, Flash Player ESR, and Adobe Integrated Runtime are caused by a numerical overflow. Exploiting these vulnerabilities allows an attacker operating remotely to execute arbitrary code...

Vulnerabilities in the OpenSSL library, which allow a hacker to trigger a service failure or cause other adverse effects

The multiple vulnerabilities in the OpenSSL library are caused by a numerical overflow. Exploitation of these vulnerabilities could allow an attacker to trigger a service failure memory corruption or cause other effects through a long string of digits, leading to incorrect processing in functions...

[SECURITY] Fedora 22 Update: octave-3.8.2-19.fc22

GNU Octave is a high-level language, primarily intended for numerical computations. It provides a convenient command line interface for solving linear and nonlinear problems numerically, and for performing other numerical experiments using a language that is mostly compatible with Matlab. It may...