CVE-2016-5344

Multiple integer overflows in the MDSS driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allow attackers to cause a denial of service or possibly have unspecified other impact via a large size value, related to...

CVE-2016-5344

CVE-2016-5344 affects the MDSS driver in the Linux kernel 3.x, used in Qualcomm QuIC Android MSM contributions. The root cause is multiple integer overflows triggered by large size values in mdss_compat_utils.c, mdss_fb.c, and mdss_rotator.c, potentially causing denial of service and possibly oth...

SUSE-SU-2016:2174-1 Security update for Linux Kernel Live Patch 0 for SLE 12 SP1

This update for the Linux Kernel 3.12.49-11 fixes several issues. The following security bugs were fixed: - CVE-2016-6480: Race condition in the ioctlsendfib function in drivers/scsi/aacraid/commctrl.c in the Linux kernel allowed local users to cause a denial of service out-of-bounds access or...

SUSE-SU-2016:2179-1 Security update for Linux Kernel Live Patch 2 for SLE 12 SP1

This update for the Linux Kernel 3.12.51-6025 fixes several issues. The following security bugs were fixed: - CVE-2016-6480: Race condition in the ioctlsendfib function in drivers/scsi/aacraid/commctrl.c in the Linux kernel allowed local users to cause a denial of service out-of-bounds access or...

OpenJDK: integer overflows in bytecode streams (Hotspot, 8152479)

Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality via vectors related to Hotspot...

Micro Focus GroupWise Cross Site Scripting / Overflows

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities product: Micro Focus GroupWise vulnerable version: GroupWise 2014 R2 =SP1 GroupWise 2014 unsupported versions may be affected fixed version:...

Vulnerability of browsers Internet Explorer and Microsoft Edge, allowing a perpetrator to execute arbitrary code

The vulnerabilities of Internet Explorer and Microsoft Edge are caused by buffer overflows. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code through a specially crafted web page...

Internet Bug Bounty: Heap Overflow due to integer overflows

https://bugs.php.net/bug.php?id=72782...

PHP 7.x < 7.0.6 DoS Vulnerability (Aug 2016) - Windows

PHP is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...

Internet Bug Bounty: stack buffer overflows in the curses module

I found two stack buffer overflows in the curses module. These vulnerabilities have been reported to the PSRT and were fixed here: https://hg.python.org/cpython/rev/d5f6bc45b376 https://hg.python.org/cpython/rev/85b35300f200 Below are copies of the mails I sent to the PSRT. They describe the...

The vulnerability of the Internet Explorer browser, which allows a violator to trigger a service failure or execute arbitrary code

The vulnerabilities of JScript 5.8 and 9, and VBScript 5.7 and 5.8 in Internet Explorer are caused by buffer overflows. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or cause a denial-of-service attack memory corruption through a specially crafted web page...

FreeBSD : FreeBSD -- Multiple integer overflows in expat (libbsdxml) XML parser (0da8a68e-600a-11e6-a6c3-14dae9d210b8)

Multiple integer overflows have been discovered in the XMLGetBuffer function in the expat library. Impact : The integer overflows may be exploited by using specifically crafted XML data and lead to infinite loop, or a heap buffer overflow, which results in a Denial of Service condition, or enable...

SUSE-SU-2016:1985-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP4 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2016-5829: Multiple heap-based buffer overflows in the hiddevioctlusage function in drivers/hid/usbhid/hiddev.c in the Linux kernel allowed local users to...

Google Chrome < 52.0.2743.116 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 52.0.2743.116. It is, therefore, affected by multiple vulnerabilities as referenced in the 201608stable-channel-update-for-desktop advisory. - Multiple unspecified vulnerabilities in Google Chrome before 52.0.2743.116...

CVE-2016-5139

Multiple integer overflows in the opjtcdinittile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allow remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via crafted JPEG 2000 data...

CVE-2016-5139

Multiple integer overflows in the opjtcdinittile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allow remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via crafted JPEG 2000 data...

CVE-2016-5139

Multiple integer overflows in the opjtcdinittile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allow remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via crafted JPEG 2000 data...

CVE-2016-1951

Multiple integer overflows in io/prprf.c in Mozilla Netscape Portable Runtime NSPR before 4.12 allow remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impact via a long string to a PRprintf function...

DEBIAN-CVE-2016-1951

Multiple integer overflows in io/prprf.c in Mozilla Netscape Portable Runtime NSPR before 4.12 allow remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impact via a long string to a PRprintf function...

CVE-2016-1951

Multiple integer overflows in io/prprf.c in Mozilla Netscape Portable Runtime NSPR before 4.12 allow remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impact via a long string to a PRprintf function...