The vulnerability of the Adobe Reader DC PDF viewer program, which allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Reader DC PDF viewer program is related to buffer overflows in the dynamic memory, caused by integer overflows. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Firefox browser, which allows a violator to trigger a service failure

The vulnerability of the nsXMLHttpRequest::AppendToResponseText method in Firefox browsers is caused by buffer overflows in dynamic memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Fedora 21 : pcre-8.35-12.fc21 (2015-11019)

This release fixes two heap buffer overflows when compiling certain regular expressions: CVE-2015-3210 and CVE-2015-5073. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

Adobe Reader / Acrobat multiple security vulnerabilities

Buffer overflows, memory corruptions, information disclosure...

Adobe Flash Player multiple security vulnerabilities

Multiple memory corruptions, buffer overflows, information disclosure...

CVE-2015-0795

Multiple stack-based buffer overflows in the SafeShellExecute method in the NetIQExecObject.NetIQExec.1 ActiveX control in NetIQExec.dll in NetIQ Security Solutions for iSeries 8.1 allow remote attackers to execute arbitrary code via long arguments, aka ZDI-CAN-2699...

CVE-2015-0795

CVE-2015-0795 affects NetIQ Security Solutions for ISeries. The NetIQExecObject.NetIQExec.1 ActiveX Control’s SafeShellExecute method in NetIQExec.dll contains a stack-based buffer overflow when processing long parameters, enabling remote code execution in affected installations of version 8.1. T...

[SECURITY] [DSA 3303-1] cups-filters security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3303-1 [email protected] https://www.debian.org/security/ Alessandro Ghedini July 07, 2015 https://www.debian.org/security/faq -...

Firefox 39 Out With Patches for Four Critical Vulnerabilities

Mozilla has rolled out a new version of its Firefox browser, an update that includes patches for four critical security vulnerabilities and several less-severe bugs. IN all, Firefox 39 patches 13 vulnerabilities, including two high-risk bugs and six moderate-level ones. The most dangerous...

Mozilla Thunderbird < 38.1 Multiple Vulnerabilities (Mac OS X) (Logjam)

The version of Thunderbird installed on the remote Mac OS X host is prior to 38.1. It is, therefore, affected by multiple vulnerabilities : - A security downgrade vulnerability exists due to a flaw in Network Security Services NSS. When a client allows for a ECDHEECDSA exchange, but the server do...

Debian Security Advisory DSA 3303-1 (cups-filters - security update)

It was discovered that the texttopdf utility, part of cups-filters, was susceptible to multiple heap-based buffer overflows due to improper handling of print jobs with a specially crafted line size. This could allow remote attackers to crash texttopdf or possibly execute arbitrary code. OpenVAS...

CVE-2015-4647

Multiple stack-based buffer overflows in Ipropsapi in Panasonic Security API PS-API ActiveX SDK before 8.10.18 allow remote attackers to execute arbitrary code via a long string in the 1 FilePassword property or to the 2 GetStringInfo method...

CVE-2015-4647

Multiple stack-based buffer overflows in Ipropsapi in Panasonic Security API PS-API ActiveX SDK before 8.10.18 allow remote attackers to execute arbitrary code via a long string in the 1 FilePassword property or to the 2 GetStringInfo method...

Debian: Security Advisory (DSA-3303-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2015-0259 Updated coreutils package fixes security vulnerability

Buffer overflows in sort related to the usage of UTF-8 characters CVE-2015-4041, CVE-2015-4042...

CVE-2015-3717

Multiple buffer overflows in the printf functionality in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allow remote attackers to execute arbitrary code or cause a denial of service application crash via unspecified vectors...

CVE-2015-3717

Multiple buffer overflows in the printf functionality in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allow remote attackers to execute arbitrary code or cause a denial of service application crash via unspecified vectors...

Vulnerabilities found through code inspection — Mozilla

Security researcher Ronald Crane reported seven vulnerabilities affecting released code that he found through code inspection. These included three uses of uninitialized memory, one poor validation leading to an exploitable crash, one read of unowned memory in zip files, and two buffer overflows...

SUSE-SU-2015:1364-1 Security update for e2fsprogs

Two security issues were fixed in e2fsprogs: CVE-2015-0247: Various heap overflows were fixed in e2fsprogs fsck, dumpe2fs, e2image. CVE-2015-1572: Fixed a potential buffer overflow in closefs. bsc918346 Additionally, badblocks was enhanced to work with very large partitions. bsc932539 Security...

Details Available on Patched Adobe, Windows Font Vulnerabilities

A Google Project Zero researcher has publicly disclosed details on a number of patched Adobe and Microsoft vulnerabilities, including one in the Adobe Type Manager Font Driver that could enable takeover of a number of systems supporting modern font engines. Mateusz Jurczyk pointed the finger at h...