The vulnerability affects the editor for mathematical formulas and equations in the Microsoft Word text editor, as well as the Microsoft Office suite of programs and the Microsoft Office Compatibility Pack. This vulnerability allows a perpetrator to execute arbitrary code.

The vulnerability of the editor for mathematical formulas and equations in the Microsoft Word text editor, as well as in the Microsoft Office suite of programs and the Microsoft Office Compatibility Pack, arises due to an operation that goes beyond the buffer in memory. Exploiting this...

The vulnerability of the editor for mathematical formulas and equations in the Microsoft Word text editor, as well as in the Microsoft Office suite of programs and the Microsoft Office Compatibility Pack, allows a perpetrator to execute arbitrary code.

The vulnerability of the editor for mathematical formulas and equations in the Microsoft Word text editor, as well as in the Microsoft Office suite of programs and the Microsoft Office Compatibility Pack, arises due to an operation that goes beyond the buffer in memory. Exploiting this...

The vulnerability affects the editor for mathematical formulas and equations in the Microsoft Office program suite, the Microsoft Office Compatibility Pack, and the Microsoft Word text editor. This allows a perpetrator to execute arbitrary code.

The vulnerability of the editor for mathematical formulas and equations in the Microsoft Office program suite, the Microsoft Office Compatibility Pack, and the Microsoft Word text editor is due to an operation going beyond the buffer boundaries in memory. Exploiting this vulnerability could allow...

Important: quagga

Issue Overview: Infinite loop issue triggered by invalid OPEN message allows denial-of-service An infinite loop vulnerability was discovered in Quagga. A BGP peer could send specially crafted packets that would cause the daemon to enter an infinite loop, denying service and consuming CPU until it...

CVE-2018-5380

The Quagga BGP daemon bgpd prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for debug by 1 pointer value, based on input...

CVE-2018-5380

Removed by vendor...

SUSE-SU-2018:0456-1 Security update for quagga

This update for quagga fixes the security following issues: - The Quagga BGP daemon contained a bug in the ASPATH size calculation that could have been exploited to facilitate a remote denial-of-service attack via specially crafted BGP UPDATE messages. CVE-2017-16227, bsc1065641 - The Quagga BGP...

USN-3573-1: Quagga vulnerabilities

It was discovered that a double-free vulnerability existed in the Quagga BGP daemon when processing certain forms of UPDATE message. A remote attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2018-5379 It was discovered that the Quagga BGP daemon did not...

Ubuntu 14.04 LTS / 16.04 LTS : Quagga vulnerabilities (USN-3573-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3573-1 advisory. It was discovered that a double-free vulnerability existed in the Quagga BGP daemon when processing certain forms of UPDATE message. A remote...

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are caused by an operation that goes beyond the buffer boundaries in memory, allowing an attacker to trigger a service failure.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird arise from an operation that goes beyond the buffer boundaries in memory when reading certificates from the disk. Exploiting these vulnerabilities can allow a malicious actor to cause service failures using...

[slackware-security] rsync

New rsync packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/rsync-3.1.3-i586-1slack14.2.txz: Upgraded. This update fixes two security issues: Fixed a buffer overru...

The vulnerability of the Sentinel LDK RTE platform for software protection and licensing arises from an operation that goes beyond buffer boundaries in memory, allowing a malicious actor to trigger a service failure.

The vulnerability of the Sentinel LDK RTE platform for software protection and licensing stems from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure remotely...

openSUSE Security Update : curl (openSUSE-2018-56)

This update for curl fixes the following issues : Security issues fixed : - CVE-2017-8816: Buffer overrun flaw in the NTLM authentication code bsc1069226. - CVE-2017-8817: Read out of bounds flaw in the FTP wildcard function bsc1069222. This update was imported from the SUSE:SLE-12:Update update...

The vulnerability in Internet Explorer, caused by an operation that goes beyond the buffer boundaries in memory, allows a malicious actor to gain the privileges of the current user.

The vulnerability of the Internet Explorer browser is related to improper handling of objects in memory. Exploiting this vulnerability can allow a remote attacker to gain privileges as the current user...

Vulnerability of the JavaScript ChakraCore kernel, Internet Explorer and Microsoft Edge browsers, caused by operations beyond the buffer in memory, allowing attackers to gain control of the current user’s rights

The vulnerability in the JavaScript ChakraCore engine, as well as in browsers Internet Explorer and Microsoft Edge, arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain privileges of the current user...

The vulnerability of the CFNetwork component in the Mac OS X operating system allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the CFNetwork component in the Mac OS X operating system arises from the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context, or to trigger a service failure...

The vulnerability in Internet Explorer, caused by an operation that goes beyond the buffer boundaries in memory, allows a malicious actor to gain the privileges of the current user.

The vulnerability of the Internet Explorer browser is related to improper handling of objects in memory. Exploiting this vulnerability can allow a remote attacker to gain privileges as the current user...

The vulnerability of VMware NAT hypervisors in VMware Workstation and VMware Fusion allows a hacker to execute arbitrary code on the host operating system.

The vulnerability of the VMware NAT service vmnat.exe in VMware Workstation and VMware Fusion stems from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor, operating locally on the guest operating system, to execute arbitrary code on the...

The vulnerability of the APFS component in the Mac OS X operating system allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the APFS component in the Mac OS X operating system arises from the execution of an operation outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context, or cause a service failure memory corruption...

Vulnerability of Microsoft Word text editor, the Microsoft Office Compability Pack, and other Microsoft Office programs, caused by an operation that goes beyond the buffer in memory, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft Word, the Microsoft Office Compability Pack, and other Microsoft Office programs arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current...