5370 matches found
CVE-2017-0898
Ruby before 2.4.2, 2.3.5, and 2.2.8 is vulnerable to a malicious format string which contains a precious specifier with a huge minus value. Such situation can lead to a buffer overrun, resulting in a heap memory corruption or an information disclosure from the heap...
UBUNTU-CVE-2017-0898
Ruby before 2.4.2, 2.3.5, and 2.2.8 is vulnerable to a malicious format string which contains a precious specifier with a huge minus value. Such situation can lead to a buffer overrun, resulting in a heap memory corruption or an information disclosure from the heap...
The vulnerability of the Venkman script debugger for the Firefox browser allows a hacker to execute arbitrary code.
The vulnerability of the Venkman script debugger in the Firefox browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the datal driver’s refclock parameter in the Network Time Protocol NTP allows a perpetrator to execute arbitrary code or cause a service failure.
The vulnerability of the datal driver parameter of the Network Time Protocol refclock protocol is caused by an operation going beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code or cause a service failure by using a negative...
The vulnerability of the Android operating system from the CAF repository exists due to memory buffer cleanup errors, allowing attackers to cause memory corruption.
The vulnerability of the Linux operating system’s Android kernel from the CAF repository involves the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to cause memory corruption by using an incorrect length for memory buffer...
The vulnerability of the system call in the TrustZone of the Android CAF-release operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the TrustZone system call in the Android CAF-release operating system arises from the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the Android operating system from the CAF repository, related to insufficient checking of the USB interface during loading, allows a hacker to execute arbitrary code.
The vulnerability of the Android operating system from the CAF repository arises from the execution of an operation outside the buffer boundaries. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, due to insufficient protection of the USB interface during...
The vulnerability of the Android CAF-release operating system, caused by the operation going beyond buffer boundaries in memory, allows a hacker to trigger a memory leak.
The vulnerability of the Android CAF-release operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to trigger a memory leak when a connection is denied for the clientHello message, which is a cryptographi...
The vulnerability in the JavaScript kernel of Microsoft Edge allows a hacker to execute arbitrary code.
The vulnerability in the Microsoft Edge JavaScript kernel is caused by an operation going beyond the buffer boundaries in memory memory corruption in the kernel. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, as a result of...
Vulnerability in the JPEG parser of PDF editing software like Adobe Acrobat Document Cloud, Adobe Acrobat, and PDF viewing software like Adobe Reader, Foxit Reader, Adobe Reader Document Cloud, allowing attackers to execute arbitrary code.
The vulnerability in the JPEG parser of PDF editing software like Adobe Acrobat Document Cloud, Adobe Acrobat, and PDF viewing software like Adobe Reader and Foxit Reader arises due to an operation going beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to...
The vulnerability of the Microsoft Windows PDF Library on the Windows operating system allows a hacker to execute arbitrary code.
The vulnerability of the Microsoft Windows PDF Library on the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code when objects in memory are processed incorrectly...
The vulnerability in the JavaScript kernel of Microsoft Edge allows a hacker to execute arbitrary code.
The vulnerability in the Microsoft Edge JavaScript kernel is caused by an operation going beyond the buffer boundaries in memory memory corruption in the kernel. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, as a result of...
The vulnerability in the JavaScript kernel of Microsoft Edge allows a hacker to execute arbitrary code.
The vulnerability in the Microsoft Edge JavaScript kernel is caused by an operation going beyond the buffer boundaries in memory a memory corruption in the kernel script. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, as a resu...
The vulnerability of the anti-virus software programs Quick Heal Internet Security, Quick Heal Total Security, and Quick Heal AntiVirus Pro allows a hacker to cause memory corruption.
The vulnerability of the anti-virus software programs Quick Heal Internet Security, Quick Heal Total Security, and Quick Heal AntiVirus Pro arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause memor...
The vulnerabilities of the antivirus software programs Quick Heal Internet Security, Quick Heal Total Security, and Quick Heal AntiVirus Pro allow attackers to escalate their privileges and execute arbitrary code.
The vulnerability of anti-virus software programs such as Quick Heal Internet Security, Quick Heal Total Security, and Quick Heal AntiVirus Pro arises from writing beyond the buffer boundaries in dynamic memory. This vulnerability exists due to insufficient checking of the dwCompressionSize...
[slackware-security] libsoup
New libsoup packages are available for Slackware 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/libsoup-2.52.2-i586-3slack14.2.txz: Rebuilt. Fixed a chunked decoding buffer overrun that could be exploited against either...
The vulnerability of the parse8BIMW and format8BIM functions in the coder/meta.c file of the console image editing tool ImageMagick allows a hacker to cause a memory access violation.
The vulnerability of the parse8BIMW and format8BIM functions in the coders/meta.c file related to the WriteImage function in coders/meta.c in the console-based graphic editor ImageMagick arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability could...
libsoup security update
2.56.0-4 - Fix chunked decoding buffer overrun CVE-2017-2885 rh 1479322...
The vulnerability of the data model created using Action Script 3 and the Flash Player software allows a perpetrator to execute arbitrary code.
The vulnerability of the data model created using Action Script 3, on the Flash Player software platform, arises from the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotely...
The vulnerability of the Internet Explorer browser’s memory handler on the Windows operating system, allowing a hacker to execute arbitrary code
The vulnerability of the Internet Explorer browser’s memory handler in the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...