freeradius: Out-of-bounds read/write due to improper output buffer size check in make_secret()

An out-of-bounds read and write flaw was found in the way FreeRADIUS server handled RADIUS packets. A remote attacker could use this flaw to crash the FreeRADIUS server by sending a specially crafted RADIUS packet...

The vulnerability of the Intel Graphics Driver component in the Mac OS X operating system allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the Intel Graphics Driver for the Mac OS X operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context or cause a service failure memory...

The vulnerability of the Kernel component in iOS and Mac OS X operating systems allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the Kernel component in iOS and Mac OS X operating systems arises from the execution of an operation outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context, or to cause a service failure memory...

The vulnerability of the Bluetooth component of the Mac OS X operating system allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the Bluetooth component of the Mac OS X operating system arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context or cause a service failure memory corruption throu...

The vulnerability of the Intel Graphics Driver component in the Mac OS X operating system allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the Intel Graphics Driver for the Mac OS X operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context or cause a service failure memory...

The vulnerability of the Bluetooth component of the Mac OS X operating system allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the Bluetooth component of the Mac OS X operating system arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context or cause a service failure memory corruption throu...

The vulnerability of the WebKit component of the Safari browser, the iOS operating system, and the multimedia player iTunes allows a malicious actor to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the WebKit component in the Safari browser, the iOS operating system, and the multimedia player iTunes arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged conte...

Microsoft Edge browser vulnerability, allowing a hacker to execute arbitrary code in the context of the current user

The vulnerability of Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

The vulnerability of the “IOUSBFamily” component in iOS and Mac OS X operating systems allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the “IOUSBFamily” component in iOS and Mac OS X operating systems arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context, or to cause a service failure...

The vulnerability of the getNodeSize function in the SQLite database management system allows attackers to carry out other attacks.

The vulnerability of the getNodeSize function in the SQLite database management system arises from the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to exert other effects using the reduced size of RTree blobs within the...

The vulnerability of the implementation of SplObjectStorage in ext/spl/spl_observer.c, the PHP interpreter, allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the SplObjectStorage service implementation in the ext/spl/splobserver.c file of the PHP interpreter arises due to the execution of operations beyond the memory buffer boundaries. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a...

The vulnerability in Firefox ESR and Firefox web browsers relates to the execution of operations beyond the buffer boundaries in memory, which allows an attacker to trigger a service failure.

The vulnerability in Firefox ESR and Firefox relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the `snd_msndmidi_input_read` function (sound/isa/msnd/msnd_midi.c) in the Linux operating system allows a hacker to trigger a service failure or exert other effects.

The vulnerability of the sndmsndmidiinputread function sound/isa/msnd/msndmidi.c in the Linux operating system arises from the execution of an operation outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure or exert other adverse effects...

The vulnerability of the Internet Explorer browser, which allows a hacker to execute arbitrary code

The vulnerability of the Internet Explorer browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Android operating system’s Mediaserver service allows a hacker to cause memory corruption during the use of media files or other data.

The vulnerability of the Android operating system’s Mediaserver service arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to inject arbitrary code using a specially created file, which can cause memory corruption duri...

The vulnerability of JPEG decoders in PDF editing and viewing software such as Adobe Acrobat, Adobe Reader, Document Cloud, Adobe Acrobat Document Cloud, and Adobe Reader allows attackers to execute arbitrary code.

The vulnerability of JPEG decoders in PDF file editing and viewing applications from Adobe Acrobat, Adobe Reader, Document Cloud, and Adobe Acrobat Document Cloud arises from operations that go beyond the buffer limits in memory. Exploiting this vulnerability can allow a malicious actor to execut...

The vulnerability of the `snd_msnd Interrupt` function in the Linux operating system’s kernel allows a hacker to trigger a service failure or cause other adverse effects.

The vulnerability of the sndmsnd Interrupt function in the Linux operating system’s kernel is due to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure or have other adverse effects...

The vulnerability of the PNG image analyzer in the Flash Player software platform allows a perpetrator to execute arbitrary code.

The vulnerability of the PNG image analyzer in the Flash Player software is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotely...

The vulnerability of the Microsoft Outlook email client, which allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Outlook email client arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through specially crafted email messages from a remote location...

CVE-2017-8781

XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted JPEG 2000 file that is mishandled during the opening of a directory in "Browser" mode, because of a "Stack Buffer Overrun" issue...