9945 matches found
PT-2015-2215
Name of the Vulnerable Software and Affected Versions Sonivox DLS-to-EAS converter versions prior to 5.1.1 LMY48I Description The issue is related to the Parse wave function in the Sonivox DLS-to-EAS converter, which does not properly handle negative values for a certain size field. This can be...
MaraDNS 'parse/ParseMaraRc.c' Denial of Service Vulnerability
MaraDNS is a secure DNS server developed by American software developer Sam Trenholme. A denial of service vulnerability exists in MaraDNS. An attacker could exploit this vulnerability to cause a denial of service...
DEBIAN-CVE-2014-9745
The parseencoding function in type1/t1load.c in FreeType before 2.5.3 allows remote attackers to cause a denial of service infinite loop via a "broken number-with-base" in a Postscript stream, as demonstrated by 8garbage...
Firefox ESR Access Control Bypass
The vulnerability of Firefox and Firefox ESR browsers is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass access control policies using the JSON.parse method...
YesWiki 0.2 - 'squelette' Directory Traversal
Exploit Title: YESWIKI 0.2 - Path Traversal Date: 2015-09-02 Exploit Author: HaHwul Exploit Author Blog: http://www.codeblack.net Vendor Homepage: http://yeswiki.net Software Link: https://github.com/YesWiki/yeswiki Version: yeswiki 0.2 Tested on: Debian Wheezy CVE : none...
Firefox ESR Code Execution
The vulnerability of the stagefright::ESDS::parseESDescriptor function in Firefox and Firefox ESR browsers is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Mozilla: Redefinition of non-configurable JavaScript object properties (MFSA 2015-82)
Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 do not impose certain ECMAScript 6 requirements on JavaScript object properties, which allows remote attackers to bypass the Same Origin Policy via the reviver parameter to the JSON.parse method...
UBUNTU-CVE-2015-4493
Heap-based buffer overflow in the stagefright::ESDS::parseESDescriptor function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via an invalid size field in an esds chunk in MPEG-4 video data, a related issue to...
UBUNTU-CVE-2015-4478
Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 do not impose certain ECMAScript 6 requirements on JavaScript object properties, which allows remote attackers to bypass the Same Origin Policy via the reviver parameter to the JSON.parse method...
CVE-2015-3836
The Parsewave function in arm-wt-22k/libsrc/easmdls.c in the Sonivox DLS-to-EAS converter in Android before 5.1.1 LMY48I does not reject a negative value for a certain size field, which allows remote attackers to execute arbitrary code or cause a denial of service buffer overflow via crafted XMF...
UBUNTU-CVE-2015-5621
The snmppduparse function in snmpapi.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmpvariablelist item when parsing of the SNMP PDU fails, which allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted packet...
UBUNTU-CVE-2015-5522
Heap-based buffer overflow in the ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service crash via vectors involving a command character in an href...
php: memory corruption in phar_parse_tarfile caused by empty entry file name
An integer underflow flaw leading to out-of-bounds memory access was found in the way PHP's Phar extension parsed Phar archives. A specially crafted archive could cause PHP to crash or, possibly, execute arbitrary code when opened...
OpenSSL: out-of-bounds read in X509_cmp_time
An out-of-bounds read flaw was found in the X509cmptime function of OpenSSL, which is used to test the expiry dates of SSL/TLS certificates. An attacker could possibly use a specially crafted SSL/TLS certificate or CRL Certificate Revocation List, which when parsed by an application would cause...
php: memory corruption in phar_parse_tarfile caused by empty entry file name
An integer underflow flaw leading to out-of-bounds memory access was found in the way PHP's Phar extension parsed Phar archives. A specially crafted archive could cause PHP to crash or, possibly, execute arbitrary code when opened...
PT-2015-3418
Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.4.40 PHP versions 5.5.x prior to 5.5.24 PHP versions 5.6.x prior to 5.6.8 Description The issue is caused by a buffer overflow in the phar parse metadata function. This can be exploited by a remote attacker to cause a...
PHP phar_parse_tarfile() function integer underflow vulnerability
PHP is a general-purpose web programming language. An integer underflow vulnerability exists in the PHP pharparsetarfile function, which allows remote attackers to construct a special Phar file that can be parsed by an application to trigger an overflow and execute arbitrary code...
PT-2015-3427
Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.4.41 PHP versions 5.5.x prior to 5.5.25 PHP versions 5.6.x prior to 5.6.9 Description The issue is related to errors in number processing in the phar parse tarfile function. It allows remote attackers to cause a denial ...
PT-2015-7899
Name of the Vulnerable Software and Affected Versions net-snmp affected versions not specified Description A security issue was discovered in the snmp pdu parse function, which could leave incompletely parsed varBind variables in the list of variables. This flaw can be exploited by a remote,...
PT-2015-3421
Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.4.40 PHP versions 5.5.x prior to 5.5.24 PHP versions 5.6.x prior to 5.6.8 Description The issue allows remote attackers to obtain sensitive information from process memory or cause a denial of service, resulting in a...