The vulnerability of Microsoft Excel editors arises from errors in memory object processing, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file from a remote location...

The vulnerability of the uncompress function in ImfZip.cpp of the OpenEXR library, which allows a hacker to trigger a service failure

The vulnerability of the uncompress function in the ImfZip.cpp library related to numerical processing errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Microsoft Windows Search component on Windows operating systems allows a perpetrator to execute arbitrary code or obtain confidential system information.

The vulnerability of the Microsoft Windows Search component in Windows operating systems is related to errors in processing objects in memory. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code or obtain confidential system information through the SMB connection...

The vulnerability in the JavaScript engine of Internet Explorer and Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability in the JavaScript engine of Internet Explorer and Microsoft Edge is related to improper data processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code under the identity of the current user, during errors in data processing in memory using...

The vulnerability of component 1x of the Android operating system, allowing a hacker to bypass security restrictions

The vulnerability of component 1 of the Android operating system is related to errors in number processing. Exploiting this vulnerability can allow a remote attacker to bypass security restrictions...

The vulnerability of Qualcomm’s TrustZone microprogramming software technology allows attackers to enhance their privileges.

The vulnerability of the TrustZone technology a DRM sub-program of Qualcomm’s Secure Execution Environment for Android from the CAF repository is related to numerical processing errors. Exploiting this vulnerability could allow a remote attacker to gain increased privileges...

The vulnerability of the Linux operating system, which allows a perpetrator to trigger a service failure or cause other effects

The vulnerability of the freelist-randomization function in the Linux operating system is related to errors in number processing. Exploiting this vulnerability can allow a malicious actor to cause service failures or other adverse effects locally...

The vulnerability of Google Chrome browser allows a violator to circumvent existing access restrictions policies.

The vulnerability of the Blink component in Google Chrome browser is related to numerical processing errors. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions by using a specially created HTML page...

The vulnerability of the Serv-U File Server allows a remote attacker to obtain information about the system’s configuration and user authentication credentials.

The vulnerability of the Serv-U File Server software relates to errors that occur during the processing of application variables. Exploiting this vulnerability allows a malicious attacker to obtain system configuration information, including user authentication data...

The vulnerability of Microsoft Word text editors allows a malicious individual to execute arbitrary code and gain full control over the system.

Microsoft Word software has vulnerabilities related to errors that occur during the processing of specially crafted files. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code and gain full control over the system...

The vulnerability of the Microsoft SharePoint Server software allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft SharePoint Server software relates to errors that occur during the processing of specially crafted files. Exploiting this vulnerability allows an unauthorized intruder to execute arbitrary code...

The vulnerability of the Safari browser, which allows a hacker to replace the user interface

The vulnerability of Safari browser is related to incorrect data processing. Exploiting this vulnerability allows a malicious actor to replace the user interface through a web page that replaces the actual text...

The vulnerability of the Windows operating system allows a hacker to circumvent restrictions related to network traffic.

The vulnerability of the Hyper-V operating system’s service is related to errors in the code. Exploiting this vulnerability allows an attacker, operating locally, to circumvent network traffic restrictions by using a specially crafted application that exploits errors in access control list ACL...

MGASA-2014-0541 Updated ntp packages fix security vulnerabilities

Updated ntp packages fix security vulnerabilities: If no authentication key is defined in the ntp.conf file, a cryptographically-weak default key is generated CVE-2014-9293. ntp-keygen before 4.2.7p230 uses a non-cryptographic random number generator with a weak seed to generate symmetric keys...

MGASA-2013-0323 Updated java-1.6.0-openjdk package fixes multiple vulnerabilities

Updated java-1.6.0-openjdk packages fix security vulnerabilities: Multiple input checking flaws were found in the 2D component native image parsing code. A specially crafted image file could trigger a Java Virtual Machine memory corruption and, possibly, lead to arbitrary code execution with the...

OpenJDK: Inet6Address class IPv6 address processing errors (Libraries, 8015743)

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51 and earlier, and Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Libraries...

ICU: Layout Engine font processing errors (JDK 2D, 8001031)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to 2D. NOTE: the previous...

ICU: Layout Engine font processing errors (JDK 2D, 8001031)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to 2D. NOTE: the previous...

ICU: Layout Engine font processing errors (JDK 2D, 8001031)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to 2D. NOTE: the previous...

ICU: Layout Engine font processing errors (JDK 2D, 8001031)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to 2D. NOTE: the previous...