[SECURITY] [DLA 909-1] libcroco security update

Package : libcroco Version : 0.6.6-2+deb7u1 CVE ID : CVE-2017-7960 CVE-2017-7961 Debian Bug : 860961 CVE-2017-7960 A heap-based buffer over-read vulnerability could be triggered remotely via a crafted CSS file to cause a denial of service. CVE-2017-7961 An "outside the range of representable valu...

Apache FOP XML External Entity Injection Vulnerability

Apache FOP Formatting Object Processor is a U.S. Apache Apache Software Foundation by the XSL Formatting Object XSL-FO and output-independent formatting program driven by the print formatting program. It can read the Formatting Object FO tree and render the resulting page to the specified output...

GeoMoose <=2.9.2 /php/download.php parameter ext arbitrary file read vulnerability

No description provided by source...

chromium-browser: use after free in blink

A use after free in Blink in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

Siemens RUGGEDCOM ROX I Arbitrary File Read Vulnerability

Siemens RuggedCom ROX-based firewall devices are used for device connectivity in harsh environments, such as substations, traffic management chassis, and more. An arbitrary file read vulnerability exists in Siemens RUGGEDCOM ROX I, which can be exploited by an attacker to read arbitrary files for...

Mozilla Firefox Buffer Overflow Read Vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the U.S. Thunderbird is a mail tool adapted from the mail widget of the Mozilla browser. Mozilla Firefox suffers from a buffer overflow read vulnerability that could allow an attacker to read a buffer overflow...

chromium-browser: information disclosure in v8

V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android was missing a neutering check, which allowed a remote attacker to read values in memory via a crafted HTML page...

Design/Logic Flaw

The dbclient and server in Dropbear SSH before 2016.74, when compiled with DEBUGTRACE, allows local users to read process memory via the -v argument, related to a failed remote ident...

ytnef out-of-bounds read denial of service vulnerability (CNVD-2017-02559)

ytnef is an application library for extracting data from winmail.dat files. An out-of-bounds read vulnerability exists in ytnef. A remote attacker could exploit this vulnerability to construct a malicious file that could be parsed by the user, which could crash the application...

ZZIPlib 'zzip_mem_entry_extra_block' memory read vulnerability

ZZIPlib is a lightweight used to extract files from the ZIP file to read the C language package , but also can be used to compress multiple files into zip format , using the zlib library development . A memory read vulnerability exists in ZZIPlib 'zzipmementryextrablock'. An attacker can exploit...

CVE-2017-2977

CVE-2017-2977 : Adobe Digital Editions 4.5.3 and earlier contain an exploitable buffer over-read that could disclose memory information. This is corroborated by the NVD entry and multiple scanners in the connected documents. The underlying issue is a buffer over-read in Adobe Digital Editions pri...

Unbreakable Enterprise kernel security update

2.6.39-400.294.2 - vfs: read filehandle only once in handletopath Sasha Levin Orabug: 25388709 CVE-2015-1420 - crypto: algifhash - Only export and import on sockets with data Herbert Xu Orabug: 25417807 - USB: usbfs: fix potential infoleak in devio Kangjie Lu Orabug: 25462763 CVE-2016-4482 - net:...

UBUNTU-CVE-2016-3183

The sycc422trgb function in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service out-of-bounds read via a crafted jpeg2000 file...

KLA10948 Denial of service and code execution vulnerability in Foxit Reader and Foxit PhantomPDF

Out-of bounds read vulnerability was found in the ConvertToPDF plugin in Foxit Reader and PhantomPDF. By exploiting this vulnerability malicious users can cause a denial of service, possibly obtain sensitive information or execute arbitrary code in the context of the current process. This...

SUSE SLED12 / SLES12 Security Update : gstreamer-0_10-plugins-base (SUSE-SU-2017:0242-1)

This update for gstreamer-010-plugins-base fixes the following issue : - CVE-2016-9811: out of bounds memory read in windowsicontypefind bsc1013669 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

CVE-2016-8334

A large out-of-bounds read on the heap vulnerability in Foxit PDF Reader can potentially be abused for information disclosure. Combined with another vulnerability, it can be used to leak heap memory layout and in bypassing ASLR...

DEBIAN-CVE-2016-7450

The fflog216bitc function in libavutil/intmath.h in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when it decodes a malformed AIFF file...

UBUNTU-CVE-2016-5190

Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled object lifecycles during shutdown, which allowed a remote attacker to perform an out of bounds memory read via crafted HTML pages...

CVE-2016-9583

An out-of-bounds heap read vulnerability was found in the jpcpinextpcrl function of jasper before 2.0.6 when processing crafted input...

McAfee VirusScan Enterprise File Read Vulnerability

McAfee VirusScan Enterprise is a suite of antivirus software from the American company McAfee. The software provides a full range of security protection, scans memory for malicious code and optimizes updates for remote systems. A file read vulnerability exists in VirusScan Enterprise for Linux VS...