WebKit JSC - JSArray::shiftCountWithArrayStorage Out-of-Bounds ReadWrite

WebKit JSC - JSArray::shiftCountWithArrayStorage Out-of-Bounds ReadWrite / bool JSArray::shiftCountWithArrayStorageVM& vm, unsigned startIndex, unsigned count, ArrayStorage storage unsigned oldLength = storage-length; RELEASEASSERTcount hasHoles && this-structurevm-holesMustForwardToPrototypevm,...

PT-2018-1824

Name of the Vulnerable Software and Affected Versions: curl versions 7.20.0 through 7.59.0 Description: The issue is related to a buffer over-read vulnerability that can result in a denial of service. This occurs when curl is tricked into reading data beyond the end of a heap-based buffer used to...

Microsoft Windows - Desktop Bridge Virtual Registry Arbitrary File ReadWrite Privilege Escalation

Microsoft Windows - Desktop Bridge Virtual Registry Arbitrary File ReadWrite Privilege Escalation Windows: Windows: Desktop Bridge Virtual Registry Arbitrary File Read/Write EoP Platform: Windows 1709 not tested earlier version Class: Elevation of Privilege Summary: The handling of the virtual...

Microsoft Windows - Uniscribe Font Processing Heap Out-of-Bounds ReadWrite in USP10!AssignGlyphTypes (MS17-011)

Microsoft Windows - Uniscribe Font Processing Heap Out-of-Bounds ReadWrite in USP10!AssignGlyphTypes MS17-011 Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1023 We have encountered a crash in the Windows Uniscribe user-mode library, in the USP10!AssignGlyphTypes function, whil...

NVIDIA Driver 375.70 - DxgkDdiEscape 0x100008b Out-of-Bounds ReadWrite

NVIDIA Driver 375.70 - DxgkDdiEscape 0x100008b Out-of-Bounds ReadWrite Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=985 The DxgkDdiEscape handler for 0x100008b accepts a user supplied size as the limit for a loop, leading to OOB reads and writes. The supplied PoC passes an...

ALPINE-CVE-2016-9453

The t2preadwritepdfimagetile function in LibTIFF allows remote attackers to cause a denial of service out-of-bounds write and crash or possibly execute arbitrary code via a JPEG file with a TIFFTAGJPEGTABLES of length one...

PT-2016-4578

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.0.7 Description The issue is caused by an off-by-one error in the t2p readwrite pdf image tile function in tools/tiff2pdf.c. This error allows remote attackers to have an unspecified impact via a crafted image. Recommendation...

PT-2013-1164

Name of the Vulnerable Software and Affected Versions libtiff versions prior to 4.0.3 libtiff-debuginfo versions 3.8.2 and 3.9.4 libtiff-static versions 3.8.2 and 3.9.4 libtiff-devel versions 3.8.2 and 3.9.4 Description The issue is related to multiple vulnerabilities in the libtiff package, whic...

PT-2011-2950

Name of the Vulnerable Software and Affected Versions IBM solidDB versions 4.5.x through 4.5.181 IBM solidDB versions 6.0.x through 6.0.1068 IBM solidDB versions 6.1.x through 6.3.48 IBM solidDB versions 6.3.x through 6.3.48 IBM solidDB versions 6.5.x through 6.5.0.3 Description The issue arises...