CVE-2016-0044

CVE-2016-0044 is a Windows Sync Framework denial-of-service vulnerability. A remote attacker can exploit specially crafted input using the DLL loading/change-batch mechanism to cause the SyncShareSvc service to stop responding. The issue affects Windows 8.1, Windows Server 2012 R2, and Windows RT...

CVE-2016-0044: Improper Input Validation

Sync Framework in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1 allows remote attackers to cause a denial of service SyncShareSvc service outage via crafted "change batch" data, aka "Windows DLL Loading Denial of Service Vulnerability."...

CVE-2016-0053: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps Server 2013 SP1, and SharePoint Server 2013 SP1 allow remote attackers to execut...

CVE-2016-0056: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

Microsoft Windows CVE-2016-0041 DLL Loading Multiple Local Privilege Escalation Vulnerabilities

Description Microsoft Windows is prone to a multiple local privilege-escalation vulnerabilities. A local attacker can leverage these issues to execute arbitrary code with elevated privileges. Technologies Affected Microsoft Internet Explorer 10 Microsoft Internet Explorer 11 Microsoft Windows 10...

Microsoft Windows WebDAV CVE-2016-0051 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with elevated privileges. Failed exploit attempts will result in a denial of service condition. Technologies Affected Microsoft Windows 10 for...

PT-2016-1231

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 8.1 Windows Server versions 2012 R2 Windows RT versions 8.1 Description The issue is related to insufficient input validation in the Sync Framework component, allowing remote attackers to cause a denial of service by...

PT-2016-1229

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows RT 8.1 Microsoft Windows 10 Gold and 1511 Description The issue...

ASUS RT-N56U 3.0.0.4.374_239 Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Exploit Title: ASUS RT-N56U Persistent XSS Date: 2/2/2016 Exploit Author: @GraphX Vendor Homepage: http://asus.com/ Version: 3.0.0.4.374239 1 Description: It is possible for an authenticated attacker to bypass input sanitation in the username input...

RHEL 7 : kernel-rt (RHSA-2016:0065)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2016:0065 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. A use-after-free flaw was found in the way the Linux kernel's k...

RHEL 7 : kernel-rt (RHSA-2015:2411)

Updated kernel-rt packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, whic...

RHEL 6 : kernel-rt (RHSA-2016:0068)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:0068 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. A use-after-free flaw was found in the way the Linux...

Important: Red Hat Security Advisory: kernel-rt security update

Updated kernel-rt packages that fix one security issue are now available for Red Hat Enterprise MRG 2. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fr...

Siemens Industrial Products glibc Library Vulnerability (Update C)

OVERVIEW This updated advisory is a follow-up to the advisory update titled ICSA-16-103-01B Siemens Industrial Products glibc Library Vulnerability that was published July 14, 2016, on the NCCIC/ICS-CERT web site. Siemens reports that a buffer overflow vulnerability in the glibc library could...

Microsoft Windows Mount Point CVE-2016-0007 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with elevated privileges in the context of the Local System Account. Failed exploit attempts will result in a denial-of-service condition...

MS16-005: Security update for Windows kernel-mode drivers to address remote code execution: January 12, 2016

Resolves vulnerabilities in Windows that could allow remote code execution if a user visits a malicious website.SummaryTo learn more about the vulnerability, see Microsoft Security Bulletin MS16-005. More InformationImportant All future security and non-security updates for Windows RT 8.1, Window...

Wireshark Denial-of-Service Vulnerability (Jan 2016) - Mac OS X

Wireshark is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2015-3182

epan/dissectors/packet-dec-dnart.c in the DECnet NSP/RT dissector in Wireshark 1.10.12 through 1.10.14 mishandles a certain strdup return value, which allows remote attackers to cause a denial of service application crash via a crafted packet...

DEBIAN-CVE-2015-3182

epan/dissectors/packet-dec-dnart.c in the DECnet NSP/RT dissector in Wireshark 1.10.12 through 1.10.14 mishandles a certain strdup return value, which allows remote attackers to cause a denial of service application crash via a crafted packet...

UBUNTU-CVE-2015-3182

epan/dissectors/packet-dec-dnart.c in the DECnet NSP/RT dissector in Wireshark 1.10.12 through 1.10.14 mishandles a certain strdup return value, which allows remote attackers to cause a denial of service application crash via a crafted packet...