1947 matches found
CVE-2015-8932
The CVE-2015-8932 issue affects the libarchive library, specifically the compress_bidder_init function in archive_read_support_filter_compress.c, before version 3.2.0. A crafted tar file can trigger an invalid left shift, allowing a remote attacker to cause a denial of service (crash). Public ref...
CVE-2015-8932
The compressbidderinit function in archivereadsupportfiltercompress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service crash via a crafted tar file, which triggers an invalid left shift...
libarchive: Undefined behavior / invalid shiftleft in TAR parser
Undefined behavior invalid left shift was discovered in libarchive, in how Compress streams are identified. This could cause certain files to be mistakenly identified as Compress archives and fail to read...
libarchive: Undefined behavior / invalid shiftleft in TAR parser
Undefined behavior invalid left shift was discovered in libarchive, in how Compress streams are identified. This could cause certain files to be mistakenly identified as Compress archives and fail to read...
The vulnerability of the Wireshark Network Protocol Analyzer software allows a remote attacker to compromise the accessibility of protected information.
A one-unit shift error in the isrtsprequestorreply function in the epan/dissectors/packet-rtsp.c file of the RTSP dissector in Wireshark allows malicious actors operating remotely to trigger a service failure abrupt termination of the application’s operation by using a specially crafted packet th...
Ransomware A Two-Year Nightmare in the Making
The scourge of ransomware over the past two years has been impressive – and not in a good way. The number of frustrated computer users locked out of their PCs is at an all-time high with no signs of the ransomware epidemic relenting. According to security experts, the last two years have seen an...
CVE-2015-8932
Undefined behavior invalid left shift was discovered in libarchive, in how Compress streams are identified. This could cause certain files to be mistakenly identified as Compress archives and fail to read...
libarchive TAR Parser Unauthorized Operation Vulnerability
libarchive is a multi-format archive and compression library. A security vulnerability exists in libarchive's TAR parser. An attacker can exploit this vulnerability to perform an undefined operation, resulting in an invalid left shift...
DEBIAN-CVE-2000-1254
crypto/rsa/rsagen.c in OpenSSL before 0.9.6 mishandles C bitwise-shift operations that exceed the size of an expression, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging improper RSA key generation on 64-bit HP-UX platforms...
CVE-2000-1254
crypto/rsa/rsagen.c in OpenSSL before 0.9.6 mishandles C bitwise-shift operations that exceed the size of an expression, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging improper RSA key generation on 64-bit HP-UX platforms...
Asylum Night Shift DEMO - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Asylum Night Shift DEMO published at the 'play' market has multiple vulnerabilities...
Shift Free - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Shift Free published at the 'play' market has multiple vulnerabilities...
Work Shift Calendar - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Work Shift Calendar published at the 'play' market has multiple vulnerabilities...
Shift Calendar (Shift Roster) - Base64 encoded String, Corrupted files, Dynamic Code Loading vulnerabilities
HackApp vulnerability scanner discovered that application Shift Calendar Shift Roster published at the 'play' market has multiple vulnerabilities...
Your Shift Scheduler - Dangerous filesystem permissions, MIT license, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Your Shift Scheduler published at the 'play' market has multiple vulnerabilities...
My shift schedule - team TRIAL - SD-card access, Suspicious files vulnerabilities
HackApp vulnerability scanner discovered that application My shift schedule - team TRIAL published at the 'play' market has multiple vulnerabilities...
Adobe Flash - Uninitialized Stack Parameter Access in Object.unwatch UaF Fix
Adobe Flash - Uninitialized Stack Parameter Access in Object.unwatch UaF Fix Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=716 The ActionScript parameter conversion in the fix for an issue in the December Flash bulletin...
Oracle to Kill Java Plugin
It’s the end of an era. Oracle has announced its intent to nail the coffin shut on the Java browser plugin. The company confirmed Wednesday that it expects to deprecate the plugin in JDK 9, slated for release in September, and JRE, in a future Java SE release. Dalibor Topic, a member of Oracle’s...
UBUNTU-CVE-2015-8932
The compressbidderinit function in archivereadsupportfiltercompress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service crash via a crafted tar file, which triggers an invalid left shift...
SUSE SLES11 Security Update : glibc (SUSE-SU-2014:1122-1)
This glibc update fixes a critical privilege escalation vulnerability and the following security and non-security issues : - bnc892073: An off-by-one error leading to a heap-based buffer overflow was found in gconvtranslitfind. An exploit that targets the problem is publicly available...