10654 matches found
Mozilla Firefox ESR < 102.14
The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 102.14. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-30 advisory. - Memory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115.0, an...
Security Vulnerabilities fixed in Firefox ESR 115.1 — Mozilla
Offscreen Canvas did not properly track cross-origin tainting, which could have been used to access image data from another site in violation of same-origin policy. In some circumstances, a stale value could have been used for a global variable in WASM JIT analysis. This resulted in incorrect...
AdvanceMAME Stack Buffer Overflow Vulnerability
AdvanceMAME is a port of the MAME 0.106 and MESS 0.106 emulators from AdvanceMAME, Inc. For arcade monitors and TVs, also for LCD and PC monitors. AdvanceMAME suffers from a stack buffer overflow vulnerability due to incorrect bounds checking performed by function png\u convert\u 4 in file...
wolfssl:fuzzer-wolfssl-ocsp: Stack-buffer-overflow in GenerateDNSEntryRIDString
Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=6711770570686464 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssl-ocsp Job Type: libfuzzerasanwolfssl Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 3 Crash Address...
OSV-2023-609 Stack-buffer-overflow in sc_pkcs15_get_lastupdate
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60769 Crash type: Stack-buffer-overflow READ Crash state: scpkcs15getlastupdate generatecachefilename scpkcs15readcachedfile...
PT-2023-35921 · Git +1 · Opensc
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack buffer overflow read. Technical details include a crash state involving the sc pkcs15 get lastupdate, generate cache...
opensc:fuzz_pkcs15init: Stack-buffer-overflow in sc_pkcs15_get_lastupdate
Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6534409426436096 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15init Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address:...
The TeleAdapt RoomCast TA-2400 is an all-in-one, self-contained, top-of-the-line content streaming box for guest rooms from TeleAdapt UK. The TeleAdapt RoomCast TA-2400 suffers from an elevation of privilege vulnerability that is caused by improper access control of the Android Debug Bridge (ADB). An attacker can exploit the vulnerability to gain elevated root privileges.
IBM DB2 is a relational database management system from International Business Machines IBM. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM DB2 suffers from a stack buffer overflow vulnerability that stems from incorrect boundary...
libraw:libraw_fuzzer: Stack-buffer-overflow in LibRaw::xtrans_interpolate
Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=5138254876508160 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawfuzzer Job Type: libfuzzerasanlibraw Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address:...
CVE-2021-34123
An issue was discovered on atasm, version 1.09. A stack-buffer-overflow vulnerability in function aprintf in asm.c allows attackers to execute arbitrary code on the system via a crafted file...
Stack overflow
An issue was discovered on atasm, version 1.09. A stack-buffer-overflow vulnerability in function aprintf in asm.c allows attackers to execute arbitrary code on the system via a crafted file...
AdvanceMAME 缓冲区错误漏洞
AdvanceMAME is a port of the MAME 0.106 and MESS 0.106 emulators from AdvanceMAME, Inc. For arcade monitors and TVs, also for LCD and PC monitors. AdvanceMAME suffers from a stack buffer overflow vulnerability due to incorrect bounds checking performed by function png\u convert\u 4 in file...
PT-2023-12245
Name of the Vulnerable Software and Affected Versions atasm version 1.09 Description A stack-buffer-overflow issue in the aprintf function within asm.c allows attackers to execute arbitrary code on the system via a crafted file. Recommendations For atasm version 1.09, as a temporary workaround,...
CVE-2021-34123
An issue was discovered on atasm, version 1.09. A stack-buffer-overflow vulnerability in function aprintf in asm.c allows attackers to execute arbitrary code on the system via a crafted file...
CVE-2021-34123
CVE-2021-34123 affects ATasm version 1.09, with a stack-buffer-overflow in function aprintf() in asm.c that lets an attacker execute arbitrary code via a crafted file. Several sources (NVD, Red Hat, PRION, CNNVD, CVE lists) corroborate the same description, including CVSS 3.1 base score 9.8 (Netw...
CVE-2021-34123: Out-of-bounds Write
An issue was discovered on atasm, version 1.09. A stack-buffer-overflow vulnerability in function aprintf in asm.c allows attackers to execute arbitrary code on the system via a crafted file...
Citrix ADC (NetScaler) Forms SSO Target RCE
A vulnerability exists within Citrix ADC that allows an unauthenticated attacker to trigger a stack buffer overflow of the nsppe process by making a specially crafted HTTP GET request. Successful exploitation results in remote code execution as root. Module Options msf use...
CVE-2021-34123
An issue was discovered on atasm, version 1.09. A stack-buffer-overflow vulnerability in function aprintf in asm.c allows attackers to execute arbitrary code on the system via a crafted file...
mongoose:fuzz_netdriver_http: Stack-buffer-overflow in mg_http_serve_dir
Detailed Report: https://oss-fuzz.com/testcase?key=5217433154355200 Project: mongoose Fuzzing Engine: honggfuzz Fuzz Target: fuzznetdriverhttp Job Type: honggfuzzasanmongoose Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7fffe35b98ff Crash State: mghttpservedir fn...
OSV-2023-567 Stack-buffer-overflow in initialize_encryption_key
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60563 Crash type: Stack-buffer-overflow READ Crash state: initializeencryptionkey cliole2extract cliscanole2...