Lucene search
+L

1371 matches found

NVD
NVD
added 2013/02/18 4:41 a.m.24 views

CVE-2012-4530

The loadscript function in fs/binfmtscript.c in the Linux kernel before 3.7.2 does not properly handle recursion, which allows local users to obtain sensitive information from kernel stack memory via a crafted application...

2.1CVSS5.3AI score0.00882EPSS
SaveExploits2References7
CVE
CVE
added 2013/02/18 2:0 a.m.99 views

CVE-2012-4530

Technical details for CVE-2012-4530 are not publicly provided in the connected documents. Monitor for updates; current sources list this CVE among others but do not disclose product/version/root-cause/fix specifics.

2.1CVSS6.7AI score0.00882EPSS
SaveExploits2References7Affected Software1
Debian CVE
Debian CVE
added 2013/02/18 2:0 a.m.40 views

CVE-2012-4530

The loadscript function in fs/binfmtscript.c in the Linux kernel before 3.7.2 does not properly handle recursion, which allows local users to obtain sensitive information from kernel stack memory via a crafted application...

2.1CVSS5.1AI score0.00882EPSS
SaveExploits2
RedHat Linux
RedHat Linux
added 2013/02/05 7:44 p.m.5 views

kernel: stack disclosure in binfmt_script load_script()

The loadscript function in fs/binfmtscript.c in the Linux kernel before 3.7.2 does not properly handle recursion, which allows local users to obtain sensitive information from kernel stack memory via a crafted application...

2.1CVSS6.2AI score0.00882EPSS
SaveExploits2References4
UbuntuCve
UbuntuCve
added 2013/02/05 3:55 p.m.30 views

CVE-2011-1350

The PowerVR SGX driver in Android before 2.3.6 allows attackers to obtain potentially sensitive information from kernel stack memory via an application that uses a crafted length parameter in a request to the pvrsrvkm device...

7.1CVSS5.9AI score0.01109EPSS
SaveExploits2References1
Prion
Prion
added 2013/02/05 3:55 p.m.20 views

Session fixation

The PowerVR SGX driver in Android before 2.3.6 allows attackers to obtain potentially sensitive information from kernel stack memory via an application that uses a crafted length parameter in a request to the pvrsrvkm device...

7.1CVSS6.3AI score0.01109EPSS
SaveExploits2References2Affected Software1
NVD
NVD
added 2013/02/05 3:55 p.m.41 views

CVE-2011-1350

The PowerVR SGX driver in Android before 2.3.6 allows attackers to obtain potentially sensitive information from kernel stack memory via an application that uses a crafted length parameter in a request to the pvrsrvkm device...

7.1CVSS5.7AI score0.01109EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
added 2013/01/24 12:0 a.m.53 views

RHEL 5 : kvm (RHSA-2010:0998)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2010:0998 advisory. - kvm: arch/x86/kvm/x86.c: reading uninitialized stack memory CVE-2010-3881 Note that Nessus has not tested for this issue but has instead relied onl...

2.1CVSS5.5AI score0.0048EPSS
SaveExploits0References8
NVD
NVD
added 2013/01/15 9:55 p.m.28 views

CVE-2012-5153

Google V8 before 3.14.5.3, as used in Google Chrome before 24.0.1312.52, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers an out-of-bounds access to stack memory...

7.5CVSS7.2AI score0.01104EPSS
SaveExploits0References4
Prion
Prion
added 2013/01/15 9:55 p.m.28 views

Out-of-bounds

Google V8 before 3.14.5.3, as used in Google Chrome before 24.0.1312.52, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers an out-of-bounds access to stack memory...

7.5CVSS7.7AI score0.01104EPSS
SaveExploits0References4Affected Software2
UbuntuCve
UbuntuCve
added 2013/01/15 9:55 p.m.35 views

CVE-2012-5153

Google V8 before 3.14.5.3, as used in Google Chrome before 24.0.1312.52, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers an out-of-bounds access to stack memory...

7.5CVSS7.3AI score0.01104EPSS
SaveExploits0References3
OSV
OSV
added 2013/01/15 9:55 p.m.5 views

UBUNTU-CVE-2012-5153

Google V8 before 3.14.5.3, as used in Google Chrome before 24.0.1312.52, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers an out-of-bounds access to stack memory...

7.5CVSS7.4AI score0.01104EPSS
SaveExploits0References4
CVE
CVE
added 2013/01/15 9:0 p.m.76 views

CVE-2012-5153

CVE-2012-5153 affects Google V8 before 3.14.5.3 used in Chrome before 24.0.1312.52, with exploitation via crafted JavaScript causing out-of-bounds stack access leading to possible DoS or unspecified impact. Remediation per connected docs is to upgrade to the patched V8/Chromium versions (e.g., V8...

7.5CVSS7.2AI score0.01104EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2012/12/21 11:47 a.m.24 views

CVE-2012-0957

The overriderelease function in kernel/sys.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from kernel stack memory via a uname system call in conjunction with a UNAME26 personality...

4.9CVSS5.3AI score0.00959EPSS
SaveExploits2References14
OSV
OSV
added 2012/12/21 11:47 a.m.8 views

CVE-2012-0957

The overriderelease function in kernel/sys.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from kernel stack memory via a uname system call in conjunction with a UNAME26 personality...

7.4AI score
SaveExploits0References14
OSV
OSV
added 2012/12/21 11:47 a.m.5 views

DEBIAN-CVE-2012-0957

The overriderelease function in kernel/sys.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from kernel stack memory via a uname system call in conjunction with a UNAME26 personality...

4.9CVSS5.9AI score0.00959EPSS
SaveExploits2References1
Prion
Prion
added 2012/12/21 11:47 a.m.26 views

Design/Logic Flaw

The overriderelease function in kernel/sys.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from kernel stack memory via a uname system call in conjunction with a UNAME26 personality...

4.9CVSS5.9AI score0.00959EPSS
SaveExploits2References14Affected Software1
Cvelist
Cvelist
added 2012/12/21 11:0 a.m.30 views

CVE-2012-0957

The overriderelease function in kernel/sys.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from kernel stack memory via a uname system call in conjunction with a UNAME26 personality...

6.9AI score0.00959EPSS
SaveExploits2References14
CVE
CVE
added 2012/12/21 11:0 a.m.104 views

CVE-2012-0957

CVE-2012-0957 affects the Linux kernel prior to 3.4.16. The override_release function in kernel/sys.c can let a local user leak kernel stack memory by calling uname with the UNAME26 personality. This is a local-privilege scenario; no remote vector is described in the provided documents. Affected ...

4.9CVSS6.7AI score0.00959EPSS
SaveExploits2References14Affected Software1
Debian CVE
Debian CVE
added 2012/12/12 11:0 a.m.42 views

CVE-2012-5144

Google Chrome before 23.0.1271.97, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, do not properly perform AAC decoding, which allows remote attackers to cause a denial of service stack memory corruption or possibly have unspecified other impact via vectors related to "an off-by-one overwrit...

10CVSS10AI score0.03533EPSS
SaveExploits0
Rows per page
Query Builder