Mozilla Firefox and Firefox ESR 'nsCaseTransformTextRunFactory::TransformString' function heap buffer overflow vulnerability

Mozilla Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A heap buffer overflow vulnerability exists in the Mozilla Firefox and Firefox ESR 'nsCaseTransformTextRunFactory::TransformString' function, which allows remote attackers to build a malicious WE...

UBUNTU-CVE-2016-5270

Heap-based buffer overflow in the nsCaseTransformTextRunFactory::TransformString function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird 45.4 allows remote attackers to cause a denial of service boolean out-of-bounds write or possibly have unspecified other impact v...

Mozilla: Heap-buffer-overflow in nsCaseTransformTextRunFactory::TransformString (MFSA 2016-85, MFSA 2016-86)

Heap-based buffer overflow in the nsCaseTransformTextRunFactory::TransformString function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird 45.4 allows remote attackers to cause a denial of service boolean out-of-bounds write or possibly have unspecified other impact v...

Adobe Flash - Transform.colorTranform Getter Infomation Leak

Adobe Flash - Transform.colorTranform Getter Infomation Leak Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=845 There is an info leak in the Transform.colorTranform getter. If the constructor for ColorTransform is overwritten with a getter using addProperty, this getter will...

Adobe Flash - Transform.colorTranform Getter Info Leak

Exploit for multiple platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=845 There is an info leak in the Transform.colorTranform getter. If the constructor for ColorTransform is overwritten with a getter using addProperty, this getter will execute whe...

Adobe Flash - Transform.colorTranform Getter Infomation Leak

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=845 There is an info leak in the Transform.colorTranform getter. If the constructor for ColorTransform is overwritten with a getter using addProperty, this getter will execute when fetching the constructor, which can then free the...

Adobe Flash - MovieClip Transform Getter Use-After-Free

Adobe Flash - MovieClip Transform Getter Use-After-Free Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=844 There is a use-after-free in the MovieClip Transform getter. If the Transform constructor is replaced with a getter using addProperty, this getter can free the MovieClip...

Adobe Flash - MovieClip Transform Getter Use-After-Free

Exploit for multiple platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=844 There is a use-after-free in the MovieClip Transform getter. If the Transform constructor is replaced with a getter using addProperty, this getter can free the MovieClip befor...

Adobe Flash - MovieClip Transform Getter Use-After-Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=844 There is a use-after-free in the MovieClip Transform getter. If the Transform constructor is replaced with a getter using addProperty, this getter can free the MovieClip before it is accessed. A minimal PoC is as follows: var m...

Flash Player Code Execution

The vulnerability of the Transform object implementation in the Flash Player software platform is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code using the reverse invocation of...

CVE-2016-3071

Libreswan 3.16 might allow remote attackers to cause a denial of service daemon restart via an IKEv2 aesxcbc transform...

CVE-2016-3071

Libreswan 3.16 might allow remote attackers to cause a denial of service daemon restart via an IKEv2 aesxcbc transform...

CVE-2016-3071

Libreswan 3.16 might allow remote attackers to cause a denial of service daemon restart via an IKEv2 aesxcbc transform...

CVE-2016-3071

Libreswan 3.16 is affected by CVE-2016-3071 due to an error in the IKEv2 aes_xcbc transform, enabling remote attackers to cause a denial of service by triggering a daemon restart. Public sources consistently describe this as a DoS in the Libreswan IKE daemon when processing crafted IKEv2 packets....

PT-2016-5355

Name of the Vulnerable Software and Affected Versions Libreswan version 3.16 Description The issue might allow remote attackers to cause a denial of service, resulting in a daemon restart, via an IKEv2 aes xcbc transform. Recommendations For Libreswan version 3.16, consider updating to a newer...

CVE-2016-3071: Improper Input Validation

Libreswan 3.16 might allow remote attackers to cause a denial of service daemon restart via an IKEv2 aesxcbc transform...

CVE-2016-1016

Use-after-free vulnerability in the Transform object implementation in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via a flash.geom.Matrix callback, a different...

CVE-2016-1016

Use-after-free vulnerability in the Transform object implementation in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via a flash.geom.Matrix callback, a different...

CVE-2016-1016

Use-after-free vulnerability in the Transform object implementation in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via a flash.geom.Matrix callback, a different...

UBUNTU-CVE-2016-1016

Use-after-free vulnerability in the Transform object implementation in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via a flash.geom.Matrix callback, a different...