5588 matches found
Logitech Webcam Software 1.1 - eReg.exe SEH/Unicode 缓存溢出漏洞
No description provided by source...
UltraEdit v22.20 - Buffer Overflow Vulnerability
Document Title: =============== UltraEdit v22.20 - Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1601 Release Date: ============= 2015-09-16 Vulnerability Laboratory ID VL-ID: ==================================== 1601 Comm...
Logitech Webcam Software 1.1 - 'eReg.exe' Local Buffer Overflow (SEH Unicode)
Title: Logitech Webcam Software 1.1 eReg.exe SEH/Unicode Buffer Overflow Date: 9-10-2015 Target tested: Windows 7 x64 Software Link: http://www.logitech.com/pub/techsupport/quickcam/lws110x64.exe Author: Robbie Corley Contact: [email protected] Website: CVE: Category: Local Description: The...
Logitech Webcam Software 1.1 - eReg.exe SEH/Unicode Buffer Overflow Vulnerability
Exploit for windows platform in category local exploits Title: Logitech Webcam Software 1.1 eReg.exe SEH/Unicode Buffer Overflow Date: 9-10-2015 Target tested: Windows 7 x64 Software Link: http://www.logitech.com/pub/techsupport/quickcam/lws110x64.exe Author: Robbie Corley Contact: email protecte...
The vulnerability of the Mac OS X operating system allows a perpetrator to execute arbitrary code or cause a service failure.
The vulnerability of the Speech UI component in the Mac OS X operating system arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using a specially crafted Unicode string...
Google Chrome monibox character forgery vulnerability
Google Chrome is a WEB-based browser. The UnescapeURLWithAdjustmentsImpl implementation in Google Chrome net/base/escape.cc fails to properly handle unicode LOCK characters in omnibox, allowing remote attackers to construct malicious WEB pages that trick users into parsing them, which can be used...
CVE-2015-1296
The UnescapeURLWithAdjustmentsImpl implementation in net/base/escape.cc in Google Chrome before 45.0.2454.85 does not prevent display of Unicode LOCK characters in the omnibox, which makes it easier for remote attackers to spoof the SSL lock icon by placing one of these characters at the end of a...
CVE-2015-1296
The UnescapeURLWithAdjustmentsImpl implementation in net/base/escape.cc in Google Chrome before 45.0.2454.85 does not prevent display of Unicode LOCK characters in the omnibox, which makes it easier for remote attackers to spoof the SSL lock icon by placing one of these characters at the end of a...
UBUNTU-CVE-2015-1296
The UnescapeURLWithAdjustmentsImpl implementation in net/base/escape.cc in Google Chrome before 45.0.2454.85 does not prevent display of Unicode LOCK characters in the omnibox, which makes it easier for remote attackers to spoof the SSL lock icon by placing one of these characters at the end of a...
Code injection
The UnescapeURLWithAdjustmentsImpl implementation in net/base/escape.cc in Google Chrome before 45.0.2454.85 does not prevent display of Unicode LOCK characters in the omnibox, which makes it easier for remote attackers to spoof the SSL lock icon by placing one of these characters at the end of a...
CVE-2015-1296
The UnescapeURLWithAdjustmentsImpl implementation in net/base/escape.cc in Google Chrome before 45.0.2454.85 does not prevent display of Unicode LOCK characters in the omnibox, which makes it easier for remote attackers to spoof the SSL lock icon by placing one of these characters at the end of a...
CVE-2015-1296
CVE-2015-1296 is a Chrome/Chromium vulnerability where the UnescapeURLWithAdjustmentsImpl in net/base/escape.cc could allow spoofing the SSL lock icon by displaying Unicode LOCK characters in the omnibox. Affected: Google Chrome prior to 45.0.2454.85. Root cause: improper handling in omnibox URL ...
CVE-2015-1296
Removed by vendor...
chromium-browser: Character spoofing in omnibox
The UnescapeURLWithAdjustmentsImpl implementation in net/base/escape.cc in Google Chrome before 45.0.2454.85 does not prevent display of Unicode LOCK characters in the omnibox, which makes it easier for remote attackers to spoof the SSL lock icon by placing one of these characters at the end of a...
Code injection
The UDF filesystem implementation in the Linux kernel before 3.18.2 does not ensure that space is available for storing a symlink target's name along with a trailing \0 character, which allows local users to obtain sensitive information via a crafted filesystem image, related to fs/udf/symlink.c...
The vulnerability of the Mac OS X operating system, which allows a hacker to trigger a service failure
The vulnerability of the Data Detectors Engine component in the Mac OS X operating system arises due to buffer overflow. Exploiting this vulnerability can allow a malicious actor to cause a service failure by using a sequence of Unicode characters...
Apple OS X Data Detectors Engine Memory Corruption Vulnerability
Apple OS X is a BSD-based operating system distributed by Apple. A security vulnerability in the Apple OS X Data Detectors Engine allows remote attackers to exploit the vulnerability to create specially constructed unicode characters that can be induced to be parsed by an application, which can...
Apple OS X Speech UI Memory Corruption Vulnerability
Apple OS X is a BSD-based operating system distributed by Apple. A memory corruption vulnerability exists in the Apple OS X Speech UI, which allows remote attackers to exploit the vulnerability by submitting a special Unicode string and tricking an application into parsing it, which can execute...
CVE-2015-5750
Data Detectors Engine in Apple OS X before 10.10.5 allows attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted series of Unicode characters...
CVE-2015-3794
The Speech UI in Apple OS X before 10.10.5, when speech alerts are enabled, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted Unicode string...