CVE-2016-2216

The HTTP header parsing code in Node.js 0.10.x before 0.10.42, 0.11.6 through 0.11.16, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allows remote attackers to bypass an HTTP response-splitting protection mechanism via UTF-8 encoded Unicode characters in the HTTP header, as...

CVE-2016-2216

The HTTP header parsing code in Node.js 0.10.x before 0.10.42, 0.11.6 through 0.11.16, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allows remote attackers to bypass an HTTP response-splitting protection mechanism via UTF-8 encoded Unicode characters in the HTTP header, as...

CVE-2016-2216: Improper Input Validation

The HTTP header parsing code in Node.js 0.10.x before 0.10.42, 0.11.6 through 0.11.16, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allows remote attackers to bypass an HTTP response-splitting protection mechanism via UTF-8 encoded Unicode characters in the HTTP header, as...

[SECURITY] Fedora 24 Update: nodejs-node-stringprep-0.7.3-9.fc24

This module exposes predefined Unicode normalization functions that are required by many protocols. This is just a binding to ICU, which is said to be fast...

The vulnerabilities of Debian GNU/Linux and Ubuntu operating systems, as well as PostgreSQL database management systems, allow attackers to trigger service interruptions.

The vulnerability of Debian GNU/Linux and Ubuntu operating systems, as well as PostgreSQL database management systems, stems from buffer overflows. Exploiting this vulnerability allows an attacker to cause a service failure—such as an infinite loop or a buffer overflow and unexpected system...

Internet Download Manager 6.25 Build 14 - Find file Unicode (SEH)

Internet Download Manager 6.25 Build 14 - Find file Unicode SEH !/usr/bin/python Exploit Title: Internet Download Manager 6.25 Build 14 - 'Find file' SEH Buffer Overflow Unicode Date: 20-3-2016 Exploit Author: Rakan Alotaibi Contact: https://twitter.com/hxteam Software Link:...

Internet Download Manager 6.25 Build 14 - 'Find file' Unicode SEH Exploit

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: Internet Download Manager 6.25 Build 14 - 'Find file' SEH Buffer Overflow Unicode Date: 20-3-2016 Exploit Author: Rakan Alotaibi Contact: https://twitter.com/hxteam Software Link:...

Mozilla: Out-of-bounds read in HTML parser following a failed allocation (MFSA 2016-34)

The nsScannerString::AppendUnicodeTo function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not verify that memory allocation succeeds, which allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via crafted Unicode data in an HTM...

CVE-2016-1974

The nsScannerString::AppendUnicodeTo function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not verify that memory allocation succeeds, which allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via crafted Unicode data in an HTM...

Out-of-bounds

The nsScannerString::AppendUnicodeTo function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not verify that memory allocation succeeds, which allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via crafted Unicode data in an HTM...

CVE-2016-1974

The nsScannerString::AppendUnicodeTo function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not verify that memory allocation succeeds, which allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via crafted Unicode data in an HTM...

CVE-2016-1974: Improper Restriction of Operations within the Bounds of a Memory Buffer

The nsScannerString::AppendUnicodeTo function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not verify that memory allocation succeeds, which allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via crafted Unicode data in an HTM...

Mozilla: Out-of-bounds read in HTML parser following a failed allocation (MFSA 2016-34)

The nsScannerString::AppendUnicodeTo function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not verify that memory allocation succeeds, which allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via crafted Unicode data in an HTM...

PT-2016-1443

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 45.0 Firefox ESR versions prior to 38.7 Description The issue is related to the nsScannerString::AppendUnicodeTo function, which does not verify that memory allocation succeeds. This allows remote attackers to...

Out-of-bounds read in HTML parser following a failed allocation — Mozilla

Security researcher Ronald Crane reported an out-of-bounds read following a failed allocation in the HTML parser while working with unicode strings. This can also affect the parsing of XML and SVG format data. This leads to a potentially exploitable crash...

UBUNTU-CVE-2016-1974

The nsScannerString::AppendUnicodeTo function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not verify that memory allocation succeeds, which allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via crafted Unicode data in an HTM...

Fedora 23 : python-pycurl-7.19.5.1-4.fc23 (2015-a26f0b0daf)

python-pycurl-7.19.5.1-4.fc23 - fix a use after free issue with unicode FORMBUFFERPTR 1277488 python-pycurl-7.19.5.1-3.fc22 - fix a use after free issue with unicode FORMBUFFERPTR 1277488 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

MyBB < 1.6.17 / 1.8.x < 1.8.5 Multiple Vulnerabilities

Binary data 9121.prm...

Updated nodejs packages fix security vulnerability

A request smuggling vulnerability was found in Node.js that can be exploited under certain unspecified circumstances CVE-2016-2086. It was reported that HTTP header parsing in Node.js is vulnerable to response splitting attacks. While Node.js has been protecting against response splitting attacks...

PT-2016-5070

Name of the Vulnerable Software and Affected Versions Node.js versions 0.10.x before 0.10.42 Node.js versions 0.11.6 through 0.11.16 Node.js versions 0.12.x before 0.12.10 Node.js versions 4.x before 4.3.0 Node.js versions 5.x before 5.6.0 Description The issue allows remote attackers to bypass a...