PT-2016-1363

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 9.1.20 PostgreSQL versions 9.2.x prior to 9.2.15 PostgreSQL versions 9.3.x prior to 9.3.11 PostgreSQL versions 9.4.x prior to 9.4.6 PostgreSQL versions 9.5.x prior to 9.5.1 Description The issue allows remote...

PostgreSQL -- Security Fixes for Regular Expressions, PL/Java.

PostgreSQL project reports: Security Fixes for Regular Expressions, PL/Java CVE-2016-0773: This release closes security hole CVE-2016-0773, an issue with regular expression regex parsing. Prior code allowed users to pass in expressions which included out-of-range Unicode characters, triggering a...

The vulnerability of the Mac OS X operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the International Components for Unicode module in the Mac OS X operating system is related to errors in the code. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

yTree 1.94-1.1 - Local Buffer Overflow (PoC)

Exploit Author: Juan Sacco - http://www.exploitpack.com [email protected] Program affected: yTree - File manager for terminals v1.94-1.1 Description: yTree is prone to a stack-based overflow, an attacker could exploit this issue to execute arbitrary code in the context of the application...

libEBML Information Disclosure Vulnerability

libEBML is a C++ library for parsing EBML files maintained by the Matroska team. A security vulnerability in the 'EbmlUnicodeString::UpdateFromUTF8' function of libEBML allows an attacker to obtain sensitive information in process heap memory using specially crafted UTF-8 strings...

DEBIAN-CVE-2015-8790

The EbmlUnicodeString::UpdateFromUTF8 function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted UTF-8 string, which triggers an invalid memory access...

UBUNTU-CVE-2015-8790

The EbmlUnicodeString::UpdateFromUTF8 function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted UTF-8 string, which triggers an invalid memory access...

Matroska libebml EbmlUnicodeString Heap Information Leak

Talos Vulnerability Report TALOS-2016-0036 Matroska libebml EbmlUnicodeString Heap Information Leak January 28, 2016 CVE Number CVE-2015-8790 Description A specially crafted unicode string can cause an off-by-few read on the heap in unicode string parsing code in libebml. This issue can potential...

ICU: integer signedness issue in IndicRearrangementProcessor (OpenJDK 2D, 8140543)

Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...

GlassFish Arbitrary File Read Vulnerability

GlassFish is a JavaEE5-based business-compatible application server for development, deployment and redistribution. GlassFish suffers from an arbitrary file read vulnerability. Due to its implementation of unicode encoding flaws, resulting in multiple parsing of the same code, such as: java...

[SECURITY] [DLA 381-1] icu security update

Package : icu Version : 4.4.1-8+squeeze5 CVE ID : CVE-2015-2632 A vulnerability was found in ICU, a set of libraries that provides Unicode and internationalization support. Integer overflows in the ICU layout engine made it possible to disclose information. For Debian 6 "Squeeze", this problem ha...

PycURL远程代码执行漏洞

简要描述： 利用pycurl上传文件时，如果文件内容是unicode类型，那么会产生Use After Free漏洞 详细说明： 文件名： pycurl\src\easy.c 如果setopt给定的FORMBUFFERPTR的内容是Unicode，如 curl.setoptpycurl.HTTPPOST, 'field2', pycurl.FORMBUFFER, 'uploaded.file', pycurl.FORMBUFFERPTR, u'test', 那么会进入如下流程: 代码1571行会先把unicode转换成str，ostr和olen，分别是str的字符串指针和长度...

Microsoft Unicode Scripts Processor Arbitrary Code Execution Exploit

On the 8th December 2015, Microsoft released Security Bulletin MS15-130 to fix a vulnerability in Unicode Scripts Processor component found by Secunia Research. The vector for a successful exploitation is a specially crafted "True Type Font" TTF file, which typically can be embedded in e.g...

Updated python-curl packages fix security vulnerability

A use-after-free vulnerability was found in Curl object's HTTPPOST setopt when a Unicode value is passed as a value with a FORMBUFFERPTR. The str object created from the passed in unicode object would have its buffer used but the unicode object would be stored instead of the str object rhbz127748...

CVE-2007-4586

Multiple buffer overflows in phpiisfunc.dll in the iisfunc extension for PHP 5.2.0 and earlier allow context-dependent attackers to execute arbitrary code, probably during Unicode conversion, as demonstrated by a long string in the first argument to the iisgetservicestate function, related to the...

Samba Unicode Filename Buffer Overflow (CVE-2004-0882)

A vulnerability has been reported in the way Samba handles file information requests. A malformed request can trick the server into overflowing an incorrectly allocated buffer while generating a response. If certain conditions are met, an attacker can exploit this vulnerability to execute malicio...

iTunes for Windows < 12.3 Multiple Vulnerabilities

Binary data 8958.prm...

The vulnerability of the Windows Embedded Standard 2009 operating system allows a perpetrator to trigger a service failure or execute arbitrary code.

The Windows Embedded Standard 2009 operating system contains a vulnerability in the NetprPathCanonicalize function of the netapi32.dll module, which is located in the C:\Windows\System32 directory. This function uses unsafe string functions to copy Unicode strings file paths, resulting in stack...

CVE-2015-5922

Unspecified vulnerability in International Components for Unicode ICU before 53.1.0, as used in Apple OS X before 10.11 and watchOS before 2, has unknown impact and attack vectors...

Security feature bypass

Unspecified vulnerability in International Components for Unicode ICU before 53.1.0, as used in Apple OS X before 10.11 and watchOS before 2, has unknown impact and attack vectors...