6561 matches found
Mozilla Firefox DirectionalityUtils Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...
Achat 0.150 beta7 - Remote Buffer Overflow (Metasploit)
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Achat v0.150 beta7 Buffer Overflow', 'Description' = %q This module exploits an unicode SEH based stack buffer overflow in Achat...
Achat 0.150 beta7 Buffer Overflow Exploit
This Metasploit module exploits a unicode SEH-based stack buffer overflow in Achat version 0.150. By sending a crafted message to the default port 9256 it's possible to overwrites the SEH handler. Even when the exploit is reliable it depends of timing since there are two threads overflowing the...
Achat 0.150 beta7 Buffer Overflow
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Achat v0.150 beta7 Buffer Overflow', 'Description' = %q This module exploits an unicode SEH based stack buffer overflow in Achat...
CVE-2014-9654
The Regular Expressions package in International Components for Unicode ICU for C/C++ before 2014-12-03, as used in Google Chrome before 40.0.2214.91, calculates certain values without ensuring that they can be represented in a 24-bit field, which allows remote attackers to cause a denial of...
UBUNTU-CVE-2014-9654
The Regular Expressions package in International Components for Unicode ICU for C/C++ before 2014-12-03, as used in Google Chrome before 40.0.2214.91, calculates certain values without ensuring that they can be represented in a 24-bit field, which allows remote attackers to cause a denial of...
PHP 5.4.x < 5.4.37 Multiple Vulnerabilities
According to its banner, the version of PHP 5.4.x installed on the remote host is prior to 5.4.37. It is, therefore, affected by multiple vulnerabilities: - The CGI component has an out-of-bounds read flaw in file 'cgimain.c' when nmap is used to process an invalid file that begins with a hash...
ICU: regexp engine incorrect handling of a zero length quantifier
The Regular Expressions package in International Components for Unicode ICU 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via vectors related to a...
iPass Open Mobile Windows Client Remote Code Execution Vulnerability
iPass Open Mobile is a quick and easy way for you to use your device to connect to over a million enabled WIFIs around the world. A security vulnerability exists in the iPass Open Mobile client that allows attackers to register arbitrary DLLs via UNC shared pathnames by sending specially crafted...
USN-2476-1 oxide-qt vulnerabilities
Several memory corruption bugs were discovered in ICU. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service via renderer crash or execute arbitrary code with the privileges of the sandboxed render process...
Google Chrome Denial of Service Vulnerability (CNVD-2015-00669)
Google Chrome is a web browser developed by Google, Inc.International Components for Unicode ICU is a Unicode-supported, software internationalization, globalization C/C++ and Java library. A security vulnerability exists in the Regular Expressions package in versions of ICU 52 SVN revision 29294...
Google Chrome Denial of Service Vulnerability (CNVD-2015-00672)
Google Chrome is a web browser developed by Google, Inc.International Components for Unicode ICU is a Unicode-supported, software internationalization, globalization C/C++ and Java library. A security vulnerability exists in the Regular Expressions package in versions of ICU 52 SVN revision 29294...
Google Chrome ICU Uninitialization Vulnerability
Google Chrome is a popular WEB browser. Google Chrome ICU suffers from an uninitialized vulnerability due to the program failing to properly initialize structural data. The vulnerability allows an attacker to construct a malicious WEB page and trick the user into parsing it, which can be used to...
chromium: multiple issues
CVE-2014-7923 memory corruption The Regular Expressions package in International Components for Unicode ICU 52, allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via vectors related to a 1 zero-length quantifier or 2 look-behind...
CVE-2014-7940
The collator implementation in i18n/ucol.cpp in International Components for Unicode ICU 52 through SVN revision 293126, as used in Google Chrome before 40.0.2214.91, does not initialize memory for a data structure, which allows remote attackers to cause a denial of service or possibly have...
DEBIAN-CVE-2014-7940
The collator implementation in i18n/ucol.cpp in International Components for Unicode ICU 52 through SVN revision 293126, as used in Google Chrome before 40.0.2214.91, does not initialize memory for a data structure, which allows remote attackers to cause a denial of service or possibly have...
DEBIAN-CVE-2014-7926
The Regular Expressions package in International Components for Unicode ICU 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via vectors related to a...
CVE-2014-7926
The Regular Expressions package in International Components for Unicode ICU 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via vectors related to a...
DEBIAN-CVE-2014-7923
The Regular Expressions package in International Components for Unicode ICU 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via vectors related to a...
Memory corruption
The Regular Expressions package in International Components for Unicode ICU 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via vectors related to a...