10852 matches found
CVE-2015-1302
CVE-2015-1302 affects Google Chrome prior to 46.0.2490.86, where the PDF viewer could leak information and bypass Same Origin Policy by exposing scripting messages and APIs via pdf.js and out_of_process_instance.cc. This is a vulnerability in the PDF rendering path used by Chrome, enabling an inf...
Microsoft Windows Excel Viewer Remote Code Execution Vulnerability (3104540)
This host is missing an important security update according to Microsoft Bulletin MS15-116. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Google Chrome < 46.0.2490.86 Vulnerability
The version of Google Chrome installed on the remote Windows host is prior to 46.0.2490.86. It is, therefore, affected by a vulnerability as referenced in the 201511stable-channel-update advisory. - The PDF viewer in Google Chrome before 46.0.2490.86 does not properly restrict scripting messages...
Stable Channel Update
The stable channel has been updated to 46.0.2490.86 for Windows, Mac, and Linux. This release contains an update to Adobe Flash Player 19.0.0.245 and security fixes. Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with ...
chromium -- multiple vulnerabilities
Google Chrome Releases reports: 520422 High CVE-2015-1302: Information leak in PDF viewer. Credit to Rob Wu...
SAP 3D Visual Enterprise Viewer Arbitrary Code Execution Vulnerability (CNVD-2015-07257)
SAP 3D Visual Enterprise Viewer VEV is a suite of software from SAP for viewing, zooming, panning and rotating interactive 3D data and playing step-by-step animations. A security vulnerability exists in SAP 3D Visual Enterprise Viewer VEV. The vulnerability can be exploited by a remote attacker t...
SAP 3D Visual Enterprise Viewer Arbitrary Code Execution Vulnerability
SAP 3D Visual Enterprise Viewer VEV is a suite of software from SAP for viewing, zooming, panning and rotating interactive 3D data and playing step-by-step animations. A security vulnerability exists in SAP 3D Visual Enterprise Viewer VEV. The vulnerability can be exploited by a remote attacker t...
SAP 3D Visual Enterprise Viewer Buffer Overflow Vulnerability
SAP 3D Visual Enterprise Viewer VEV is a suite of software from SAP for viewing, zooming, panning and rotating interactive 3D data and playing step-by-step animations. A buffer overflow vulnerability exists in SAP 3D Visual Enterprise Viewer VEV. A remote attacker could exploit this vulnerability...
CVE-2015-8030
SAP 3D Visual Enterprise Viewer VEV allows remote attackers to execute arbitrary code via a crafted 1 U3D, 2 LWO, 3 JPEG2000, or 4 FBX file, aka "Out-Of-Bounds Indexing" vulnerabilities...
CVE-2015-8028
Multiple buffer overflows in SAP 3D Visual Enterprise Viewer VEV allow remote attackers to execute arbitrary code via a crafted 1 3DM or 2 Flic Animation file...
Out-of-bounds
SAP 3D Visual Enterprise Viewer VEV allows remote attackers to execute arbitrary code via a crafted 1 U3D, 2 LWO, 3 JPEG2000, or 4 FBX file, aka "Out-Of-Bounds Indexing" vulnerabilities...
Buffer overflow
Multiple buffer overflows in SAP 3D Visual Enterprise Viewer VEV allow remote attackers to execute arbitrary code via a crafted 1 3DM or 2 Flic Animation file...
Memory corruption
SAP 3D Visual Enterprise Viewer VEV allows remote attackers to execute arbitrary code via a crafted Filmbox document, which triggers memory corruption...
CVE-2015-8030
The CVE-2015-8030 entry concerns SAP 3D Visual Enterprise Viewer (VEV). Affected component/file handling falls under four 3D/image formats (U3D, LWO, JPEG2000, FBX). The root cause is a bounds/array index issue when processing these file types, enabling remote code execution. Exploitation require...
CVE-2015-8029
SAP 3D Visual Enterprise Viewer VEV allows remote attackers to execute arbitrary code via a crafted Filmbox document, which triggers memory corruption...
CVE-2015-8028
Multiple buffer overflows in SAP 3D Visual Enterprise Viewer VEV allow remote attackers to execute arbitrary code via a crafted 1 3DM or 2 Flic Animation file...
CVE-2015-8029
CVE-2015-8029 affects SAP 3D Visual Enterprise Viewer (VEV). The vulnerability arises in the handling of Filmbox documents, where a crafted Filmbox file can trigger memory corruption and allow remote code execution on vulnerable installations. The advisory notes that exploitation requires user in...
CVE-2015-8030
SAP 3D Visual Enterprise Viewer VEV allows remote attackers to execute arbitrary code via a crafted 1 U3D, 2 LWO, 3 JPEG2000, or 4 FBX file, aka "Out-Of-Bounds Indexing" vulnerabilities...
Desktop Viewer is Showing Up Even though it has been Disabled Through the web.config File
Desktop Viewer is showing up even though it has been disabled through the web.config file...
Correction: BMC-2015-0005: File inclusion vulnerability caused by misconfiguration of "BIRT Viewer" servlet as used in BMC Remedy AR Reporting
Enigmail: ????? ????? ????????? ?? ???? ??????????? ??? ????????? Errata: This is a correction of our previous disclosure email from September 23rd, 2015. Our previous posting implied that the security vulnerability we discovered was in the "BIRT Viewer" servlet itself. This is NOT the case, but...