PT-2016-7439 · X.Org +3 · Libxi +3

Name of the Vulnerable Software and Affected Versions: X.org libXi versions prior to 1.7.7 Description: The issue allows remote X servers to cause a denial of service, resulting in an infinite loop. This is achieved through vectors involving length fields. Recommendations: For versions prior to...

X.Org libXrandr Privilege Bypass Vulnerability

X.Org libXrandr is an X11 RandR extension library operated by the X.Org Foundation. A security vulnerability exists in X.Org libXrandr 1.5.0 and earlier versions that can be exploited by an attacker to bypass security restrictions and perform unauthorized operations...

X.Org libX11 Denial of Service Vulnerability

X.Org libX11 is an X11 X Window System client library run by the X.Org Foundation. A security vulnerability exists in X.Org libX11 1.6.3 and earlier versions that can be exploited by an attacker to cause a denial of service out-of-bounds memory read or write...

Mac OS X Privilege Escalation

The vulnerability of the Mac OS X system’s login window arises from buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context, or cause a service failure memory corruption through a specially created application...

Mac OS X Privilege Escalation

The vulnerability of the Mac OS X system’s login window is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created application...

Mac OS X Privilege Escalation

The vulnerability of the Mac OS X operating system’s login window exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context using a specially created application...

CVE-2016-3875

server/wm/WindowManagerService.java in Android 6.x before 2016-09-01 does not enforce the DISALLOWSAFEBOOT setting, which allows physically proximate attackers to bypass intended access restrictions and boot to safe mode via unspecified vectors, aka internal bug 26251884...

Google Chrome Access Restriction Bypass

The vulnerability of the ChromeClientImpl::createWindow method WebKit/Source/web/ChromeClientImpl.cpp of the Blink component in Google Chrome does not prevent the creation of windows using a delayed frame. Exploiting this vulnerability could allow a malicious actor to circumvent existing access...

UBUNTU-CVE-2016-7153

The HTTP/2 protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-party cookies are sent, aka a "HEIST" attack...

UBUNTU-CVE-2016-7152

The HTTPS protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-party cookies are sent, aka a "HEIST" attack...

CVE-2016-7152

The HTTPS protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-party cookies are sent, aka a "HEIST" attack...

Design/Logic Flaw

The HTTP/2 protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-party cookies are sent, aka a "HEIST" attack...

Design/Logic Flaw

The HTTPS protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-party cookies are sent, aka a "HEIST" attack...

CVE-2016-7152

The HTTPS protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-party cookies are sent, aka a "HEIST" attack...

CVE-2016-7153

CVE-2016-7153 describes a vulnerability in the HTTP/2 protocol where the TCP congestion window is not considered when determining content length, potentially enabling an attacker to obtain cleartext data by leveraging a web browser configuration that sends third‑party cookies (HEIST). The connect...

CVE-2016-7152

CVE-2016-7152 is described in IBM Security Bulletin as a HEIST-related vulnerability affecting the Firefox component of the IBM Synthetic Playback agent used with IBM Application Performance Management (APM) 8.1.3 and IBM Cloud Application Performance Management. The root cause is that the HTTPS ...

CVE-2016-7153: Exposure of Sensitive Information to an Unauthorized Actor

The HTTP/2 protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-party cookies are sent, aka a "HEIST" attack...

CVE-2016-7152: Exposure of Sensitive Information to an Unauthorized Actor

The HTTPS protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-party cookies are sent, aka a "HEIST" attack...

PT-2016-7237

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description The issue concerns the HTTPS protocol and its interaction with web-browser configurations, particularly when third-party cookies are sent. This can be exploited by remote attackers to...

Kaspersky Anti-Virus Unhandled Windows Messages Denial of Service Vulnerability

Summary An local denial of service vulnerability exists in window broadcast message handling functionality of Kaspersky Anti-Virus software. Sending certain unhandled window messages, attacker can cause application termination and in the same way bypass KAV self-protection mechanism. Tested...