CVE Vulnerability Catalog

A stack-based buffer overflow in the isofs_real_readdir function in isofs.c in FuseISO 20070708 can be exploited by remote attackers. They can cause application crashes or potentially execute arbitrary code by sending a long pathname in an ISO file.

Integer overflow in the isofs_real_read_zf function in isofs.c in FuseISO 20070708 might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a large ZF block size in an ISO file, leading to a heap-based buffer overflow.

Cogent DataHub before 7.3.10 allows local users to gain privileges by leveraging the user or guest role to modify a file.

Multiple unspecified vulnerabilities in Google V8 before version 4.9.385.33, as used in Google Chrome before version 49.0.2623.108, may allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

The PageCaptureSaveAsMHTMLFunction::ReturnFailure function in Google Chrome before version 49.0.2623.108 allows attackers to cause a denial of service or possibly have unspecified other impact by triggering an error in creating an MHTML document.

The Program::getUniformInternal function in Program.cpp in libANGLE, as used in Google Chrome before version 49.0.2623.108, does not properly handle a certain data-type mismatch, which may lead to denial of service (buffer overflow) or other unspecified impacts via crafted shader stages.

A use-after-free vulnerability in the GetLoadTimes function in the Extensions implementation in Google Chrome before version 49.0.2623.108 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code.

Use-after-free vulnerability in the RenderWidgetHostImpl::Destroy function in the Navigation implementation in Google Chrome before version 49.0.2623.108 may allow remote attackers to cause a denial of service or possibly have unspecified other impact.

A stack-based buffer overflow in manager.exe in Autodesk Backburner 2016 allows remote attackers to execute arbitrary code or cause a denial of service. This affects version 2016.0.0.2150 and earlier.

The client implementation in IBM Informix Dynamic Server 11.70.xCn on Windows does not properly restrict access to the nsrd, nsrexecd, and portmap executable files, allowing local users to gain privileges via a Trojan horse file.

PCRE 8.35 has an issue with optimizing nested alternatives, which can lead to denial of service through stack memory corruption. Remote attackers can exploit this vulnerability by sending a crafted string.

The Locator/ID Separation Protocol (LISP) implementation in Cisco IOS 15.1 and 15.2 and NX-OS 4.1 through 6.2 allows remote attackers to cause a denial of service (device reload) via a crafted header in a packet.

Cisco IOS versions 15.3 and 15.4, Cisco IOS XE versions 3.8 through 3.11, and Cisco Unified Communications Manager are vulnerable to an attack that can cause device reload via malformed SIP messages.

The Smart Install client implementation in Cisco IOS 12.2, 15.0, and 15.2 and IOS XE 3.2 through 3.7 allows remote attackers to cause a denial of service (device reload) via crafted image list parameters in a Smart Install packet.

Cisco IOS versions 15.0 through 15.5 and IOS XE versions 3.3 through 3.16 are vulnerable to an attack that can lead to denial of service via a crafted DHCPv6 Relay message. Attackers can remotely cause the device to reload.

The Wide Area Application Services (WAAS) Express implementation in Cisco IOS versions 15.1 through 15.5 allows remote attackers to cause a denial of service (device reload) via a crafted TCP segment.

Unspecified vulnerability in Oracle Java SE 7u97, 8u73, and 8u74 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to the Hotspot sub-component.

WebKit in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

WebKit in iOS before 9.3 and Safari before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.