CVE-2016-1628

chromium-browser: out-of-bounds read in PDFium

pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, does not validate a certain precision value, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via a crafted JPEG 2000 image in a PDF document, related to the opj_pi_next_rpcl, opj_pi_next_pcrl, and opj_pi_next_cprl functions.

CVSS 3.0 · 6.3 Medium EPSS 1.9% KEV · Not listed

Vendors

Debian Google Redhat

Products

Debian Linux Chrome Rhel Extras

CVE-2016-1248

vim: Lack of validation of values for few options results in code exection

vim before patch 8.0.0056 does not properly validate values for the 'filetype', 'syntax' and 'keymap' options, which may result in the execution of arbitrary code if a file with a specially crafted modeline is opened.

CVSS 3.0 · 7.8 High EPSS 25.3% KEV · Not listed

Vendors

Debian Redhat Vim

Products

Debian Linux Enterprise Linux Vim

CVE-2015-5589

php: segmentation fault in Phar::convertToData on invalid file

The phar_convert_to_other function in ext/phar/phar_object.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 does not validate a file pointer before a close operation, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted TAR archive that is mishandled in a Phar::convertToData call.

CVSS 3.0 · 9.8 Critical EPSS 6.3% KEV · Not listed

Vendors

Php Redhat

Products

Php Rhel Software Collections

CVE-2015-5590

php: buffer overflow and stack smashing error in phar_fix_filepath

Stack-based buffer overflow in the phar_fix_filepath function in ext/phar/phar.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large length value, as demonstrated by mishandling of an e-mail attachment by the imap PHP extension.

CVSS 3.0 · 7.3 High EPSS 4.6% KEV · Not listed

Vendors

Php Redhat

Products

Php Rhel Software Collections

CVE-2016-1624

chromium-browser: buffer overflow in Brotli

Integer underflow in the ProcessCommandsInternal function in dec/decode.c in Brotli, as used in Google Chrome before 48.0.2564.109, allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted data with brotli compression.

CVSS 3.0 · 8.8 High EPSS 1.4% KEV · Not listed

Vendors

Debian Google Opensuse and 1 more

Products

Debian Linux Chrome Opensuse and 1 more

CVE-2016-1623

chromium-browser: same-origin bypass in DOM

The DOM implementation in Google Chrome before 48.0.2564.109 does not properly restrict frame-attach operations from occurring during or after frame-detach operations, which allows remote attackers to bypass the Same Origin Policy via a crafted web site, related to FrameLoader.cpp, HTMLFrameOwnerElement.h, LocalFrame.cpp, and WebLocalFrameImpl.cpp.

CVSS 3.0 · 8.8 High EPSS 1.2% KEV · Not listed

Vendors

Debian Google Opensuse and 1 more

Products

Debian Linux Chrome Opensuse and 1 more

CVE-2016-4108

flash-plugin: multiple code execution issues fixed in APSB16-15

Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.

CVSS 3.0 · 7.5 High EPSS 37.7% KEV · Not listed

Vendors

Adobe Microsoft Redhat

Products

Flash Player Edge Internet Explorer and 1 more

CVE-2015-6360

libsrtp: improper handling of CSRC count and extension header length in RTP header

The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service via crafted fields in SRTP packets, aka Bug ID CSCux00686.

CVSS 3.0 · 7.5 High EPSS 8.3% KEV · Not listed

Vendors

Cisco Redhat

Products

Adaptive Security Appliance Software Dx Series Ip Phones Firmware Ios Xe and 12 more

CVE-2016-4109

flash-plugin: multiple code execution issues fixed in APSB16-15

Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.

CVSS 3.0 · 7.5 High EPSS 8.4% KEV · Not listed

Vendors

Adobe Microsoft Redhat

Products

Flash Player Edge Internet Explorer and 1 more

CVE-2016-4110

flash-plugin: multiple code execution issues fixed in APSB16-15

Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.

CVSS 3.0 · 7.5 High EPSS 8.4% KEV · Not listed

Vendors

Adobe Microsoft Redhat

Products

Flash Player Edge Internet Explorer and 1 more

CVE-2016-5766

gd: Integer overflow in _gd2GetHeader() resulting in heap overflow

Integer overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via crafted chunk dimensions in an image.

CVSS 3.0 · 8.8 High EPSS 7.5% KEV · Not listed

Vendors

Debian Fedoraproject Freebsd and 3 more

Products

Debian Linux Fedora Freebsd and 5 more

CVE-2016-4111

flash-plugin: multiple code execution issues fixed in APSB16-15

Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.

CVSS 3.0 · 7.5 High EPSS 8.4% KEV · Not listed

Vendors

Adobe Microsoft Redhat

Products

Flash Player Edge Internet Explorer and 1 more

CVE-2016-5768

php: Double free in _php_mb_regex_ereg_replace_exec

Double free vulnerability in the _php_mb_regex_ereg_replace_exec function in php_mbregex.c in the mbstring extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by leveraging a callback exception.

CVSS 3.0 · 9.8 Critical EPSS 9.6% KEV · Not listed

Vendors

Php Redhat

Products

Php Enterprise Linux Rhel Software Collections

CVE-2016-4113

flash-plugin: multiple code execution issues fixed in APSB16-15

Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.

CVSS 3.0 · 7.5 High EPSS 8.4% KEV · Not listed

Vendors

Adobe Microsoft Redhat

Products

Flash Player Edge Internet Explorer and 1 more

CVE-2016-4116

flash-plugin: multiple code execution issues fixed in APSB16-15

Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.

CVSS 3.0 · 7.5 High EPSS 8.4% KEV · Not listed

Vendors

Adobe Microsoft Redhat

Products

Flash Player Edge Internet Explorer and 1 more

CVE-2015-6834

php: multiple unserialization use-after-free issues

Multiple use-after-free vulnerabilities in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 allow remote attackers to execute arbitrary code via vectors related to (1) the Serializable interface, (2) the SplObjectStorage class, and (3) the SplDoublyLinkedList class, which are mishandled during unserialization.

CVSS 3.0 · 9.8 Critical EPSS 46.8% KEV · Not listed

Vendors

Php Redhat

Products

Php Rhel Software Collections

CVE-2015-6837

php: NULL pointer dereference in XSLTProcessor class

The xsl_ext_function_php function in ext/xsl/xsltprocessor.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13, when libxml2 before 2.9.2 is used, does not consider the possibility of a NULL valuePop return value before proceeding with a free operation during initial error checking, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted XML document, a different vulnerability than CVE-2015-6838.

CVSS 3.0 · 7.5 High EPSS 7.3% KEV · Not listed

Vendors

Php Redhat Xmlsoft

Products

Php Rhel Software Collections Libxml2

CVE-2015-6838

php: NULL pointer dereference in XSLTProcessor class

The xsl_ext_function_php function in ext/xsl/xsltprocessor.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13, when libxml2 before 2.9.2 is used, does not consider the possibility of a NULL valuePop return value before proceeding with a free operation after the principal argument loop, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted XML document, a different vulnerability than CVE-2015-6837.

CVSS 3.0 · 7.5 High EPSS 8.1% KEV · Not listed

Vendors

Php Redhat Xmlsoft

Products

Php Rhel Software Collections Libxml2

CVE-2016-1521

graphite2: Out-of-bound read vulnerability triggered by crafted fonts

The directrun function in directmachine.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not validate a certain skip operation, which allows remote attackers to execute arbitrary code, obtain sensitive information, or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font.

CVSS 3.0 · 8.8 High EPSS 4.1% KEV · Not listed

Vendors

Debian Fedoraproject Mozilla and 2 more

Products

Debian Linux Fedora Firefox and 3 more

CVE-2016-1522

graphite2: Null pointer dereference and out-of-bounds access vulnerabilities

Code.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not consider recursive load calls during a size check, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via a crafted Graphite smart font.

CVSS 3.0 · 8.8 High EPSS 8.3% KEV · Not listed

Vendors

Debian Fedoraproject Mozilla and 2 more

Products

Debian Linux Fedora Firefox and 3 more