Vulnerabilities > Out-of-bounds Write

DATE CVE VULNERABILITY TITLE RISK
2016-11-22 CVE-2016-9540 Out-of-bounds Write vulnerability in Libtiff 4.0.6
tools/tiffcp.c in libtiff 4.0.6 has an out-of-bounds write on tiled images with odd tile width versus image width.
network
low complexity
libtiff CWE-787
critical
9.8
2016-11-22 CVE-2016-9537 Out-of-bounds Write vulnerability in Libtiff 4.0.6
tools/tiffcrop.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in buffers.
network
low complexity
libtiff CWE-787
critical
9.8
2016-11-22 CVE-2016-9536 Out-of-bounds Write vulnerability in Libtiff 4.0.6
tools/tiff2pdf.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers in t2p_process_jpeg_strip().
network
low complexity
libtiff CWE-787
critical
9.8
2016-11-22 CVE-2016-9533 Out-of-bounds Write vulnerability in Libtiff 4.0.6
tif_pixarlog.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers.
network
low complexity
libtiff CWE-787
critical
9.8
2016-11-18 CVE-2016-4331 Out-of-bounds Write vulnerability in Hdfgroup Hdf5 1.8.16
When decoding data out of a dataset encoded with the H5Z_NBIT decoding, the HDF5 1.8.16 library will fail to ensure that the precision is within the bounds of the size leading to arbitrary code execution.
local
low complexity
hdfgroup CWE-787
8.6
2016-11-10 CVE-2016-7200 Out-of-bounds Write vulnerability in Microsoft Edge
The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7201, CVE-2016-7202, CVE-2016-7203, CVE-2016-7208, CVE-2016-7240, CVE-2016-7242, and CVE-2016-7243.
network
low complexity
microsoft CWE-787
8.8
2016-10-31 CVE-2016-8879 Out-of-bounds Write vulnerability in Foxitsoftware Phantompdf and Reader
The thumbnail shell extension plugin (FoxitThumbnailHndlr_x86.dll) in Foxit Reader and PhantomPDF before 8.1 on Windows allows remote attackers to cause a denial of service (out-of-bounds write and application crash) via a crafted JPEG2000 image embedded in a PDF document, aka an "Exploitable - Heap Corruption" issue.
network
low complexity
foxitsoftware CWE-787
6.5
2016-10-31 CVE-2016-8877 Out-of-bounds Write vulnerability in Foxitsoftware Phantompdf and Reader
Heap buffer overflow (Out-of-Bounds write) vulnerability in Foxit Reader and PhantomPDF before 8.1 on Windows allows remote attackers to execute arbitrary code via a crafted JPEG2000 image embedded in a PDF document, aka a "corrupted suffix pattern" issue.
network
low complexity
foxitsoftware CWE-787
8.8
2016-10-28 CVE-2016-8339 Out-of-bounds Write vulnerability in Redislabs Redis
A buffer overflow in Redis 3.2.x prior to 3.2.4 causes arbitrary code execution when a crafted command is sent.
network
low complexity
redislabs CWE-787
critical
9.8
2016-10-13 CVE-2016-6990 Out-of-bounds Write vulnerability in Adobe Flash Player and Flash Player Desktop Runtime
Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4273, CVE-2016-6982, CVE-2016-6983, CVE-2016-6984, CVE-2016-6985, CVE-2016-6986, and CVE-2016-6989.
network
low complexity
adobe CWE-787
8.8