Memory Buffer Bounds Error — CVEs by weakness type

Flash Player HIGH 10.0

CVE-2015-5131EPSS 51%

Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR …

Fix: after 18.0.0.209

Fix from $1,950 2015-08-14

Flash Player HIGH 10.0

CVE-2015-5129EPSS 10%

Heap-based buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199,…

Fix: after 18.0.0.209

Fix from $1,950 2015-08-14

Air HIGH 10.0

CVE-2015-5125EPSS 6%

Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.1…

Fix: after 18.0.0.209

Fix from $1,950 2015-08-14

Fedora HIGH 7.2

CVE-2015-5154

Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when the container has a CDROM drive enabled, allows local…

Fix: after 4.5.0

Fix from $1,950 2015-08-12

Fedora HIGH 7.5

CVE-2015-2059

The stringprep_utf8_to_ucs4 function in libin before 1.31, as used in jabberd2, allows context-dependent attackers to read system memory and possibly…

Fix: after 1.30

Fix from $1,950 2015-08-12

Ubuntu Linux MEDIUM 5.0

CVE-2013-7443

Buffer overflow in the skip-scan optimization in SQLite 3.8.2 allows remote attackers to cause a denial of service (crash) via crafted SQL statements.

No fix yet

Fix from $1,600 2015-08-12

Ubuntu Linux MEDIUM 6.8

CVE-2015-5522

Heap-based buffer overflow in the ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) v…

Fix: after 10.6.8

Fix from $1,600 2015-08-11

Tivoli Storage Manager Fastback HIGH 10.0

CVE-2015-4935EPSS 9%

Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12.1 allows remote attackers to execute arbitrary cod…

Patch available

Fix from $1,950 2015-08-03

Tivoli Storage Manager Fastback HIGH 10.0

CVE-2015-4934EPSS 9%

Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12.1 allows remote attackers to execute arbitrary cod…

Patch available

Fix from $1,950 2015-08-03

Tivoli Storage Manager Fastback HIGH 10.0

CVE-2015-4933EPSS 9%

Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12.1 allows remote attackers to execute arbitrary cod…

Patch available

Fix from $1,950 2015-08-03

Tivoli Storage Manager Fastback HIGH 10.0

CVE-2015-4932EPSS 9%

Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12.1 allows remote attackers to execute arbitrary cod…

Patch available

Fix from $1,950 2015-08-03

Tivoli Storage Manager Fastback HIGH 10.0

CVE-2015-4931EPSS 9%

Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12.1 allows remote attackers to execute arbitrary cod…

Patch available

Fix from $1,950 2015-08-03

Dhcpcd MEDIUM 6.8

CVE-2014-7913

The print_option function in dhcp-common.c in dhcpcd through 6.9.1, as used in dhcp.c in dhcpcd 5.x in Android before 5.1 and other products, misinte…

Fix: after 6.9.0

Fix from $1,600 2015-07-30

Dhcpcd MEDIUM 6.8

CVE-2014-7912

The get_option function in dhcp.c in dhcpcd before 6.2.0, as used in dhcpcd 5.x in Android before 5.1 and other products, does not validate the relat…

Fix: after 6.1.0

Fix from $1,600 2015-07-30

Ubuntu Linux MEDIUM 6.8

CVE-2015-1872

The ff_mjpeg_decode_sof function in libavcodec/mjpegdec.c in FFmpeg before 2.5.4 does not validate the number of components in a JPEG-LS Start Of Fra…

Fix: after 2.5.3

Fix from $1,600 2015-07-26

Chrome HIGH 7.5

CVE-2015-1280

SkPictureShader.cpp in Skia, as used in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service (memory corruption) o…

Fix: after 43.0.2357.134

Fix from $1,950 2015-07-23

Enterprise Linux Desktop Supplementary MEDIUM 6.8

CVE-2015-1273

Heap-based buffer overflow in j2k.c in OpenJPEG before r3002, as used in PDFium in Google Chrome before 44.0.2403.89, allows remote attackers to caus…

Fix: after 43.0.2357.134

Fix from $1,600 2015-07-23

Chrome MEDIUM 6.8

CVE-2015-1271

PDFium, as used in Google Chrome before 44.0.2403.89, does not properly handle certain out-of-memory conditions, which allows remote attackers to cau…

Fix: after 43.0.2357.134

Fix from $1,600 2015-07-23

Total Commander MEDIUM 5.0

CVE-2015-2869

The FileInfo plugin before 2.22 for Ghisler Total Commander allows remote attackers to cause a denial of service (out-of-bounds read and application …

Fix: after 2.2.1

Fix from $1,600 2015-07-21

Air HIGH 10.0

CVE-2015-5124EPSS 7%

Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 1…

Fix: after 18.0.0.144

Fix from $1,950 2015-07-20

Windows 10 HIGH 8.8

CVE-2015-2426 KEVEPSS 87%

Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7…

Patch available

Fix from $1,950 2015-07-20

Security Solutions For Iseries MEDIUM 6.8

CVE-2015-0795

Multiple stack-based buffer overflows in the SafeShellExecute method in the NetIQExecObject.NetIQExec.1 ActiveX control in NetIQExec.dll in NetIQ Sec…

Mitigation only

Fix from $1,600 2015-07-18

Acrobat HIGH 10.0

CVE-2015-5115EPSS 6%

Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Ac…

Fix: 10.1.15 / 11.0.12+