CWE:

	Topic	Date	Author
High	Google SketchUp lib3ds 3DS Importer Memory Corruption	18.01.2010	CORE

---

CVEMAP Search Results

CVE

Details

Description

2019-07-08

High	CVE-2019-2109	Vendor: Google Software: Android	In MakeMPEG4VideoCodecSpecificData of AVIExtractor.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1. Android ID: A-130651570.
High	CVE-2019-2107	Vendor: Google Software: Android	In ihevcd_parse_pps of ihevcd_parse_headers.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-130024844.
High	CVE-2019-2106	Vendor: Google Software: Android	In ihevcd_sao_shift_ctb of ihevcd_sao.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-130023983.

2019-07-05

Medium

CVE-2019-1887

Vendor: Cisco Software: Unified comm...

A vulnerability in the Session Initiation Protocol (SIP) protocol implementation of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to insufficient validation of input SIP traffic. An attacker could exploit this vulnerability by sending a malformed SIP packet to an affected Cisco Unified Communications Manager. A successful exploit could allow the attacker to trigger a new registration process on all connected phones, temporarily disrupting service.

2019-06-30

Medium	CVE-2019-13083	Vendor: Xnview Software: Xnview	XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000384e2a.
Medium	CVE-2019-13084	Vendor: Xnview Software: Xnview	XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000026b739.
Medium	CVE-2019-13085	Vendor: Xnview Software: Xnview	XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000030ecfa.

2019-06-28

Medium

CVE-2019-10987

Vendor: Advantech Software: Webaccess

In WebAccess/SCADA Versions 8.3.5 and prior, multiple out-of-bounds write vulnerabilities are caused by a lack of proper validation of the length of user-supplied data. Exploitation of these vulnerabilities may allow remote code execution.

2019-06-27

Low	CVE-2019-5785	Vendor: Google Software: Chrome	Incorrect convexity calculations in Skia in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.
Medium	CVE-2018-6149	Vendor: Google Software: Chrome	Type confusion in JavaScript in Google Chrome prior to 67.0.3396.87 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.

 

---

Copyright 2019, cxsecurity.com