WebKit in Apple iOS before 9.3.3 Safari before 9.1.2 and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site a different vulnerability than CVE-2016-4589 CVE-2016-4622 and CVE-2016-4623.


Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-4256 CVE-2016-4258 CVE-2016-4259 CVE-2016-4260 CVE-2016-4261 and CVE-2016-4262.

denial of service
memory corruption
arbitrary code execution


Adobe

Flash

Player

before

and

through

before

on

Windows

and

OS

X

and

before

on

Linux

allows

attackers

to

execute

arbitrary

code

or

cause

a

denial

of

service

(memory

corruption)

via

unspecified

vectors

a

different

vulnerability

than

and


Adobe

Reader

and

Acrobat

before

Acrobat

and

Acrobat

Reader

DC

Classic

before

and

Acrobat

and

Acrobat

Reader

DC

Continuous

before

on

Windows

and

OS

X

allow

attackers

to

execute

arbitrary

code

or

cause

a

denial

of

service

(memory

corruption)

via

unspecified

vectors

a

different

vulnerability

than

and


Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-4274 CVE-2016-4275 CVE-2016-4276 CVE-2016-4280 CVE-2016-4281 CVE-2016-4282 CVE-2016-4284 CVE-2016-4285 CVE-2016-6922 and CVE-2016-6924.


The WebKit Page Loading implementation in Apple iOS before 9.3.3 Safari before 9.1.2 and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.


WebKit in Apple iOS before 10 tvOS before 10 iTunes before 12.5.1 on Windows and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site a different vulnerability than CVE-2016-4759 CVE-2016-4766 CVE-2016-4767 and CVE-2016-4768.


An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the \WebKit\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the \ATS\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font.


S2 Camera in Apple iOS before 10 and OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-4274 CVE-2016-4275 CVE-2016-4280 CVE-2016-4281 CVE-2016-4282 CVE-2016-4283 CVE-2016-4284 CVE-2016-4285 CVE-2016-6922 and CVE-2016-6924.


Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-4274 CVE-2016-4275 CVE-2016-4276 CVE-2016-4280 CVE-2016-4281 CVE-2016-4283 CVE-2016-4284 CVE-2016-4285 CVE-2016-6922 and CVE-2016-6924.


An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the \AppleGraphicsControl\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-6982 CVE-2016-6983 CVE-2016-6984 CVE-2016-6985 CVE-2016-6986 CVE-2016-6989 and CVE-2016-6990.


An issue was discovered in certain Apple products. iOS before 10 is affected. Safari before 10 is affected. iTunes before 12.5.1 is affected. tvOS before 10 is affected. The issue involves the \WebKit\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


An issue was discovered in certain Apple products. iOS before 10.1 is affected. Safari before 10.0.1 is affected. tvOS before 10.0.1 is affected. The issue involves the \WebKit\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


WebKit in Apple iOS before 10 Safari before 10 and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site a different vulnerability than CVE-2016-4611 CVE-2016-4730 CVE-2016-4734 and CVE-2016-4735.


Apple HSSPI Support in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


libc++abi in Apple OS X before 10.11.6 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


WebKit in Apple iOS before 10 tvOS before 10 iTunes before 12.5.1 on Windows and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site a different vulnerability than CVE-2016-4765 CVE-2016-4766 CVE-2016-4767 and CVE-2016-4768.


Adobe

Reader

and

Acrobat

before

Acrobat

and

Acrobat

Reader

DC

Classic

before

and

Acrobat

and

Acrobat

Reader

DC

Continuous

before

on

Windows

and

OS

X

allow

attackers

to

execute

arbitrary

code

or

cause

a

denial

of

service

(memory

corruption)

via

unspecified

vectors

a

different

vulnerability

than

and


WebKit in Apple iOS before 10 tvOS before 10 iTunes before 12.5.1 on Windows and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site a different vulnerability than CVE-2016-4759 CVE-2016-4765 CVE-2016-4766 and CVE-2016-4767.


Adobe

Flash

Player

before

and

through

before

on

Windows

and

OS

X

and

before

on

Linux

allows

attackers

to

execute

arbitrary

code

or

cause

a

denial

of

service

(memory

corruption)

via

unspecified

vectors

a

different

vulnerability

than

and


Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-4257 CVE-2016-4258 CVE-2016-4259 CVE-2016-4260 CVE-2016-4261 and CVE-2016-4262.


WebKit in Apple iOS before 9.3.3 Safari before 9.1.2 and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site a different vulnerability than CVE-2016-4622 CVE-2016-4623 and CVE-2016-4624.


Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-4274 CVE-2016-4275 CVE-2016-4276 CVE-2016-4281 CVE-2016-4282 CVE-2016-4283 CVE-2016-4284 CVE-2016-4285 CVE-2016-6922 and CVE-2016-6924.


WebKit in Apple iOS before 10 Safari before 10 and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site a different vulnerability than CVE-2016-4611 CVE-2016-4730 CVE-2016-4733 and CVE-2016-4734.


Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-4256 CVE-2016-4257 CVE-2016-4259 CVE-2016-4260 CVE-2016-4261 and CVE-2016-4262.


WebKit in Apple iOS before 10 tvOS before 10 iTunes before 12.5.1 on Windows and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site a different vulnerability than CVE-2016-4759 CVE-2016-4765 CVE-2016-4767 and CVE-2016-4768.


An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the \FontParser\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font.


Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-4274 CVE-2016-4275 CVE-2016-4276 CVE-2016-4280 CVE-2016-4281 CVE-2016-4282 CVE-2016-4283 CVE-2016-4285 CVE-2016-6922 and CVE-2016-6924.


Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-4274 CVE-2016-4276 CVE-2016-4280 CVE-2016-4281 CVE-2016-4282 CVE-2016-4283 CVE-2016-4284 CVE-2016-4285 CVE-2016-6922 and CVE-2016-6924.


Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via unspecified vectors a different vulnerability than CVE-2016-4176.


Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-4256 CVE-2016-4257 CVE-2016-4258 CVE-2016-4259 CVE-2016-4260 and CVE-2016-4262.


WebKit in Apple iOS before 9.3.3 Safari before 9.1.2 and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site a different vulnerability than CVE-2016-4589 CVE-2016-4622 and CVE-2016-4624.


An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the \Core Image\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted JPEG file.


Login Window in Apple OS X before 10.11.6 allows attackers to execute arbitrary code in a privileged context obtain sensitive user information or cause a denial of service (memory corruption) via a crafted app.


Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via unspecified vectors a different vulnerability than CVE-2016-4177.


Adobe

Reader

and

Acrobat

before

Acrobat

and

Acrobat

Reader

DC

Classic

before

and

Acrobat

and

Acrobat

Reader

DC

Continuous

before

on

Windows

and

OS

X

allow

attackers

to

execute

arbitrary

code

or

cause

a

denial

of

service

(memory

corruption)

via

unspecified

vectors

a

different

vulnerability

than

and


Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-4256 CVE-2016-4257 CVE-2016-4258 CVE-2016-4259 CVE-2016-4261 and CVE-2016-4262.


Adobe

Flash

Player

before

and

through

before

on

Windows

and

OS

X

and

before

on

Linux

allows

attackers

to

execute

arbitrary

code

or

cause

a

denial

of

service

(memory

corruption)

via

unspecified

vectors

a

different

vulnerability

than

and


xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10 OS X before 10.12 tvOS before 10 and watchOS before 3 and other products) does not forbid namespace nodes in XPointer ranges which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and memory corruption) via a crafted XML document.


WebKit in Apple iOS before 9.3.3 Safari before 9.1.2 and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site a different vulnerability than CVE-2016-4589 CVE-2016-4623 and CVE-2016-4624.


Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-4274 CVE-2016-4275 CVE-2016-4276 CVE-2016-4280 CVE-2016-4282 CVE-2016-4283 CVE-2016-4284 CVE-2016-4285 CVE-2016-6922 and CVE-2016-6924.


WebKit in Apple iOS before 10 Safari before 10 and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site a different vulnerability than CVE-2016-4611 CVE-2016-4730 CVE-2016-4733 and CVE-2016-4735.


Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-4256 CVE-2016-4257 CVE-2016-4258 CVE-2016-4260 CVE-2016-4261 and CVE-2016-4262.


WebKit in Apple iOS before 10 tvOS before 10 iTunes before 12.5.1 on Windows and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site a different vulnerability than CVE-2016-4759 CVE-2016-4765 CVE-2016-4766 and CVE-2016-4768.


Adobe Reader and Acrobat before 11.0.18 Acrobat and Acrobat Reader DC Classic before 15.006.30243 and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.


Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-4274 CVE-2016-4275 CVE-2016-4276 CVE-2016-4280 CVE-2016-4281 CVE-2016-4282 CVE-2016-4283 CVE-2016-4284 CVE-2016-6922 and CVE-2016-6924.


WebKit in Apple iOS before 10 Safari before 10 and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site a different vulnerability than CVE-2016-4611 CVE-2016-4733 CVE-2016-4734 and CVE-2016-4735.


Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-4275 CVE-2016-4276 CVE-2016-4280 CVE-2016-4281 CVE-2016-4282 CVE-2016-4283 CVE-2016-4284 CVE-2016-4285 CVE-2016-6922 and CVE-2016-6924.


Use-after-free vulnerability in the nsRefreshDriver::Tick function in Mozilla Firefox before 49.0 Firefox ESR 45.x before 45.4 and Thunderbird < 45.4 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by leveraging improper interaction between timeline destruction and the Web Animations model implementation.


Use-after-free

vulnerability

in

the

mozilla::a11y::DocAccessible::ProcessInvalidationList

function

in

Mozilla

Firefox

before

Firefox

ESR

before

and

Thunderbird

allows

remote

attackers

to

execute

arbitrary

code

or

cause

a

denial

of

service

(heap

memory

corruption)

via

an

aria-owns

attribute.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0 Firefox ESR 45.x before 45.4 and Thunderbird < 45.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Use-after-free

vulnerability

in

the

nsNodeUtils::NativeAnonymousChildListChange

function

in

Mozilla

Firefox

before

and

Firefox

ESR

before

allows

remote

attackers

to

execute

arbitrary

code

or

cause

a

denial

of

service

(heap

memory

corruption)

via

an

SVG

element

that

is

mishandled

during

effect

application.


Use-after-free vulnerability in the nsXULPopupManager::KeyDown function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) by leveraging keyboard access to use the Alt key during selection of top-level menu items.


Use-after-free vulnerability in the AtomicBaseIncDec function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by leveraging mishandling of XML transformations.


Adobe

Reader

and

Acrobat

before

Acrobat

and

Acrobat

Reader

DC

Classic

before

and

Acrobat

and

Acrobat

Reader

DC

Continuous

before

on

Windows

and

OS

X

allow

attackers

to

execute

arbitrary

code

or

cause

a

denial

of

service

(memory

corruption)

via

unspecified

vectors

a

different

vulnerability

than

and


The Intel driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app a different vulnerability than CVE-2016-1744.


IOAcceleratorFamily in Apple iOS before 9.3.2 OS X before 10.11.5 tvOS before 9.2.1 and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app a different vulnerability than CVE-2016-1817 and CVE-2016-1819.


Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-1012 CVE-2016-1020 CVE-2016-1021 CVE-2016-1022 CVE-2016-1023 CVE-2016-1024 CVE-2016-1025 CVE-2016-1027 CVE-2016-1028 CVE-2016-1029 CVE-2016-1032 and CVE-2016-1033.


The kernel in Apple iOS before 9.3.2 OS X before 10.11.5 tvOS before 9.2.1 and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app a different vulnerability than CVE-2016-1827 CVE-2016-1828 and CVE-2016-1830.


The Multi-Touch subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-1012 CVE-2016-1020 CVE-2016-1021 CVE-2016-1023 CVE-2016-1024 CVE-2016-1025 CVE-2016-1026 CVE-2016-1027 CVE-2016-1028 CVE-2016-1029 CVE-2016-1032 and CVE-2016-1033.


WebKit as used in Apple iOS before 9.3.2 Safari before 9.1.1 and tvOS before 9.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site a different vulnerability than CVE-2016-1854 CVE-2016-1855 and CVE-2016-1856.


The Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


Adobe Reader and Acrobat before 11.0.15 Acrobat and Acrobat Reader DC Classic before 15.006.30121 and Acrobat and Acrobat Reader DC Continuous before 15.010.20060 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-1009.


The Disk Images subsystem in Apple iOS before 9.3.2 OS X before 10.11.5 tvOS before 9.2.1 and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-1012 CVE-2016-1020 CVE-2016-1021 CVE-2016-1022 CVE-2016-1023 CVE-2016-1024 CVE-2016-1025 CVE-2016-1026 CVE-2016-1027 CVE-2016-1028 CVE-2016-1029 and CVE-2016-1033.


The AMD subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


IOHIDFamily in Apple iOS before 9.3.2 OS X before 10.11.5 tvOS before 9.2.1 and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app a different vulnerability than CVE-2016-1823.


Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-1012 CVE-2016-1020 CVE-2016-1021 CVE-2016-1022 CVE-2016-1023 CVE-2016-1024 CVE-2016-1025 CVE-2016-1026 CVE-2016-1027 CVE-2016-1028 CVE-2016-1029 and CVE-2016-1032.


Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux Adobe AIR before 21.0.0.176 Adobe AIR SDK before 21.0.0.176 and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-0960 CVE-2016-0961 CVE-2016-0962 CVE-2016-0986 CVE-2016-0989 CVE-2016-0992 and CVE-2016-1005.


The kernel in Apple iOS before 9.3.2 OS X before 10.11.5 tvOS before 9.2.1 and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app a different vulnerability than CVE-2016-1827 CVE-2016-1828 and CVE-2016-1829.


Use-after-free vulnerability in the IOAccelContext2::clientMemoryForType method in Apple iOS before 9.3.2 OS X before 10.11.5 tvOS before 9.2.1 and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app a different vulnerability than CVE-2016-1817 and CVE-2016-1818.


The kernel in Apple iOS before 9.3.2 OS X before 10.11.5 tvOS before 9.2.1 and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app a different vulnerability than CVE-2016-1827 CVE-2016-1829 and CVE-2016-1830.


Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-1012 CVE-2016-1020 CVE-2016-1021 CVE-2016-1022 CVE-2016-1023 CVE-2016-1024 CVE-2016-1025 CVE-2016-1026 CVE-2016-1028 CVE-2016-1029 CVE-2016-1032 and CVE-2016-1033.


Adobe

Reader

and

Acrobat

before

Acrobat

and

Acrobat

Reader

DC

Classic

before

and

Acrobat

and

Acrobat

Reader

DC

Continuous

before

on

Windows

and

OS

X

allow

attackers

to

execute

arbitrary

code

or

cause

a

denial

of

service

(memory

corruption)

via

unspecified

vectors

a

different

vulnerability

than

and


Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-1012 CVE-2016-1020 CVE-2016-1021 CVE-2016-1022 CVE-2016-1024 CVE-2016-1025 CVE-2016-1026 CVE-2016-1027 CVE-2016-1028 CVE-2016-1029 CVE-2016-1032 and CVE-2016-1033.


WebKit as used in Apple iOS before 9.3.2 Safari before 9.1.1 and tvOS before 9.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site a different vulnerability than CVE-2016-1854 CVE-2016-1855 and CVE-2016-1857.


Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-1020 CVE-2016-1021 CVE-2016-1022 CVE-2016-1023 CVE-2016-1024 CVE-2016-1025 CVE-2016-1026 CVE-2016-1027 CVE-2016-1028 CVE-2016-1029 CVE-2016-1032 and CVE-2016-1033.


The

Machine::Code::decoder::analysis::set_ref

function

in

Graphite

before

as

used

in

Mozilla

Firefox

before

and

Firefox

ESR

before

allows

remote

attackers

to

execute

arbitrary

code

or

cause

a

denial

of

service

(stack

memory

corruption)

via

a

crafted

Graphite

smart

font.


The kernel in Apple iOS before 9.3 OS X before 10.11.4 tvOS before 9.2 and watchOS before 2.2 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app a different vulnerability than CVE-2016-1755.


Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-1012 CVE-2016-1020 CVE-2016-1021 CVE-2016-1022 CVE-2016-1023 CVE-2016-1024 CVE-2016-1025 CVE-2016-1026 CVE-2016-1027 CVE-2016-1028 CVE-2016-1032 and CVE-2016-1033.


IOAcceleratorFamily in Apple iOS before 9.3.2 OS X before 10.11.5 tvOS before 9.2.1 and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app a different vulnerability than CVE-2016-1818 and CVE-2016-1819.


Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-1012 CVE-2016-1020 CVE-2016-1021 CVE-2016-1022 CVE-2016-1023 CVE-2016-1024 CVE-2016-1026 CVE-2016-1027 CVE-2016-1028 CVE-2016-1029 CVE-2016-1032 and CVE-2016-1033.


The NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app a different vulnerability than CVE-2016-1846.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


The Intel driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app a different vulnerability than CVE-2016-1743.


Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-1012 CVE-2016-1020 CVE-2016-1022 CVE-2016-1023 CVE-2016-1024 CVE-2016-1025 CVE-2016-1026 CVE-2016-1027 CVE-2016-1028 CVE-2016-1029 CVE-2016-1032 and CVE-2016-1033.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 and Firefox ESR 38.x before 38.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


WebKit as used in Apple iOS before 9.3.2 Safari before 9.1.1 and tvOS before 9.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site a different vulnerability than CVE-2016-1855 CVE-2016-1856 and CVE-2016-1857.


The nsNPObjWrapper::GetNewOrUsed function in dom/plugins/base/nsJSNPRuntime.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference and memory corruption) via a crafted NPAPI plugin.


The NVIDIA driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


Adobe

Reader

and

Acrobat

before

Acrobat

and

Acrobat

Reader

DC

Classic

before

and

Acrobat

and

Acrobat

Reader

DC

Continuous

before

on

Windows

and

OS

X

allow

attackers

to

execute

arbitrary

code

or

cause

a

denial

of

service

(memory

corruption)

via

unspecified

vectors

a

different

vulnerability

than

and


Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-1012 CVE-2016-1020 CVE-2016-1021 CVE-2016-1022 CVE-2016-1023 CVE-2016-1025 CVE-2016-1026 CVE-2016-1027 CVE-2016-1028 CVE-2016-1029 CVE-2016-1032 and CVE-2016-1033.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to js/src/jit/arm/Assembler-arm.cpp and unknown other vectors.


libvpx in mediaserver in Android 4.x before 4.4.4 5.x before 5.1.1 LMY49H and 6.0 before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file related to libwebm/mkvparser.cpp and other files aka internal bug 23452792.


Adobe Reader and Acrobat before 11.0.15 Acrobat and Acrobat Reader DC Classic before 15.006.30121 and Acrobat and Acrobat Reader DC Continuous before 15.010.20060 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-1007.


Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-1012 CVE-2016-1021 CVE-2016-1022 CVE-2016-1023 CVE-2016-1024 CVE-2016-1025 CVE-2016-1026 CVE-2016-1027 CVE-2016-1028 CVE-2016-1029 CVE-2016-1032 and CVE-2016-1033.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to uninitialized memory encountered during brotli data compression and other vectors.


WebKit as used in Apple iOS before 9.3.2 Safari before 9.1.1 and tvOS before 9.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site a different vulnerability than CVE-2016-1854 CVE-2016-1856 and CVE-2016-1857.


The WebKit Canvas implementation in Apple iOS before 9.3.2 Safari before 9.1.1 and tvOS before 9.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.


Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux Adobe AIR before 21.0.0.176 Adobe AIR SDK before 21.0.0.176 and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary code or cause a denial of service (uninitialized pointer dereference and memory corruption) via crafted MPEG-4 data a different vulnerability than CVE-2016-0960 CVE-2016-0961 CVE-2016-0962 CVE-2016-0986 CVE-2016-0989 CVE-2016-0992 and CVE-2016-1002.


The kernel in Apple iOS before 9.3 OS X before 10.11.4 tvOS before 9.2 and watchOS before 2.2 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app a different vulnerability than CVE-2016-1754.


Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-1012 CVE-2016-1020 CVE-2016-1021 CVE-2016-1022 CVE-2016-1023 CVE-2016-1024 CVE-2016-1025 CVE-2016-1026 CVE-2016-1027 CVE-2016-1029 CVE-2016-1032 and CVE-2016-1033.


The kernel in Apple iOS before 9.3.2 OS X before 10.11.5 tvOS before 9.2.1 and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app a different vulnerability than CVE-2016-1828 CVE-2016-1829 and CVE-2016-1830.


in

mediaserver

in

Android

before

before

before

and

before

mishandles

cleared

service

binders

which

allows

remote

attackers

to

execute

arbitrary

code

or

cause

a

denial

of

service

(memory

corruption)

via

a

crafted

media

file

aka

internal

bug


Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux Adobe AIR before 20.0.0.260 Adobe AIR SDK before 20.0.0.260 and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-0964 CVE-2016-0965 CVE-2016-0966 CVE-2016-0967 CVE-2016-0968 CVE-2016-0969 CVE-2016-0970 CVE-2016-0972 CVE-2016-0977 CVE-2016-0978 CVE-2016-0979 CVE-2016-0980 and CVE-2016-0981.


Adobe Reader and Acrobat before 11.0.14 Acrobat and Acrobat Reader DC Classic before 15.006.30119 and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (uninitialized pointer dereference and memory corruption) via unspecified vectors a different vulnerability than CVE-2016-0931 CVE-2016-0933 CVE-2016-0936 CVE-2016-0938 CVE-2016-0942 CVE-2016-0944 CVE-2016-0945 and CVE-2016-0946.


mediaserver in Android 6.x before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file related to decoder/ih264d_parse_islice.c and decoder/ih264d_parse_pslice.c aka internal bug 25928803.


Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux Adobe AIR before 20.0.0.260 Adobe AIR SDK before 20.0.0.260 and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-0964 CVE-2016-0965 CVE-2016-0966 CVE-2016-0967 CVE-2016-0968 CVE-2016-0969 CVE-2016-0970 CVE-2016-0976 CVE-2016-0977 CVE-2016-0978 CVE-2016-0979 CVE-2016-0980 and CVE-2016-0981.


The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4 5.x before 5.1.1 LMY49G and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted wireless control message packets aka internal bug 25306181.


Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux Adobe AIR before 20.0.0.260 Adobe AIR SDK before 20.0.0.260 and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-0964 CVE-2016-0965 CVE-2016-0967 CVE-2016-0968 CVE-2016-0969 CVE-2016-0970 CVE-2016-0972 CVE-2016-0976 CVE-2016-0977 CVE-2016-0978 CVE-2016-0979 CVE-2016-0980 and CVE-2016-0981.


Adobe Reader and Acrobat before 11.0.14 Acrobat and Acrobat Reader DC Classic before 15.006.30119 and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FileAttachment annotation a different vulnerability than CVE-2016-0933 CVE-2016-0936 CVE-2016-0938 CVE-2016-0939 CVE-2016-0942 CVE-2016-0944 CVE-2016-0945 and CVE-2016-0946.


Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux Adobe AIR before 21.0.0.176 Adobe AIR SDK before 21.0.0.176 and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-0960 CVE-2016-0961 CVE-2016-0986 CVE-2016-0989 CVE-2016-0992 CVE-2016-1002 and CVE-2016-1005.


Adobe Photoshop CC 2014 before 15.2.4 Photoshop CC 2015 before 16.1.2 and Bridge CC before 6.2 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-0951 and CVE-2016-0952.


libstagefright in mediaserver in Android 4.x before 4.4.4 5.x before 5.1.1 LMY49G and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file that triggers a large memory allocation in the (1) SoftMPEG4Encoder or (2) SoftVPXEncoder component aka internal bug 25812794.


Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux Adobe AIR before 20.0.0.260 Adobe AIR SDK before 20.0.0.260 and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-0964 CVE-2016-0965 CVE-2016-0966 CVE-2016-0968 CVE-2016-0969 CVE-2016-0970 CVE-2016-0972 CVE-2016-0976 CVE-2016-0977 CVE-2016-0978 CVE-2016-0979 CVE-2016-0980 and CVE-2016-0981.


Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux Adobe AIR before 21.0.0.176 Adobe AIR SDK before 21.0.0.176 and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-0960 CVE-2016-0961 CVE-2016-0962 CVE-2016-0986 CVE-2016-0989 CVE-2016-1002 and CVE-2016-1005.


Adobe Photoshop CC 2014 before 15.2.4 Photoshop CC 2015 before 16.1.2 and Bridge CC before 6.2 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-0951 and CVE-2016-0953.


Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux Adobe AIR before 21.0.0.176 Adobe AIR SDK before 21.0.0.176 and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-0960 CVE-2016-0961 CVE-2016-0962 CVE-2016-0989 CVE-2016-0992 CVE-2016-1002 and CVE-2016-1005.


Adobe Reader and Acrobat before 11.0.14 Acrobat and Acrobat Reader DC Classic before 15.006.30119 and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-0931 CVE-2016-0933 CVE-2016-0936 CVE-2016-0938 CVE-2016-0939 CVE-2016-0942 CVE-2016-0944 and CVE-2016-0945.


Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux Adobe AIR before 20.0.0.260 Adobe AIR SDK before 20.0.0.260 and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-0964 CVE-2016-0965 CVE-2016-0966 CVE-2016-0967 CVE-2016-0968 CVE-2016-0969 CVE-2016-0970 CVE-2016-0972 CVE-2016-0976 CVE-2016-0978 CVE-2016-0979 CVE-2016-0980 and CVE-2016-0981.


The AcroForm plugin in Adobe Reader and Acrobat before 11.0.14 Acrobat and Acrobat Reader DC Classic before 15.006.30119 and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-0931 CVE-2016-0933 CVE-2016-0936 CVE-2016-0939 CVE-2016-0942 CVE-2016-0944 CVE-2016-0945 and CVE-2016-0946.


Adobe Reader and Acrobat before 11.0.14 Acrobat and Acrobat Reader DC Classic before 15.006.30119 and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-0931 CVE-2016-0933 CVE-2016-0936 CVE-2016-0938 CVE-2016-0939 CVE-2016-0944 CVE-2016-0945 and CVE-2016-0946.


Adobe Reader and Acrobat before 11.0.14 Acrobat and Acrobat Reader DC Classic before 15.006.30119 and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted JPEG 2000 data a different vulnerability than CVE-2016-0931 CVE-2016-0933 CVE-2016-0938 CVE-2016-0939 CVE-2016-0942 CVE-2016-0944 CVE-2016-0945 and CVE-2016-0946.


Adobe Digital Editions before 4.5.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.


The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4 5.x before 5.1.1 LMY49G and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted wireless control message packets aka internal bug 25662029.


Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux Adobe AIR before 20.0.0.260 Adobe AIR SDK before 20.0.0.260 and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-0964 CVE-2016-0966 CVE-2016-0967 CVE-2016-0968 CVE-2016-0969 CVE-2016-0970 CVE-2016-0972 CVE-2016-0976 CVE-2016-0977 CVE-2016-0978 CVE-2016-0979 CVE-2016-0980 and CVE-2016-0981.


Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux Adobe AIR before 20.0.0.260 Adobe AIR SDK before 20.0.0.260 and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-0964 CVE-2016-0965 CVE-2016-0966 CVE-2016-0967 CVE-2016-0968 CVE-2016-0969 CVE-2016-0970 CVE-2016-0972 CVE-2016-0976 CVE-2016-0977 CVE-2016-0978 CVE-2016-0980 and CVE-2016-0981.


Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux Adobe AIR before 21.0.0.176 Adobe AIR SDK before 21.0.0.176 and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-0960 CVE-2016-0962 CVE-2016-0986 CVE-2016-0989 CVE-2016-0992 CVE-2016-1002 and CVE-2016-1005.


An unspecified media codec in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file aka internal bug 26220548.


Sonivox in mediaserver in Android 4.x before 4.4.4 5.0.x before 5.0.2 5.1.x before 5.1.1 and 6.x before 2016-04-01 does not check for a negative number of samples which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file related to arm-wt-22k/lib_src/eas_wtengine.c and arm-wt-22k/lib_src/eas_wtsynth.c aka internal bug 26366256.


The H.264 decoder in libstagefright in Android 6.x before 2016-04-01 mishandles Memory Management Control Operation (MMCO) data which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file aka internal bug 25818142.


Adobe Reader and Acrobat before 11.0.14 Acrobat and Acrobat Reader DC Classic before 15.006.30119 and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-0931 CVE-2016-0933 CVE-2016-0936 CVE-2016-0938 CVE-2016-0939 CVE-2016-0942 CVE-2016-0945 and CVE-2016-0946.


Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux Adobe AIR before 20.0.0.260 Adobe AIR SDK before 20.0.0.260 and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-0964 CVE-2016-0965 CVE-2016-0966 CVE-2016-0967 CVE-2016-0968 CVE-2016-0969 CVE-2016-0970 CVE-2016-0972 CVE-2016-0976 CVE-2016-0977 CVE-2016-0978 CVE-2016-0979 and CVE-2016-0981.


Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux Adobe AIR before 20.0.0.260 Adobe AIR SDK before 20.0.0.260 and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-0964 CVE-2016-0965 CVE-2016-0966 CVE-2016-0967 CVE-2016-0968 CVE-2016-0970 CVE-2016-0972 CVE-2016-0976 CVE-2016-0977 CVE-2016-0978 CVE-2016-0979 CVE-2016-0980 and CVE-2016-0981.


The MPEG4Source::fragmentedRead function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4 5.x before 5.1.1 LMY49H and 6.x before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file aka internal bug 26365349.


post_proc/volume_listener.c in mediaserver in Android 6.x before 2016-04-01 mishandles deleted effect context which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file aka internal bug 25753245.


Adobe Reader and Acrobat before 11.0.14 Acrobat and Acrobat Reader DC Classic before 15.006.30119 and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-0931 CVE-2016-0933 CVE-2016-0936 CVE-2016-0938 CVE-2016-0939 CVE-2016-0942 CVE-2016-0944 and CVE-2016-0946.


Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux Adobe AIR before 20.0.0.260 Adobe AIR SDK before 20.0.0.260 and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-0964 CVE-2016-0965 CVE-2016-0966 CVE-2016-0967 CVE-2016-0968 CVE-2016-0969 CVE-2016-0970 CVE-2016-0972 CVE-2016-0976 CVE-2016-0977 CVE-2016-0978 CVE-2016-0979 and CVE-2016-0980.


Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux Adobe AIR before 20.0.0.260 Adobe AIR SDK before 20.0.0.260 and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-0964 CVE-2016-0965 CVE-2016-0966 CVE-2016-0967 CVE-2016-0969 CVE-2016-0970 CVE-2016-0972 CVE-2016-0976 CVE-2016-0977 CVE-2016-0978 CVE-2016-0979 CVE-2016-0980 and CVE-2016-0981.


Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux Adobe AIR before 20.0.0.260 Adobe AIR SDK before 20.0.0.260 and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-0964 CVE-2016-0965 CVE-2016-0966 CVE-2016-0967 CVE-2016-0968 CVE-2016-0969 CVE-2016-0972 CVE-2016-0976 CVE-2016-0977 CVE-2016-0978 CVE-2016-0979 CVE-2016-0980 and CVE-2016-0981.


Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux Adobe AIR before 20.0.0.260 Adobe AIR SDK before 20.0.0.260 and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-0965 CVE-2016-0966 CVE-2016-0967 CVE-2016-0968 CVE-2016-0969 CVE-2016-0970 CVE-2016-0972 CVE-2016-0976 CVE-2016-0977 CVE-2016-0978 CVE-2016-0979 CVE-2016-0980 and CVE-2016-0981.


Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux Adobe AIR before 20.0.0.260 Adobe AIR SDK before 20.0.0.260 and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-0964 CVE-2016-0965 CVE-2016-0966 CVE-2016-0967 CVE-2016-0968 CVE-2016-0969 CVE-2016-0970 CVE-2016-0972 CVE-2016-0976 CVE-2016-0977 CVE-2016-0979 CVE-2016-0980 and CVE-2016-0981.


Adobe Reader and Acrobat before 11.0.14 Acrobat and Acrobat Reader DC Classic before 15.006.30119 and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-0931 CVE-2016-0936 CVE-2016-0938 CVE-2016-0939 CVE-2016-0942 CVE-2016-0944 CVE-2016-0945 and CVE-2016-0946.


Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux Adobe AIR before 21.0.0.176 Adobe AIR SDK before 21.0.0.176 and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-0960 CVE-2016-0961 CVE-2016-0962 CVE-2016-0986 CVE-2016-0992 CVE-2016-1002 and CVE-2016-1005.


The

NuPlayer::GenericSource::notifyPreparedAndCleanup

function

in

in

mediaserver

in

Android

before

and

before

improperly

manages

mDrmManagerClient

objects

which

allows

remote

attackers

to

execute

arbitrary

code

or

cause

a

denial

of

service

(memory

corruption)

via

a

crafted

media

file

aka

internal

bug


Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux Adobe AIR before 21.0.0.176 Adobe AIR SDK before 21.0.0.176 and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-0961 CVE-2016-0962 CVE-2016-0986 CVE-2016-0989 CVE-2016-0992 CVE-2016-1002 and CVE-2016-1005.


Adobe Photoshop CC 2014 before 15.2.4 Photoshop CC 2015 before 16.1.2 and Bridge CC before 6.2 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-0952 and CVE-2016-0953.


decoder/impeg2d_dec_hdr.c in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file that triggers a certain negative value aka internal bug 26070014.


Use-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 when contenteditable mode is enabled allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by triggering deletion of DOM elements that were created in the editor.


in

mediaserver

in

Android

before

before

before

and

before

does

not

validate

certain

track

data

which

allows

remote

attackers

to

execute

arbitrary

code

or

cause

a

denial

of

service

(memory

corruption)

via

a

crafted

media

file

aka

internal

bug


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


libvpx in libwebm in mediaserver in Android 4.x before 4.4.4 5.0.x before 5.0.2 5.1.x before 5.1.1 and 6.x before 2016-06-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted mkv file aka internal bug 23167726.


mpeg2ts/ATSParser.cpp in libstagefright in mediaserver in Android 6.x before 2016-07-01 does not validate a certain section length which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file aka internal bug 28333006.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0 Firefox ESR 38.x before 38.8 and Firefox ESR 45.x before 45.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to Http2Session::Shutdown and SpdySession31::Shutdown and other vectors.


libAACdec/src/aacdec_drc.cpp in mediaserver in Android 4.x before 4.4.4 5.0.x before 5.0.2 5.1.x before 5.1.1 and 6.x before 2016-05-01 does not properly limit the number of threads which allows remote attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via a crafted media file aka internal bug 26751339.


The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection (SEP) before 12.1 RU6 MP5; Symantec Endpoint Protection (SEP) for Mac; Symantec Endpoint Protection (SEP) for Linux before 12.1 RU6 MP5; Symantec Protection Engine (SPE) before 7.0.5 HF01 7.5.x before 7.5.3 HF03 7.5.4 before HF01 and 7.8.0 before HF01; Symantec Protection for SharePoint Servers (SPSS) 6.0.3 through 6.0.5 before 6.0.5 HF 1.5 and 6.0.6 before HF 1.6; Symantec Mail Security for Microsoft Exchange (SMSMSE) before 7.0_3966002 HF1.1 and 7.5.x before 7.5_3966008 VHF1.2; Symantec Mail Security for Domino (SMSDOM) before 8.0.9 HF1.1 and 8.1.x before 8.1.3 HF1.2; CSAPI before 10.0.4 HF01; Symantec Message Gateway (SMG) before 10.6.1-4; Symantec Message Gateway for Service Providers (SMG-SP) 10.5 before patch 254 and 10.6 before patch 253; Norton AntiVirus Norton Security Norton Internet Security and Norton 360 before NGC 22.7; Norton Security for Mac before 13.0.2; Norton Power Eraser (NPE) before 5.1; and Norton Bootable Removal Tool (NBRT) before 2016.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted CAB file that is mishandled during decompression.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0 and Firefox ESR 45.x before 45.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


libFLAC/stream_decoder.c in mediaserver in Android 4.x before 4.4.4 5.0.x before 5.0.2 5.1.x before 5.1.1 and 6.x before 2016-05-01 does not prevent free operations on uninitialized memory which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted media file aka internal bug 27211885.


DRMExtractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4 5.0.x before 5.0.2 5.1.x before 5.1.1 and 6.x before 2016-07-01 does not validate a certain offset value which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file aka internal bug 28175045.


The ih264d decoder in mediaserver in Android 6.x before 2016-08-01 mishandles slice numbers which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file aka internal bug 28673410.


decoder/ih264d_process_intra_mb.c in mediaserver in Android 6.x before 2016-07-01 mishandles intra mode which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file aka internal bug 28165659.


The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection (SEP) before 12.1 RU6 MP5; Symantec Endpoint Protection (SEP) for Mac; Symantec Endpoint Protection (SEP) for Linux before 12.1 RU6 MP5; Symantec Protection Engine (SPE) before 7.0.5 HF01 7.5.x before 7.5.3 HF03 7.5.4 before HF01 and 7.8.0 before HF01; Symantec Protection for SharePoint Servers (SPSS) 6.0.3 through 6.0.5 before 6.0.5 HF 1.5 and 6.0.6 before HF 1.6; Symantec Mail Security for Microsoft Exchange (SMSMSE) before 7.0_3966002 HF1.1 and 7.5.x before 7.5_3966008 VHF1.2; Symantec Mail Security for Domino (SMSDOM) before 8.0.9 HF1.1 and 8.1.x before 8.1.3 HF1.2; CSAPI before 10.0.4 HF01; Symantec Message Gateway (SMG) before 10.6.1-4; Symantec Message Gateway for Service Providers (SMG-SP) 10.5 before patch 254 and 10.6 before patch 253; Norton AntiVirus Norton Security Norton Internet Security and Norton 360 before NGC 22.7; Norton Security for Mac before 13.0.2; Norton Power Eraser (NPE) before 5.1; and Norton Bootable Removal Tool (NBRT) before 2016.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via modified MIME data in a message.


decoder/ih264d_api.c in mediaserver in Android 6.x before 2016-07-01 does not initialize certain data structures which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file aka internal bug 27907656.


media/ExifInterface.java in mediaserver in Android 4.x before 4.4.4 5.0.x before 5.0.2 5.1.x before 5.1.1 and 6.x before 2016-09-01 does not properly interact with the use of static variables in libjhead_jni which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file aka internal bug 29270469.


The H.264 decoder in mediaserver in Android 6.x before 2016-07-01 does not initialize certain slice data which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file aka internal bug 28165661.


The mov_read_dref function in libavformat/mov.c in Libav before 11.7 and FFmpeg before 0.11 allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via the entries value in a dref box in an MP4 file.


Use-after-free vulnerability in the NetWare Core Protocol (NCP) feature in Novell eDirectory 8.7.3 SP10 before 8.7.3 SP10 FTF1 and 8.8 SP2 for Windows allows remote attackers to cause a denial of service and possibly execute arbitrary code via a sequence of \Get NCP Extension Information By Name\ requests that cause one thread to operate on memory after it has been freed in another thread which triggers memory corruption aka Novell Bug 373852.


Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2 Thunderbird before 2.0.0.17 and SeaMonkey before 1.1.12 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the JavaScript engine and (1) misinterpretation of the characteristics of Namespace and QName in jsxml.c (2) misuse of signed integers in the nsEscapeCount function in nsEscape.cpp and (3) interaction of JavaScript garbage collection with certain use of an NPObject in the nsNPObjWrapper::GetNewOrUsed function in nsJSNPRuntime.cpp.


The strptime API in Libsystem in Apple Mac OS X before 10.5.6 allows context-dependent attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a crafted date string related to improper memory allocation.


Safari in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 does not properly handle HTML TABLE elements which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.


Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the layout engine and (1) a zero value of the \this\ variable in the nsContentList::Item function; (2) interaction of the indic IME extension a Hindi language selection and the \g\ character; and (3) interaction of the nsFrameList::SortByContentOrder function with a certain insufficient protection of inline frames.


AVG Anti-Virus for Linux 7.5.51 and possibly earlier allows remote attackers to cause a denial of service (segmentation fault) or possibly execute arbitrary code via a malformed UPX compressed file which triggers memory corruption.


The CallComponentFunctionWithStorage function in Apple QuickTime before 7.5.5 does not properly handle a large entry in the sample_size_table in STSZ atoms which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file.


Unspecified vulnerability in WebKit in Apple Safari before 3.1.2 as distributed in Mac OS X before 10.5.4 and standalone for Windows and Mac OS X 10.4 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via vectors involving JavaScript arrays that trigger memory corruption.


Microsoft Word 2000 9.0.2812 and 2003 11.8106.8172 does not properly handle unordered lists which allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .doc file. NOTE: some of these details are obtained from third party information.


Unspecified vulnerability in CoreGraphics in Apple Mac OS X 10.4.11 and 10.5.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unknown vectors involving \processing of arguments.\


The InstallShield Update Service Agent ActiveX control in isusweb.dll allows remote attackers to cause a denial of service (memory corruption and browser crash) and possibly execute arbitrary code via a call to ExecuteRemote with a URL that results in a 404 error response.


Unspecified vulnerability in Foundation as used in Apple iPhone 1.0 through 1.1.2 iPod touch 1.1 through 1.1.2 and Mac OS X 10.5 through 10.5.1 allows remote attackers to cause a denial of service (application termination) or execute arbitrary code via a crafted URL that triggers memory corruption in Safari.


Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted input that triggers memory corruption.


Unspecified vulnerability in Apple QuickTime before 7.4 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via a movie file with Image Descriptor (IDSC) atoms containing an invalid atom size which triggers memory corruption.


JavaScriptCore in WebKit on Apple iPhone before 2.0 and iPod touch before 2.0 does not properly perform runtime garbage collection which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors that trigger memory corruption a different vulnerability than CVE-2008-2317.


Foxit Reader 2.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with (1) a malformed ExtGState resource containing a /Font resource or (2) an XObject resource with a Rotate setting which triggers memory corruption. NOTE: this is probably a different vulnerability than CVE-2007-2186.


GnuPG (gpg) 1.4.8 and 2.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted duplicate keys that are imported from key servers which triggers \memory corruption around deduplication of user IDs.\


WebContainer.exe 1.0.0.336 and earlier in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a long URI in HTTP requests to TCP port 801. NOTE: some of these details are obtained from third party information.


Unspecified vulnerability in the Pixlet codec in Apple Pixlet Video in Apple Mac OS X before 10.5.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file related to \multiple memory corruption issues.\


Opera before 9.27 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted scaled image pattern in an HTML CANVAS element which triggers memory corruption.


Apple QuickTime before 7.4.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted ftyp atoms in a movie file which triggers memory corruption.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 5.0 and Thunderbird through 3.1.11 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


WebKit as used in Apple iOS before 5.1 and iTunes before 10.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.


Off-by-one error in the CSoundFile::ReadDSM function in src/load_dms.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a crafted DSM file with a large number of samples.


Adobe Flash Player before 10.3.183.5 on Windows Mac OS X Linux and Solaris and before 10.3.186.3 on Android and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2011-2135 CVE-2011-2140 and CVE-2011-2417.


Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows Mac OS X Linux and Solaris and before 11.1.102.59 on Android and Adobe AIR before 3.1.0.4880 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2011-2445 CVE-2011-2451 CVE-2011-2452 CVE-2011-2454 CVE-2011-2455 CVE-2011-2459 and CVE-2011-2460.


Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x before 3.6.18 and Thunderbird before 3.1.11 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors a different vulnerability than CVE-2011-2364.


Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X and Adobe Reader 9.x through 9.4.6 on UNIX allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors as exploited in the wild in December 2011.


Google Chrome before 13.0.782.215 on Windows does not properly handle vertex data which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 6 Thunderbird before 7.0 and SeaMonkey before 2.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Adobe Flash Player before 10.3.183.5 on Windows Mac OS X Linux and Solaris and before 10.3.186.3 on Android and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2011-2135 CVE-2011-2417 and CVE-2011-2425.


Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors related to rcsL substructures a different vulnerability than CVE-2011-0317 CVE-2011-0318 CVE-2011-0319 CVE-2011-0320 CVE-2011-0335 and CVE-2011-2119.


Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows Mac OS X Linux and Solaris and before 11.1.102.59 on Android and Adobe AIR before 3.1.0.4880 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2011-2445 CVE-2011-2451 CVE-2011-2453 CVE-2011-2454 CVE-2011-2455 CVE-2011-2459 and CVE-2011-2460.


Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x before 3.6.18 and Thunderbird before 3.1.11 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors a different vulnerability than CVE-2011-2365.


The Ogg reader in the browser engine in Mozilla Firefox 4.x through 5 SeaMonkey 2.x before 2.3 Thunderbird before 6 and possibly other products allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.


Opera before 11.11 does not properly implement FRAMESET elements which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to page unload.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1 and Thunderbird before 3.1.11 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.20 Thunderbird 2.x and 3.x before 3.1.12 SeaMonkey 1.x and 2.x and possibly other products allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Icihttp.exe in CA Gateway Security for HTTP as used in CA Gateway Security 8.1 before 8.1.0.69 and CA Total Defense r12 does not properly parse URLs which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and daemon crash) via a malformed request.


WebKit as used in Apple iOS before 5.1 and iTunes before 10.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.


Off-by-one error in the CSoundFile::ReadAMS2 function in src/load_ams.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a crafted AMS file with a large number of instruments.


The DIRapi library in Adobe Shockwave Player before 11.6.3.633 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2011-2448.


Adobe Flash Player before 10.3.183.5 on Windows Mac OS X Linux and Solaris and before 10.3.186.3 on Android and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted SWF file as demonstrated by \about 400 unique crash signatures.\


Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows Mac OS X Linux and Solaris and before 11.1.102.59 on Android and Adobe AIR before 3.1.0.4880 allows attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.


RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 RealPlayer SP 1.0 through 1.1.5 RealPlayer Enterprise 2.0 through 2.1.5 and Mac RealPlayer 12.0.0.1569 do not properly handle DEFINEFONT fields in SWF files which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted file.


The DIRapi library in Adobe Shockwave Player before 11.6.3.633 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2011-2446.


Adobe Reader and Acrobat 8.x before 8.3 9.x before 9.4.5 and 10.x before 10.1 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2011-2098.


Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows Mac OS X Linux and Solaris and before 11.1.102.59 on Android and Adobe AIR before 3.1.0.4880 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2011-2445 CVE-2011-2451 CVE-2011-2452 CVE-2011-2453 CVE-2011-2455 CVE-2011-2459 and CVE-2011-2460.


Adobe Flash Player before 10.3.181.26 on Windows Mac OS X Linux and Solaris and 10.3.185.23 and earlier on Android allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors as exploited in the wild in June 2011.


Off-by-one error in the CSoundFile::ReadAMS function in src/load_ams.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service (stack memory corruption) and possibly execute arbitrary code via a crafted AMS file with a large number of samples.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.18 and Thunderbird before 3.1.11 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


stunnel 4.40 and 4.41 might allow remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.


Adobe Flash Player before 10.3.183.5 on Windows Mac OS X Linux and Solaris and before 10.3.186.3 on Android and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2011-2140 CVE-2011-2417 and CVE-2011-2425.


Textra.x32 in Adobe Shockwave Player before 11.6.1.629 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.


Adobe Photoshop 12.0 in Creative Suite 5 (CS5) and 12.1 in Creative Suite 5.1 (CS5.1) allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted GIF file.


Adobe Flash Player before 10.3.183.5 on Windows Mac OS X Linux and Solaris and before 10.3.186.3 on Android and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2011-2135 CVE-2011-2140 and CVE-2011-2425.


Mozilla Firefox before 3.6.18 and 4.x through 4.0.1 Thunderbird before 3.1.11 and SeaMonkey through 2.0.14 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a multipart/x-mixed-replace image.


Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows Mac OS X Linux and Solaris and before 11.1.102.59 on Android and Adobe AIR before 3.1.0.4880 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2011-2445 CVE-2011-2451 CVE-2011-2452 CVE-2011-2453 CVE-2011-2454 CVE-2011-2455 and CVE-2011-2460.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 5 Thunderbird before 6 SeaMonkey 2.x before 2.3 and possibly other products allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2011-0317 CVE-2011-0318 CVE-2011-0319 CVE-2011-0320 CVE-2011-0335 and CVE-2011-2122.


Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows Mac OS X Linux and Solaris and before 11.1.102.59 on Android and Adobe AIR before 3.1.0.4880 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2011-2451 CVE-2011-2452 CVE-2011-2453 CVE-2011-2454 CVE-2011-2455 CVE-2011-2459 and CVE-2011-2460.


WebKit as used in Apple iOS before 5.1 and iTunes before 10.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.


Certain ActiveX controls in (1) tsgetxu71ex552.dll and (2) tsgetx71ex552.dll in Tom Sawyer GET Extension Factory 5.5.2.237 as used in VI Client (aka VMware Infrastructure Client) 2.0.2 before Build 230598 and 2.5 before Build 204931 in VMware Infrastructure 3 do not properly handle attempted initialization within Internet Explorer which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted HTML document.


Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows Mac OS X Linux and Solaris and before 11.1.102.59 on Android and Adobe AIR before 3.1.0.4880 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2011-2445 CVE-2011-2452 CVE-2011-2453 CVE-2011-2454 CVE-2011-2455 CVE-2011-2459 and CVE-2011-2460.


Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows Mac OS X Linux and Solaris and before 11.1.102.59 on Android and Adobe AIR before 3.1.0.4880 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2011-2445 CVE-2011-2451 CVE-2011-2452 CVE-2011-2453 CVE-2011-2454 CVE-2011-2455 and CVE-2011-2459.


The browser engine in Mozilla Firefox 4.x through 5 SeaMonkey 2.x before 2.3 Thunderbird before 6 and possibly other products does not properly implement JavaScript which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.


The TextXtra module in Adobe Shockwave Player before 11.6.3.633 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.


Adobe Reader and Acrobat 8.x before 8.3 9.x before 9.4.5 and 10.x before 10.1 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2011-2099.


The browser engine in Mozilla Firefox 4.x through 5 SeaMonkey 2.x before 2.3 Thunderbird before 6 and possibly other products does not properly implement WebGL which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.23 and 4.x through 6 Thunderbird before 7.0 and SeaMonkey before 2.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows Mac OS X Linux and Solaris and before 11.1.102.59 on Android and Adobe AIR before 3.1.0.4880 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2011-2445 CVE-2011-2451 CVE-2011-2452 CVE-2011-2453 CVE-2011-2454 CVE-2011-2459 and CVE-2011-2460.


Google Chrome before 14.0.835.202 does not properly implement shader translation which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.


The browser engine in Mozilla Firefox before 8.0 and Thunderbird before 8.0 does not properly handle links from SVG mpath elements to non-SVG elements which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.


Microsoft PowerPoint 2007 SP2; Office 2008 for Mac; Office Compatibility Pack for Word Excel and PowerPoint 2007 File Formats SP2; and PowerPoint Viewer 2007 SP2 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via an invalid OfficeArt record in a PowerPoint document aka \OfficeArt Shape RCE Vulnerability.\


Use-after-free vulnerability in Control Microsystems ClearSCADA 2005 2007 and 2009 before R2.3 and R1.4 as used in SCX before 67 R4.5 and 68 R3.9 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified long strings that trigger heap memory corruption.


Integer signedness error in the decode_residual_block function in cavsdec.c in libavcodec in FFmpeg before 0.7.3 and 0.8.x before 0.8.2 and libav through 0.7.1 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Chinese AVS video (aka CAVS) file.


Apple QuickTime before 7.7.1 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted TKHD atoms in a QuickTime movie file.


Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via an EIDP packet with a large size field which writes a zero byte to an arbitrary memory location.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 8.0 Thunderbird 5.0 through 8.0 and SeaMonkey before 2.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors that trigger a compartment mismatch associated with the nsDOMMessageEvent::GetData function and unknown other vectors.


FreeType 2 before 2.4.7 as used in CoreGraphics in Apple iOS before 5 Mandriva Enterprise Server 5 and possibly other products allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font a different vulnerability than CVE-2011-0226.


The OpenGL implementation in Apple Mac OS X before 10.7.3 does not properly perform OpenGL Shading Language (aka GLSL) compilation which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted program.


FreeType in CoreGraphics in Apple iOS before 5.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font in a document.


Use-after-free vulnerability in WebKit as used in Apple Safari before 5.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) via vectors related to improper list management for Cascading Style Sheets (CSS) @font-face rules.


The WebSockets implementation in Google Chrome before 19.0.1084.52 does not properly handle use of SSL which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.


The browser engine in Mozilla Firefox before 8.0 and Thunderbird before 8.0 does not properly allocate memory which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.


RPM 4.4.x through 4.9.x probably before 4.9.1.2 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via an rpm package with crafted headers and offsets that are not properly handled when a package is queried or installed related to (1) the regionSwab function (2) the headerLoad function and (3) multiple functions in rpmio/rpmpgp.c.


The GPU process in Google Chrome before 17.0.963.79 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) by leveraging an error in the plug-in loading mechanism.


Microsoft Excel 2002 SP3; Office 2004 2008 and 2011 for Mac; and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet aka \Excel Memory Heap Overwrite Vulnerability.\


WebKit as used in Apple Safari before 5.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.


Microsoft Excel 2002 SP3 and 2003 SP3 Office 2004 and 2008 for Mac and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet aka \Excel Out of Bounds WriteAV Vulnerability.\


WINS in Microsoft Windows Server 2003 SP2 and Server 2008 Gold SP2 R2 and R2 SP1 does not properly handle socket send exceptions which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted packets related to unintended stack-frame values and buffer passing aka \WINS Service Failed Response Vulnerability.\


The SMTP server in Postfix before 2.5.13 2.6.x before 2.6.10 2.7.x before 2.7.4 and 2.8.x before 2.8.3 when certain Cyrus SASL authentication methods are enabled does not create a new server handle after client authentication fails which allows remote attackers to cause a denial of service (heap memory corruption and daemon crash) or possibly execute arbitrary code via an invalid AUTH command with one method followed by an AUTH command with a different method.


JustSystems Ichitaro 2005 through 2011 Ichitaro Government 6 Ichitaro Government 2006 through 2010 Ichitaro Portable Ichitaro Pro and Ichitaro Viewer allow remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted document as exploited in the wild in early 2011.


Microsoft Excel 2002 SP3 and Office 2004 for Mac do not properly validate record information during parsing of Excel spreadsheets which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet aka \Excel WriteAV Vulnerability.\


Multiple format string vulnerabilities in phar_object.c in the phar extension in PHP 5.3.5 and earlier allow context-dependent attackers to obtain sensitive information from process memory cause a denial of service (memory corruption) or possibly execute arbitrary code via format string specifiers in an argument to a class method leading to an incorrect zend_throw_exception_ex call.


Microsoft Excel 2002 SP3 2003 SP3 and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word Excel and PowerPoint 2007 File Formats SP2 do not properly validate record information during parsing of Excel spreadsheets which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet aka \Excel Out of Bounds Array Access Vulnerability.\


Microsoft Excel 2002 SP3 2003 SP3 2007 SP2 and 2010; Office 2004 2008 and 2011 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word Excel and PowerPoint 2007 File Formats SP2 do not properly validate record information during parsing of Excel spreadsheets which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet aka \Excel Improper Record Parsing Vulnerability.\


sp5xdec.c in the Sunplus SP5X JPEG decoder in libavcodec in FFmpeg before 0.6.3 and libav through 0.6.2 as used in VideoLAN VLC media player 1.1.9 and earlier and other products performs a write operation outside the bounds of an unspecified array which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a malformed AMV file.


Google Chrome before 11.0.696.71 does not properly implement the GPU command buffer which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.


Integer signedness error in psaux/t1decode.c in FreeType before 2.4.6 as used in CoreGraphics in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 and other products allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Type 1 font in a PDF document as exploited in the wild in July 2011.


Microsoft PowerPoint 2007 SP2 and 2010; Office 2004 2008 and 2011 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word Excel and PowerPoint 2007 File Formats SP2; PowerPoint Viewer; PowerPoint Viewer 2007 SP2; and PowerPoint Web App do not properly validate TimeColorBehaviorContainer Floating Point records in PowerPoint documents which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document containing an invalid record aka \Floating Point Techno-color Time Bandit RCE Vulnerability.\


Microsoft Excel 2002 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted RealTimeData record related to a stTopic field double-byte characters and an incorrect pointer calculation aka \Excel Record Parsing WriteAV Vulnerability.\


Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2011-0559 CVE-2011-0560 CVE-2011-0561 CVE-2011-0571 CVE-2011-0573 CVE-2011-0574 CVE-2011-0578 CVE-2011-0607 and CVE-2011-0608.


Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2011-0317 CVE-2011-0318 CVE-2011-0319 CVE-2011-0335 CVE-2011-2119 and CVE-2011-2122.


Apple QuickTime before 7.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted image description associated with an mp4v tag in a movie file.


Multiple

unspecified

vulnerabilities

in

the

browser

engine

in

Mozilla

Firefox

before

allow

remote

attackers

to

cause

a

denial

of

service

(memory

corruption

and

application

crash)

or

possibly

execute

arbitrary

code

via

vectors

related

to

and

unknown

other

vectors.


WebKit as used in Apple Safari before 5.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.


Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2011-0317 CVE-2011-0318 CVE-2011-0320 CVE-2011-0335 CVE-2011-2119 and CVE-2011-2122.


Adobe Flash Player before 10.3.181.14 on Windows Mac OS X Linux and Solaris and before 10.3.185.21 on Android allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content as possibly exploited in the wild in May 2011 by a Microsoft Office document with an embedded .swf file.


Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17 Thunderbird before 3.1.10 and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors a different vulnerability than CVE-2011-0072 CVE-2011-0074 CVE-2011-0077 and CVE-2011-0078.


Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 3.6.x before 3.6.17 and 4.x before 4.0.1; Thunderbird before 3.1.10; and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors a different vulnerability than CVE-2011-0070.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17 Thunderbird before 3.1.10 and SeaMonkey before 2.0.14 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Adobe Reader and Acrobat 10.x before 10.0.1 9.x before 9.4.2 and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted image a different vulnerability than CVE-2011-0567 and CVE-2011-0603.


Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2011-0317 CVE-2011-0319 CVE-2011-0320 CVE-2011-0335 CVE-2011-2119 and CVE-2011-2122.


Adobe Reader and Acrobat 10.x before 10.0.1 9.x before 9.4.2 and 8.x before 8.2.6 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2011-0589 and CVE-2011-0606.


Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17 Thunderbird before 3.1.10 and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors a different vulnerability than CVE-2011-0072 CVE-2011-0075 CVE-2011-0077 and CVE-2011-0078.


Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x before 3.6.17 and 4.x before 4.0.1 and Thunderbird 3.1.x before 3.1.10 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.