الباحثون
رجوع
Peles_O
باحث من
Aleph Research, HCL Software
#7066
من 60,574
45
إجمالي CVSS
الثغرات
·
6
عالية
6
PT-2018-4354
2018-03-29
7.5
CVE-2015-2000
Jumio
Jumio Sdk
The issue allows attackers to execute arbitrary code by leveraging a finalize method in a Serializable class. This is done by improperly passing an attacker-controlled pointer to a native function.
PT-2018-4355
2018-03-29
7.5
CVE-2015-2001
Meta
Metaio Sdk
The issue allows attackers to execute arbitrary code by leveraging a finalize method in a Serializable class. This is due to the class improperly passing an attacker-controlled pointer to a native function.
PT-2018-4356
2018-03-29
7.5
CVE-2015-2002
Esri
Esri Arcgis Runtime Sdk
The issue allows attackers to execute arbitrary code by leveraging a finalize method in a Serializable class. This is due to the improper passing of an attacker-controlled pointer to a native function.
PT-2018-4357
2018-03-29
7.5
CVE-2015-2003
Pjsip
Pjsua2 Sdk
The issue allows attackers to execute arbitrary code by leveraging a finalize method in a Serializable class. This method improperly passes an attacker-controlled pointer to a native function, potentially leading to code execution.
PT-2018-4358
2018-03-29
7.5
CVE-2015-2004
Gracenote
Gnsdk Sdk
The issue allows attackers to execute arbitrary code by leveraging a finalize method in a Serializable class. This method improperly passes an attacker-controlled pointer to a native function.
PT-2018-4360
2018-03-29
7.5
CVE-2015-2020
Myscript
Myscript Sdk
The issue allows attackers to execute arbitrary code by leveraging a finalize method in a Serializable class. This is due to the class improperly passing an attacker-controlled pointer to a native function.