Researchers
Back
Peles_O
Researcher from
Aleph Research, HCL Software
#7066
of 60,574
45
Total CVSS
Vulnerabilities
·
6
High
6
PT-2018-4354
2018-03-29
7.5
CVE-2015-2000
Jumio
Jumio Sdk
The issue allows attackers to execute arbitrary code by leveraging a finalize method in a Serializable class. This is done by improperly passing an attacker-controlled pointer to a native function.
PT-2018-4355
2018-03-29
7.5
CVE-2015-2001
Meta
Metaio Sdk
The issue allows attackers to execute arbitrary code by leveraging a finalize method in a Serializable class. This is due to the class improperly passing an attacker-controlled pointer to a native function.
PT-2018-4356
2018-03-29
7.5
CVE-2015-2002
Esri
Esri Arcgis Runtime Sdk
The issue allows attackers to execute arbitrary code by leveraging a finalize method in a Serializable class. This is due to the improper passing of an attacker-controlled pointer to a native function.
PT-2018-4357
2018-03-29
7.5
CVE-2015-2003
Pjsip
Pjsua2 Sdk
The issue allows attackers to execute arbitrary code by leveraging a finalize method in a Serializable class. This method improperly passes an attacker-controlled pointer to a native function, potentially leading to code execution.
PT-2018-4358
2018-03-29
7.5
CVE-2015-2004
Gracenote
Gnsdk Sdk
The issue allows attackers to execute arbitrary code by leveraging a finalize method in a Serializable class. This method improperly passes an attacker-controlled pointer to a native function.
PT-2018-4360
2018-03-29
7.5
CVE-2015-2020
Myscript
Myscript Sdk
The issue allows attackers to execute arbitrary code by leveraging a finalize method in a Serializable class. This is due to the class improperly passing an attacker-controlled pointer to a native function.