| |
ID ▼ |
Type ▼ |
Status ▼ |
Priority ▼ |
Milestone ▼ |
Owner ▼ |
Summary + Labels ▼ |
... |
|
|
100 |
----
|
Fixed
|
----
|
----
|
scvitti@google.com
|
Magic Mouse HID device driver overflow
CCProjectZeroMembers
|
|
|
|
101 |
----
|
Fixed
|
----
|
----
|
scvitti@google.com
|
PicoLCD HID device driver pool overflow
CCProjectZeroMembers
|
|
|
|
193 |
----
|
Fixed
|
----
|
----
|
scvitti@google.com
|
netkvm.sys (RedHat virtio driver) BSoD on malformed IPv4 packet
CCProjectZeroMembers
|
|
|
|
291 |
----
|
Fixed
|
----
|
----
|
scvitti@google.com
|
Adobe Flash stack corruption when decoding JPEG-XR image
CCProjectZeroMembers
|
|
|
|
379 |
----
|
Fixed
|
----
|
----
|
scvitti@google.com
|
Microsoft Office 2007: object vtable memory corruption
CCProjectZeroMembers
|
|
|
|
387 |
----
|
Fixed
|
----
|
----
|
scvitti@google.com
|
Microsoft Office 2007 and 2010 use after free vulnerability
CCProjectZeroMembers
|
|
|
|
414 |
----
|
Fixed
|
----
|
----
|
scvitti@google.com
|
Microsoft Office 2007 UaF in MSO.dll
CCProjectZeroMembers
|
|
|
|
417 |
----
|
Fixed
|
----
|
----
|
scvitti@google.com
|
Microsoft Office 2007 MSO.dll Arbitrary Free
CCProjectZeroMembers
|
|
|
|
420 |
----
|
Fixed
|
----
|
----
|
scvitti@google.com
|
Microsoft Office 2007 OGL.dll DpOutputSpanStretch::OutputSpan out of bounds write
CCProjectZeroMembers
|
|
|
|
423 |
----
|
Fixed
|
----
|
----
|
scvitti@google.com
|
Microsoft Office 2007 wwlib.dll type confusion
CCProjectZeroMembers
|
|
|
|
424 |
----
|
Fixed
|
----
|
----
|
scvitti@google.com
|
Microsoft Office 2007 wwlib.dll fcPlcfFldMom uninitialized heap usage
CCProjectZeroMembers
|
|
|
|
431 |
----
|
Fixed
|
----
|
----
|
scvitti@google.com
|
Microsoft Office 2007 MSPTLS heap index integer underflow
CCProjectZeroMembers
|
|
|
|
462 |
----
|
Fixed
|
----
|
----
|
scvitti@google.com
|
Microsoft Office Excel 2007, 2010, 2013 UaF with BIFFRecord
CCProjectZeroMembers
|
|
|
|
464 |
----
|
Fixed
|
----
|
----
|
scvitti@google.com
|
Microsoft Office 2007 BIFFRecord Length UaF
CCProjectZeroMembers
|
|
|
|
465 |
----
|
Fixed
|
----
|
----
|
scvitti@google.com
|
Microsoft Office 2007: type confusion related to OLESSDirectyEntry.CreateTime
CCProjectZeroMembers
|
|
|
|
469 |
----
|
Fixed
|
----
|
----
|
scvitti@google.com
|
Microsoft Office 2007: OGL.dll ValidateBitmapInfo bounds check failure
CCProjectZeroMembers
|
|
|
|
488 |
----
|
WontFix
|
----
|
----
|
scvitti@google.com
|
Microsoft Office 2007 and 2010 RTF frmtxtbrl EIP corruption
CCProjectZeroMembers
|
|
|
|
501 |
----
|
Fixed
|
----
|
----
|
ianbeer@google.com
|
Android libstagefright heap buffer overflow due to integer overflow in MP3 ID3 tag parsing
CCProjectZeroMembers
|
|
|
|
514 |
----
|
Fixed
|
----
|
----
|
scvitti@google.com
|
Microsoft Office / COM Object DLL Planting with els.dll
CCProjectZeroMembers
|
|
|
|
555 |
----
|
Fixed
|
----
|
----
|
scvitti@google.com
|
Microsoft Office / COM Object DLL Planting with WMALFXGFXDSP.dll
CCProjectZeroMembers
|
|
|
|
556 |
----
|
Fixed
|
----
|
----
|
scvitti@google.com
|
Microsoft Office / COM Object DLL Planting with comsvcs.dll delay load of mqrt.dll
CCProjectZeroMembers
|
|
|
|
594 |
----
|
Fixed
|
----
|
----
|
scvitti@google.com
|
Heap corruption buffer underflow in devenum.dll!DeviceMoniker::Load()
CCProjectZeroMembers
|
|
|
|
866 |
----
|
Fixed
|
----
|
----
|
scvitti@google.com
|
Microsoft Office PowerPoint 2010 Invalid Pointer Reference
CCProjectZeroMembers
|
|
|
|
949 |
----
|
Fixed
|
----
|
----
|
scvitti@google.com
|
MSO!Ordinal5429 heap corruption due to missing length check
CCProjectZeroMembers
|
|
|
|
950 |
----
|
Fixed
|
----
|
----
|
scvitti@google.com
|
Office Powerpoint 2010 MSO/OART heap out of bounds access
CCProjectZeroMembers
|
|
|
|
951 |
----
|
Fixed
|
----
|
----
|
scvitti@google.com
|
GDI: Insufficient bounds check on GDI32!ConvertDxArray
CCProjectZeroMembers
|
|