Symantec Endpoint Protection Information Disclosure Vulnerability

Symantec Endpoint Protection is a suite of antivirus software from Symantec USA. The software provides security across physical and virtual systems. An information disclosure vulnerability exists in the 0x224844 IOCTL handler function of the ccSetx86.sys file in Symantec Endpoint Protection Small...

Vulnerability Spotlight: Symantec Endpoint Protection kernel memory information disclosure vulnerability

Marcin Noga of Cisco Talos discovered this vulnerability. Overview Cisco Talos is disclosing an information leak vulnerability in the ccSetx86.sys kernel driver of Symantec Endpoint Protection Small Business Edition. The vulnerability exists in the driver’s control message handler. An attacker ca...

Symantec Endpoint Protection Small Business Edition ccSetx86.sys 0x224844 kernel memory information disclosure vulnerability

Summary An exploitable kernel memory disclosure vulnerability exists in the 0x224844 IOCTL handler function of Symantec Endpoint Protection Small Business Edition ccSetx86.sys, version 16.0.0.77. A specially crafted IRP request can cause the driver to return uninitialized memory, resulting in...

GLSA-201904-17 : Patch: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201904-17 Patch: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Patch. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

Patch: Multiple vulnerabilities

Background Patch takes a patch file containing a difference listing produced by the diff program and applies those differences to one or more original files, producing patched versions. Description Multiple vulnerabilities have been discovered in Patch. Please review the CVE identifiers reference...

The vulnerability of the igdkm64.sys driver for Intel Graphics Drivers allows a hacker to disclose protected information.

The vulnerability of the igdkm64.sys driver for Intel Graphics Drivers is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the igdkm64.sys driver for Intel Graphics Drivers allows a hacker to disclose protected information.

The vulnerability of the igdkm64.sys driver for Intel Graphics Drivers is related to buffer overflow in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by these drivers...

Intel Graphics Driver for Windows Buffer Overflow Vulnerability

Intel Graphics Driver for Windows is an American Intel Intel company's graphics card driver for the Windows platform. A buffer overflow vulnerability exists in the igdkm64.sys file in Intel Graphics Driver for Windows. A local attacker could exploit this vulnerability to cause a denial of service...

Intel Graphics Driver for Windows Buffer Overflow Vulnerability (CNVD-2019-07813)

Intel Graphics Driver for Windows is an American Intel Intel company's graphics card driver for the Windows platform. A buffer overflow vulnerability exists in the igdkm64.sys file in Intel Graphics Driver for Windows. A local attacker can exploit this vulnerability to disclose information...

Intel Graphics Driver for Windows Buffer Overflow Vulnerability

Intel Graphics Driver for Windows is an American Intel Intel company's graphics card driver for the Windows platform. A security vulnerability exists in the igdkm64.sys file in Intel Graphics Driver for Windows. A local attacker can exploit this vulnerability to disclose information...

CVE-2018-12224

Buffer leakage in igdkm64.sys in IntelR Graphics Driver for Windows before versions 10.18.x.5059 aka 15.33.x.5059, 10.18.x.5057 aka 15.36.x.5057, 20.19.x.5063 aka 15.40.x.5063 21.20.x.5064 aka 15.45.x.5064 and 24.20.100.6373 may allow an authenticated user to potentially enable information...

CVE-2018-18090

Out of bounds read in igdkm64.sys in IntelR Graphics Driver for Windows before versions 10.18.x.5059 aka 15.33.x.5059, 10.18.x.5057 aka 15.36.x.5057, 20.19.x.5063 aka 15.40.x.5063 21.20.x.5064 aka 15.45.x.5064 and 24.20.100.6373 may allow an authenticated user to potentially enable denial of...

CVE-2018-18089

Multiple out of bounds read in igdkm64.sys in IntelR Graphics Driver for Windows before versions 10.18.x.5059 aka 15.33.x.5059, 10.18.x.5057 aka 15.36.x.5057, 20.19.x.5063 aka 15.40.x.5063 21.20.x.5064 aka 15.45.x.5064 and 24.20.100.6373 may allow an authenticated user to potentially enable...

CVE-2018-18090

Out of bounds read in igdkm64.sys in IntelR Graphics Driver for Windows before versions 10.18.x.5059 aka 15.33.x.5059, 10.18.x.5057 aka 15.36.x.5057, 20.19.x.5063 aka 15.40.x.5063 21.20.x.5064 aka 15.45.x.5064 and 24.20.100.6373 may allow an authenticated user to potentially enable denial of...

CVE-2018-12224

CVE-2018-12224 refers to a buffer leakage in igdkm64.sys of the Intel Graphics Driver for Windows* prior to versions 10.18.x.5059, 10.18.x.5057, 20.19.x.5063, 21.20.x.5064 and 24.20.100.6373, potentially enabling an authenticated local user to disclose information. The Intel advisory INTEL-SA-001...

GNU C Library: Arbitrary descriptor allocation

Background The GNU C library is the standard C library used by Gentoo Linux systems. Description A vulnerability was discovered in the GNU C Library functions xdrbytes and xdrstring. Impact A remote attacker, by sending a crafted UDP packet, could cause a Denial of Service condition. Workaround...

Security update for qemu (important)

openSUSE Security Update: Security update for qemu Announcement ID: openSUSE-SU-2019:0254-1 Rating: important References: 1063993 1079730 1100408 1101982 1112646 1114957 1116717 1117275 1119493 1121600 1123156 1123179 Cross-References: CVE-2018-16872 CVE-2018-18954 CVE-2018-19364 CVE-2018-19489...

February 21, 2019—KB4491101 (OS Build 10240.18135)

None None...

CVE-2019-8318

An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST...

CVE-2018-5410

Dokan/Dokany’s dokan1.sys driver (Dokan versions 1.0.0.5000–1.2.0.1000) contains a stack-based buffer overflow. An attacker who can open a device handle can send crafted input to overflow the kernel stack, enabling local privilege escalation. The issue was introduced in 1.0.0.5000. A fix is avail...