56 matches found
CVE-2016-8620
CVE-2016-8620 concerns curl’s globbing feature, where parsing numeric ranges could write beyond allocated memory and read out-of-bounds. The issue affects the curl tool (not libcurl) and could enable remote code execution or unintended behavior when handling invalid ranges; it may also enable out...
SA161: Local Information Disclosure Due to Meltdown and Spectre Attacks
SUMMARY Symantec Network Protection products, which run on an affected CPU chipset and execute arbitrary code from external sources, are susceptible to several information disclosure vulnerabilities aka Meltdown and Spectre attacks. A remote attacker, with the ability to execute arbitrary code...
Microsoft Windows Search Type Confusion (CVE-2017-8620)
A remote code execution vulnerability exists in the Windows Search service of Microsoft Windows. The vulnerability is due to improper handling of objects in memory. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted request to the target system...
CVE-2017-8620
creationtimestamp| type| source ---|---|--- 2017-08-09 08:03:09+00:00| seen| https://t.me/BleepingComputer/1550 2017-08-09 13:36:25+00:00| seen| https://t.me/informationsecuritychannel/7483 2017-08-09 16:49:18+00:00| seen| https://t.me/informationsecuritychannel/7492 2017-08-09 18:00:14+00:00|...
CVE-2017-8620
CVE-2017-8620 is a Windows Search Remote Code Execution vulnerability. The issue arises when Windows Search improperly handles objects in memory, allowing a remote attacker to execute code on the affected system. Multiple connected sources (Nessus/OpenVAS plugins) confirm this CVE is tied to the ...
Microsoft Patches Critical Windows Search Vulnerability
Microsoft patched more than two dozen remote code execution vulnerabilities today, many of them rated critical. One was a RCE bug that allowed an attacker to take complete control of a server or workstation via Windows Search. The fixes were part of Microsoft’s August Patch Tuesday update that...
Microsoft Windows Search CVE-2017-8620 Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to execute arbitrary code on the target system. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit...
KB4034674: Windows 10 Version 1703 August 2017 Cumulative Update
The remote Windows host is missing security update 4034674. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists when Microsoft Windows improperly handles NetBIOS packets. An attacker who successfully exploited this vulnerability could cause a target...
openSUSE Security Update : curl (openSUSE-2016-1280)
This update for curl fixes the following security issues : - CVE-2016-8624: invalid URL parsing with '' bsc1005646 - CVE-2016-8623: Use-after-free via shared cookies bsc1005645 - CVE-2016-8622: URL unescape heap overflow via integer truncation bsc1005643 - CVE-2016-8621: curlgetdate read out of...
openSUSE: Security Advisory for curl (openSUSE-SU-2016:2768-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-3705-1 : curl - security update
Several vulnerabilities were discovered in cURL, an URL transfer library : - CVE-2016-8615 It was discovered that a malicious HTTP server could inject new cookies for arbitrary domains into a cookie jar. - CVE-2016-8616 It was discovered that when re-using a connection, curl was doing case...
Ubuntu: Security Advisory (USN-3123-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLED12 / SLES12 Security Update : curl (SUSE-SU-2016:2699-1)
This update for curl fixes the following security issues : - CVE-2016-8624: invalid URL parsing with '' bsc1005646 - CVE-2016-8623: Use-after-free via shared cookies bsc1005645 - CVE-2016-8622: URL unescape heap overflow via integer truncation bsc1005643 - CVE-2016-8621: curlgetdate read out of...
SUSE-SU-2016:2699-1 Security update for curl
This update for curl fixes the following security issues: - CVE-2016-8624: invalid URL parsing with '' bsc1005646 - CVE-2016-8623: Use-after-free via shared cookies bsc1005645 - CVE-2016-8622: URL unescape heap overflow via integer truncation bsc1005643 - CVE-2016-8621: curlgetdate read out of...
CVE-2015-8620
CVE-2015-8620 affects Avast’s Windows virtualization driver aswSnx.sys (Avast Internet Security, Pro Antivirus, Premier, and Free Antivirus). The heap-based buffer overflow is triggered via a Unicode file path in an IOCTL request, enabling local privilege escalation. Affected products use the Ava...