AVAST #13 - Persistent Cross Site Scripting Vulnerability

Document Title: =============== AVAST 13 - Persistent Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1623 Video: https://www.youtube.com/watch?v=08Ux7DUIfNo Release Date: ============= 2016-04-19 Vulnerability Laborato...

AVAST (My) #15 - (frontend.exception) CS XSS Vulnerability

Document Title: =============== AVAST My 15 - frontend.exception CS XSS Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1625 Release Date: ============= 2016-04-18 Vulnerability Laboratory ID VL-ID: ==================================== 1625...

AVAST #13 - Persistent Cross Site Scripting Vulnerability

Document Title: =============== AVAST 13 - Persistent Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1623 Video: https://www.youtube.com/watch?v=08Ux7DUIfNo Release Date: ============= 2016-04-18 Vulnerability Laborato...

AVAST (My) #15 - (frontend.exception) CS XSS Vulnerability

Document Title: =============== AVAST My 15 - frontend.exception CS XSS Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1625 Release Date: ============= 2016-04-17 Vulnerability Laboratory ID VL-ID: ==================================== 1625...

Avast Memory Corruption Vulnerability

Avast is a suite of antivirus software from the Czech company Avast Avast. A security vulnerability exists in Avast that can be exploited by remote attackers to cause a denial of service memory corruption or execute arbitrary code with the help of a specially crafted PE file...

CVE-2015-8620

Heap-based buffer overflow in the Avast virtualization driver aswSnx.sys in Avast Internet Security, Pro Antivirus, Premier, and Free Antivirus before 11.1.2253 allows local users to gain privileges via a Unicode file path in an IOCTL request...

Heap overflow

Heap-based buffer overflow in the Avast virtualization driver aswSnx.sys in Avast Internet Security, Pro Antivirus, Premier, and Free Antivirus before 11.1.2253 allows local users to gain privileges via a Unicode file path in an IOCTL request...

CVE-2015-8620

CVE-2015-8620 affects Avast’s Windows virtualization driver aswSnx.sys (Avast Internet Security, Pro Antivirus, Premier, and Free Antivirus). The heap-based buffer overflow is triggered via a Unicode file path in an IOCTL request, enabling local privilege escalation. Affected products use the Ava...

CVE-2015-8620

Heap-based buffer overflow in the Avast virtualization driver aswSnx.sys in Avast Internet Security, Pro Antivirus, Premier, and Free Antivirus before 11.1.2253 allows local users to gain privileges via a Unicode file path in an IOCTL request...

CVE-2016-3986

Avast allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code via a crafted PE file, related to authenticode parsing...

Memory corruption

Avast allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code via a crafted PE file, related to authenticode parsing...

CVE-2016-3986

CVE-2016-3986 affects Avast Antivirus and is triggered by a crafted PE file, exploiting the authenticode parsing path to cause memory corruption and potentially execute arbitrary code. The vulnerability’s impact is a denial-of-service with memory corruption (and possible code execution). Affected...

CVE-2016-3986

Avast allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code via a crafted PE file, related to authenticode parsing...

Avast Battery Saver - BSD license, Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Avast Battery Saver published at the 'play' market has multiple vulnerabilities...

Avast Cleanup & Boost - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Avast Cleanup & Boost published at the 'play' market has multiple vulnerabilities...

Avast WiFi Finder & Passwords - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Avast WiFi Finder & Passwords published at the 'play' market has multiple vulnerabilities...

openSUSE Security Update : exim (openSUSE-2016-326)

This update to exim 4.86.2 fixes the following issues : - CVE-2016-1531: local privilege escalation for set-uid root exim when using 'perlstartup' boo968844 Important: Exim now cleans the complete execution environment by default. This affects Exim and subprocesses such as transports calling othe...

Security update for exim (important)

This update to exim 4.86.2 fixes the following issues: CVE-2016-1531: local privilege escalation for set-uid root exim when using 'perlstartup' boo968844 Important: Exim now cleans the complete execution environment by default. This affects Exim and subprocesses such as transports calling other...

Avast! - Authenticode Parsing Memory Corruption

Avast! - Authenticode Parsing Memory Corruption Source: https://code.google.com/p/google-security-research/issues/detail?id=668 The attached PE file causes memory corruption in Avast, it looks related to authenticode parsing. 474.c0c: Access violation - code c0000005 first chance First chance...

Avast - Authenticode Parsing Memory Corruption

Exploit for windows platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=668 The attached PE file causes memory corruption in Avast, it looks related to authenticode parsing. 474.c0c: Access violation - code c0000005 first chance First chance...