CVE-2018-17476

Incorrect dialog placement in Cast UI in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page...

Design/Logic Flaw

Incorrect dialog placement in Cast UI in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page...

CVE-2018-17476

Incorrect dialog placement in Cast UI in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page...

CVE-2018-17476

CVE-2018-17476 concerns Google Chrome/Chromium before 70.0.3538.67, where an incorrect Cast UI dialog placement could allow a remote attacker to obscure the full-screen warning via a crafted HTML page. The issue is categorized as content spoofing/UI-related, with potential to mislead users about ...

dlplibs/qxpfuzzer: Bad-cast to std::__1::__shared_weak_count from invalid vptr in std::__1::shared_ptr<librevenge::RVNGInputStream>::~shared_ptr

Detailed report: https://oss-fuzz.com/testcase?key=5739393340407808 Project: dlplibs Fuzzer: libFuzzerdlplibsqxpfuzzer Fuzz target binary: qxpfuzzer Job Type: libfuzzerubsandlplibs Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000004b0cb90 Crash State: Bad-cast to std::1::sharedweakcou...

dlplibs/qxpfuzzer: Bad-cast to std::__1::__shared_weak_countstd::__1::shared_ptr<librevenge::RVNGInputStream>::~shared_ptr in libqxp::QXPParser::parse

Detailed report: https://oss-fuzz.com/testcase?key=5744289871560704 Project: dlplibs Fuzzer: libFuzzerdlplibsqxpfuzzer Fuzz target binary: qxpfuzzer Job Type: libfuzzerubsandlplibs Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000004d215f0 Crash State: Bad-cast to...

kernel: Buffer overflow in hidp_process_report

A buffer overflow due to a singed-unsigned comparsion was found in hidpprocessreport in the net/bluetooth/hidp/core.c in the Linux kernel. The buffer length is an unsigned int but gets cast to a signed int which in certain conditions can lead to a system panic and a denial-of-service...

CVE-2018-18710

An issue was discovered in the Linux kernel through 4.19. An information leak in cdromioctlselectdisc in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940 and...

UBUNTU-CVE-2018-18710

An issue was discovered in the Linux kernel through 4.19. An information leak in cdromioctlselectdisc in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940 and...

chromium-browser: Security UI occlusion in full screen mode

Incorrect dialog placement in Cast UI in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page...

libreoffice/ww8fuzzer: Bad-cast to SwPaMSwRangeRedline::operator< in std::__1::pair<std::__1::__wrap_iter<SwRangeRedline* const*>, std::__1::__wrap_iter<SwRangeRedline* const*> > std::__1::__equal_range<CompareSwRedlineTable&, std::__1::__wrap_iter<SwRangeRedline* const*>, SwRangeRedline*>

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5680715916640256 Project: libreoffice Fuzzer: libFuzzerlibreofficeww8fuzzer Fuzz target binary: ww8fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

DEBIAN-CVE-2018-5156

A vulnerability can occur when capturing a media stream when the media source type is changed as the capture is occurring. This can result in stream data being cast to the wrong type causing a potentially exploitable crash. This vulnerability affects Thunderbird 60, Firefox ESR 60.1, Firefox ESR...

CVE-2018-17476

Incorrect dialog placement in Cast UI in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page...

libreoffice/hwpfuzzer: Bad-cast to HMemIODev from invalid vptr in SkipPrivateBlock

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5748792192663552 Project: libreoffice Fuzzer: libFuzzerlibreofficehwpfuzzer Fuzz target binary: hwpfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

DEBIAN-CVE-2018-16658

An issue was discovered in the Linux kernel before 4.18.6. An information leak in cdromioctldrivestatus in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940...

UBUNTU-CVE-2018-16658

An issue was discovered in the Linux kernel before 4.18.6. An information leak in cdromioctldrivestatus in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940...

libreoffice/ww6fuzzer: Bad-cast to SwNode from invalid vptr in SwTable::GetTableNode

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6192777900589056 Project: libreoffice Fuzzer: libFuzzerlibreofficeww6fuzzer Fuzz target binary: ww6fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

libreoffice/ww6fuzzer: Bad-cast to SwIndexReg from invalid vptr in SwIndex::Remove

Detailed report: https://oss-fuzz.com/testcase?key=6290151587184640 Project: libreoffice Fuzzer: libFuzzerlibreofficeww6fuzzer Fuzz target binary: ww6fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000012e6bed8 Crash State: Bad-cast to SwIndexRe...

libreoffice/ww6fuzzer: Bad-cast to SwNodeSwTable::GetTableNode in SwChartLockController_Helper::LockUnlockAllCharts

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6651521981743104 Project: libreoffice Fuzzer: libFuzzerlibreofficeww6fuzzer Fuzz target binary: ww6fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

Security Bulletin: IBM WebSphere Cast Iron Solution is affected by Tomcat vulnerabilities

Summary IBM WebSphere Cast Iron Solution has addressed the following vulnerabilities. Vulnerability Details CVEID: CVE-2017-5664 DESCRIPTION: Apache Tomcat could allow a remote attacker to bypass security restrictions, caused by the improper handling of specific HTTP request methods for static...