libxls xls_appendSST Code Execution Vulnerability(CVE-2017-12110)

Summary An exploitable integer overflow vulnerability exists in the xlsappendSST function of libxls 1.4. A specially crafted XLS file can cause memory corruption resulting in remote code execution. An attacker can send a malicious XLS file to trigger this vulnerability. Tested Versions libxls 1.4...

Cygwin 'wcsxfrm/wcsxfrm_l' function buffer overflow vulnerability

Cygwin is a collection of many free software programs for running UNIX-like systems on various versions of Microsoft Windows. A buffer overflow vulnerability exists in the 'wcsxfrm/wcsxfrml' function in Cygwin versions 1.7.2 through 1.8.0. An attacker can exploit this vulnerability to cause a...

CVE-2017-7523

Cygwin versions 1.7.2 up to and including 1.8.0 are vulnerable to buffer overflow vulnerability in wcsxfrm/wcsxfrml functions resulting into denial-of-service by crashing the process or potential hijack of the process running with administrative privileges triggered by specially crafted input...

Buffer overflow

Cygwin versions 1.7.2 up to and including 1.8.0 are vulnerable to buffer overflow vulnerability in wcsxfrm/wcsxfrml functions resulting into denial-of-service by crashing the process or potential hijack of the process running with administrative privileges triggered by specially crafted input...

CVE-2017-7523

Cygwin versions 1.7.2 up to and including 1.8.0 are vulnerable to buffer overflow vulnerability in wcsxfrm/wcsxfrml functions resulting into denial-of-service by crashing the process or potential hijack of the process running with administrative privileges triggered by specially crafted input...

CVE-2017-7523

Cygwin versions 1.7.2 up to and including 1.8.0 are vulnerable to buffer overflow vulnerability in wcsxfrm/wcsxfrml functions resulting into denial-of-service by crashing the process or potential hijack of the process running with administrative privileges triggered by specially crafted input...

CVE-2017-7523

CVE-2017-7523 affects Cygwin 1.7.2 through 1.8.0, where a buffer overflow in wcsxfrm and wcsxfrm_l can cause a denial of service or allow an attacker to hijack a process running with administrative privileges via a crafted input string. The connected sources corroborate the same affected componen...

PT-2017-17787

Name of the Vulnerable Software and Affected Versions Cygwin versions 1.7.2 through 1.8.0 Description The issue is related to a buffer overflow vulnerability in the wcsxfrm and wcsxfrm l functions. This can result in a denial-of-service by crashing the process or potentially allow hijacking of th...

CVE-2017-7523: Out-of-bounds Write

Cygwin versions 1.7.2 up to and including 1.8.0 are vulnerable to buffer overflow vulnerability in wcsxfrm/wcsxfrml functions resulting into denial-of-service by crashing the process or potential hijack of the process running with administrative privileges triggered by specially crafted input...

Cygwin Elevation of Privilege Vulnerability

Cygwin is a collection of many free software programs for running UNIX-like systems on various versions of Microsoft Windows. Cygwin suffers from an elevation of privilege vulnerability that can be exploited by a remote attacker to elevate privileges...

Code injection

Cygwin before 2.5.0 does not properly handle updating permissions when changing users, which allows attackers to gain privileges...

CVE-2016-3067

Cygwin before 2.5.0 does not properly handle updating permissions when changing users, which allows attackers to gain privileges...

CVE-2016-3067

Cygwin before 2.5.0 does not properly handle updating permissions when changing users, which allows attackers to gain privileges...

CVE-2016-3067

Cygwin before 2.5.0 does not properly handle updating permissions when changing users, which allows attackers to gain privileges...

CVE-2016-3067

Cygwin before 2.5.0 does not properly handle updating permissions when changing users, which allows attackers to gain privileges...

CVE-2016-3067

CVE-2016-3067 (Cygwin) : Cygwin prior to 2.5.0 contains a privilege escalation vulnerability caused by improper handling of updating permissions when changing users, allowing an attacker to gain privileges. The issue is described consistently across multiple sources in the connected data. The doc...

CVE-2016-3067: Undefined Security Weakness

Cygwin before 2.5.0 does not properly handle updating permissions when changing users, which allows attackers to gain privileges...

PT-2017-8322

Name of the Vulnerable Software and Affected Versions Cygwin versions prior to 2.5.0 Description The issue arises from improper handling of permission updates when changing users, allowing attackers to gain privileges. Recommendations For versions prior to 2.5.0, update to version 2.5.0 or later ...

Edit and Replay Network Traffic: tcpreplay

Edit and Replay Network Traffic Tcpreplay is a suite of GPLv3 licensed utilities for UNIX and Win32 under Cygwin operating systems for editing and replaying network traffic which was previously captured by tools like tcpdump and Ethereal / Wireshark . It allows you to classify traffic as client o...

OpenSSH on Cygwin: directory traversal in SFTP client

Portable OpenSSH supports running on Cygwin. However, the SFTP client only filters out forward slashes in dolsreaddir and the directory names "." and ".." in downloaddirinternal. On Windows, including in Cygwin, backslashes can also be used for directory traversal. To reproduce: On the server:...