4346 matches found
Debian Security Advisory DSA 3582-1 (expat - security update)
Gustavo Grieco discovered that Expat, an XML parsing C library, does not properly handle certain kinds of malformed input documents, resulting in buffer overflows during processing and error reporting. A remote attacker can take advantage of this flaw to cause an application using the Expat libra...
libxml2: Out-of-bounds memory access
A denial of service flaw was found in libxml2. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to crash...
CVE-2016-0184
Use-after-free vulnerability in GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted document, aka "Direct3D...
CVE-2016-0169
GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to obtain sensitive information via a crafted document, aka "Windows Graphics Component...
SOL66504414 - Foomatic vulnerability CVE-2010-5325
Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...
The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or obtain confidential information.
The vulnerability in the fxcodec/codec/fxCodecJpj.cpp function of the Google Chrome browser’s PDFium component is related to the incorrect implementation of the sycc420toRGB and sycc422toRGB functions. Exploiting this vulnerability can allow an attacker to obtain confidential information or cause...
Adobe Reader DC U3D Parsing Out-Of-Bound Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...
A Cyber Revolution: Advanced Attacks Increasing in EMEA Reflect Political Tension
Financial, geopolitical and economical changes made 2015 a very busy year for the Europe, Middle East and Africa EMEA region, particularly in the cyber realm. FireEye has been monitoring these shifting cyber trends and has identified considerable evolutions to the EMEA threat landscape when...
A Cyber Revolution: Advanced Attacks Increasing in EMEA Reflect Political Tension
Financial, geopolitical and economical changes made 2015 a very busy year for the Europe, Middle East and Africa EMEA region, particularly in the cyber realm. FireEye has been monitoring these shifting cyber trends and has identified considerable evolutions to the EMEA threat landscape when...
Ubuntu 14.04 LTS : poppler vulnerabilities (USN-2958-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2958-1 advisory. It was discovered that the poppler pdfseparate tool incorrectly handled certain filenames. A local attacker could use this issue to cause the tool to...
The vulnerability of the Microsoft Office Compatibility Pack, the Microsoft Excel spreadsheet editor, the Microsoft SharePoint Foundation email software, and the Microsoft SharePoint Designer HTML editor allows a perpetrator to execute arbitrary code.
The vulnerability of the Microsoft Office Compatibility Pack, the Microsoft Excel spreadsheet editor, and the Microsoft SharePoint Foundation email software, as well as the Microsoft SharePoint Designer HTML editor, is due to buffer overflow attacks. Exploitation of this vulnerability could allow...
The vulnerability of the Microsoft Excel Viewer, a spreadsheet viewer, and the Microsoft Excel editor, as well as the Word For Mac text editor, allows a perpetrator to execute arbitrary code.
The vulnerability of the Microsoft Excel Viewer, a spreadsheet viewer, and the Microsoft Excel editor, as well as the Word For Mac text editor, arises due to buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially crafted Office document...
APT Threat Targets Tibetans, Journalists and Human Rights Workers
Tibetans, journalists and human rights workers in Hong Kong and Taiwan have been targeted in an APT campaign that makes use of Microsoft Rich Text File RTF documents to compromise computers. Researchers say it’s a new strategy by attackers in an ongoing advanced persistent threat that dates back ...
Ghosts in the Endpoint
We would like to introduce the first of our “Ghosts in the Endpoint” series, a report prepared by FireEye Labs that documents malicious software not being detected in the wild by traditional signature-based detections. In this study, all the families identified are samples from VirusTotal VT with...
CVE-2016-0122
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Word 2016 for Mac, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...
CVE-2016-0127
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Serve...
MS16-039: Description of the security update for Skype for Business 2016: April 12, 2016
None None...
DEBIAN-CVE-2016-0729
Multiple buffer overflows in 1 internal/XMLReader.cpp, 2 util/XMLURL.cpp, and 3 util/XMLUri.cpp in the XML Parser library in Apache Xerces-C before 3.1.3 allow remote attackers to cause a denial of service segmentation fault or memory corruption or possibly execute arbitrary code via a crafted...
海天OA /PowerSelect.asp /Documents/FolderInfor.asp /flow/BiaoDanDangAn.asp 三处char型sql注入
No description provided by source...
PDF Converter:Documents To PDF - Apache license, BSD license, Insecure KeyStore vulnerabilities
HackApp vulnerability scanner discovered that application PDF Converter:Documents To PDF published at the 'play' market has multiple vulnerabilities...