USN-2875-1 libxml2 vulnerabilities

It was discovered that libxml2 incorrectly handled certain malformed documents. If a user or automated system were tricked into opening a specially crafted document, an attacker could possibly cause libxml2 to crash, resulting in a denial of service...

Adobe Reader and Acrobat Memory Corruption Vulnerability (CNVD-2016-00266)

Adobe Reader is a PDF document reading software. Acrobat is a PDF document editing software. Adobe Reader and Acrobat processing PDF documents there are memory corruption vulnerabilities, allowing remote attackers to exploit the vulnerability to build malicious PDF files, inducing the user to...

Adobe Reader and Acrobat Memory Corruption Vulnerability (CNVD-2016-00263)

Adobe Reader is a PDF document reading software. Acrobat is a PDF document editing software. Adobe Reader and Acrobat processing PDF documents there are memory corruption vulnerabilities, allowing remote attackers to exploit the vulnerability to build malicious PDF files, inducing the user to...

Adobe Reader and Acrobat Memory Corruption Vulnerability (CNVD-2016-00264)

Adobe Reader is a PDF document reading software. Acrobat is a PDF document editing software. Adobe Reader and Acrobat processing PDF documents there are memory corruption vulnerabilities, allowing remote attackers to exploit the vulnerability to build malicious PDF files, inducing the user to...

Adobe Reader and Acrobat Memory Corruption Vulnerability (CNVD-2016-00265)

Adobe Reader is a PDF document reading software. Acrobat is a PDF document editing software. Adobe Reader and Acrobat processing PDF documents there are memory corruption vulnerabilities, allowing remote attackers to exploit the vulnerability to build malicious PDF files, inducing the user to...

Adobe Reader and Acrobat Memory Corruption Vulnerability (CNVD-2016-00262)

Adobe Reader is a PDF document reading software. Acrobat is a PDF document editing software. Adobe Reader and Acrobat processing PDF documents there are memory corruption vulnerabilities, allowing remote attackers to exploit the vulnerability to build malicious PDF files, inducing the user to...

Adobe Reader and Acrobat Memory Corruption Vulnerability (CNVD-2016-00267)

Adobe Reader is a PDF document reading software. Acrobat is a PDF document editing software. Adobe Reader and Acrobat processing PDF documents there are memory corruption vulnerabilities, allowing remote attackers to exploit the vulnerability to build malicious PDF files, inducing the user to...

Microsoft Office Memory Corruption Vulnerability (CNVD-2016-00240)

Microsoft Office is an office software suite based on the Windows operating system. Microsoft Office suffers from a memory corruption vulnerability that can be exploited by remote attackers to execute arbitrary code by constructing special Office documents...

Adobe Reader Memory Error Remote Code Execution Vulnerability

Adobe Reader is PDF document reading software. Adobe Reader has a security vulnerability when handling malformed ExtGState dictionaries within PDF documents. It can lead to a double release. An attacker can exploit this vulnerability to execute arbitrary code in the context of the current process...

Microsoft Edge TextData Type Confusion Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose the contents of memory on vulnerable installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit PhantomPDF Arbitrary Code Execution Vulnerability

Foxit PhantomPDF is prone to an arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Google Chrome Cross-Site Scripting Vulnerability (CNVD-2015-08389)

Google Chrome is a simple and efficiently designed web browsing tool developed by Google. A cross-site scripting vulnerability exists in versions of Google Chrome prior to 47.0.2526.80. It allows remote attackers to inject arbitrary web script or HTML crafted documents via crafted documents...

Debian GNU/Linux Ubuntu Office Software Code Execution

The vulnerability of Debian GNU/Linux operating systems, Ubuntu, office software packages like LibreOffice and Apache OpenOffice is related to a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to cause service failures or execute arbitrary code using specially...

Debian GNU/Linux operating systems

The vulnerability of Debian GNU/Linux operating systems, Ubuntu, office software packages like LibreOffice and Apache OpenOffice is related to the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to protected...

USN-2834-1 libxml2 vulnerabilities

Kostya Serebryany discovered that libxml2 incorrectly handled certain malformed documents. If a user or automated system were tricked into opening a specially crafted document, an attacker could possibly cause libxml2 to crash, resulting in a denial of service. CVE-2015-5312, CVE-2015-7497,...

libreoffice: Arbitrary file disclosure in Calc and Writer

It was discovered that LibreOffice did not properly restrict automatic link updates. By tricking a victim into opening specially crafted documents, an attacker could possibly use this flaw to disclose contents of files accessible by the victim...

chromium-browser: Escaping issue in saved pages

The WebPageSerializerImpl::openTagToString function in WebKit/Source/web/WebPageSerializerImpl.cpp in the page serializer in Google Chrome before 47.0.2526.80 does not properly use HTML entities, which might allow remote attackers to inject arbitrary web script or HTML via a crafted document, as...

libxml2: Heap-based buffer overflow in xmlParseXmlDecl

A denial of service flaw was found in libxml2. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to crash...

Threat Outbreak Alert RuleID19624: Email Messages Distributing Malicious Software on November 24, 2015

Medium Alert ID: 42250 First Published: 2015 November 24 13:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19624 may contain the following files: Name |...

Carnegie Mellon Says It Was Subpoenaed-And Not Paid-For Research On Breaking Tor

Carnegie Mellon University today implied in a statement that it was served with a subpoena to hand over research related to unmasking the identity of users on the Tor network, and that it was not paid $1 million by the FBI for doing so, as alleged by the Tor Project. The statement, released short...