MGASA-2015-0435 Updated kernel packages fixes security vulnerability

This kernel update is based on the upstream 4.1.12 longterm kernel and fixes at least the following security issue: Moein Ghasemzadeh discovered that the USB WhiteHEAT serial driver contained hardcoded attributes about the USB devices. An attacker could construct a fake WhiteHEAT USB device that,...

AMD fglrx-driver elevation of privilege vulnerability

AMD fglrx-driver is a set of fglrx drivers from AMD USA. AMD fglrx-driver fails to properly handle symbolic links, allowing local attackers to exploit the vulnerability to corrupt system files and conduct denial-of-service attacks...

Apple iOS Arbitrary Code Execution Vulnerability (CNVD-2015-07162)

OS is an operating system developed by Apple Inc. for mobile devices. safari is the browser in Mac OS X, the latest operating system for Apple computers. iTunes is a digital media playback application. A security vulnerability exists in com.apple.driver.AppleVXD393 in the Graphics Driver subsyste...

Win10Pcap - Local Privilege Escalation Vulnerability

Exploit for windows platform in category local exploits Source: https://github.com/Rootkitsmm/Win10Pcap-Exploit / Win10Pcap kernel-mode driver did not check the virtual addresses which are passed from the user-mode , IOCTL Using Neither Buffered Nor Direct I/O without ProbeForWrite to validating...

CVE-2015-7884

The vividfbioctl function in drivers/media/platform/vivid/vivid-osd.c in the Linux kernel through 4.3.3 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel memory via a crafted application...

MGASA-2015-0400 Updated roundcubemail package fixes security vulnerabilities

Multiple security issues in the DBMail driver for the password plugin, including buffer overflows CVE-2015-2181 and the ability for a remote attacker to execute arbitrary shell commands as root CVE-2015-2180. An authenticated user can download arbitrary files from the web server that the web serv...

Truecrypt 7 / VeraCrypt 1.13 - Drive Letter Symbolic Link Creation Privilege Escalation Exploit

Exploit for windows platform in category local exploits Source: https://code.google.com/p/google-security-research/issues/detail?id=538 Truecrypt 7 Derived Code/Windows: Drive Letter Symbolic Link Creation EoP Platform: Windows Class: Local Elevation of Privilege Tested on: VeraCrypt 1.13 x86 on...

Apple OS X intel graphics driver memory corruption vulnerability

Apple OS X is an operating system developed by Apple Inc. A memory corruption vulnerability exists in the Apple OS X Intel graphics driver, which can be exploited by a local attacker to execute arbitrary code with system privileges...

CVE-2015-5950

The NVIDIA display driver R352 before 353.82 and R340 before 341.81 on Windows; R304 before 304.128, R340 before 340.93, and R352 before 352.41 on Linux; and R352 before 352.46 on GRID vGPU and vSGA allows local users to write to an arbitrary kernel memory location and consequently gain privilege...

CVE-2015-2426

CVE-2015-2426 is a Windows OpenType Font Driver vulnerability (ATMFD.DLL) that causes a pool/heap overflow when processing OpenType fonts, allowing remote code execution. The issue arises from a flawed handling of font data (notably the Class1Count field in the GPOS/CFF paths) where an invalid ze...

Apple MAC OS X FireWire Driver Null Pointer Reference Vulnerability

Apple Mac OS X is a commercial operating system. Apple Mac OS X handles a null pointer reference vulnerability in the FireWire driver, which allows attackers to exploit the vulnerability to run malicious applications and execute arbitrary code...

CVE-2015-4004

The OZWPAN driver in the Linux kernel through 4.0.5 relies on an untrusted length field during packet parsing, which allows remote attackers to obtain sensitive information from kernel memory or cause a denial of service out-of-bounds read and system crash via a crafted packet...

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the xorg-x11-drv-modesetting-0.8.0 package in the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

Null pointer dereference

The NVIDIA graphics driver in Apple OS X before 10.10.3 allows local users to gain privileges or cause a denial of service NULL pointer dereference via an unspecified IOService userclient type...

PT-2015-6154 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.19.3 Description: The issue is related to the driver rfc4106 decrypt function in the Linux kernel, which does not properly determine the memory locations used for encrypted data. This allows attackers to cause...

CVE-2015-0090

CVE-2015-0090 is a registry-object vulnerability in the Windows ATMFD.DLL font driver. An off‑by‑one bug sanitizing registry indices allows a load/store between the transient array and Registry[3], enabling a read/write‑what‑where primitive. Attackers can spray kernel pools and copy controlled da...

HP Point of Sale PCs Running Windows with OPOS Drivers Arbitrary Code Execution Vulnerability (CNVD-2015-01596)

HP Point of Sale PCs Running Windows with OPOS Drivers is a set of OPOS drivers from Hewlett-Packard HP that run on the Windows operating system for Hewlett-Packard point-of-sale terminals. A security vulnerability exists in the OPOSMSR.ocx file in various HP Point of Sale PCs Running Windows wit...

Memory corruption

The tmeext.sys driver before 2.0.0.1015 in Trend Micro Antivirus Plus, Internet Security, and Maximum Security allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 0x00222400 IOCTL call...

CVE-2014-9633

The bdisk.sys driver in COMODO Backup before 4.4.1.23 allows remote attackers to gain privileges via a crafted device handle, which triggers a NULL pointer dereference...

Code injection

The mdpluthwupdate function in drivers/video/msm/mdp.c in the MDP display driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, does not validate certain start and length values within an ioctl call, which allows...