jasper: double-free in in jas_iccattrval_destroy() (oCERT-2014-012)

A double free flaw was found in the way JasPer parsed ICC color profiles in JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash or, possibly, execute arbitrary code...

ecryptfs-utils: hard-coded passphrase salt

eCryptfs uses a default salt to encrypt the mount passphrase, which makes it easier for attackers to obtain user passwords via a brute force attack. By default, the wrapping key is hashed with the default fixed salt 0x0011223344556677. This update introduces the version 2 wrapped-passphrase file...

arCHMage Directory Traversal Vulnerability

arCHMage is the software developer Basil Shubin is responsible for maintaining a CHM Help File Format format file reader and decompiler. A directory traversal vulnerability exists in arCHMage version 0.2.4. A remote attacker can write an arbitrary file via the directory traversal character '...' ...

Hero big eye processing of the TGA File format buffer overflow vulnerability, the EIP can be controlled-the vulnerability warning-the black bar safety net

Brief description: Software description: http://baike.baidu.com/view/222352.html Download: http://www.onlinedown.net/soft/2704.htm http://dl.pconline.com.cn/html2/1/114/id=1879&pn=0.html In the processing of the TGA File format when there is a buffer overflow vulnerability, the eip can be...

[SECURITY] Fedora 21 Update: sox-14.4.1-7.fc21

SoX Sound eXchange is a sound file format converter SoX can convert between many different digitized sound formats and perform simple sound manipulation functions, including sound effects...

Javascript Injection For Eval-Based Unpackers

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/exploit/jsobfu' class Metasploit3 'Javascript Injection for Eval-based Unpackers', 'Description' = %q This module generates a...

FreeType 'cff/cf2ft.c' Denial of Service Vulnerability

FreeType is the FreeType team developed a C-based , high-quality and portable open source font engine library , it can be used to rasterize the characters and mapped to bitmap and provide other font-related business support . A denial of service vulnerability exists in FreeType 'cff/cf2ft.c' that...

[SECURITY] Fedora 21 Update: python-pillow-2.6.1-2.fc21

Python image processing library, fork of the Python Imaging Library PIL This library provides extensive file format support, an efficient internal representation, and powerful image processing capabilities. There are five subpackages: tk tk interface, qt PIL image wrapper for Qt , sane scanning...

Oracle Solaris Third-Party Patch Update : gimp (multiple_vulnerabilities_in_gimp)

The remote Solaris system is missing necessary patches to address security updates : - Heap-based buffer overflow in the KiSS CEL file format plug-in in GIMP 2.8.x and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted KiSS palette file,...

Mini-stream-Ripper-3.0.1.1-(.m3u)

Mini-stream Ripper 3.0.1.1 .m3u Buffer Overflow Code Execution Software Link: http://www.mini-stream.net/downloads/Mini-streamRipper.exe Author: l3D Site: http://xraysecurity.blogspot.com nops1='\x90'0x2a80 system"calc" - Metasploit.com...

KenWards-Zipper-1.400

This exploit takes advantage of the fact too many characters get mangled, as a result I was able to get a shell in a more straight forward way. Very interesting exercise. Mrme and tecR0c figured out this trick, of course. But I was given the honor to share it. Zip file format based on:...

Inmatrix-Ltd.-Zoom-Player-8.5-.jpeg

Exploit Title: Inmatrix Ltd. Zoom Player Crafted JPEG File Memory Corruption and Arbitrary Code Execution Exploit. Version: Zoom Player v8.5 Date: 09-1-2013 Author: Debasish Mandal. Blog : http://www.debasish.in/ d =...

Huawei eSpace Desktop V100R001C03 Denial of Service Vulnerability (CNVD-2015-00027)

Huawei eSpace Desktop is a Unified Communications PC client developed by Huawei. A denial of service vulnerability exists in Huawei eSpace Desktop before V100R001C03 that allows local users to cause a denial of service via a crafted QES file...

Microsoft Excel RealTimeData Record Heap Corruption (MS10-038) - Ver2 (CVE-2010-1247)

Microsoft Excel is a spreadsheet application released by the Microsoft Corporation. Its native file format is the Binary Interchange File Format BIFF, which is available is several versions. An Excel file contains information about the various spreadsheets that form an Excel workbook, the data an...

Adobe Flash Player: Multiple vulnerabilities

Background The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Description Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact A remote attacke...

SuSE 11.3 Security Update : clamav (SAT Patch Number 10016)

clamav was updated to version 0.98.5 to fix three security issues and several non-security issues. These security issues have been fixed : - Crash when scanning maliciously crafted yoda's crypter files. CVE-2013-6497 - Heap-based buffer overflow when scanning crypted PE files. CVE-2014-9050 - Cra...

Fedora 19 : clamav-0.98.5-1.fc19 (2014-15463)

ClamAV 0.98.5 ============= ClamAV 0.98.5 also includes these new features and bug fixes : - Support for the XDP file format and extracting, decoding, and scanning PDF files within XDP files. Addition of shared library support for LLVM versions 3.1 - 3.5 for the purpose of just-in-timeJIT...

Fedora 20 : clamav-0.98.5-1.fc20 (2014-15473)

ClamAV 0.98.5 ============= ClamAV 0.98.5 also includes these new features and bug fixes : - Support for the XDP file format and extracting, decoding, and scanning PDF files within XDP files. Addition of shared library support for LLVM versions 3.1 - 3.5 for the purpose of just-in-timeJIT...

[SECURITY] Fedora 19 Update: python-pillow-2.0.0-16.gitd1c6db8.fc19

Python image processing library, fork of the Python Imaging Library PIL This library provides extensive file format support, an efficient internal representation, and powerful image processing capabilities. There are five subpackages: tk tk interface, qt PIL image wrapper for Qt , sane scanning...

[SECURITY] Fedora 20 Update: python-pillow-2.2.1-7.fc20

Python image processing library, fork of the Python Imaging Library PIL This library provides extensive file format support, an efficient internal representation, and powerful image processing capabilities. There are five subpackages: tk tk interface, qt PIL image wrapper for Qt , sane scanning...