RHEL 6 : php (RHSA-2015:1218)

Updated php packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for...

HansoPlayer '.wav' File Handling Memory Corruption Vulnerability

Hanso Player is a resourceful audio player. A memory corruption vulnerability exists in HansoPlayer '.wav' file handling, which can be exploited by an attacker to crash the application, resulting in a denial of service...

Apple iOS text file handling memory corruption vulnerability (CNVD-2015-04292)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in Apple iOS's handling of ICC files, which allows attackers to construct malicious PDF files and trick users into parsing them, which can execute arbitrary code...

Apple iOS text file handling memory corruption vulnerability (CNVD-2015-04309)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in the handling of text files in Apple iOS, which allows attackers to construct malicious text files and trick users into parsing them, which can execute arbitrary...

Apple MAC OS X Font File Handling Processing Arbitrary Code Execution Vulnerability (CNVD-2015-04269)

Apple Mac OS X is a commercial operating system. An arbitrary code execution vulnerability exists in Apple Mac OS X's handling of specially crafted font files, which allows an attacker to construct a malicious file that can be parsed by a user to execute arbitrary code...

Debian DLA-264-1 : libmodule-signature-perl security update

John Lightsey discovered multiple vulnerabilities in Module::Signature, a Perl module to manipulate CPAN SIGNATURE files. The Common Vulnerabilities and Exposures project identifies the following problems : CVE-2015-3406 Module::Signature could parse the unsigned portion of the SIGNATURE file as...

Apple iOS text file handling memory corruption vulnerability (CNVD-2015-04293)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in the handling of text files in Apple iOS, which allows attackers to construct malicious text files and trick users into parsing them, which can execute arbitrary...

Apple MAC OS X Font File Handling Processing Arbitrary Code Execution Vulnerability (CNVD-2015-04268)

Apple Mac OS X is a commercial operating system. An arbitrary code execution vulnerability exists in Apple Mac OS X's handling of specially crafted font files, which allows an attacker to construct a malicious file that can be parsed by a user to execute arbitrary code...

Apple iOS text file handling memory corruption vulnerability (CNVD-2015-04307)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in the handling of text files in Apple iOS, which allows attackers to construct malicious text files and trick users into parsing them, which can execute arbitrary...

Apple MAC OS X Font File Handling Processing Arbitrary Code Execution Vulnerability (CNVD-2015-04266)

Apple Mac OS X is a commercial operating system. An arbitrary code execution vulnerability exists in Apple Mac OS X's handling of specially crafted font files, which allows an attacker to construct a malicious file that can be parsed by a user to execute arbitrary code...

Apple OS X GZIP DMG Information Disclosure Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of DMG...

Fedora 22 : cups-x2go-3.0.1.3-1.fc22 (2015-10459)

New upstream version 3.0.1.2 : - cups-x2go,.conf: port to File::Temp. Use Text::ParseWords to split up the ps2pdf command line correctly. Don't use system but IPC::Open2::open2. Capture the ps2pdf program's stdout and write it to the temporary file handle 'manually'. Should fix problems reported...

abrt security update

abrt 2.1.11-22.0.1 - Drop libreport-rhel and libreport-plugin-rhtsupport requires 2.1.11-22 - do not open the buildids file as the user abrt - do not unlink failed and big user core files - Related: 1212819, 1216973 2.1.11-21 - validate all D-Bus method arguments - Related: 1214610 2.1.11-20 -...

The vulnerability of the Windows operating system allows a hacker to execute arbitrary code in the context of the current user.

The vulnerability of the Windows operating system exists due to incorrect handling of the event log file. The vulnerability can be exploited by opening the event log file created by the attacker. As a result of exploiting this vulnerability, an attacker who operates remotely can execute arbitrary...

Microsoft Windows Journal File Handling Arbitrary Code Execution Vulnerability (CNVD-2015-03112)

Microsoft Windows is a popular operating system. A security vulnerability in Microsoft Windows handling of specially crafted Journal .jnt files allows remote attackers to exploit the vulnerability to construct malicious files that can be parsed by a user and can be used in an application context ...

Microsoft Windows Journal File Handling Arbitrary Code Execution Vulnerability (CNVD-2015-03113)

Microsoft Windows is a popular operating system. A security vulnerability in Microsoft Windows' handling of specially crafted Journal .jnt files allows remote attackers to exploit the vulnerability to construct malicious files that can be parsed by a user and can be used in an application context...

Microsoft Windows Journal File Handling Arbitrary Code Execution Vulnerability (CNVD-2015-03108)

Microsoft Windows is a popular operating system. A security vulnerability in Microsoft Windows handling of specially crafted Journal .jnt files allows remote attackers to exploit the vulnerability to construct malicious files that can be parsed by a user and can be used in an application context ...

ClamAV pe.c cli_scanpe() file handling remote denial of service vulnerability

ClamAV is an anti-virus application. A security vulnerability in ClamAV pe.c cliscanpe handling of special files allows remote attackers to exploit this vulnerability to crash the application...

Untangle Cross Site Scripting / Information Disclosure

This is a follow up to an earlier post, highlighting an XSS and information disclosure vulnerability in versions of Untangle 9-11 The previous post is shown in full below this post. Additional un-patched vectors have been discovered that allow for these issues to be exploited with increased...

Microsoft Windows Task Scheduler CVE-2015-0098 Remote Privilege Escalation Vulnerability

Description Microsoft Windows Kernel is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges within the context of the System account. Technologies Affected Avaya Meeting Exchange - Client Registration Server 5.0 Avaya Meeting Exchan...