CVE-2017-12816

CVE-2017-12816 affects Kaspersky Internet Security for Android 11.12.4.1622. The issue arises from some application exported activities that have weak permissions, enabling a malware application to access product functionality via Android IPC. The root cause is misconfigured export permissions on...

CVE-2017-12816: Incorrect Permission Assignment for Critical Resource

In Kaspersky Internet Security for Android 11.12.4.1622, some of application exports activities have weak permissions, which might be used by a malware application to get unauthorized access to the product functionality by using Android IPC...

kernel security and bug fix update

3.10.0-693.1.1.0.1.el7.OL7 - ipc ipc/sem.c: bugfix for semctl,,GETZCNT Manfred Spraul orabug 22552377 3.10.0-693.1.1.el7.OL7 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update...

PT-2017-2935

Name of the Vulnerable Software and Affected Versions Kaspersky Internet Security for Android version 11.12.4.1622 Description The issue is related to insufficient access control in Kaspersky Internet Security for Android, which can be exploited by a remote attacker to gain unauthorized access to...

BadIntent - Intercept, Modify, Repeat and Attack Android's Binder Transactions Using Burp Suite

BadIntent is the missing link between the Burp Suite and the core Android's IPC/Messaging-system. BadIntent consists of two parts, an Xposed-based module running on Android and a Burp-plugin. Based on this interplay, it is possible to use the Burp's common workflow and all involved tools and...

CVE-2015-7543

aRts 1.5.10 and kdelibs3 3.5.10 and earlier do not properly create temporary directories, which allows local users to hijack the IPC by pre-creating the temporary directory...

CVE-2015-7543

aRts 1.5.10 and kdelibs3 3.5.10 and earlier do not properly create temporary directories, which allows local users to hijack the IPC by pre-creating the temporary directory...

CVE-2015-7543

CVE-2015-7543 affects aRts 1.5.10 and kdelibs3 3.5.10 and earlier. The issue stems from insecure creation of temporary directories, allowing a local attacker to hijack IPC by pre-creating the temporary directory. Several advisories note this vulnerability and provide patches/remediations: SUSE-SU...

CVE-2015-7543

aRts 1.5.10 and kdelibs3 3.5.10 and earlier do not properly create temporary directories, which allows local users to hijack the IPC by pre-creating the temporary directory...

CVE-2015-7543

aRts 1.5.10 and kdelibs3 3.5.10 and earlier do not properly create temporary directories, which allows local users to hijack the IPC by pre-creating the temporary directory...

CVE-2015-7543

Removed by vendor...

PT-2017-7222

Name of the Vulnerable Software and Affected Versions aRts versions 1.5.10 and earlier kdelibs3 versions 3.5.10 and earlier Description The issue arises from improper creation of temporary directories, allowing local users to hijack the IPC by pre-creating the temporary directory. Recommendations...

CVE-2015-7543: Concurrent Execution using Shared Resource with Improper Synchronization

aRts 1.5.10 and kdelibs3 3.5.10 and earlier do not properly create temporary directories, which allows local users to hijack the IPC by pre-creating the temporary directory...

My IPC Viewer - Certificates or keys found, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application My IPC Viewer published at the 'play' market has multiple vulnerabilities...

Security Notice - Statement on the article about “Devil's Ivy” Vulnerability published on WIRED

Huawei noticed that an article "Hack Brief: 'Devil's Ivy' Vulnerability Could Afflict Millions of IoT Devices" published at WIRED on July 18, 2017. The article mentioned that there was a vulnerability named "Devil's Ivy" CVE-2017-9765 in gSOAP. Huawei products are affacted by this vulnerability...

GLSA-201707-08 : feh: Arbitrary remote code execution

The remote host is affected by the vulnerability described in GLSA-201707-08 feh: Arbitrary remote code execution Tobias Stoeckmann discovered it was possible to trigger an out-of-boundary heap write with the image viewer feh while receiving an IPC message. Impact : A remote attacker, pretending ...

feh: Arbitrary remote code execution

Background feh is an X11 image viewer aimed mostly at console users. Description Tobias Stoeckmann discovered it was possible to trigger an out-of-boundary heap write with the image viewer feh while receiving an IPC message. Impact A remote attacker, pretending to be the E17 window manager, could...

PT-2017-3428

Name of the Vulnerable Software and Affected Versions Android for MSM versions prior to the fixed version QRD Android versions prior to the fixed version Description The issue is related to a Use After Free condition in the Qualcomm IPC component of the Android operating system, which is caused b...

kernel security and bug fix update

3.10.0-514.26.1.0.1.el7.OL7 - ipc ipc/sem.c: bugfix for semctl,,GETZCNT Manfred Spraul orabug 22552377 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey bug 24817676...

kernel security update

3.10.0-514.21.2.0.1.el7.OL7 - ipc ipc/sem.c: bugfix for semctl,,GETZCNT Manfred Spraul orabug 22552377 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey bug 24817676...