108 matches found
Microsoft Warns of Large-Scale Click Fraud Campaign Targeting Gamers
Microsoft said it's tracking an ongoing large-scale click fraud campaign targeting gamers by means of stealthily deployed browser extensions on compromised systems. "The attackers monetize clicks generated by a browser node-webkit or malicious browser extension secretly installed on devices,"...
NULL Pointer Dereference
Description NULL Pointer Dereference in MP4BOX Command MP4Box -info POC6 POC6 is here. ASAN result iso file Unknown box type url@ in parent dref iso file Unknown box type traj in parent moov iso file Unknown box type 80rak in parent moov iso file Incomplete box mdat - start 11495 size 901165 iso...
Hackers Using New Evasive Technique to Deliver AsyncRAT Malware
A new, sophisticated phishing attack has been observed delivering the AsyncRAT trojan as part of a malware campaign that's believed to have commenced in September 2021. "Through a simple email phishing tactic with an HTML attachment, threat attackers are delivering AsyncRAT a remote access trojan...
Denial Of Service (DoS)
FuseISO is vulnerable to denial of service. An attacker is able to cause a denial of service application crash or possibly execute arbitrary code via a long pathname in an ISO file...
Integer Overflow
FuseISO is vulnerable to integer overflow. The vulnerability might allow remote attackers to cause a denial of service via a large ZF block size in an ISO file, leading to a heap-based buffer overflow...
Malspam campaign caught using GuLoader after service relaunch
They say any publicity is good publicity. But perhaps this isnt true for CloudEye, an Italian firm that claims to provide "the next generation of Windows executables protection". First described by Proofpoint security researchers in March 2020, GuLoader is a downloader used by threat actors to...
GLSA-202007-20 : fuseiso: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202007-20 fuseiso: Multiple vulnerabilities Multiple vulnerabilities have been discovered in fuseiso. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to open a special...
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1472)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP2 : libarchive (EulerOS-SA-2019-1849)
According to the versions of the libarchive package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - libarchive 3.3.2 allows remote attackers to cause a denial of service xmldata heap-based buffer over-read and application crash via a crafted...
CVE-2019-13228
deepin-clone before 1.1.3 uses a fixed path /tmp/repo.iso in the BootDoctor::fix function to download an ISO file, and follows symlinks there. An unprivileged user can prepare a symlink attack there to create or overwrite files in arbitrary file system locations. The content is not attacker...
CVE-2019-13228
deepin-clone before 1.1.3 uses a fixed path /tmp/repo.iso in the BootDoctor::fix function to download an ISO file, and follows symlinks there. An unprivileged user can prepare a symlink attack there to create or overwrite files in arbitrary file system locations. The content is not attacker...
Denial Of Service (DoS)
The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. It was found that the Linux kernel's implementation of vectored pipe read and write functionality did not take into account the I/O vectors that were already processed when retrying after a failed atomic acce...
Denial Of Service (DoS)
libcdio is vulnerable to denial of service. A heap-based buffer over-read in printiso9660recurse function in iso-info.c allows a remote attacker to crash the process using a malicious iso file...
Heap-based Buffer Overflow
libarchive.so is vulnerable to heap-based buffer overflow. The lack of size check in the parsefileinfo function of archivereadsupportformatiso9660.c allows the attack when a malicious iso9660 ISO file gets extracted...
EasyBoot v6.6.0.800 - (Function Key) Buffer Overflow
Document Title: =============== EasyBoot v6.6.0.800 - Function Key Buffer Overflow References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2155 Release Date: ============= 2018-10-15 Vulnerability Laboratory ID VL-ID: ==================================== 2155...
Denial Of Service (DoS)
libarchive.so is vulnerable to denial of service DoS attacks. A malicious user can pass an iso file to the application to a cause an infinite loop that can crash the application...
MGASA-2018-0225 Updated libcdio packages fix security vulnerabilities
A heap corruption bug was found in the way libcdio handled processing of ISO files. An attacker could potentially use this flaw to crash applications using libcdio by tricking them into processing crafted ISO files, thus resulting in local DoS CVE-2017-18198. A NULL pointer dereference flaw was...
CVE-2017-2840: Buffer Copy without Checking Size of Input
A buffer overflow vulnerability exists in the ISO parsing functionality of EZB Systems UltraISO 9.6.6.3300. A specially crafted .ISO file can cause a vulnerability resulting in potential code execution. An attacker can provide a specific .ISO file to trigger this vulnerability...
MGASA-2018-0209 Updated libcdio packages fix security vulnerabilities
A heap corruption bug was found in the way libcdio handled processing of ISO files. An attacker could potentially use this flaw to crash applications using libcdio by tricking them into processing crafted ISO files, thus resulting in local DoS CVE-2017-18198. A NULL pointer dereference flaw was...
Heap overflow
printiso9660recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service heap-based buffer over-read or possibly have unspecified other impact via a crafted iso file...