CVE-2017-11270

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format EMF private data representing icons. Successf...

Wolf in sheep's clothing: how to use the Windows icon to display the vulnerability disguise a PE file-vulnerability warning-the black bar safety net

One, Foreword Windows System icon to display the function in the presence of a vulnerability, exploit this vulnerability, the attacker may be from the local host to automatically “borrow“ other commonly used icons, use these icon camouflage PE file, thereby tempting the user to click on such a...

Man-in-the-Middle (MitM)

craft-ai-icons is vulnerable to man-in-the-middle MitM attacks. It uses an insecure protocol to download resources. Not having a secure connection allows the attackers to trigger MitM and other possible attacks such as remote code execution RCE on the server...

openSUSE Security Update : feh (openSUSE-2017-531)

This update for feh on Leap 42.1 fixes this security issue : - CVE-2017-7875: In wallpaper.c in feh if a malicious client pretended to be the E17 window manager, it was possible to trigger an out-of-boundary heap write while receiving an IPC message. An integer overflow leads to a buffer overflow...

WordPress AccessPress Social Icons Plugin SQL Injection Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in the WordPress AccessPress Social Icons plugin, which can be exploited by attackers to...

WordPress plugin AccessPress Social Icons <= 1.6.6 - Multiple SQL injection

WordPress plugin AccessPress Social Icons version 1.6.6 and earlier versions suffers from Multiple SQL injection vulnerabilities. Patched version 1.6.7 already available. Solution Update plugin to the latest available version at least 1.6.7...

AccessPress Social Icons < 1.6.8 - Authenticated SQL Injections

During the security analysis, ThunderScan discovered SQL injection vulnerabilities in AccessPress Social Icons WordPress plugin. The easiest way to reproduce the vulnerability is to visit the provided URL while being logged in as administrator or another user that is authorized to access the plug...

AccessPress Social Icons < 1.6.8 - Authenticated SQL Injections

During the security analysis, ThunderScan discovered SQL injection vulnerabilities in AccessPress Social Icons WordPress plugin. The easiest way to reproduce the vulnerability is to visit the provided URL while being logged in as administrator or another user that is authorized to access the plug...

icoutils: Buffer overflow in the extract_icons function

A vulnerability was found in icoutils, in the icotool program. An attacker could create a crafted ICO or CUR file that, when read by icotool, could result in memory corruption leading to a crash or potential code execution...

Users unable to see the pinned taskbar icons with UPM profile

Users unable to open an application from the pinned taskbar icons...

DEBIAN-CVE-2017-6010

An issue was discovered in icoutils 0.31.1. A buffer overflow was observed in the "extracticons" function in the "extract.c" source file. This issue can be triggered by processing a corrupted ico file and will result in an icotool crash...

UBUNTU-CVE-2017-6010

An issue was discovered in icoutils 0.31.1. A buffer overflow was observed in the "extracticons" function in the "extract.c" source file. This issue can be triggered by processing a corrupted ico file and will result in an icotool crash...

[SECURITY] Fedora 24 Update: icoutils-0.31.1-1.fc24

The icoutils are a set of programs for extracting and converting images in Microsoft Windows icon and cursor files. These files usually have the extension .ico or .cur, but they can also be embedded in executables or libraries...

Changing delivery group icons with storefront 3.0 or above in the environment.

...

COLOR WEATHER ICONS FOR HDW - External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application COLOR WEATHER ICONS FOR HDW published at the 'play' market has multiple vulnerabilities...

Wallpapers, Icons - LINE DECO - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Wallpapers, Icons - LINE DECO published at the 'play' market has multiple vulnerabilities...

WordPress Category-Page-Icons插件-wpdev-flash-uploader.php文件-文件上传漏洞

No description provided by source...

Memory Corruption Vulnerability in PhotoLine's Handling of ICO Files

PhotoLine is a professional image editing software from Germany. The software suffers from a memory corruption vulnerability when dealing with the ICO format, which can be exploited by an attacker to construct malformed ICO files that can crash the program and cause a denial of service condition...

March 8, 2016, update for Visio 2016 (KB3114844)

None None...

Debian DSA-3507-1 : chromium-browser - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2015-8126 Joerg Bornemann discovered multiple buffer overflow issues in the libpng library. - CVE-2016-1630 Mariusz Mlynski discovered a way to bypass the Same Origin Policy in Blink/Webkit. - CVE-2016-1631 Mariusz...