Microsoft Malware Protection Engine Remote Code Execution Vulnerability

The Microsoft Malware Protection Engine mpengine.dll provides scanning, monitoring and removal capabilities for antivirus and anti-spyware clients. A remote code execution vulnerability exists in Microsoft Malware Protection Engine. The remote code execution vulnerability can be triggered when...

Remote code execution

Microsoft .NET Framework 2.0, 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allows an attacker with access to the local system to execute malicious code, aka ".NET Remote Code Execution Vulnerability."...

Debian DSA-3731-1 : chromium-browser - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2016-5181 A cross-site scripting issue was discovered. - CVE-2016-5182 Giwan Go discovered a heap overflow issue. - CVE-2016-5183 A use-after-free issue was discovered in the pdfium library. - CVE-2016-5184 Another...

Debian Security Advisory DSA 3731-1 (chromium-browser - security update)

Several vulnerabilities have been discovered in the chromium web browser. CVE-2016-5181 A cross-site scripting issue was discovered. CVE-2016-5182 Giwan Go discovered a heap overflow issue. CVE-2016-5183 A use-after-free issue was discovered in the pdfium library. CVE-2016-5184 Another...

MGASA-2016-0409 Updated thunderbird packages fix security vulnerabilities

A heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization, resulting in a potentially exploitable crash CVE-2016-5296. The Mozilla Updater can be made to choose an arbitrary target working directory for output files resulting from the update process. This...

Updated thunderbird packages fix security vulnerabilities

A heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization, resulting in a potentially exploitable crash CVE-2016-5296. The Mozilla Updater can be made to choose an arbitrary target working directory for output files resulting from the update process. This...

Arbitrary file manipulation by local user through Mozilla updater and callback application path parameter — Mozilla

Security researcher Holger Fuhrmannek reported that when the Updater is opened directly using the callback application path parameter, a copy of a user specified file is made as a callback file. If the target of this file is made with a locked hardlink, an arbitrary local file can be replaced on...

Arbitrary file manipulation by local user through Mozilla updater — Mozilla

Security researcher Holger Fuhrmannek reported that when the Mozilla updater is run, the updater can be manipulated to load the updated files from a working directory under user control in concert with junctions. When the updates are run by the Mozilla Maintenance Service on Windows, these...

Cisco Unified Computing System B-Series Servers Privilege Escalation Vulnerability

Cisco Unified Computing System B-Series Blade Servers could allow an authenticated, local attacker to gain shell-level access to the affected device. The vulnerability is due to improper input validation in the ping6 and the traceroute6 commands. An attacker could exploit this vulnerability by...

Enalean Tuleap 7.2 - XML External Entity File Disclosure

Enalean Tuleap 7.2 - XML External Entity File Disclosure Vulnerability title: Tuleap = 7.2 External XML Entity Injection in Enalean Tuleap CVE: CVE-2014-7177 Vendor: Enalean Product: Tuleap Affected version: 7.2 and earlier Fixed version: 7.4.99.5 Reported by: Jerzy Kramarz Details: A multiple XM...

Privilege escalation through Mozilla Updater — Mozilla

Security researcher Ash reported an issue with the Mozilla Updater. The Mozilla Updater can be made to load a malicious local DLL file in a privileged context through either the Mozilla Maintenance Service or independently on systems that do not use the service. This occurs when the DLL file is...

Altiris Deployment Solution Agent < 6.9.355 Local Privilege Escalation (SYM08-019)

The version of the Altiris Deployment Solution Agent installed on the remote host is affected by a local privilege escalation issue. Successful exploitation of this issue could allow an authorized non-privileged user to gain local system access on the client system. C Tenable Network Security, In...

[SA14385] Chat Anywhere User Credentials Disclosure

TITLE: Chat Anywhere User Credentials Disclosure SECUNIA ADVISORY ID: SA14385 VERIFY ADVISORY: http://secunia.com/advisories/14385/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: Local system SOFTWARE: Chat Anywhere 2.x http://secunia.com/product/3163/ DESCRIPTION: Kozan...

[SA13970] FireHOL Insecure Temporary File Creation Vulnerabilities

TITLE: FireHOL Insecure Temporary File Creation Vulnerabilities SECUNIA ADVISORY ID: SA13970 VERIFY ADVISORY: http://secunia.com/advisories/13970/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: FireHOL 1.x http://secunia.com/product/4556/ DESCRIPTION: Sam Coute...

[SA13693] GRASS Multiple Scripts Insecure Temporary File Creation

TITLE: GRASS Multiple Scripts Insecure Temporary File Creation SECUNIA ADVISORY ID: SA13693 VERIFY ADVISORY: http://secunia.com/advisories/13693/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: GRASS 5.7.x http://secunia.com/product/4471/ DESCRIPTION: Javier...

[SA12973] OpenSSL &quot;der_chop&quot; Script Insecure Temporary File Creation

TITLE: OpenSSL "derchop" Script Insecure Temporary File Creation SECUNIA ADVISORY ID: SA12973 VERIFY ADVISORY: http://secunia.com/advisories/12973/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: OpenSSL 0.9.x http://secunia.com/product/253/ DESCRIPTION: A...

Mandrake Linux Security Advisory : pine (MDKSA-2001:047-1)

Versions of the Pine email client prior to 4.33 have various temporary file creation problems, as does the pico editor. These issues allow any user with local system access to cause any files owned by any other user, including root, to potentially be overwritten if the conditions were right. Upda...

NIPrint multiple bugs

Remote buffer overflow, help access with local system...

benchmark tool for HTTP pages.

ezhttpbench.php eZ httpbench version 1.1http://developer.ez.no - benchmark tool for HTTP pages. A security vulnerability in the product allows remote attackers to download any file on the local system that the eZ httpbench has read access to. Vulnerable systems: eZ httpbench version 1.1 eZ...

Microsoft Index Server 2.0 / Indexing Service (Windows 2000) - ISAPI Extension Buffer Overflow (4)

source: https://www.securityfocus.com/bid/2880/info Windows Index Server ships with Windows NT 4.0 Option Pack; Windows Indexing Service ships with Windows 2000. An unchecked buffer resides in the 'idq.dll' ISAPI extension associated with each service. A maliciously crafted request could allow...