Mozilla Firefox Shared Memory Usage Denial of Service Vulnerability

Mozilla Firefox is an open source WEB browser. A security vulnerability in Mozilla Firefox's handling of special JavaScript allows remote attackers to construct malicious files that trick users into parsing, which can crash applications...

Apple OS X QuickTime memory corruption vulnerability (CNVD-2015-05375)

Apple OS X is a BSD-based operating system distributed by Apple. A memory corruption vulnerability exists in Apple OS X QuickTime Handling Special Files, which allows attackers to construct malicious files that can be tricked into parsing by the user, crashing the application or executing arbitra...

Apple OS X QuickTime memory corruption vulnerability (CNVD-2015-05377)

Apple OS X is a BSD-based operating system distributed by Apple. A memory corruption vulnerability exists in Apple OS X QuickTime Handling Special Files, which allows attackers to construct malicious files that can be tricked into parsing by the user, crashing the application or executing arbitra...

Threat Outbreak Alert RuleID17380: Email Messages Distributing Malicious Software on July 13, 2016

Medium Alert ID: 40526 First Published: 2015 August 17 14:20 GMT Last Updated: 2016 July 15 13:56 GMT Version: 12 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17380 and...

MGASA-2015-0283 Updated wesnoth packages fix security vulnerability

Toom Lõhmus discovered that the Lua API and preprocessor in the Battle for Wesnoth game up to version 1.12.2 included could lead to client-side authentication information disclosure using maliciously crafted files with the .pdb extension CVE-2015-5069, CVE-2015-5070. This issue has been fixed in...

Microsoft Word remote code execution CVE-2 0 1 5-0 0 9 7 simple the use of the introduction-vulnerability warning-the black bar safety net

0x00 introduction Microsoft Office Word 2 0 0 3, 2 0 0 7 Remote Code Execution Vulnerability 0x01 known successful environment Word 2 0 0 3, 2 0 0 7 SP3 on Windows XP, 7, 8, 8.1 all up to this date. 0x02poc file description Create-Recordset. hta: used to generate the recordset. txt and dldrun. vb...

Apple QuickTime Memory Corruption Vulnerability (CNVD-2015-04264)

Apple QuickTime is a popular multimedia player. A vulnerability in Apple QuickTime's handling of special movie files allows remote attackers to construct malicious files that can be tricked into being parsed by an application, which can execute arbitrary code in the application context...

Apple MAC OS X Spotlight Command Injection Vulnerability

Apple Mac OS X is a commercial operating system. A security vulnerability in Apple Mac OS X Spotlight's handling of image filenames allows attackers to exploit the vulnerability to trick users into searching for malicious files, injecting commands, and executing them...

Apple QuickTime Memory Corruption Vulnerability (CNVD-2015-04260)

Apple QuickTime is a popular multimedia player. A vulnerability in Apple QuickTime's handling of special movie files allows remote attackers to construct malicious files that can be tricked into being parsed by an application, which can execute arbitrary code in the application context...

Apple QuickTime Memory Corruption Vulnerability (CNVD-2015-04265)

Apple QuickTime is a popular multimedia player. A vulnerability in Apple QuickTime's handling of special movie files allows remote attackers to construct malicious files that can be tricked into being parsed by an application, which can execute arbitrary code in the application context...

Squashfs and sasquatch 'read_fragment_table_4' stack buffer overflow vulnerability

Squashfs is an open source read-only compression file system for the Linux kernel that compresses files, inodes, and directory structures within the file system. sasquatch is an improved version of Squashfs. Squashfs and sasquatch suffer from a stack buffer overflow vulnerability that allows remo...

Microsoft Office Uninitialized Memory Error Vulnerability

Microsoft Office is a suite of office processing applications released by Microsoft. Microsoft Office handles specially crafted office files with an uninitialized memory error vulnerability that allows attackers to exploit the vulnerability to construct malicious files that can be parsed by the...

Threat Outbreak Alert RuleID15398: Email Messages Distributing Malicious Software on September 29, 2015

Medium Alert ID: 39047 First Published: 2015 May 28 13:35 GMT Last Updated: 2015 September 30 12:52 GMT Version: 16 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15398 a...

Suspicious Link Redirection Mail Phishing Attempt

Several mail phishing campaigns use embedded redirection links to lure the victim user to download malicious files...

UniPDF SEH Override Buffer Overflow Vulnerability

UniPDF is a PDF converter product that can convert PDF files directly to word, images, web pages and txt text. A buffer overflow vulnerability exists in UniPDF, which allows remote attackers to exploit the vulnerability to build malicious files and trick users into parsing them, which can crash t...

Adobe Reader/Acrobat Javascript API Execution Limit Bypass Vulnerability (CNVD-2015-03079)

Adobe Reader/Acrobat are popular applications for processing PDF files. A vulnerability exists in Adobe Reader/Acrobat's handling of special PDF files, which allows remote attackers to exploit the vulnerability to construct malicious files and trick users into parsing them, which can bypass...

Unspecified Memory Leakage Vulnerability in Adobe Reader/Acrobat

Adobe Reader/Acrobat are popular applications for processing PDF files. A memory disclosure vulnerability exists in Adobe Reader/Acrobat's handling of special PDF files, which allows remote attackers to exploit the vulnerability to build malicious files that can be parsed by the user and can be...

Unspecified Denial of Service Vulnerability in Adobe Reader/Acrobat

Adobe Reader/Acrobat are popular applications for processing PDF files. A null pointer reference vulnerability exists in Adobe Reader/Acrobat's handling of particular PDF files, which allows remote attackers to exploit the vulnerability to construct malicious files and trick users into parsing...

Unspecified Arbitrary Code Execution Vulnerability in Microsoft Office (CNVD-2015-03063)

Microsoft Office is a suite of word processing programs developed by Microsoft. Microsoft Office suffers from an unspecified memory corruption error that allows remote attackers to exploit the vulnerability to construct malicious files that can be tricked into being parsed by users to execute...

Unspecified Memory Corruption Arbitrary Code Execution Vulnerability in Adobe Reader/Acrobat (CNVD-2015-03136)

Adobe Reader/Acrobat are popular applications for processing PDF files. A memory corruption vulnerability exists in Adobe Reader/Acrobat's handling of particular PDF files, which allows remote attackers to exploit the vulnerability to construct malicious files and trick users into parsing them,...