Android Data Access

The vulnerability of the AOSP Messaging component in the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to gain access to data beyond their authorized levels of permission, using a specially crafted file...

Trend Micro InterScan Messaging Security Remote Code Execution Vulnerability

Trend Micro InterScan Messaging Security is a hybrid SaaS email security solution from Trend Micro. A remote code execution vulnerability exists in Trend Micro InterScan Messaging Security. An attacker could exploit this vulnerability to execute arbitrary code within the context of an application...

Android Memory Corruption

The vulnerability of the AOSP Android operating system’s messaging communication mechanism arises from operations that occur outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause memory corruption during the processing of media files and data using a...

Google Android AOSP Messaging Memory Corruption Vulnerability

Google Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. Google Android suffers from a memory corruption vulnerability. An attacker can exploit this vulnerability to execute arbitrary code in the context of an affected applicatio...

WhatsApp and Telegram Vulnerabilities Opened Users to Account Takeover

Encrypted messaging services WhatsApp and Telegram patched vulnerabilities in the last week that could have let an attacker take over a user’s account, access personal and group conversations, along with photos, videos and other files. A trio of researchers with Check Point Software Technologies,...

How One Photo Could Have Hacked Your WhatsApp and Telegram Accounts

Next time when someone sends you a photo of a cute cat or a hot chick on WhatsApp or Telegram then be careful before you click on the image to view — it might hack your account within seconds. A new security vulnerability has recently been patched by two popular end-to-end encrypted messaging...

Design/Logic Flaw

An issue was discovered in Trend Micro InterScan Messaging Security Virtual Appliance 9.1-1600. An authenticated user can execute a terminal command in the context of the web server user which is root. Besides, the default installation of IMSVA comes with default administrator credentials. The...

CVE-2017-6398

An issue was discovered in Trend Micro InterScan Messaging Security Virtual Appliance 9.1-1600. An authenticated user can execute a terminal command in the context of the web server user which is root. Besides, the default installation of IMSVA comes with default administrator credentials. The...

Internet Explorer help

None None...

CVE-2017-6398: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in Trend Micro InterScan Messaging Security Virtual Appliance 9.1-1600. An authenticated user can execute a terminal command in the context of the web server user which is root. Besides, the default installation of IMSVA comes with default administrator credentials. The...

PT-2017-17039

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Messaging Security Virtual Appliance version 9.1-1600 Description The issue allows an authenticated user to execute a terminal command in the context of the web server user, which is root. The default installation comes...

[SECURITY] [DSA 3806-1] pidgin security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3806-1 [email protected] https://www.debian.org/security/ Luciano Bello March 10, 2017 https://www.debian.org/security/faq -...

Local Buffer Overflow Vulnerability Exists in AuxCom

HelpEIM WinEIM is an enterprise instant messaging software. A local buffer overflow vulnerability exists in the folder handling in the WinEIM software client, which can lead to arbitrary code execution if an attacker disguises a malformed folder and tempts the user to parse it e.g., tricking the...

Debian Security Advisory DSA 3806-1 (pidgin - security update)

It was discovered a vulnerability in Pidgin, a multi-protocol instant messaging client. A server controlled by an attacker can send an invalid XML that can trigger an out-of-bound memory access. This might lead to a crash or, in some extreme cases, to remote code execution in the client-side...

Debian DSA-3806-1 : pidgin - security update

It was discovered a vulnerability in Pidgin, a multi-protocol instant messaging client. A server controlled by an attacker can send an invalid XML that can trigger an out-of-bound memory access. This might lead to a crash or, in some extreme cases, to remote code execution in the client-side...

Confide Updates App After Critical Security Issues Are Raised

The makers of the popular messaging app Confide said Wednesday that it has patched multiple security vulnerabilities that could have allowed hackers to intercept messages sent using its secure end-to-end messaging platform. The flaws were identified in two separate reports, both released Wednesda...

CVE-2017-0476

A remote code execution vulnerability in AOSP Messaging could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as High due to the possibility of remote code execution within the context of an unprivileged...

CVE-2017-0494

An information disclosure vulnerability in AOSP Messaging could enable a remote attacker using a special crafted file to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions:...

CVE-2017-0494

An information disclosure vulnerability in AOSP Messaging could enable a remote attacker using a special crafted file to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions:...

CVE-2017-0476

A remote code execution vulnerability in AOSP Messaging could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as High due to the possibility of remote code execution within the context of an unprivileged...