MS16-126: Description of the security update for Microsoft Internet Messaging API: October 11, 2016

None None...

MS16-126: Security update for Microsoft Internet Messaging API: October 11, 2016

Resolves a vulnerability in Windows that could allow information disclosure when the Microsoft Internet Messaging API improperly handles objects in memory.SummaryThis security update resolves a vulnerability in Microsoft Windows. An information disclosure vulnerability exists when the Microsoft...

Subpoena for Signal Messaging Data Renders Little

Open Whisper Systems, the non-profit group behind the encrypted messaging app Signal, was served with a subpoena for user data earlier this year but since the company keeps such little information on its users, it was unable to produce most of what it was asked for. The American Civil Liberties...

Symantec Messaging Gateway Directory Traversal Vulnerability (SYM16-016) - Active Check

Symantec Messaging Gateway is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Symantec Messaging Gateway Directory Traversal Vulnerability

Symantec Messaging Gateway is a spam filter that combines anti-spam, anti-virus, advanced content filtering and data leakage protection technologies from Symantec. A directory traversal vulnerability exists in Symantec Messaging Gateway version 10.6.2. An attacker can leverage the directory...

Symantec Messaging Gateway 10.6.1 - Directory Traversal

Symantec Messaging Gateway 10.6.1 - Directory Traversal Title : Symantec Messaging Gateway = 10.6.1 Directory Traversal Date : 28/09/2016 Author : R-73eN Tested on : Symantec Messaging Gateway 10.6.1 Latest Software : https://www.symantec.com/products/threat-protection/messaging-gateway Vendor :...

Symantec Messaging Gateway 10.6.1 - Directory Traversal

Exploit for java platform in category web applications Title : Symantec Messaging Gateway = 10.6.1 Directory Traversal Date : 28/09/2016 Author : R-73eN Tested on : Symantec Messaging Gateway 10.6.1 Latest Software : https://www.symantec.com/products/threat-protection/messaging-gateway Vendor :...

Symantec Messaging Gateway 10.6.1 Directory Traversal

Title : Symantec Messaging Gateway = 10.6.1 Directory Traversal Date : 28/09/2016 Author : R-73eN Tested on : Symantec Messaging Gateway 10.6.1 Latest Software : https://www.symantec.com/products/threat-protection/messaging-gateway Vendor : Symantec CVE : CVE-2016-5312 Vendor Advisory and Fix:...

Symantec Messaging Gateway 10.6.1 - Directory Traversal

Title : Symantec Messaging Gateway = 10.6.1 Directory Traversal Date : 28/09/2016 Author : R-73eN Tested on : Symantec Messaging Gateway 10.6.1 Latest Software : https://www.symantec.com/products/threat-protection/messaging-gateway Vendor : Symantec CVE : CVE-2016-5312 Vendor Advisory and Fix:...

Symantec Messaging Gateway Security Update

SUMMARY Symantec has addressed a directory traversal issue in Symantec Messaging Gateway caused by insufficient sanitization of user-supplied input. This issue could allow unauthorized access to files or directories. AFFECTED PRODUCTS Symantec Messaging Gateway SMG --- CVE | Affected Versions |...

Symantec Messaging Gateway 10.x < 10.6.2 Multiple Vulnerabilities (SYM16-015) (SYM16-016)

According to its self-reported version number, the Symantec Messaging Gateway SMG running on the remote host is 10.x prior to 10.6.2. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists in the decomposer engine due to an out-of-bounds read error tha...

Symantec Messaging Gateway Decomposer Engine Security Update (SYM16-015)

Symantec has released an update to address two issues in the RAR file parser component of the antivirus decomposer engine used by multiple Symantec products. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Symantec Decomposer Engine Security Update

SUMMARY Symantec has released an update to address two issues in the RAR file parser component of the antivirus decomposer engine used by multiple Symantec products. Parsing of maliciously formatted RAR container files may cause an application-level denial of service condition. AFFECTED PRODUCTS...

Bugs in Signal Messaging App Corrupt Attachments, Crash App

Makers of the mobile encrypted chat app Signal say they have fixed vulnerabilities in the Android version of the messaging app that allowed attackers to corrupt encrypted attachments and remotely crash the application. The vulnerabilities were discovered by Jean-Philippe Aumasson and Markus Vervi...

Using 'Signal' for Encrypted Chats? You Shouldn't Skip Its Next Update

Two Researchers have discovered a couple of vulnerabilities in Signal, the popular end-to-end encrypted messaging app recommended by whistleblower Edward Snowden. One of those vulnerabilities could allow potential attackers to add random data to the attachments of encrypted messages sent by Andro...

Google Android Local Elevation of Privilege Vulnerability (CNVD-2016-07436)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A local elevation of privilege vulnerability exists in SMS in Android. A local attacker can exploit this vulnerability to gain elevated privileges...

Multiple Vulnerabilities in Trend Micro InterScan Messaging Security

Trend Micro InterScan Messaging Security is a hybrid SaaS email security solution. Trend Micro InterScan Messaging Security has multiple vulnerabilities. The vulnerabilities can be exploited by an attacker to execute arbitrary script code on a trusted user's browser in the context of an affected...

Trend Micro InterScan Messaging Security Cross-Site Scripting Vulnerability

Trend Micro InterScan Messaging Security is a hybrid SaaS email security solution. A cross-site scripting vulnerability exists in Trend Micro InterScan Messaging Security. An attacker could exploit the vulnerability to execute arbitrary script code on a trusted user's browser in the context of an...

Trend Micro InterScan Messaging Security Open Redirect Vulnerability

Trend Micro InterScan Messaging Security is a hybrid SaaS email security solution. Trend Micro InterScan Messaging Security suffers from an open redirection vulnerability. The vulnerability allows an attacker to be redirected to an attacker-controlled website...

Tencent QQ Android APP suffers from XSS cross-site scripting vulnerability

Tencent QQ is an Internet-based instant messaging IM software. An XSS cross-site scripting vulnerability exists in the "Tencent News" input box in the Android version of the product, which can be exploited by an attacker to perform a cross-site scripting attack to obtain sensitive information suc...