UBUNTU-CVE-2021-39257

A crafted NTFS image with an unallocated bitmap can lead to a endless recursive function call chain starting from ntfsattrpwrite, causing stack consumption in NTFS-3G 2021.8.22...

AZL-6748 CVE-2021-33285 affecting package ntfs-3g for versions less than 2021.8.22-1

In NTFS-3G versions 2021.8.22, when a specially crafted NTFS attribute is supplied to the function ntfsgetattributevalue, a heap buffer overflow can occur allowing for memory disclosure or denial of service. The vulnerability is caused by an out-of-bound buffer access which can be triggered by...

CVE-2021-35268

In NTFS-3G versions 2021.8.22, when a specially crafted NTFS inode is loaded in the function ntfsinoderealopen, a heap buffer overflow can occur allowing for code execution and escalation of privileges...

CVE-2021-39261

A crafted NTFS image can cause a heap-based buffer overflow in ntfscompressedpwrite in NTFS-3G 2021.8.22...

Tuxera NTFS-3G 缓冲区错误漏洞

Tuxera NTFS-3G is Finland's Tuxera company's set of open source , cross-platform for supporting NTFS partition read and write drivers . A security vulnerability exists in NTFS-3G that originates from an application's improper validation of certain NTFS metadata, which can be exploited by an...

The vulnerability of the NTFS file system in Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the DNS service in Microsoft Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CVE-2021-27096

NTFS Elevation of Privilege Vulnerability...

ALPINE-CVE-2019-1353

An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. When running Git in the Windows Subsystem for Linux also known as "WSL" while accessing a working directory on a regular Windows drive, none of the NTFS...

Microsoft Windows NTFS Local Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 and others are a series of operating systems released by Microsoft Corporation in the U.S. Microsoft Windows Server 2019 is a set of operating systems used for servers.Windows 10 is a set of operating systems used for personal computers. A local elevation of privileg...

PT-2018-11489

Name of the Vulnerable Software and Affected Versions Linux kernel version 4.15.0 Description The issue is related to the ntfs end buffer async read function in the ntfs.ko filesystem driver, which allows attackers to trigger a stack-based out-of-bounds write. This can cause a denial of service,...

Amazon Comes Under Fire for Facial Recognition Platform

Facial-recognition technology has long been touted as a useful tool for law enforcement, but the ability of systems like Amazon’s Rekognition platform to identify large numbers of people at once in a single video or still frame has raised the hackles of privacy advocates. The American Civil...

Apple macOS Sierra ntfs denial of service vulnerability

Apple macOS Sierra is a specialized operating system developed for Mac computers. Apple macOS Sierra has a security vulnerability in ntfs that allows remote attackers to exploit vulnerabilities to build malicious applications that can crash NTFS...

Apple OS X NTFS Memory Error Arbitrary Code Execution Vulnerability

Apple OS X is a BSD-based operating system distributed by Apple. Apple OS X handles NTFS with a memory corruption vulnerability that allows local users to execute arbitrary code with system privileges...

Apple MAC OS X NTFS Memory Layout Disclosure Vulnerability

Apple Mac OS X is a commercial operating system. A security vulnerability exists in Apple Mac OS X NTFS that allows local attackers to exploit the vulnerability to run malicious applications to obtain kernel memory layout...

Remote code injection new technology-vulnerability warning-the black bar safety net

I developed a new in remote process to execute code of possibility, is the use of a non-document function in the remote process address space to write code, and use a new technology in the remote process to execute it, this technique works completely in user mode, and does not require special...