99 matches found
DLA-3693-1 osslsigncode - security update
Bulletin has no description...
Debian dla-3693 : osslsigncode - security update
The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3693 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3693-1 [email protected] https://www.debian.org/lts/security/...
Buffer Overflow
osslsigncode is vulnerable to Buffer Overflows. This vulnerability occurs due to a flaw in the way that mtrojnar osslsigncode handles the processing of large files. An attacker can exploit this vulnerability to cause a denial-of-service DoS attack or potentially execute arbitrary code on the syst...
SUSE CVE-2023-36377
Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...
DEBIAN-CVE-2023-36377
Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...
CVE-2023-36377
Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...
UBUNTU-CVE-2023-36377
Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...
Buffer overflow
Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...
CVE-2023-36377
Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...
CVE-2023-36377
CVE-2023-36377 affects osslsigncode, a signing tool. A Buffer Overflow in osslsigncode v2.3 and earlier can allow local arbitrary code execution when signing crafted files (.exe/.sys/.dll). Multiple Debian LTS advisories document affected package osslsigncode and fixes via upgraded versions: Debi...
PT-2023-25562
Name of the Vulnerable Software and Affected Versions mtrojnar osslsigncode versions 2.3 and earlier Description The issue allows a local attacker to execute arbitrary code via crafted .exe, .sys, and .dll files. This is due to a Buffer Overflow vulnerability. Recommendations For mtrojnar...
CVE-2023-36377
Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...
CVE-2023-36377: Buffer Copy without Checking Size of Input
Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...
CVE-2023-36377
Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...
CVE-2023-36377
Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...
osslsigncode 安全漏洞
osslsigncode is a small tool by Michał Trojnara, a personal developer. It implements part of the functionality of the Microsoft tool signtool.exe. A security vulnerability exists in osslsigncode v.2.3 and earlier versions, which stems from the presence of a buffer overflow vulnerability that coul...
CVE-2023-36377
Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...
Kaiten - A Undetectable Payload Generation
A Undetectable Payload Generation. This tool is for educational purpose only, usage of Kaiten for attacking targets without prior mutual consent is illegal. Developers assume no liability and are not responsible for any misuse or damage cause by this program. Official Kaiten Repository. What is i...