4703 matches found
USN-3785-1 imagemagick vulnerabilities
Due to a large number of issues discovered in GhostScript that prevent it from being used by ImageMagick safely, this update includes a default policy change that disables support for the Postscript and PDF formats in ImageMagick. This policy can be overridden if necessary by using an alternate...
CVE-2018-3967
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the...
CVE-2018-3964
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the...
The vulnerability of Honeywell’s industrial portable computer operating system allows a hacker to gain increased privileges.
The vulnerability of Honeywell’s industrial portable computer operating system is related to privilege management errors. Exploiting this vulnerability could allow a malicious actor to enhance their privileges through a specially created application...
Epee Levin Packet Deserialization Code Execution Vulnerability
Summary An exploitable code execution vulnerability exists in the Levin deserialization functionality of the epee library. A specially crafted network packet can cause a logic flaw, resulting in code execution. An attacker can send a packet to trigger this vulnerability. Tested Versions Monero...
UBUNTU-CVE-2018-17360
An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.31. a heap-based buffer over-read in bfdgetl32 in libbfd.c allows an attacker to cause a denial of service through a crafted PE file. This vulnerability can be triggered by the executabl...
DEBIAN-CVE-2018-17360
An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.31. a heap-based buffer over-read in bfdgetl32 in libbfd.c allows an attacker to cause a denial of service through a crafted PE file. This vulnerability can be triggered by the executabl...
Solaris libnspr NSPR_LOG_FILE Privilege Escalation Exploit
This Metasploit module exploits an arbitrary file write vulnerability in the Netscape Portable Runtime library libnspr on unpatched Solaris systems prior to Solaris 10u3 which allows users to gain root privileges. libnspr versions prior to 4.6.3 allow users to specify a log file with the...
The vulnerability of the PDF Reader component of the Microsoft Edge browser, which allows a hacker to execute arbitrary code.
The vulnerability of the PDF Reader component of the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using specially crafted PDF-format content...
Solaris - libnspr NSPR_LOG_FILE Privilege Escalation (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Solaris libnspr NSPRLOGFILE Privilege Escalation', 'Description' = %q This module exploits an arbitrary file write vulnerability in the Netscape...
ALPINE-CVE-2018-17100
An issue was discovered in LibTIFF 4.0.9. There is a int32 overflow in multiplyms in tools/ppm2tiff.c, which can cause a denial of service crash or possibly have unspecified other impact via a crafted image file...
CVE-2018-8430
A remote code execution vulnerability exists in Microsoft Word if a user opens a specially crafted PDF file, aka "Word PDF Remote Code Execution Vulnerability." This affects Microsoft Word, Microsoft Office...
Tape job fails with “The specified network resource or device is no longer available” or “The system cannot find the file specified. Problem with CreateFile in '\\.\Tape0'”
Challenge Tape job fails with the following error messages: The system cannot find the file specified. Problem with CreateFile in '\.\Tape0'. The system cannot find the file specified. The system cannot find the path specified. The specified network name is no longer available. Copy Cause The...
chromium-browser: Out of bounds read in PDFium
Missing bounds check in PDFium in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file...
Assessing the security of a portable router: a look inside its hardware
Network administrators should perform security assessments of hardware that they will provide their users, or particularly paranoid users might want to poke at their devices just to be extra sure. In this blog post, we will demonstrate the techniques used to assess security on a generic portable...
Google Chrome PDFium Buffer Overflow Vulnerability
Google Chrome is the United States Google Google company developed a Web browser. PDFium is one of the open source PDF rendering engine. A buffer overflow vulnerability exists in PDFium in versions prior to Google Chrome 69.0.3497.81, which stems from the program's failure to perform boundary...
DEBIAN-CVE-2018-16648
In Artifex MuPDF 1.13.0, the fzappendbyte function in fitz/buffer.c allows remote attackers to cause a denial of service segmentation fault via a crafted pdf file. This is caused by a pdf/pdf-device.c pdfdevalpha array-index underflow...
UBUNTU-CVE-2018-16648
In Artifex MuPDF 1.13.0, the fzappendbyte function in fitz/buffer.c allows remote attackers to cause a denial of service segmentation fault via a crafted pdf file. This is caused by a pdf/pdf-device.c pdfdevalpha array-index underflow...
Google Chrome Omnibox Buffer Overflow Vulnerability
Google Chrome is a web browser developed by Google, Inc. and Omnibox is a real-time search engine. A heap buffer overflow vulnerability exists in Omnibox in versions prior to Google Chrome 63.0.3239.84. A remote attacker can exploit this vulnerability to cause heap corruption with the help of...
PT-2018-13669
Name of the Vulnerable Software and Affected Versions Artifex MuPDF version 1.13.0 Description The issue allows remote attackers to cause a denial of service, resulting in a segmentation fault, via a crafted pdf file. This occurs due to a problem in the pdf get xref entry function. Recommendation...