4269 matches found
chromium-browser: information leak in PDF viewer
The PDF viewer in Google Chrome before 46.0.2490.86 does not properly restrict scripting messages and API exposure, which allows remote attackers to bypass the Same Origin Policy via an unintended embedder or unintended plugin loading, related to pdf.js and outofprocessinstance.cc...
Gentoo Security Advisory GLSA 201405-24
Gentoo Linux Local Security Checks GLSA 201405-24 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
UBUNTU-CVE-2015-6818
The decodeihdrchunk function in libavcodec/pngdec.c in FFmpeg before 2.7.2 does not enforce uniqueness of the IHDR aka image header chunk in a PNG image, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via a crafted...
Apple to build Fuel Cell Battery that Could Power iPhones and Macbooks for Weeks
Nothing could be scarier than that little battery icon in our smart hits the red. All our focus shifts towards searching the nearest charging outlet – and it happens all too often. Yes, the short battery life is the worst thing about our smartphones. It forces us to always carry chargers and...
The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure.
The vulnerability of the PDFium component in the Google Chrome browser is caused by an overflow in the buffer of dynamic memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure using a specially crafted PDF document...
Vulnerability Assessment Penetration Testing: VAPT
The set of scripts included in this package will create a Kali/SamuraiWTF type environment for the performing of Vulnerability Assessments and Penetration Testing. The goal of this project was to allow a portable set of tools to be installed onto an Ubuntu or Raspbian system, allowing the tester ...
Bettercap - New MITM Framework
Document Title: =============== Bettercap - New MITM Framework References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1565 Download: http://www.vulnerability-lab.com/resources/documents/1565.pdf Release Date: ============= 2015-08-09 Vulnerability Laboratory ID VL-ID:...
Bettercap - New MITM Framework
Document Title: =============== Bettercap - New MITM Framework References: =========== https://www.vulnerability-lab.com/getcontent.php?id=1565 Download: https://www.vulnerability-lab.com/resources/documents/1565.pdf Release Date: ============= 2015-08-09 Vulnerability Laboratory ID VL-ID:...
Mozilla: Same origin violation and local file stealing via PDF reader (MFSA 2015-78)
A flaw was discovered in Mozilla Firefox that could be used to violate the same-origin policy and inject web script into a non-privileged part of the built-in PDF file viewer PDF.js. An attacker could create a malicious web page that, when viewed by a victim, could steal arbitrary files including...
PEframe - Tool to perform static analysis on Portable Executable malware
PEframe is a open source tool to perform static analysis on Portable Executable malware. Usage $ peframe malware.exe $ peframe --option malware.exe Options --json Output in json --import Imported function and dll --export Exported function and dll --dir-import Import directory --dir-export Export...
The vulnerability of the Firefox browser, which allows a hacker to execute arbitrary code
The vulnerability of the PDF.js module for the Firefox browser is related to errors in the code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, by circumventing current access restrictions...
Scientific Linux Security Update : qemu-kvm on SL7.x x86_64 (20150727)
A heap buffer overflow flaw was found in the way QEMU's IDE subsystem handled I/O buffer access while processing certain ATAPI commands. A privileged guest user in a guest with the CDROM drive enabled could potentially use this flaw to execute arbitrary code on the host with the privileges of the...
chromium-browser: Heap-buffer-overflow in pdfium.
Heap-based buffer overflow in j2k.c in OpenJPEG before r3002, as used in PDFium in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service or possibly have unspecified other impact via invalid JPEG2000 data in a PDF document...
chromium-browser: URL spoofing using pdf files in unspecified
content/browser/webcontents/webcontentsimpl.cc in Google Chrome before 44.0.2403.89 does not ensure that a PDF document's modal dialog is closed upon navigation to an interstitial page, which allows remote attackers to spoof URLs via a crafted document, as demonstrated by the alertdialog.pdf...
The vulnerability of the Adobe Reader PDF viewer program allows a hacker to circumvent access restrictions.
The vulnerability of the Adobe Reader PDF viewer program is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to bypass restrictions on access to the JavaScript API...
The vulnerability of the Adobe Reader PDF viewer program allows a hacker to circumvent access restrictions.
The vulnerability of the Adobe Reader PDF viewer program is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to bypass restrictions on access to the JavaScript API...
The vulnerability of the Adobe Reader DC PDF viewer program allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the Adobe Reader DC PDF viewer program arises due to an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure...
The vulnerability of the Adobe Reader PDF viewer program allows a hacker to execute arbitrary code.
The vulnerability of the Adobe Reader PDF viewer program arises due to an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of Adobe Acrobat’s PDF editing software allows a hacker to circumvent access restrictions.
The vulnerability of the Adobe Acrobat PDF editing program is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass restrictions on access to the JavaScript API...
The vulnerability of Adobe Acrobat’s PDF editing software allows a hacker to execute arbitrary code.
The vulnerability of Adobe Acrobat’s PDF editing software arises from an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...