Adobe Acrobat/Reader Memory Misreference Vulnerability (CNVD-2015-06699)

Adobe Reader/Acrobat is a popular application for working with PDF files. A memory misreference vulnerability exists in Adobe Reader/Acrobat. This allows an attacker to construct a malicious PDF file and trick the user into parsing it, which could crash the application or execute arbitrary code...

Adobe Acrobat/Reader Bypass Information Disclosure Vulnerability (CNVD-2015-06736)

Adobe Reader/Acrobat is a popular application for working with PDF files. Adobe Reader/Acrobat suffers from a bypass information disclosure vulnerability that allows an attacker to construct a malicious PDF file and trick the user into parsing it, which could lead to sensitive information...

Adobe Acrobat/Reader Buffer Overflow Information Disclosure Vulnerability

Adobe Reader/Acrobat is a popular application for working with PDF files. An unspecified buffer overflow vulnerability exists in Adobe Reader/Acrobat. This allows an attacker to construct a malicious PDF file and trick the user into parsing it, which could crash the application or execute arbitra...

[SECURITY] Fedora 21 Update: webkitgtk-2.4.9-2.fc21

WebKitGTK+ is the port of the portable web rendering engine WebKit to the GTK+ platform...

[SECURITY] Fedora 22 Update: webkitgtk3-2.4.9-2.fc22

WebKitGTK+ is the port of the portable web rendering engine WebKit to the GTK+ platform. This package contains WebKitGTK+ for GTK+ 3...

[SECURITY] Fedora 23 Update: webkitgtk-2.4.9-3.fc23

WebKitGTK+ is the port of the portable web rendering engine WebKit to the GTK+ platform...

chromium-browser: information leak in PDF viewer

The PDF viewer in Google Chrome before 46.0.2490.86 does not properly restrict scripting messages and API exposure, which allows remote attackers to bypass the Same Origin Policy via an unintended embedder or unintended plugin loading, related to pdf.js and outofprocessinstance.cc...

Gentoo Security Advisory GLSA 201405-24

Gentoo Linux Local Security Checks GLSA 201405-24 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

UBUNTU-CVE-2015-6818

The decodeihdrchunk function in libavcodec/pngdec.c in FFmpeg before 2.7.2 does not enforce uniqueness of the IHDR aka image header chunk in a PNG image, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via a crafted...

Apple to build Fuel Cell Battery that Could Power iPhones and Macbooks for Weeks

Nothing could be scarier than that little battery icon in our smart hits the red. All our focus shifts towards searching the nearest charging outlet – and it happens all too often. Yes, the short battery life is the worst thing about our smartphones. It forces us to always carry chargers and...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure.

The vulnerability of the PDFium component in the Google Chrome browser is caused by an overflow in the buffer of dynamic memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure using a specially crafted PDF document...

Vulnerability Assessment Penetration Testing: VAPT

The set of scripts included in this package will create a Kali/SamuraiWTF type environment for the performing of Vulnerability Assessments and Penetration Testing. The goal of this project was to allow a portable set of tools to be installed onto an Ubuntu or Raspbian system, allowing the tester ...

Bettercap - New MITM Framework

Document Title: =============== Bettercap - New MITM Framework References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1565 Download: http://www.vulnerability-lab.com/resources/documents/1565.pdf Release Date: ============= 2015-08-09 Vulnerability Laboratory ID VL-ID:...

Bettercap - New MITM Framework

Document Title: =============== Bettercap - New MITM Framework References: =========== https://www.vulnerability-lab.com/getcontent.php?id=1565 Download: https://www.vulnerability-lab.com/resources/documents/1565.pdf Release Date: ============= 2015-08-09 Vulnerability Laboratory ID VL-ID:...

Mozilla: Same origin violation and local file stealing via PDF reader (MFSA 2015-78)

A flaw was discovered in Mozilla Firefox that could be used to violate the same-origin policy and inject web script into a non-privileged part of the built-in PDF file viewer PDF.js. An attacker could create a malicious web page that, when viewed by a victim, could steal arbitrary files including...

The vulnerability of the Firefox browser, which allows a hacker to execute arbitrary code

The vulnerability of the PDF.js module for the Firefox browser is related to errors in the code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, by circumventing current access restrictions...

Scientific Linux Security Update : qemu-kvm on SL7.x x86_64 (20150727)

A heap buffer overflow flaw was found in the way QEMU's IDE subsystem handled I/O buffer access while processing certain ATAPI commands. A privileged guest user in a guest with the CDROM drive enabled could potentially use this flaw to execute arbitrary code on the host with the privileges of the...

chromium-browser: URL spoofing using pdf files in unspecified

content/browser/webcontents/webcontentsimpl.cc in Google Chrome before 44.0.2403.89 does not ensure that a PDF document's modal dialog is closed upon navigation to an interstitial page, which allows remote attackers to spoof URLs via a crafted document, as demonstrated by the alertdialog.pdf...

chromium-browser: Heap-buffer-overflow in pdfium.

Heap-based buffer overflow in j2k.c in OpenJPEG before r3002, as used in PDFium in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service or possibly have unspecified other impact via invalid JPEG2000 data in a PDF document...

The vulnerability of the Adobe Reader PDF viewer program allows a hacker to circumvent access restrictions.

The vulnerability of the Adobe Reader PDF viewer program is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to bypass restrictions on access to the JavaScript API...