iOS Phone Call Abuse

The vulnerability of the Quick Look component in the iOS operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to make phone calls to arbitrary numbers remotely...

Important: Red Hat Security Advisory: qemu-kvm-rhev security update

An update for qemu-kvm-rhev is now available for Red Hat OpenStack Platform 10.0 Newton. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Description of the security update for Outlook 2010: April 11, 2017

Description of the security update for Outlook 2010: April 11, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...

Description of the security update for Outlook 2016: April 11, 2017

None None...

CVE-2017-7377

CVE-2017-7377 affects QEMU’s 9pfs (hw/9pfs/9p.c): the functions v9fs_create and v9fs_lcreate allow local guest OS privileged users to cause denial of service (file descriptor or memory consumption) when an in-use fid is referenced. The issue is triggered by vectors related to an already in-use fi...

Edit and Replay Network Traffic: tcpreplay

Edit and Replay Network Traffic Tcpreplay is a suite of GPLv3 licensed utilities for UNIX and Win32 under Cygwin operating systems for editing and replaying network traffic which was previously captured by tools like tcpdump and Ethereal / Wireshark . It allows you to classify traffic as client o...

UBUNTU-CVE-2017-7377

The 1 v9fscreate and 2 v9fslcreate functions in hw/9pfs/9p.c in QEMU aka Quick Emulator allow local guest OS privileged users to cause a denial of service file descriptor or memory consumption via vectors related to an already in-use fid...

CVE-2017-2404

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Quick Look" component. It allows remote attackers to trigger telephone calls to arbitrary numbers via a tel: URL in a PDF document, as exploited in the wild in October 2016...

CVE-2017-2404

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Quick Look" component. It allows remote attackers to trigger telephone calls to arbitrary numbers via a tel: URL in a PDF document, as exploited in the wild in October 2016...

CVE-2017-2404

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Quick Look" component. It allows remote attackers to trigger telephone calls to arbitrary numbers via a tel: URL in a PDF document, as exploited in the wild in October 2016...

CVE-2017-2404

A vulnerability in the Quick Look component of iOS versions prior to 10.3 allows remote attackers to trigger unauthorized telephone calls to arbitrary numbers. This occurs via a tel: URL embedded within a PDF document . The issue was exploited in the wild in October 2016 . Apple addressed this by...

CVE-2017-2404

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Quick Look" component. It allows remote attackers to trigger telephone calls to arbitrary numbers via a tel: URL in a PDF document, as exploited in the wild in October 2016...

PT-2017-1741

Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.3 Description The issue involves the Quick Look component and allows remote attackers to trigger telephone calls to arbitrary numbers via a tel: URL in a PDF document. This issue has been exploited in the wild. The...

CVE-2017-2404: URL Redirection to Untrusted Site

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Quick Look" component. It allows remote attackers to trigger telephone calls to arbitrary numbers via a tel: URL in a PDF document, as exploited in the wild in October 2016...

VulnCheck KEV: CVE-2017-2404

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Quick Look" component. It allows remote attackers to trigger telephone calls to arbitrary numbers via a tel: URL in a PDF document, as exploited in the wild in October 2016...

Apple iOS Quick Look Component Vulnerability

Apple iOS is an operating system developed by Apple Inc. for mobile devices.Quick Look is one of the components used to view common resource files. A security vulnerability exists in the Quick Look component in Apple iOS versions prior to 10.3. The vulnerability can be exploited by a remote...

Apple iOS < 10.3 Multiple Vulnerabilities

Binary data 700034.prm...

DEBIAN-CVE-2017-5931

Integer overflow in hw/virtio/virtio-crypto.c in QEMU aka Quick Emulator allows local guest OS privileged users to cause a denial of service QEMU process crash or possibly execute arbitrary code on the host via a crafted virtio-crypto request, which triggers a heap-based buffer overflow...

DEBIAN-CVE-2017-6058

Buffer overflow in NetRxPkt::ehdrbuf in hw/net/netrxpkt.c in QEMU aka Quick Emulator, when the VLANSTRIP feature is enabled on the vmxnet3 device, allows remote attackers to cause a denial of service out-of-bounds access and QEMU process crash via vectors related to VLAN stripping...

DEBIAN-CVE-2017-5987

The sdhcisdmatransfermultiblocks function in hw/sd/sdhci.c in QEMU aka Quick Emulator allows local OS guest privileged users to cause a denial of service infinite loop and QEMU process crash via vectors involving the transfer mode register during multi block transfer...