Denial Of Service (DoS)

rtl-433 is vulnerable to denial of service. The vulnerability exists due to a lack of sanitization allowing an attacker to crash the system via a stack overflow in the function somfyiohcdecode...

The vulnerability of the fribidi_cap_rtl_to_unicode function in the GNU FriBidi library allows a perpetrator to execute arbitrary code.

The vulnerability of the fribidicaprtltounicode function in the GNU FriBidi library arises due to a buffer overflow in the dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2022-25050

rtl433 21.12 was discovered to contain a stack overflow in the function somfyiohcdecode. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

UBUNTU-CVE-2022-25309

A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidicaprtltounicode function of the fribidi-char-sets-cap-rtl.c file. This flaw allows an attacker to pass a specially crafted file to the Fribidi application with the '--caprtl' option, leading to a crash and...

PT-2022-2352 · Fribidi +10 · Fribidi +10

Name of the Vulnerable Software and Affected Versions: Fribidi affected versions not specified Description: A heap-based buffer overflow flaw was found in the Fribidi package, affecting the fribidi cap rtl to unicode function. This flaw allows an attacker to pass a specially crafted file to the...

RTL Nederland Makes Weather Forecasting Fast, Reliable and Sustainable with Help From Akamai

Media giant RTL Nederland offers a weather app that gives users the ability to get a comprehensive overview of the weather in their location at the click of a button. Akamai is delighted that this exciting media brand has chosen us to deliver a rich and engaging web experience for its viewers whi...

Description of the security update for Office Online Server: February 9, 2021 (KB4493192)

None None...

kernel: Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c allow for a DoS

A flaw was found in the Linux kernel. The rtlusbprobe function mishandles resource cleanup on error. An attacker able to induce the error conditions could use this flaw to crash the system. The highest threat from this vulnerability is to system availability...

spiele.rtl.de Improper Access Control vulnerability OBB-1396752

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

kernel: Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c allow for a DoS

A flaw was found in the Linux kernel. The rtlusbprobe function mishandles resource cleanup on error. An attacker able to induce the error conditions could use this flaw to crash the system. The highest threat from this vulnerability is to system availability...

rtl-hessen.de Cross Site Scripting vulnerability OBB-1348893

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

libreoffice:ww6fuzzer: Heap-buffer-overflow in rtl::OUString::equalsAsciiL

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=4970802532057088 Project: libreoffice Fuzzing Engine: honggfuzz Fuzz Target: ww6fuzzer Job Type: honggfuzzasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...

libreoffice:ww6fuzzer: Heap-buffer-overflow in rtl::OUString::equalsAsciiL

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=6429754604126208 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: ww6fuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...

CVE-2020-15651

A unicode RTL order character in the downloaded file name can be used to change the file's name during the download UI flow to change the file extension. This vulnerability affects Firefox for iOS 28...

Vulnerability of the crypto_report() function (crypto/crypto_user_base.c) in the Linux kernel, allowing a hacker to trigger a service failure

The vulnerability of the rtlusbprobe function crypto/cryptouserbase.c in the Linux kernel involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a hacker to cause a service failure...

Windows Defender Antivirus 4.18.1908.7-0 File Extension Spoofing Vulnerability

David Haintz ======================================================================= title: File Extension Spoofing product: Windows Defender Antivirus vulnerable version: 4.18.1908.7-0 fixed version: Virus Definition Update of 2019/09/30 CVE number: - impact: High homepage:...

PT-2019-4204 · Linux +6 · Linux Kernel +6

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.3.11 Description: The issue is related to two memory leaks in the rtl usb probe function in the Linux kernel, which can cause a denial of service due to memory consumption. This can be exploited by attackers t...

Khan Academy: RTL override char allowed at khanacademy redirect page

Summary Attacker can embed RTLO character at the following URL https://www.khanacademy.org/computer-programming/linkredirector?url= to trick the user to download suspicious files. Steps to reproduce Visit https://www.khanacademy.org/computer-programming/linkredirector?url= add the following paylo...

The vulnerability of Google Chrome, related to incorrect input validation, allows a hacker to manipulate the content of the Omnibox (address bar) through a specially created domain name.

The vulnerability of Google Chrome relates to errors in processing two-way domain names containing RTL symbols in the Omnibox. Exploiting this vulnerability allows a malicious actor to manipulate the content of the Omnibox address bar using a specially created domain name...

CVE-2018-18348

Incorrect handling of bidirectional domain names with RTL characters in Omnibox in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted domain name...