PT-2017-12275

Name of the Vulnerable Software and Affected Versions Windows 7 SP1 Windows Server 2008 SP2 Windows Server 2008 R2 SP1 Description The issue allows an attacker to compromise a user's system by running a specially crafted application, due to the improper disclosure of kernel memory addresses. This...

PT-2017-12265

Name of the Vulnerable Software and Affected Versions Windows 7 SP1 Windows Server 2008 SP2 Windows Server 2008 R2 SP1 Windows Server 2012 Description The issue concerns the Microsoft Windows embedded OpenType EOT font engine, which improperly handles specially crafted embedded fonts. This can...

openSUSE Security Update : shadow (openSUSE-2017-1265)

This update for shadow fixes several issues. This security issue was fixed : - CVE-2017-12424: The newusers tool could have been forced to manipulate internal data structures in ways unintended by the authors. Malformed input may have lead to crashes with a buffer overflow or other memory...

openSUSE Security Update : sssd (openSUSE-2017-1251)

This update for sssd provides the following fixes : Security issues fixed : - CVE-2017-12173: Fixed unsanitized input when searching in local cache database bsc1061832. Non security issues fixed : - Fixed a segfault issue in ldaprfc2307fallbacktolocalusers. bsc1055123 - Install /var/lib/sss/mc...

openSUSE Security Update : qemu (openSUSE-2017-1249)

This update for qemu fixes several issues. These security issues were fixed : - CVE-2017-15268: Qemu allowed remote attackers to cause a memory leak by triggering slow data-channel read operations, related to io/channel-websock.c bsc1062942. - CVE-2017-9524: The qemu-nbd server when built with th...

InduSoft Web Studio Authentication Bypass Vulnerability (Nov 2017) - Windows

InduSoft Web Studio is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

EulerOS 2.0 SP2 : libexif (EulerOS-SA-2017-1277)

According to the version of the libexif package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exifdatasavedataentry function in libexif/exif-data.c caused by...

EulerOS 2.0 SP2 : httpd (EulerOS-SA-2017-1253)

According to the version of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A use-after-free flaw was found in the way httpd handled invalid and previously unregistered HTTP methods specified in the Limit directive used in a...

EulerOS 2.0 SP2 : poppler (EulerOS-SA-2017-1263)

According to the version of the poppler packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In Poppler 0.59.0, a NULL Pointer Dereference exists in the GfxImageColorMap::getGrayLine function in GfxState.cc via a crafted PDF...

EulerOS 2.0 SP2 : wget (EulerOS-SA-2017-1270)

According to the versions of the wget package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A stack-based and a heap-based buffer overflow flaws were found in wget when processing chunked encoded HTTP responses. By tricking an unsuspecting...

CVE-2017-11814: Exposure of Sensitive Information to an Unauthorized Actor

The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows an information disclosure vulnerability when it improperly...

CVE-2017-11817: Exposure of Sensitive Information to an Unauthorized Actor

The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows an information disclosure vulnerability when it improperly...

CVE-2017-11784: Exposure of Sensitive Information to an Unauthorized Actor

The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, allows an information disclosure vulnerability when it improperly handles objects in memory, aka "Windows Kerne...

CVE-2017-11780: Undefined Security Weakness

The Server Message Block 1.0 SMBv1 on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows a remote code execution vulnerability when it fails to properly...

CVE-2017-11774: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Microsoft Office handles objects in memory, aka "Microsoft Outlook Security Feature Bypass Vulnerability."...

CVE-2017-11772: Exposure of Sensitive Information to an Unauthorized Actor

The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure when it fails to properly handle...

CVE-2017-11765: Exposure of Sensitive Information to an Unauthorized Actor

The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows an information disclosure vulnerability when it improperly...

openSUSE Security Update : openjpeg2 (openSUSE-2017-1142)

This update for openjpeg2 fixes several issues. These security issues were fixed : - CVE-2016-10507: Integer overflow vulnerability in the bmp24toimage function allowed remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted bmp file bsc105642...

Description of the security update for Office 2010: October 10, 2017

Description of the security update for Office 2010: October 10, 2017 Summary This security update resolves a vulnerability in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about the vulnerability, see Microsoft Common...

PT-2017-4165 · Microsoft · Office 365 +1

Name of the Vulnerable Software and Affected Versions: Microsoft Outlook versions 2010 SP2 through 2016 Microsoft Office 365 affected versions not specified Description: The issue is related to the improper handling of objects in memory by Microsoft Outlook, allowing an attacker to execute...