375 matches found
Update: Adobe Working to Confirm New Reader Zero-Day Sandbox-Bypass Exploit
Adobe said today it has been in contact with the Russian security company Group-IB, which discovered a zero-day vulnerability in Adobe Reader and yesterday reported the existance of a pricey exploit circulating on the black market. The exploit, according to Group-IB, bypasses Adobe’s sandbox...
CVE-2012-1846
Google Chrome 17.0.963.66 and earlier allows remote attackers to bypass the sandbox protection mechanism by leveraging access to a sandboxed process, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2012. NOTE: the primary affected product may be clarified later; it was not...
PT-2012-3590
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 17.0.963.66 Description The issue allows remote attackers to bypass the sandbox protection mechanism by leveraging access to a sandboxed process. This was demonstrated during a Pwn2Own competition at CanSecWest...
Google Reacts to Google Wallet Security Issues
Google has temporarily disabled the provisioning of prepaid cards as the company deals with the fallout from the discovery of security vulnerabilities affecting Google Wallet. Google Wallet is a mobile payment application that enables users to store information such as credit cards on their mobil...
Sun Java JRE / JDK / Web Start multiple security vulnerabilities
JNLP may overwrite system properties java.home java.ext.dirs user.home Heap overflow and integer overflow on TrueType fonts parsing, memory corruption on GIF parsing, integer overflow on Pack200 decompression. Multiple sendbox protection bypass vulnerabilities...
VMWare sandbox protection bypass
It's possilbe to access phisical memory from guest machine...
Sun Java multiple security vulnerabilities
8 different vulnerabilities, including privilege escalation, sandbox protection bypass and code excutions...
Adobe Flash Player sandbox protection bypass
SecurityErrorEvent can be used for client ports scanning...
Sun JRE / JDK multiple security vulnerabilities
Buffer and integer overflows in JPG and BMP processing, sandbox protection bypass with system classes...
PHP mssql_connect() / mssql_pconnect() functions buffer overflow
Buffer overflow leads to code execution, resulting in sandbox protection bypass...
Sun Java Runtime Environment multiple security vulnerabilities
Multiple vulnerabilities allow sandbox protection bypass and system functions access...
Sun Java sandbox protection bypass
It's possible to bypass sandbox with "reflection" API. This vulnerability can be used for silent trojan installation...
Sun Java JRE sandbox protection bypass
Few vulnerabilities allow applets to write local files and execute applications...