Microsoft Patch Tuesday — November 2018: Vulnerability disclosures and Snort coverage

Microsoft released its monthly security update today, disclosing a variety of vulnerabilities in several of its products. The latest Patch Tuesday covers 53 vulnerabilities, 11 of which are rated "critical," 40 that are rated "important” and one “moderate” and “low” vulnerability, each. The...

Intel ME 6.x/7.x/8.x/9.x/10.x./11.x, SPS 4.0, and TXE 3.0 Cumulative Security Update - Lenovo Support US

No description provided...

Microsoft Windows: Turn off handwriting recognition error reporting

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winhandwritingerrorsharing.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Turn off handwriting recognition error reporting Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Security Bulletin: NVIDIA SHIELD Tablet Security Update for a Media Server Vulnerability

NVIDIA SHIELD Tablet contains a vulnerability which may lead to denial of service or escalation of privileges Go to NVIDIA Product Security. Vulnerability Details The following section summarizes the potential vulnerability. The description uses CWE™ and the risk assessment follows CVSS...

The vulnerability of the parse_hid_report_descriptor function (drivers/input/tablet/gtco.c) in the Linux operating system allows a hacker to trigger a service failure or exert other effects.

The vulnerability of the parsehidreportdescriptor function in the Linux kernel’s drivers/input/tablet/gtco.c file arises from a read operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause service failures or other effects such as...

Security Bulletin: NVIDIA SHIELD Tablet Security Updates for CPU Speculative Side Channel Vulnerabilities

NVIDIA SHIELD Tablet Response to CPU Speculative Side Channel Vulnerabilities - CVE-2017-5753, CVE-2017-5715, CVE-2017-5754 Go to NVIDIA Product Security. Bulletin Summary NVIDIA is providing an initial security update to mitigate aspects of Google Project Zero's January 3, 2018, publication of...

Linux kernel local denial of service vulnerability (CNVD-2017-33478)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A local denial of service vulnerability exists in the 'parsehidreportdescriptor' function in the drivers/input/tablet/gtco.c file in Linux kernel 4.13.11 and earlier...

DEBIAN-CVE-2017-16643

The parsehidreportdescriptor function in drivers/input/tablet/gtco.c in the Linux kernel before 4.13.11 allows local users to cause a denial of service out-of-bounds read and system crash or possibly have unspecified other impact via a crafted USB device...

Stable Channel Update for Chrome OS

The Stable channel has been updated to 62.0.3202.74 Platform version: 9901.54.0/1 for most Chrome OS devices. This build contains a number of bug fixes and security updates. Systems will be receiving updates over the next several days. New Features Kerberos SSO integration for Active Directory...

Lenovo Android Tablet and Lenovo VIBE, Moto, and ZUK Mobile Phone Remote Code Execution Vulnerability - us

Lenovo Security Advisory: LEN-15374 Potential Impact: Remote code execution Severity: High Scope of Impact: All Lenovo Android tablets and the following mobile phones: all Lenovo VIBE and ZUK devices, and the Moto M XT1663 and Moto E3 XT1706 distributed by Lenovo. CVE Identifier: CVE-2017-3758,...

Microsoft Office SMB Information Disclosure

Vulnerability Summary The following advisory describes an information disclosure found in Microsoft Office versions 2010, 2013, and 2016. Microsoft Office is: “Whether you’re working or playing, Microsoft is here to help. We’re the company that created Microsoft Office, including Office 365 Home,...

Stable Channel Updates for Chrome OS

The Stable channel has been updated to 61.0.3163.113 Platform version: 9765.76.0 for most Chrome OS devices . This build contains a number of bug fixes, security updates, and feature enhancements. Systems will be receiving updates over the next several days. Some highlights of these changes are:...

Security Bulletin: NVIDIA Shield TV and Tablet contain multiple vulnerabilities

Vulnerability Details The following sections summarize the vulnerabilities. Descriptions use CWE™ and risk assessments follow CVSS. CVE-2016-6790 NVIDIA OpenMax Component contains a vulnerability in LIBNVRM where an input buffer is copied to an output buffer without checking the size of the input...

Iskon TV Tablet - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Iskon TV Tablet published at the 'play' market has multiple vulnerabilities...

CVE-2016-6915

CVE-2016-6915 refers to a stack-based buffer overflow in the NVIDIA nvhost_job.c driver path for NVIDIA Shield devices running Android. Affected are Shield TV (OTA 3.3 and earlier), Shield Table (OTA 4.4 and earlier), and Shield Table TK1 (OTA 1.5 and earlier). Root cause: stack-based overflow in...

Google Pixel C elevation of privilege vulnerability

Google Pixel C is a tablet.NVIDIA GPU driver is an NVIDIA graphics processor driver component used in it. Google Pixel C has an elevation of privilege vulnerability that can be exploited by an attacker to gain elevation of privilege...

Boat Browser for Tablet - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Boat Browser for Tablet published at the 'play' market has multiple vulnerabilities...

Yappy - SMS on PC & Tablet - Dangerous filesystem permissions, Hardcoded secrets, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Yappy - SMS on PC & Tablet published at the 'play' market has multiple vulnerabilities...

Tablet for WhatsApp - BSD license, Dangerous filesystem permissions, LGPL license vulnerabilities

HackApp vulnerability scanner discovered that application Tablet for WhatsApp published at the 'play' market has multiple vulnerabilities...

Input validation

An issue was discovered on LG devices using the MTK chipset with L5.0/5.1, M6.0/6.0.1, and N7.0 software, and RCA Voyager Tablet, BLU Advance 5.0, and BLU R1 HD devices. The MTKLogger app with a package name of com.mediatek.mtklogger has application components that are accessible to any applicati...