7068 matches found
Microsoft Windows Kernel - Pool Buffer Overflow Drawing Caption Bar (MS15-061)
Microsoft Windows Kernel - Pool Buffer Overflow Drawing Caption Bar MS15-061 Source: https://code.google.com/p/google-security-research/issues/detail?id=321 The PoC triggers a crashes due to a pool buffer overflow while drawing the caption bar of window. The trigger depends on the current window...
Microsoft Windows Kernel - DeferWindowPos Use-After-Free (MS15-073)
Microsoft Windows Kernel - DeferWindowPos Use-After-Free MS15-073 Source: https://code.google.com/p/google-security-research/issues/detail?id=339 The attached PoC demonstrate a use-after-free condition that occurs when operating on a DeferWindowPos object from multiple threads. The DeferWindowPos...
Microsoft Windows Kernel - Null Pointer Dereference with Window Station and Clipboard (MS15-061)
Microsoft Windows Kernel - Null Pointer Dereference with Window Station and Clipboard MS15-061 Source: https://code.google.com/p/google-security-research/issues/detail?id=294 Platform: Win7 32-bit. trigger.cpp should fire the issue, with a caveat - PoC might NOT work if compiled as a debug build...
PT-2015-2164
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 41.0 Description The issue is related to the mishandling of certain receiver arguments in the js/src/proxy/Proxy.cpp component, which can be exploited by remote attackers to bypass intended window access...
Microsoft Windows Kernel - Null Pointer Dereference with Window Station and Clipboard (MS15-061)
Source: https://code.google.com/p/google-security-research/issues/detail?id=294 Platform: Win7 32-bit. trigger.cpp should fire the issue, with a caveat - PoC might NOT work if compiled as a debug build. windbg.txt is a sample crash log. Analysis from Nils: --- please find attached a C trigger,...
CVE-2015-5905
Safari in Apple iOS before 9 allows remote attackers to spoof the relationship between URLs and web content via a crafted window opener on a web site...
CVE-2015-5838
SpringBoard in Apple iOS before 9 does not properly restrict access to privileged API calls, which allows attackers to spoof the dialog windows of an arbitrary app via a crafted app...
CVE-2015-5905: Undefined Security Weakness
Safari in Apple iOS before 9 allows remote attackers to spoof the relationship between URLs and web content via a crafted window opener on a web site...
PT-2015-2127
Name of the Vulnerable Software and Affected Versions Safari versions prior to 9 Description The issue is related to errors in security settings, allowing a remote attacker to exploit it and potentially spoof the relationship between URLs and web content. This can be achieved via a crafted window...
With alphafuzzer mining network Protocol vulnerability-vulnerability warning-the black bar safety net
AlphaFuzzer digging a communication software memory corruption vulnerability AlphaFuzzer is a versatile vulnerability discovery framework, the cutoff to 1. 3 version, AlphaFuzzer contains only a file format vulnerability discovery framework. From 1. 4 version start, AlphaFuzzer increased network...
USN-2710-1 openssh vulnerabilities
Moritz Jodeit discovered that OpenSSH incorrectly handled usernames when using PAM authentication. If an additional vulnerability were discovered in the OpenSSH unprivileged child process, this issue could allow a remote attacker to perform user impersonation. CVE number pending Moritz Jodeit...
DEBIAN-CVE-2015-5352
The x11openhelper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted mode is not used, lacks a check of the refusal deadline for X connections, which makes it easier for remote attackers to bypass intended access restrictions via a connection outside of the permitted time...
UBUNTU-CVE-2015-5352
The x11openhelper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted mode is not used, lacks a check of the refusal deadline for X connections, which makes it easier for remote attackers to bypass intended access restrictions via a connection outside of the permitted time...
Design/Logic Flaw
Schneider Electric InduSoft Web Studio before 7.1.3.5 Patch 5 and Wonderware InTouch Machine Edition through 7.1 SP3 Patch 4 use cleartext for project-window password storage, which allows local users to obtain sensitive information by reading a file...
CVE-2015-1009: Exposure of Sensitive Information to an Unauthorized Actor
Schneider Electric InduSoft Web Studio before 7.1.3.5 Patch 5 and Wonderware InTouch Machine Edition through 7.1 SP3 Patch 4 use cleartext for project-window password storage, which allows local users to obtain sensitive information by reading a file...
PT-2015-5022
Name of the Vulnerable Software and Affected Versions Schneider Electric InduSoft Web Studio versions prior to 7.1.3.5 Patch 5 Wonderware InTouch Machine Edition versions prior to 7.1 SP3 Patch 5 Description The issue allows local users to obtain sensitive information by reading a file due to the...
xorg-x11-server: divide-by-zero when checking image dimensions
A divide-by-zero flaw was found in the way the X.Org server checked the dimensions of certain images. An attacker could potentially crash the X.Org server by tricking a suitable X application into displaying a specially crafted image file...
Malicious Gaming App Infects More than 1 Million Android Users
It's not at all surprising that the Google Play Store is surrounded by a number of malicious applications that may gain users' attention to fall victim for one, but this time it might be even worse than you thought. Threat researchers from security firm ESET have discovered a malicious...
XWayland Arbitrary File Read Vulnerability
Wayland is a simple "display server. A security vulnerability in the authentication settings of XWayland version 1.16.x and version 1.17.x prior to 1.17.2 can be exploited by a local attacker to read information from or send information to any X11 client with the help of a UNIX socket...
DEBIAN-CVE-2015-3164
The authentication setup in XWayland 1.16.x and 1.17.x before 1.17.2 starts the server in non-authenticating mode, which allows local users to read from or send information to arbitrary X11 clients via vectors involving a UNIX socket...