Microsoft Windows - ATMFD.dll CFF table (ATMFD+0x3440b ATMFD+0x3440e) Invalid Memory Access

Microsoft Windows - ATMFD.dll CFF table ATMFD+0x3440b ATMFD+0x3440e Invalid Memory Access Source: https://code.google.com/p/google-security-research/issues/detail?id=384&can=1 We have encountered a number of Windows kernel crashes in the ATMFD.DLL OpenType driver while processing corrupted OTF fo...

Microsoft Windows - win32k.sys TTF Font Processing win32k!fsc_RemoveDups Out-of-Bounds Pool Memory Access

Microsoft Windows - win32k.sys TTF Font Processing win32k!fscRemoveDups Out-of-Bounds Pool Memory Access Source: https://code.google.com/p/google-security-research/issues/detail?id=401&can=1 We have encountered a Windows kernel crash in the win32k!fscRemoveDups function while processing corrupted...

Microsoft Windows - 'win32k.sys' TTF Font Processing win32k!fsc_RemoveDups Out-of-Bounds Pool Memory Access

Source: https://code.google.com/p/google-security-research/issues/detail?id=401&can=1 We have encountered a Windows kernel crash in the win32k!fscRemoveDups function while processing corrupted TTF font files, such as: --- PAGEFAULTINNONPAGEDAREA 50 Invalid system memory was referenced. This canno...

CVE-2015-2454: Undefined Security Weakness

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly constrain impersonation levels, which allows local users to gain privileges via a crafte...

Microsoft Windows Kernel KMD Security Feature Bypass Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. A security feature bypass vulnerability exists in Microsoft Windows Kernel KMD, which can be exploited by an attacker to elevate privileges...

Microsoft Windows Kernel CSRSS Local Elevation of Privilege Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. A local elevation of privilege vulnerability exists in Microsoft Windows Kernel CSRSS, which can be exploited by an attacker to execute arbitrary code, monitor the actions of the next logged on user, an...

MS15-080 : Vulnerabilities in Microsoft Graphics Component Could Allow Remote Code Execution (3078662)

The remote Windows host is affected by multiple vulnerabilities : - Multiple remote code execution vulnerabilities exist due to the Windows Adobe Type Manager Library not properly handling specially crafted OpenType fonts. An attacker can exploit these, by using a crafted document or web page wit...

Microsoft Windows Kernel 'Win32k.sys' Information Disclosure Vulnerability

Microsoft Windows is a family of operating systems from Microsoft. An information disclosure leak exists in the Microsoft Windows Kernel 'Win32k.sys'. A local attacker can exploit the vulnerability to obtain sensitive information, bypass certain security restrictions and perform unauthorized...

The vulnerability of the Windows operating system, which allows a perpetrator to gain access to protected information

The vulnerability of kernel-level drivers in the Windows operating system is related to the lack of protection for privileged data. Exploiting this vulnerability can allow a local attacker to gain access to protected information through a specially crafted application...

One font vulnerability to rule them all #2: Adobe Reader RCE exploitation

Posted by Mateusz Jurczyk of Google Project Zero This is part 2 of the “One font vulnerability to rule them all” blog post series. In part 1 “introducing the BLEND vulnerability”, we discussed how developments in the digital typography field in the last four decades shaped the various font format...

July 2015 Microsoft Patch Tuesday Security Bulletins

Microsoft has patched a zero-day vulnerability in the Windows kernel uncovered and exploited by Hacking Team. The zero day was found among the 400 GB of data stolen from the Italian surveillance software maker and posted online July 5. A trio of Adobe Flash Player zero days were also uncovered...

Hacking Team Promises to Rebuild RCS

The aftermath of the Hacking Team attack raised legitimate questions about the controversial Italian surveillance software vendor’s long-term viability. With reams of sensitive internal data and intellectual property posted online, how could the company survive? For now, however, the company seem...

Adobe released official patch: fix Hacking Team leaked Flash 0day vulnerability-vulnerability warning-the black bar safety net

Adobe today released Flash Player update patches for the repair of Hacking Team to steal the 400G data is found in the 0day vulnerability. An attacker can use this vulnerability to make the target machine the system crashes and Access Control permissions. Vulnerability This 0day vulnerability by...

Hacking Team attack code analysis Part 3 : the Adobe Font Driver kernel driver elevation of privilege vulnerability-vulnerability warning-the black bar safety net

In order to in IE and Chrome bypassing its sandbox mechanism to completely control the user's system, Hacking Team also utilizes a Windows kernel driver: the Adobe Font Driveratmfd.dllin the presence of a font 0day vulnerability to achieve privilege escalation and bypass the sandbox mechanism. Th...

Adobe today released HackingTeam leaked 0day vulnerability patch-vulnerability warning-the black bar safety net

Spyware vendor Hacking Team is after the invasion, the internal 400GB data stolen and published online, and then, in Flash Player 0dayzero-daysecurity vulnerabilities will be crazy use. And Adobe is planning to release today this 0day vulnerability patch. Hacking Team, one of the world's most...

Взлом Hacking Team

В рунете тишина, давайте обсудим. Цитата: @cBekrar: I think I've spotted the name of the guy who sold the Windows Kernel EoP 0day to Hackingteam, 25K EUR is a decent price. --- Я думал все куда лучше, а тут директор vupen пишет, что это decent price...

Details Available on Patched Adobe, Windows Font Vulnerabilities

A Google Project Zero researcher has publicly disclosed details on a number of patched Adobe and Microsoft vulnerabilities, including one in the Adobe Type Manager Font Driver that could enable takeover of a number of systems supporting modern font engines. Mateusz Jurczyk pointed the finger at h...

CVE-2015-2360

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges or cause a denial...

Microsoft Windows Kernel 'Win32k.sys' Driver Buffer Overflow Vulnerability

Microsoft Windows is a popular operating system. A security vulnerability in the Microsoft Windows Kernel 'Win32k.sys' kernel mode driver allows local attackers to exploit the vulnerability to elevate privileges...

Microsoft Windows Kernel 'Win32k.sys' local elevation of privilege vulnerability (CNVD-2015-03730)

Microsoft Windows is a popular operating system. An elevation of privilege vulnerability exists in Microsoft Windows Kernel 'Win32k.sys', which allows local attackers to exploit the vulnerability to elevate privileges...