Code injection

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx+0x000000000000dcab."...

CVE-2017-10747

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at xnview+0x000000000037a8aa."...

CVE-2017-10748

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at xnview+0x000000000022bf8d."...

CVE-2017-10737

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll77df0000!RtlpCoalesceFreeBlocks+0x00000000000002e6."...

CVE-2017-9925

In SWFTools 2013-04-09-1007 on Windows, png2swf allows remote attackers to execute arbitrary code or cause a denial of service via a crafted file, related to a "User Mode Write AV near NULL starting at wow64!Wow64NotifyDebugger+0x000000000000001d."...

CVE-2017-8826

FastStone Image Viewer 6.2 is affected by a vulnerability described as a “User Mode Write AV” that can be triggered by processing a malformed JPEG file. The issue is linked to the jpeg_mem_term function in jmemnobs.c of libjpeg and can be exploited by a malformed JPEG that causes an access violat...

CVE-2017-10750

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV near NULL starting at ntdll77df0000!RtlEnterCriticalSection+0x0000000000000012."...

CVE-2017-10736

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at msvcrt!VECmemzero+0x000000000000006a."...

CVE-2017-8826

FastStone Image Viewer 6.2 has a "User Mode Write AV" issue, possibly related to the jpegmemterm function in jmemnobs.c in libjpeg. This issue can be triggered by a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS Access Violation or possibly...

CVE-2017-9534

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!GetPlugInInfo+0x0000000000017426."...

CVE-2017-7894

WinDjView 2.1 is affected by CVE-2017-7894. The vulnerability arises from a User Mode Write AV near NULL in WinDjView.exe, enabling code execution when a user opens a crafted .djvu file. Affected scenario involves a victim obtaining an untrusted .djvu from a remote source and issuing several user...

CVE-2017-9531

CVE-2017-9531 affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. A crafted FPX file can trigger a user‑mode write/overflow, leading to arbitrary code execution or a denial of service. Connected sources corroborate a FPX‑related buffer/AV condition in multiple advisories (CNVD-2017-14128; Kaspe...

Advanced Stealthy Dropper: Dr0p1t Framework

Advanced Stealthy Dropper In short dropper is type of trojans that downloads other malwares and Dr0p1t gives you the chance to create a stealthy dropper that bypass most AVs and have a lot of tricks. Features + Generated executable properties: The executable size is smaller compared to other...

[SECURITY] [DLA 1003-1] unrar-nonfree security update

Package : unrar-nonfree Version : 1:4.1.4-1+deb7u2 CVE ID : CVE-2012-6706 Debian Bug : 865461 It was reported that unrar fixed a VMSFDELTA memory corruption issue in their latest version unrarsrc-5.5.5.tar.gz. This problem was reported to Sophos AV in 2012 but never reach upstream rar. For Debian...

unrar 5.40 - VMSF_DELTA Filter Arbitrary Memory Write

unrar 5.40 - VMSFDELTA Filter Arbitrary Memory Write Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1286&desc=6 It appears that the VMSFDELTA memory corruption that was reported to Sophos AV in 2012 and fixed there was actually inherited from upstream unrar. For unknown reasons...

unrar 5.40 - 'VMSF_DELTA' Filter Arbitrary Memory Write

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1286&desc=6 It appears that the VMSFDELTA memory corruption that was reported to Sophos AV in 2012 and fixed there was actually inherited from upstream unrar. For unknown reasons the information did not reach upstream rar or was...

Unrar VMSF_DELTA Arbitrary Memory Write Exploit

It appears that the VMSFDELTA memory corruption that was reported to Sophos AV in 2012 and fixed there was actually inherited from upstream unrar. For unknown reasons, whoever fixed the bug did not report this to upstream unrar, and the bug seems to have persisted there to this day. VMSFDELTA...

Unrar VMSF_DELTA Arbitrary Memory Write

VMSFDELTA filter in unrar allows arbitrary memory write It appears that the VMSFDELTA memory corruption that was reported to Sophos AV in 2012 and fixed there was actually inherited from upstream unrar. For unknown reasons, whoever fixed the bug did not report this to upstream unrar, and the bug...

Windows 10 Creators Update provides next-gen ransomware protection

Multiple high-profile incidents have demonstrated that ransomware can have catastrophic effects on all of us. From personally losing access to your own digital property, to being impacted because critical infrastructure or health care services are unexpectedly unavailable for extended periods of...

Generate Backdoor With msfvenom: TheFatRat

Generate Backdoor With msfvenom A tool to generate backdoor with msfvenom easily a part from metasploit framework. This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac. The malware, created with this tool also have an ability to...