Announcement: End-of-life Metasploit 32-bit versions

UPDATE: With the release of version 4.15 on July 19, 2017, commercial Metasploit 32-bit platforms Metasploit Pro, Metasploit Express, and Metasploit Community no longer receive future product or content updates. These platforms are now obsolete and are no longer supported. Rapid7 announced the en...

Ruby UTF-8 Parser Denial of Service Vulnerability

Ruby is a cross-platform, object-oriented, dynamically typed programming language. A security vulnerability in the 'parseryyerror' function of Ruby's UTF-8 parser allows remote attackers to exploit the vulnerability to submit a special request for a denial of service attack...

Corel PHOTO-PAINT X8 64-bit TIFF Filter Code Execution Vulnerability

Summary A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 version 18.1.0.661. A specially crafted TIFF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific TIFF file to trigger...

Microsoft Internet Explorer 11.0.9600.18617 - 'CMarkup::DestroySplayTree' Memory Corruption

element. The bug was confirmed on IE Version 11.0.9600.18617 Update Version 11.0.40 running on Windows 7 64-bit. I was unable to reproduce it on Windows 10. PoC: ========================================== -- function go setTimeout"window.location.reload",100;...

Security Update for Microsoft Excel 2013 (KB3213537) 64-Bit Edition

A security vulnerability exists in Microsoft Excel 2013 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Microsoft Windows Graphics Component CVE-2017-8556 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...

Microsoft Windows Graphics Component CVE-2017-8574 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...

Microsoft Windows CVE-2017-8566 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Systems Microsoft...

New KONNI Campaign References North Korean Missile Capabilities

This blog was authored by Paul RascagneresExecutive SummaryWe recently wrote about the KONNI Remote Access Trojan RAT which has been distributed by a small number of campaigns over the past 3 years. We have identified a new distribution campaign which took place on 4th July. The malware used in...

IrfanView FPX plugin buffer overflow vulnerability (CNVD-2017-15694)

IrfanView is an image viewer developed by Irfan Skiljan, a software developer from Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion, etc. FPX Plugin is one of the programmable interface extensions. A buffer overflow vulnerability exists in IrfanView...

IrfanView .fpx file buffer overflow vulnerability (CNVD-2017-14133)

IrfanView is an image viewer , it supports image browsing , image editing , image format conversion , etc. FPX Plugin is one of the programmable interface extension plugin . A buffer overflow vulnerability exists in the FPX Plugin version 4.47 in IrfanView version 4.44 32-bit. An attacker can...

IrfanView .mov File Buffer Overflow Vulnerability

IrfanView is an image viewer that supports image browsing, image editing, image format conversion and more. A buffer overflow vulnerability exists in IrfanView version 4.44 32b bit. A remote attacker can exploit this vulnerability to execute code with the help of specially crafted .mov files...

IrfanView .rle file buffer overflow vulnerability (CNVD-2017-14162)

IrfanView is an image viewer that supports image browsing, image editing, image format conversion and more. A buffer overflow vulnerability exists in IrfanView version 4.44 32-bit. An attacker can exploit this vulnerability to execute arbitrary code or cause a denial of service with the help of...

IrfanView .fpx file buffer overflow vulnerability (CNVD-2017-14134)

IrfanView is an image viewer developed by Irfan Skiljan, a software developer from Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion, etc. FPX Plugin is one of the programmable interface extensions. A buffer overflow vulnerability exists in version 4.47...

IrfanView FPX plugin buffer overflow vulnerability (CNVD-2017-15681)

IrfanView is an image viewer developed by Irfan Skiljan, a software developer from Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion, etc. FPX Plugin is one of the programmable interface extensions. A buffer overflow vulnerability exists in IrfanView...

IrfanView FPX plugin buffer overflow vulnerability (CNVD-2017-15685)

IrfanView is an image viewer developed by Irfan Skiljan, a software developer from Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion, etc. FPX Plugin is one of the programmable interface extensions. A buffer overflow vulnerability exists in IrfanView...

IrfanView .fpx file buffer overflow vulnerability (CNVD-2017-14124)

IrfanView is an image viewer , it supports image browsing , image editing , image format conversion , etc. FPX Plugin is one of the programmable interface extension plugin . A buffer overflow vulnerability exists in IrfanView version 4.44 32-bit using FPX Plugin version 4.46. An attacker can...

IrfanView buffer overflow vulnerability (CNVD-2017-14207)

IrfanView is an image viewer that supports image browsing, image editing, image format conversion and more. A buffer overflow vulnerability exists in the TOOLS plugin version 4.50 used in IrfanView version 4.44 32-bit. An attacker can exploit this vulnerability with the help of specially crafted...

IrfanView buffer overflow vulnerability (CNVD-2017-14205)

IrfanView is an image viewer that supports image browsing, image editing, image format conversion and more. A buffer overflow vulnerability exists in the TOOLS plugin version 4.50 used in IrfanView version 4.44 32-bit. An attacker can exploit this vulnerability to execute arbitrary code or cause ...

IrfanView .fpx file buffer overflow vulnerability (CNVD-2017-14131)

IrfanView is an image viewer developed by Irfan Skiljan, a software developer from Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion, etc. FPX Plugin is one of the programmable interface extensions. A buffer overflow vulnerability exists in IrfanView...