CVE-2018-17476

CVE-2018-17476 concerns Google Chrome/Chromium before 70.0.3538.67, where an incorrect Cast UI dialog placement could allow a remote attacker to obscure the full-screen warning via a crafted HTML page. The issue is categorized as content spoofing/UI-related, with potential to mislead users about ...

CVE-2018-17476: Undefined Security Weakness

Incorrect dialog placement in Cast UI in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page...

dlplibs/qxpfuzzer: Bad-cast to std::__1::__shared_weak_count from invalid vptr in std::__1::shared_ptr<librevenge::RVNGInputStream>::~shared_ptr

Detailed report: https://oss-fuzz.com/testcase?key=5739393340407808 Project: dlplibs Fuzzer: libFuzzerdlplibsqxpfuzzer Fuzz target binary: qxpfuzzer Job Type: libfuzzerubsandlplibs Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000004b0cb90 Crash State: Bad-cast to std::1::sharedweakcou...

dlplibs/qxpfuzzer: Bad-cast to std::__1::__shared_weak_countstd::__1::shared_ptr<librevenge::RVNGInputStream>::~shared_ptr in libqxp::QXPParser::parse

Detailed report: https://oss-fuzz.com/testcase?key=5744289871560704 Project: dlplibs Fuzzer: libFuzzerdlplibsqxpfuzzer Fuzz target binary: qxpfuzzer Job Type: libfuzzerubsandlplibs Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000004d215f0 Crash State: Bad-cast to...

kernel: Buffer overflow in hidp_process_report

A buffer overflow due to a singed-unsigned comparsion was found in hidpprocessreport in the net/bluetooth/hidp/core.c in the Linux kernel. The buffer length is an unsigned int but gets cast to a signed int which in certain conditions can lead to a system panic and a denial-of-service...

CVE-2018-18710

An issue was discovered in the Linux kernel through 4.19. An information leak in cdromioctlselectdisc in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940 and...

UBUNTU-CVE-2018-18710

An issue was discovered in the Linux kernel through 4.19. An information leak in cdromioctlselectdisc in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940 and...

chromium-browser: Security UI occlusion in full screen mode

Incorrect dialog placement in Cast UI in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page...

libreoffice/ww8fuzzer: Bad-cast to SwPaMSwRangeRedline::operator< in std::__1::pair<std::__1::__wrap_iter<SwRangeRedline* const*>, std::__1::__wrap_iter<SwRangeRedline* const*> > std::__1::__equal_range<CompareSwRedlineTable&, std::__1::__wrap_iter<SwRangeRedline* const*>, SwRangeRedline*>

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5680715916640256 Project: libreoffice Fuzzer: libFuzzerlibreofficeww8fuzzer Fuzz target binary: ww8fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

DEBIAN-CVE-2018-5156

A vulnerability can occur when capturing a media stream when the media source type is changed as the capture is occurring. This can result in stream data being cast to the wrong type causing a potentially exploitable crash. This vulnerability affects Thunderbird 60, Firefox ESR 60.1, Firefox ESR...

CVE-2018-17476

Incorrect dialog placement in Cast UI in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page...

PT-2018-3219

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 70.0.3538.67 Description The issue is related to incorrect dialog placement in the Cast UI, which can be exploited by a remote attacker to obscure the full screen warning. This can be achieved via a crafted HTML...

libreoffice/hwpfuzzer: Bad-cast to HMemIODev from invalid vptr in SkipPrivateBlock

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5748792192663552 Project: libreoffice Fuzzer: libFuzzerlibreofficehwpfuzzer Fuzz target binary: hwpfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

DEBIAN-CVE-2018-16658

An issue was discovered in the Linux kernel before 4.18.6. An information leak in cdromioctldrivestatus in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940...

UBUNTU-CVE-2018-16658

An issue was discovered in the Linux kernel before 4.18.6. An information leak in cdromioctldrivestatus in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940...

libreoffice/ww6fuzzer: Bad-cast to SwNode from invalid vptr in SwTable::GetTableNode

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6192777900589056 Project: libreoffice Fuzzer: libFuzzerlibreofficeww6fuzzer Fuzz target binary: ww6fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

libreoffice/ww6fuzzer: Bad-cast to SwIndexReg from invalid vptr in SwIndex::Remove

Detailed report: https://oss-fuzz.com/testcase?key=6290151587184640 Project: libreoffice Fuzzer: libFuzzerlibreofficeww6fuzzer Fuzz target binary: ww6fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000012e6bed8 Crash State: Bad-cast to SwIndexRe...

libreoffice/ww6fuzzer: Bad-cast to SwNodeSwTable::GetTableNode in SwChartLockController_Helper::LockUnlockAllCharts

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6651521981743104 Project: libreoffice Fuzzer: libFuzzerlibreofficeww6fuzzer Fuzz target binary: ww6fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

Security Bulletin: IBM WebSphere Cast Iron Solution is affected by Tomcat vulnerabilities

Summary IBM WebSphere Cast Iron Solution has addressed the following vulnerabilities. Vulnerability Details CVEID: CVE-2017-5664 DESCRIPTION: Apache Tomcat could allow a remote attacker to bypass security restrictions, caused by the improper handling of specific HTTP request methods for static...

chromium-browser: Bad cast in DevTools

Bad cast in DevTools in Google Chrome on Win, Linux, Mac, Chrome OS prior to 66.0.3359.117 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory read via a crafted Chrome Extension...