DLA-341-1 php5 - security update

Bulletin has no description...

Debian Security Advisory DSA 3395-1 (krb5 - security update)

Several vulnerabilities were discovered in krb5, the MIT implementation of Kerberos. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2015-2695 It was discovered that applications which call gssinquirecontext on a partially-established SPNEGO context can cau...

Samsung SmartViewer 'DVRSetupSave' Method Remote Code Execution Vulnerability

Samsung SmartViewer is a suite of video viewing software designed for video surveillance systems. An unspecified security vulnerability exists in Samsung SmartViewer that could be exploited by remote attackers to conduct a denial-of-service attack and crash the application...

The vulnerability of the Flash Player and Adobe Integrated Runtime software allows a perpetrator to execute arbitrary code or cause service failures.

The vulnerabilities of the Flash Player and Adobe Integrated Runtime programs are caused by buffer overflow attacks. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or cause service failures remotely...

PT-2015-3405

Name of the Vulnerable Software and Affected Versions BusyBox versions prior to 1.27.2 Description The issue is related to the huft build function in the archival/libarchive/decompress gunzip.c component of the BusyBox set of UNIX utilities. It involves a null pointer dereference. An attacker,...

CentOS 6 / 7 : libXfont (CESA-2015:1708)

An updated libXfont package that fixes three security issues is now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Oracle: Security Advisory (ELSA-2008-0612)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2008-0885)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedHat Enterprise Linux 7.1 Denial Of Service

OpenSource Security Ralf Spenneberg Am Bahnhof 3-5 48565 Steinfurt [email protected] OS-S Security Advisory 2015-04 http://www.os-s.net/advisories/DOS-KernelCrashesOnInvalidUSBDeviceDescriptors-UsbvisionDriver.pdf Date: October 7th, 2015 Last Updated: October 7th, 2015 Authors: Sergej Schumilo, Hendr...

Mozilla Firefox suffers from an unspecified buffer overflow vulnerability (CNVD-2015-06291)

Mozilla Firefox is an open source web browser. Mozilla Firefox suffers from an unspecified buffer overflow vulnerability that could allow a remote attacker to construct a malicious web page and trick the user into parsing it, which could crash the application or execute arbitrary code...

The depth of investigation of CVE-2 0 1 5-5 4 7 7&CloudFlare Virtual DNS how to protect their users-vulnerability warning-the black bar safety net

Last week, the ISC released a patch that fixes the BIND9 DNS server in a remote exploit the vulnerability. This exploit will cause the server during the processing of a data packet when the occurrence of a crash. ! The announcement pointed out, the server in the processing TKEY the type of the...

Windows ATMFD.DLL Out-of-Bounds Read Due to Malformed Name INDEX in the CFF Table

Source: https://code.google.com/p/google-security-research/issues/detail?id=386&can=1 We have encountered a number of Windows kernel crashes in the ATMFD.DLL OpenType driver while processing corrupted OTF font files, such as: --- DRIVERPAGEFAULTINFREEDSPECIALPOOL d5 Memory was referenced after it...

Windows win32k.sys TTF Font Processing win32k!scl_ApplyTranslation Pool-Based Buffer Overflow

Source: https://code.google.com/p/google-security-research/issues/detail?id=370&can=1 We have encountered a number of Windows kernel crashes in the win32k!sclApplyTranslation function while processing corrupted TTF font files, such as: --- PAGEFAULTINNONPAGEDAREA 50 Invalid system memory was...

Microsoft Windows Kernel - Bitmap Handling Use-After-Free (MS15-061) (2)

Microsoft Windows Kernel - Bitmap Handling Use-After-Free MS15-061 2 Source: https://code.google.com/p/google-security-research/issues/detail?id=311 Bitmap object Use-after-Free 2 The attached PoC triggers a blue screen due to a use after free vulnerability. The crashes are unreliable, however yo...

Windows ATMFD.DLL CFF table (ATMFD+0x3440b / ATMFD+0x3440e) Invalid Memory Access

CVE-2015-2460We have encountered a number of Windows kernel crashes in the ATMFD.DLL OpenType driver while processing corrupted OTF font files, such as: ---PAGEFAULTINNONPAGEDAREA 50Invalid system memory was referenced. This cannot be protected by try-except,it must be protected by a Probe...

Windows ATMFD.DLL CharString Stream Out-of-Bounds Reads

Source: https://code.google.com/p/google-security-research/issues/detail?id=382&can=1 We have encountered a number of Windows kernel crashes in the ATMFD.DLL OpenType driver while processing corrupted OTF font files, such as: --- DRIVERPAGEFAULTBEYONDENDOFALLOCATION d6 N bytes of memory was...

PT-2019-3245 · Oracle +9 · Mysql Server +8

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.6.44 and prior MySQL Server versions 5.7.26 and prior MySQL Server versions 8.0.16 and prior Description: The issue is related to improper access control in the MySQL Server component of Oracle MySQL, specifically in t...

Vulnerabilities of iOS and Mac OS X operating systems, allowing attackers to execute arbitrary code or cause system failures

The vulnerability of the TRE library in Libc-based iOS and Mac OS X operating systems arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause system failures remotely...

Windows ATMFD.DLL CharString Stream Out-of-Bounds Reads Exploit

Exploit for windows platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=382&can=1 We have encountered a number of Windows kernel crashes in the ATMFD.DLL OpenType driver while processing corrupted OTF font files, such as: ---...

Microsoft Windows - win32k.sys TTF Font Processing IUP[] Program Instruction Pool-Based Buffer Overflow

Microsoft Windows - win32k.sys TTF Font Processing IUP Program Instruction Pool-Based Buffer Overflow Source: https://code.google.com/p/google-security-research/issues/detail?id=368&can=1 We have encountered a number of Windows kernel crashes in the win32k!itrpIUP function a handler of the IUP TT...