281 matches found
Microsoft Windows Kernel Elevation of Privilege Vulnerability (CNVD-2018-00516)
Microsoft Windows 7 SP1 and others are products of Microsoft Corporation in the United States. Microsoft Windows 7 SP1 is an operating system for personal computers; Windows Server 2008 SP2 is a server operating system. kernel is a kernel used in it. An elevation of privilege vulnerability exists...
Microsoft Windows Kernel API Elevation of Privilege Vulnerability
Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. The Kernel API is one of the kernel APIs. An elevation of privilege vulnerability exists in the Kernel API in Microsoft Windows. An attacker can exploit this vulnerability by impersonating a process...
Detecting reflective DLL loading with Windows Defender ATP
Today's attacks put emphasis on leaving little, if any, forensic evidence to maintain stealth and achieve persistence. Attackers use methods that allow exploits to stay resident within an exploited process or migrate to a long-lived process without ever creating or relying on a file on disk. In...
Windows Defender ATP でステルス性の高いクロスプロセス インジェクション手法を検出する: プロセス ハロウイングと AtomBombing
本記事は、Microsoft Malware Protection Center のブログ “Detecting stealthier cross-process injection techniques with Windows Defender ATP: Process hollowing and atom bombing...
Detecting stealthier cross-process injection techniques with Windows Defender ATP: Process hollowing and atom bombing
Advanced cyberattacks emphasize stealth and persistence: the longer they stay under the radar, the more they can move laterally, exfiltrate data, and cause damage. To avoid detection, attackers are increasingly turning to cross-process injection. Cross-process injection gives attackers the abilit...
Windows Defender ATP でクロスプロセス インジェクションを発見する
本記事は、Microsoft Malware Protection Center のブログ “Uncovering cross-process injection with Windows Defender ATP” 2017 年 3 月 8 日 米国時...
Microsoft Windows Kernel Elevation of Privilege Vulnerability (CNVD-2016-07613)
Microsoft Windows is a series of operating systems released by Microsoft Corporation in the United States. kernel is one of the kernels. An elevation of privilege vulnerability exists in the Microsoft Windows kernel. When the kernel API executes privileges, an attacker can exploit the vulnerabili...
Microsoft Windows Information Disclosure Vulnerability (CNVD-2016-04959)
Microsoft Windows is a series of operating systems released by Microsoft Corporation in the United States. kernel is one of the kernels. An information disclosure vulnerability exists in the Microsoft Windows kernel due to a program's failure to properly handle page-specific error system calls. A...
Google Chrome memory corruption vulnerability (CNVD-2016-02816)
Google Chrome is a popular web browser. A memory corruption vulnerability exists in the Google Chrome cross-process framework, which allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into being parsed by the user to crash the application or...
Security update for Chromium (important)
Chromium was updated to 50.0.2661.94 to fix a number of vulnerabilities boo977830: - CVE-2016-1660: Out-of-bounds write in Blink - CVE-2016-1661: Memory corruption in cross-process frames - CVE-2016-1662: Use-after-free in extensions - CVE-2016-1663: Use-after-free in BlinkâÂÂs V8 bindings -...
chromium-browser: memory corruption in cross-process frames
Blink, as used in Google Chrome before 50.0.2661.94, does not ensure that frames satisfy a check for the same renderer process in addition to a Same Origin Policy check, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a...
Android-libcutils library integer overflow leading to heap damage vulnerability discovery and exploit-vulnerability warning-the black bar safety net
Before reading this article, you best understand the Android Binder mechanism, for graphics system BufferQueue principle, the heap Manager jemalloc the basic principles. This article describes how to use the libcutils library stack damage vulnerability get systemserver permissions, this...
Apple iOS XPC Message Handling Memory Corruption Vulnerability
Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability in the handling of special XPC messages in Apple iOS allows remote attackers to exploit the vulnerability to submit special messages to execute arbitrary code...
Apple MAC OS X Yosemite XPC Message Handling Type Obfuscation Vulnerability
Apple MAC OS X Yosemite is the latest operating system developed by Apple. Apple MAC OS X Yosemite Handling of coresymbolicationd Handling of XPC messages suffers from a type obfuscation vulnerability that allows an attacker to construct a malicious application and trick a user into parsing it,...
FreeBSD 4.4 AIO Library Cross Process Memory Write Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3661/info aio.h is a library implementing the POSIX standard for asynchronous I/O. Support for AIO may be enabled in FreeBSD by compiling the kernel with the VFSAIO option. This option is not enabled in the default kernel...
FreeBSD : chromium -- multiple vulnerabilities (ce84e136-e2f6-11e1-a8ca-00262d5ed8ee)
Google Chrome Releases reports : Linux only 125225 Medium CVE-2012-2846: Cross-process interference in renderers. Credit to Google Chrome Security Team Julien Tinnes. 127522 Low CVE-2012-2847: Missing re-prompt to user upon excessive downloads. Credit to Matt Austin of Aspect Security. 127525...
Google Chrome Multiple Vulnerabilities - August 12 (Linux)
This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnaug12lin.nasl 5963 2017-04-18 09:02:14Z teissa $ Google Chrome Multiple Vulnerabilities - August 12 Linux Authors: Madhuri D Copyright: Copyright c 2012...
Design/Logic Flaw
Google Chrome before 21.0.1180.57 on Linux does not properly isolate renderer processes, which allows remote attackers to cause a denial of service cross-process interference via unspecified vectors...
CVE-2012-2846
CVE-2012-2846 is a Chromium/Chrome vulnerability affecting Linux where renderer process isolation fails, enabling cross-process interference that could lead to a denial of service. Connected advisories (GLSA 201208-03) tie this family of issues to Chromium and recommend upgrading to Chrome/Chromi...
