Two Zero-Day Exploits Found After Someone Uploaded 'Unarmed' PoC to VirusTotal

Security researchers at Microsoft have unveiled details of two critical and important zero-day vulnerabilities that had recently been discovered after someone uploaded a malicious PDF file to VirusTotal, and get patched before being used in the wild. In late March, researchers at ESET found a...

Two Zero-Day Exploits Found After Someone Uploaded 'Unarmed' PoC to VirusTotal

Security researchers at Microsoft have unveiled details of two critical and important zero-day vulnerabilities that had recently been discovered after someone uploaded a malicious PDF file to VirusTotal, and get patched before being used in the wild. In late March, researchers at ESET found a...

Taking apart a double zero-day sample discovered in joint hunt with ESET

In late March 2018, I analyzed an interesting PDF sample found by ESET senior malware researcherAnton Cherepanov. The sample was initially reported to Microsoft as a potential exploit for an unknown Windows kernel vulnerability. During my investigation in parallel with ESET researchers, I was...

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of June 25, 2018

I have never reverse engineered anything, but I did dismantle a Betamax VCR and put it back together without an instruction manual. My little brother liked to use the tape slot as a garage for his Hot Wheels® toy cars. We were usually able to take out the cars without any issues, but one day, he...

capstone/fuzz_disasmmaster: Use-of-uninitialized-value in update_pub_insn

Detailed report: https://oss-fuzz.com/testcase?key=5956930588639232 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmmaster Fuzz target binary: fuzzdisasmmaster Job Type: libfuzzermsancapstone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: updatepubinsn...

Microsoft Windows: Automatic Updates: Scheduled install day

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winautoupdatesschedule.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Configure Automatic Updates: Scheduled install day Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

night-and-day-pa.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-637439 Description| Value ---|--- Affected Website:| night-and-day-pa.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

libwebp/fuzz_demux_api: Heap-buffer-overflow in GetLE16

Project: https://chromium.googlesource.com/webm/libwebp Detailed report: https://oss-fuzz.com/testcase?key=5660739309142016 Project: libwebp Fuzzer: libFuzzerlibwebpfuzzdemuxapi Fuzz target binary: fuzzdemuxapi Job Type: libfuzzerasanlibwebp Platform Id: linux Crash Type: Heap-buffer-overflow REA...

freetype2/ftfuzzer: Crash in TT_Load_Glyph_Header

Project: https://github.com/freetype/freetype2-testing.git Detailed report: https://oss-fuzz.com/testcase?key=6025339888205824 Project: freetype2 Fuzzer: libFuzzerfreetype2ftfuzzer Fuzz target binary: ftfuzzer Job Type: libfuzzerubsanfreetype2 Platform Id: linux Crash Type: UNKNOWN READ Crash...

openvswitch/ofp_print_fuzzer: Heap-buffer-overflow in get_be16

Project: https://github.com/openvswitch/ovs.git Detailed report: https://oss-fuzz.com/testcase?key=6502620041576448 Project: openvswitch Fuzzer: libFuzzeropenvswitchofpprintfuzzer Fuzz target binary: ofpprintfuzzer Job Type: libfuzzerasanopenvswitch Platform Id: linux Crash Type:...

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of June 18, 2018

As I pull together the list of zero-day filters for this blog, I see all types of vulnerabilities from various vendors. My interest is always piqued when I see a vulnerability affecting a security company. The Zero Day Initiative’s ZDI interest was also piqued when the researcher Pagefault...

dlplibs/cdrfuzzer: Heap-buffer-overflow in libcdr::CDRStylesCollector::collectBmp

Detailed report: https://oss-fuzz.com/testcase?key=5671084106973184 Project: dlplibs Fuzzer: libFuzzerdlplibscdrfuzzer Fuzz target binary: cdrfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60900000c5f7 Crash State:...

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of June 11, 2018

As a native Texan, I’ve seen more than my fair share of bugs - actual physical bugs that love the hot, humid Texas climate and my curly hair for some reason. The Zero Day Initiative ZDI sees many bugs of the software variety, including those that affect SCADA control systems. Fritz Sands recently...

skia/skottie_json: Heap-buffer-overflow in skjson::skip_ws

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=6009432050761728 Project: skia Fuzzer: libFuzzerskiaskottiejson Fuzz target binary: skottiejson Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

capstone/fuzz_disasmnext: Index-out-of-bounds in set_mem_access

Detailed report: https://oss-fuzz.com/testcase?key=6216506651181056 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmnext Fuzz target binary: fuzzdisasmnext Job Type: libfuzzerubsancapstone Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: setmemaccess...

Exploit kits: Spring 2018 review

Since our last report on exploit kits, there have been some new developments with the wider adoption of the February Flash zero-day, as well as the inclusion of a new exploit for Internet Explorer. We have not seen that many changes in the drive-by landscape for a long time, although these are th...

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of June 4, 2018

It was a busy day yesterday, with Adobe issuing four emergency patches for their Flash Player, including one for a zero-day being actively exploited in the wild. Adobe has indicated that CVE-2018-5002 was discovered being used in limited, targeted attacks on Windows users in the wild. The attacks...

Adobe Patches Zero-Day Flash Flaw

Adobe has released an emergency update to address a critical security hole in its Flash Player browser plugin that is being actively exploited to deploy malicious software. If you've got Flash installed -- and if you're using Google Chrome or a recent version of Microsoft Windows you do -- it's...

Adobe Issues Patch for Actively Exploited Flash Player Zero-Day Exploit

If you have already uninstalled Flash player, well done! But if you haven't, here's another great reason for ditching it. Adobe has released a security patch update for a critical vulnerability in its Flash Player software that is actively being exploited in the wild by hackers in targeted attack...

Adobe Issues Patch for Actively Exploited Flash Player Zero-Day Exploit

If you have already uninstalled Flash player, well done! But if you haven't, here's another great reason for ditching it. Adobe has released a security patch update for a critical vulnerability in its Flash Player software that is actively being exploited in the wild by hackers in targeted attack...