Adobe Reader DC 15.010.20060 - Memory Corruption

Title: Adobe Reader DC = 15.010.20060 - Memory corruption Application: Adobe Reader DC Version: 15.010.20060 and earlier versions Platform: Windows and Macintosh Software Link: https://acrobat.adobe.com/ca/fr/acrobat/pdf-reader.html Date: May 10, 2016 CVE: CVE-2016-1077 Author: Pier-Luc Maltais...

Microsoft Windows Win32k Elevation of Privilege (MS16-062: CVE-2016-0171)

An elevation of privilege vulnerability exists in the Windows Kernel. The vulnerability is due to the way Windows handles DC surface. A remote attacker can exploit this vulnerability by enticing a user to run a specially crafted application...

Microsoft Win32k Elevation of Privilege (MS16-062: CVE-2016-0173)

An elevation of privilege vulnerability exists in the Windows Kernel. The vulnerability is caused when Microsoft Windows improperly deals with DC Device context surface. A remote attacker can exploit this vulnerability by running a specially crafted application...

Adobe Reader DC 15.010.20060 - Memory Corruption

Adobe Reader DC 15.010.20060 - Memory Corruption Title: Adobe Reader DC = 15.010.20060 - Memory corruption Application: Adobe Reader DC Version: 15.010.20060 and earlier versions Platform: Windows and Macintosh Software Link: https://acrobat.adobe.com/ca/fr/acrobat/pdf-reader.html Date: May 10,...

Adobe Reader DC XFA Page prePrint Event Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Debian: Security Advisory (DSA-3433-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 3433-1 (samba - security update)

Several vulnerabilities have been discovered in Samba, a SMB/CIFS file, print, and login server for Unix. The Common Vulnerabilities and Exposures project identifies the following issues: CVE-2015-3223 Thilo Uttendorfer of Linux Information Systems AG discovered that a malicious request can cause...

PT-2016-1977

Name of the Vulnerable Software and Affected Versions Adobe Reader versions prior to 11.0.16 Acrobat and Acrobat Reader DC Classic versions prior to 15.006.30172 Acrobat and Acrobat Reader DC Continuous versions prior to 15.016.20039 Description The issue is related to a memory leak, allowing...

PT-2016-1980

Name of the Vulnerable Software and Affected Versions Adobe Reader versions prior to 11.0.16 Adobe Acrobat versions prior to 11.0.16 Adobe Acrobat Document Cloud versions prior to 15.006.30172 Adobe Acrobat Reader DC Classic versions prior to 15.006.30172 Adobe Acrobat DC Continuous versions prio...

Memory Misreference Vulnerability in Multiple Adobe Products (CNVD-2016-02929)

Adobe Reader, etc. are the United States of America Auduby Adobe company's products. Adobe Reader is a free PDF file reader; Acrobat is a PDF file editing and conversion tools; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDF. Classic and Continuous are two update...

Security fix for the ALT Linux 8 package samba-DC version 4.4.2-alt2

4.4.2-alt2 built May 1, 2016 Andrey Cherepanov in task 164129 April 28, 2016 Andrey Cherepanov - Fix CVE-2016-2110/NTLMSSP regression https://bugzilla.samba.org/showbug.cgi?id=11849...

Adobe Reader DC Graphics State Dictionary Double Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within Graphics State...

Security fix for the ALT Linux 7 package samba-DC version 4.4.2-alt2

April 28, 2016 Andrey Cherepanov 4.4.2-alt2 - Fix CVE-2016-2110/NTLMSSP regression https://bugzilla.samba.org/showbug.cgi?id=11849...

Security fix for the ALT Linux 7 package samba-DC version 4.4.2-alt1

April 12, 2016 Andrey Cherepanov 4.4.2-alt1 - New version - Security fixes: - CVE-2015-5370 Multiple errors in DCE-RPC code - CVE-2016-2110 Man in the middle attacks possible with NTLMSSP - CVE-2016-2111 NETLOGON Spoofing Vulnerability - CVE-2016-2112 LDAP client and server don't enforce integrit...

Security fix for the ALT Linux 8 package samba-DC version 4.4.2-alt1

April 12, 2016 Andrey Cherepanov 4.4.2-alt1 - New version - Security fixes: - CVE-2015-5370 Multiple errors in DCE-RPC code - CVE-2016-2110 Man in the middle attacks possible with NTLMSSP - CVE-2016-2111 NETLOGON Spoofing Vulnerability - CVE-2016-2112 LDAP client and server don't enforce integrit...

LEGO® DC Super Heroes - Base64 encoded String, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application LEGO® DC Super Heroes published at the 'play' market has multiple vulnerabilities...

DC Comics - WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application DC Comics published at the 'play' market has multiple vulnerabilities...

New Relic: Server Side Browsing - localhost open port enumeration

Hi again to all, I've found that is possible to scan all the open ports and network information of internal instances of your amazon DC that are related with synthetics monitors. NOTE: I do not have a pro account so I can use the more advanced synthetics functions or the Insights db query to get...

Security fix for the ALT Linux 7 package samba-DC version 4.3.6-alt1

March 9, 2016 Andrey Cherepanov 4.3.6-alt1 - New version https://www.samba.org/samba/history/samba-4.3.6.html - Security fixes: - CVE-2015-7560 Incorrect ACL get/set allowed on symlink path - CVE-2016-0771 Out-of-bounds read in internal DNS server - Do not use specified GID for wbpriv group...

CVE-2016-1008: Improper Input Validation

Untrusted search path vulnerability in Adobe Reader and Acrobat before 11.0.15, Acrobat and Acrobat Reader DC Classic before 15.006.30121, and Acrobat and Acrobat Reader DC Continuous before 15.010.20060 on Windows and OS X allows local users to gain privileges via a Trojan horse DLL in an...