Description of the Security Only update for .NET Framework 2.0 SP2 and 3.0 SP2 for Windows Server 2008 SP2 (KB 4095513)

Description of the Security Only update for .NET Framework 2.0 SP2 and 3.0 SP2 for Windows Server 2008 SP2 KB 4095513 Summary This update resolves a vulnerability in Microsoft .NET Framework that could cause denial of service when .NET Framework and .NET core components process XML documents...

Description of the Security and Quality Rollup for .NET Framework 3.5 for Windows Server 2012 (KB 4095872)

Description of the Security and Quality Rollup for .NET Framework 3.5 for Windows Server 2012 KB 4095872 Notice This update is included in the June 2018 Preview of the Quality Rollups for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7 and 4.7.1 for Windows Server 2012 KB 4291495. This update w...

Foxit Reader U3D Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

poi: Parsing of multiple file types can cause a denial of service via infinite loop or out of memory exception

Apache POI in versions prior to release 3.17 are vulnerable to Denial of Service Attacks: 1 Infinite Loops while parsing crafted WMF, EMF, MSG and macros POI bugs 61338 and 61294, and 2 Out of Memory Exceptions while parsing crafted DOC, PPT and XLS POI bugs 52372 and 61295...

Threat Outbreak Alert RuleID32566: Email Messages Distributing Malicious Software on April 26, 2018

Medium Alert ID: 57585 First Published: 2018 April 26 19:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32566 may contain the following files: Name | Si...

GravityRAT - The Two-Year Evolution Of An APT Targeting India

This blog post is authored by Warren Mercer and Paul Rascagneres. Update: 4/30 Since the publication of the blog post, one of the anti-VM capability was commented a lot on Twitter: the detection of Virtual Machines by checking the temperature of the system. We decided to add more details and...

SUSE SLED12 / SLES12 Security Update : Recommended update for LibreOffice (SUSE-SU-2018:1076-1)

LibreOffice was updated to version 6.0.3. Following new features were added : - The Notebookbar, although still an experimental feature, has been enriched with two new variants: Grouped Bar Full for Writer, Calc and Impress, and Tabbed Compact for Writer. The Special Characters dialog has been...

Bezop Cryptocurrency Server Spills 25K in Private Investor, Promoter Data

A leaky Mongo database exposed personal information, including scanned passports and driver’s licenses, of 25,000 investors and potential investors tied to the Bezop cryptocurrency, according to researchers. Kromtech Security said that it found the unprotected data on March 30, adding that it...

PT-2018-9753 · Flexpaper +1 · Flexpaperviewer +1

Name of the Vulnerable Software and Affected Versions: Vaultize Enterprise File Sharing version 17.05.31 Description: An issue was discovered where an attacker can exploit missing authorization on the FlexPaperViewer SWF reader. This allows the attacker to export files that should have been...

Threat Outbreak Alert RuleID32539: Email Messages Distributing Malicious Software on April 23, 2018

Medium Alert ID: 57558 First Published: 2018 April 23 19:25 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32539 may contain the following files: Name | Si...

PT-2018-5655 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader version 8.3.2.25013 Description: A use-after-free issue in the JavaScript engine of Foxit PDF Reader can be exploited by opening a specially crafted PDF document, allowing arbitrary code execution. This can be triggered by an...

Apple macOS High Sierra PDFKit Security Bypass Vulnerability

Apple macOS High Sierra is the United States Apple Apple company's set of Mac computers developed specifically for the operating system. PDFKit is one of the PDF document generation components. A security vulnerability exists in the PDFKit component in Apple macOS High Sierra versions prior to...

Microsoft Office: Encrypt document properties

This test checks the setting for policy OpenVAS Vulnerability Test $Id: office2013encryptdocumentproperties.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Encrypt document properties Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This...

Microsoft Office: Open Office documents as read/write while browsing

This test checks the setting for policy OpenVAS Vulnerability Test $Id: office2013openasreadwritebrowsing.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Open Office documents as read/write while browsing Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Office Information Disclosure Vulnerability (CNVD-2018-08695)

Microsoft Office 2016 is an office software suite product developed by Microsoft USA. An information disclosure vulnerability exists in Microsoft Office 2016 that stems from the program's failure to properly disclose memory contents. An attacker can exploit the vulnerability by creating specially...

Microsoft Office: Disable Smart Documents use of manifests

This test checks the setting for policy OpenVAS Vulnerability Test $Id: office2013documentmanifest.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Disable Smart Document's use of manifests Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net...

Computerinsel Photoline PSD Parsing Function Memory Corruption Vulnerability

PhotoLine is a multipurpose image and graphics editor. A memory corruption vulnerability exists in the PSD parsing feature in Computerinsel Photoline 20.53. The vulnerability can be exploited to cause out-of-bounds writes, overwrite arbitrary data, and enable code execution via specially crafted...

Security Only update for .NET Framework 3.5 SP1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, and 4.7.1 updates for Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2 (KB 4055271)

Security Only update for .NET Framework 3.5 SP1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, and 4.7.1 updates for Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2 KB 4055271 View products that this article applies to. Important If you have not been offered this security update, you may be running...

IcedID Banking Trojan Teams up with Ursnif/Dreambot for Distribution

Update: 4/11 we have corrected the detection to Ursnif/Dreambot This post was authored by Ross Gibb with research contributions from Daphne Galme, and Michael Gorelik of Morphisec, a Cisco Security Technical Alliance partner. Cisco has noticed an increase in infections by the banking trojan IcedI...

Kotti Cross-Site Request Forgery Vulnerability

Kotti is a Pythonic Web application framework based on Pyramid and SQLAlchemy , which includes a set of scalable content management system . A cross-site request forgery vulnerability exists in the local role implementation in Kotti versions prior to 1.3.2 and 2.x versions prior to 2.0.0b2. A...