YARA Buffer Overflow Vulnerability

YARA is a set of tools used to help software researchers identify and categorize malware samples. A security vulnerability exists in the 'yrexecutecode' function of the libyara/exec.c file in YARA. The vulnerability can be exploited by an attacker to execute code out-of-bounds writing with the he...

CVE-2018-11707

FastStone Image Viewer 6.2 is affected by a vulnerability in FSViewer.exe where a malformed JPEG causes a User-Mode Read/Execute access violation at 0x0057898e. Root cause: improper handling of certain JPEG input leads to memory error when the user opens the file. Impact: Denial of Service via cr...

CVE-2018-11707

FastStone Image Viewer 6.2 has a User Mode Read and Execute AV at 0x0057898e, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS Access Violation or possibly unspecified other impact...

PT-2018-10766

Name of the Vulnerable Software and Affected Versions FastStone Image Viewer version 6.2 Description The issue occurs when a malformed JPEG file is opened, causing a User Mode Read and Execute AV at memory address 0x0057898e due to mishandling by FSViewer.exe. This could lead to a Denial of Servi...

CVE-2018-11707: Improper Restriction of Operations within the Bounds of a Memory Buffer

FastStone Image Viewer 6.2 has a User Mode Read and Execute AV at 0x0057898e, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS Access Violation or possibly unspecified other impact...

CVE-2018-9021

An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary commands with specially crafted requests...

CVE-2018-12532

JBoss RichFaces 4.5.3 through 4.5.17 allows unauthenticated remote attackers to inject an arbitrary expression language EL variable mapper and execute arbitrary Java code via a MediaOutputResource's resource request, aka RF-14309...

CVE-2018-12532

JBoss RichFaces 4.5.3 through 4.5.17 allows unauthenticated remote attackers to inject an arbitrary expression language EL variable mapper and execute arbitrary Java code via a MediaOutputResource's resource request, aka RF-14309...

Security Bulletin: Vulnerabilities in wget affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in wget. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2017-13090 DESCRIPTION: GNU wget is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the fdreadbody function in src/retr.c. By...

Security Bulletin: A vulnerability in nss affects PowerKVM

Summary PowerKVM is affected by a vulnerability in nss. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-7805 DESCRIPTION: Mozilla Firefox could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free in TLS 1.2 generating handsha...

Security Bulletin: Vulnerabilities in GNU Bash affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in GNU Bash. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2016-9401 DESCRIPTION: GNU Bash could allow a local attacker to bypass security restrictions, caused by a use-after-free error. An attacker could exploit this...

Security Bulletin: A vulnerability in ghostscript affects PowerKVM

Summary PowerKVM is affected by a vulnerability in ghostscript. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-8291 DESCRIPTION: Artifex Ghostscript could allow a remote attacker to execute arbitrary commands on the system. By using .rsdparams type confusion with ...

Security Bulletin: Vulnerabilities in Struts affect IBM Systems Director (ISD) Server (CVE-2016-1181, CVE-2016-1182)

Summary Struts vulnerabilities affect ISD Server. ISD Server has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-1181 DESCRIPTION: Apache Struts could allow a remote attacker to execute arbitrary code on the system, caused by the failure to protect against unintended remote...

Security Bulletin: Multiple vulnerabilities in libtiff affect PowerKVM

Summary PowerKVM is affected by several vulnerabilities in libtiff. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2014-8127 DESCRIPTION: LibTIFF is vulnerable to a denial of service, caused by an out-of-bound read error in multiple tools. A remote attacker could exploit th...

Security Bulletin: A vulnerability in git affects PowerKVM (CVE-2015-7545)

Summary PowerKVM is affected by a vulnerability in git. This vulnerability is now fixed. Vulnerability Details CVEID: CVE-2015-7545 DESCRIPTION: GIT could allow a remote attacker to execute arbitrary commands on the system, caused by the failure to properly handle recursive clones of git...

Security Bulletin: Multiple vulnerabilities in file affect PowerKVM

Summary PowerKVM is affected by several vulnerabilities in file. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2014-3587 DESCRIPTION: PHP is vulnerable to a denial of service, caused by an incomplete fix related to the cdfreadpropertyinfo function. A remote attacker could...

Security Bulletin: PowerKVM is affected by glibc vulnerabilities (Multiple CVEs)

Summary PowerKVM is affected by multiple glibc vulnerabilities. Vulnerability Details CVEID: CVE-2014-6040 DESCRIPTION: The GNU C Library glibc is vulnerable to a denial of service, caused by the improper validation of input by the iconv function when converting IBM933, IBM935, IBM937, IBM939 or...

Security Bulletin: Multiple Kerberos (krb5) vulnerabilities affect PowerKVM (Multiple CVEs)

Summary PowerKVM is affected by several vulnerabilities in Kerberos krb5. Vulnerability Details CVEID: CVE-2014-5352 DESCRIPTION: MIT krb5 could allow a remote authenticated attacker to execute arbitrary code on the system,, caused by a double-free error in gssprocesscontexttoken. An attacker cou...

Security Bulletin: Multiple Samba vulnerabilities affect IBM SONAS

Summary IBM SONAS is shipped with Samba, for which a fix is available for security vulnerabilities. Vulnerability Details Samba is used in IBM SONAS to enable file management and authentication services for Microsoft Windows environments. CVEID: CVE-2017-15275 DESCRIPTION: Samba could allow a...

Security Bulletin: Vulnerabilities in GNU Bash affect the IBM FlashSystem model V840

Summary There are vulnerabilities in GNU Bash to which the IBM FlashSystem™ V840 is susceptible. An exploit of these vulnerabilities CVE-2016-0634, CVE-2016-7543, CVE-2016-9401 could make the system susceptible to an attack which could allow an attacker to execute arbitrary code and commands on t...