Lucene search
+L

733 matches found

Cvelist
Cvelist
•added 2017/03/27 3:00 p.m.•27 views

CVE-2015-8026

Heap-based buffer overflow in the verifyvbrchecksum function in exfatfsck in exfat-utils before 1.2.1 allows remote attackers to cause a denial of service infinite loop or possibly execute arbitrary code via a crafted filesystem...

8.2AI score0.04451EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/03/27 12:00 a.m.•4 views

CVE-2015-8026: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the verifyvbrchecksum function in exfatfsck in exfat-utils before 1.2.1 allows remote attackers to cause a denial of service infinite loop or possibly execute arbitrary code via a crafted filesystem...

7.8CVSS6.7AI score0.04451EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2016/12/12 12:00 a.m.•33 views

GLSA-201612-31 : exFAT: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201612-31 exFAT: Multiple vulnerabilities Two vulnerabilities were found in exFAT. A malformed input can cause a write heap overflow or cause an endless loop. Impact : Remote attackers could execute arbitrary code or cause Denial ...

7.8CVSS7.9AI score0.04451EPSS
SaveExploits0References3
Gentoo Linux
Gentoo Linux
•added 2016/12/12 12:00 a.m.•46 views

exFAT: Multiple vulnerabilities

Background A full-featured exFAT file system implementation for Unix-like systems. Description Two vulnerabilities were found in exFAT. A malformed input can cause a write heap overflow or cause an endless loop. Impact Remote attackers could execute arbitrary code or cause Denial of Service...

7.8CVSS8.5AI score0.04451EPSS
SaveExploits0
CNVD
CNVD
•added 2015/11/07 12:00 a.m.•14 views

Microsoft exfat 'mount.c' Buffer Overflow Vulnerability

Microsoft exfat is a file system for flash memory. A buffer overflow vulnerability exists in Microsoft exfat 'mount.c' that could be exploited by an attacker to execute arbitrary code or cause a denial of service...

7.8CVSS8AI score0.04451EPSS
SaveExploits0References1
OSV
OSV
•added 2015/11/02 8:21 p.m.•9 views

MGASA-2015-0422 Updated exfat-utils package fixes security vulnerabilities

Fix heap overflow and endless loop in exfatfsck exfat-utils is a collection of tools to work with the exFAT filesystem. Fuzzing the exfatfsck with american fuzzy lop led to the discovery of a write heap overflow and an endless loop. Especially at risk are systems that are configured to run...

7.4AI score
SaveExploits0References3
Mageia
Mageia
•added 2015/11/02 8:21 p.m.•30 views

Updated exfat-utils package fixes security vulnerabilities

Fix heap overflow and endless loop in exfatfsck exfat-utils is a collection of tools to work with the exFAT filesystem. Fuzzing the exfatfsck with american fuzzy lop led to the discovery of a write heap overflow and an endless loop. Especially at risk are systems that are configured to run...

1AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2015/11/02 12:00 a.m.•0 views

PT-2015-7934

Name of the Vulnerable Software and Affected Versions exfat-utils affected versions not specified Description The issue concerns a collection of tools for working with the exFAT filesystem. Fuzzing with american fuzzy lop revealed a write heap overflow and an endless loop in exfatfsck. Systems th...

6.2AI score
SaveExploits0References4
seebug.org
seebug.org
•added 2013/04/24 12:00 a.m.•42 views

Sophos Safeguard Enterprise本地安全限制绕过漏洞(CVE-2012-4736)

BUGTRAQ ID: 59311 CVECAN ID: CVE-2012-4736 Sophos Safeguard Enterprise是磁盘加密解决方案。 SafeGuard Enterprise 6.0 及其他版本内的Device Encryption Client组件存在安全漏洞,该漏洞源于启用基于卷的加密策略并使用用户定义的密钥时,组件没有正确地阻止使用exFAT USB闪存盘,本地用户可利用此漏洞通过多次removal和reattach操作,绕过目标访问限制并复制敏感信息到设备。 0 Sophos Safeguard Enterprise 厂商补丁: Sophos ----...

3.3CVSS6.5AI score0.00447EPSS
SaveExploits1
NVD
NVD
•added 2012/08/29 10:55 p.m.•28 views

CVE-2012-4736

The Device Encryption Client component in Sophos SafeGuard Enterprise 6.0, when a volume-based encryption policy is enabled in conjunction with a user-defined key, does not properly block use of exFAT USB flash drives, which makes it easier for local users to bypass intended access restrictions a...

3.3CVSS6AI score0.00447EPSS
SaveExploits1References2
CVE
CVE
•added 2012/08/29 10:00 p.m.•62 views

CVE-2012-4736

CVE-2012-4736 affects Sophos SafeGuard Enterprise 6.0: Device Encryption Client fails to block exFAT USB drives when a volume-based policy is enabled with a user-defined key, enabling local users to copy data by removing/reattaching drives. Root cause: improper enforcement of encryption policy fo...

3.3CVSS6.1AI score0.00447EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2012/08/29 10:00 p.m.•40 views

CVE-2012-4736

The Device Encryption Client component in Sophos SafeGuard Enterprise 6.0, when a volume-based encryption policy is enabled in conjunction with a user-defined key, does not properly block use of exFAT USB flash drives, which makes it easier for local users to bypass intended access restrictions a...

6AI score0.00447EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/08/29 12:00 a.m.•4 views

CVE-2012-4736: Undefined Security Weakness

The Device Encryption Client component in Sophos SafeGuard Enterprise 6.0, when a volume-based encryption policy is enabled in conjunction with a user-defined key, does not properly block use of exFAT USB flash drives, which makes it easier for local users to bypass intended access restrictions a...

3.3CVSS5.7AI score0.00447EPSS
SaveExploits1References2
Rows per page
Query Builder