CVE-2017-9961

A vulnerability exists in Schneider Electric's Pro-Face GP Pro EX version 4.07.000 that allows an attacker to execute arbitrary code. Malicious code installation requires an access to the computer. By placing a specific DLL/OCX file, an attacker is able to force the process to load arbitrary DLL...

CVE-2017-9961

A vulnerability exists in Schneider Electric's Pro-Face GP Pro EX version 4.07.000 that allows an attacker to execute arbitrary code. Malicious code installation requires an access to the computer. By placing a specific DLL/OCX file, an attacker is able to force the process to load arbitrary DLL...

Code injection

A vulnerability exists in Schneider Electric's Pro-Face GP Pro EX version 4.07.000 that allows an attacker to execute arbitrary code. Malicious code installation requires an access to the computer. By placing a specific DLL/OCX file, an attacker is able to force the process to load arbitrary DLL...

CVE-2017-9961

A vulnerability exists in Schneider Electric's Pro-Face GP Pro EX version 4.07.000 that allows an attacker to execute arbitrary code. Malicious code installation requires an access to the computer. By placing a specific DLL/OCX file, an attacker is able to force the process to load arbitrary DLL...

CVE-2017-9961

Schneider Electric Pro-face GP-Pro EX (software) version 4.07.000 is affected by CVE-2017-9961: an Uncontrolled Search Path Element vulnerability (CWE-427) that can force a process to load an arbitrary DLL and execute code in the current process context. Exploitation is local (not remote) and req...

Schneider Electric Pro-Face WinGP Arbitrary Code Execution Vulnerability

Pro-Face GP Pro-Server EX is the HMI development software of choice for supporting dedicated and open HMI PC-based solutions. An arbitrary code execution vulnerability exists in Schneider Electric Pro-Face WinGP, which can be exploited by an attacker to force the process to load an arbitrary DLL...

June 27, 2017—KB4022716 (OS Build 15063.447)

None None...

Combining fonts

I love the font Just Another Hand, I use it a lot in diagrams during my talks: Here it is! Yay! The thing is, I don't like the positioning of the hyphen & equals glyphs… Cache-Control: max-age=3600 They look awkwardly positioned – they sit too high. Thankfully CSS lets you merge fonts together, s...

Combining fonts

&&&& I love the font Just Another Hand, I use it a lot in diagrams during my talks: Here it is! Yay! The thing is, I don't like the positioning of the hyphen & equals glyphs… Cache-Control: max-age=3600 They look awkwardly positioned – they sit too high. Thankfully CSS lets you merge fonts...

FreeType 2 'TT_Get_MM_Var' Function Denial of Service Vulnerability

FreeType 2 is a C-based, portable open source font engine library that can be used to rasterize and map characters to bitmaps as well as provide support for other font-related operations. A security vulnerability exists in the 'sfntinitface' function in the sfnt/sfobjs.c file and the 'TTGetMMVar'...

PT-2017-17958 · Freetype +1 · Freetype +1

Name of the Vulnerable Software and Affected Versions: FreeType 2 versions prior to 2017-03-08 Description: The issue is caused by a heap-based buffer overflow related to the TT Get MM Var function in truetype/ttgxvar.c and the sfnt init face function in sfnt/sfobjs.c, resulting in an out-of-boun...

PT-2017-17959 · Freetype +1 · Freetype +1

Name of the Vulnerable Software and Affected Versions: FreeType 2 versions prior to 2017-03-07 Description: The issue is related to an out-of-bounds write in the TT Get MM Var function in truetype/ttgxvar.c and the sfnt init face function in sfnt/sfobjs.c. Recommendations: For versions prior to...

Free Likes Face prank - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Free Likes Face prank published at the 'play' market has multiple vulnerabilities...

UBUNTU-CVE-2017-5402

A use-after-free can occur when events are fired for a "FontFace" object after the object has been already been destroyed while working with fonts. This results in a potentially exploitable crash. This vulnerability affects Firefox 52, Firefox ESR 45.8, Thunderbird 52, and Thunderbird 45.8...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks. These attacks are possible because it doesn't ensure that pre-established digits and word array dimensions satisfy a required mathematical relationship. This flaw allows attacks to use X-Face image data to cause out-of-bounds array access and...

Find Face - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Find Face published at the 'play' market has multiple vulnerabilities...

Police Scan 117 Million Driving Licence Photos for Face Recognition Database

Your driver's license photo could be scarier than it actually looks — Well, here's why: With the help of state driver's license data, U.S. law enforcement agencies have created a huge a face-recognition database of more than 117 Million American adults that are regularly scanned in the course of...

The vulnerabilities in operating systems such as Mac OS X and iOS allow attackers to replace the signal that indicates the end of transmission, or gain access to protected audio information.

The vulnerability of the FaceTime component in Mac OS X and iOS operating systems is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to replace the signal that indicates the end of transmission, or gain access to protected audio informati...

Pro-face GP-Pro EX Security Bypass Vulnerability

Pro-face GP-Pro EX is a set of HMI screen editing and logic programming software. The Pro-face GP-Pro EX's FTP server uses hard-coded credentials, allowing remote attackers to exploit the vulnerability to access items in the device and obtain sensitive information...

Pro-face GP-Pro EX Denial of Service Vulnerability

Pro-face GP-Pro EX is a set of HMI screen editing and logic programming software from American Pro-face. A security vulnerability exists in Pro-face GP-Pro EX. A remote attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service read across boundaries...