Fedora 37 : lilypond / lilypond-doc (2023-fb8bc496c2)

The remote Fedora 37 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-fb8bc496c2 advisory. Fix for CVE-2020-17354 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

CVE-2020-17354

LilyPond before 2.24 allows attackers to bypass the -dsafe protection mechanism via output-def-lookup or output-def-scope, as demonstrated by dangerous Scheme code in a .ly file that causes arbitrary code execution during conversion to a different file format. NOTE: in 2.24 and later versions, sa...

How To Do Firmware Analysis. Tools, Tips, and Tricks

So, you’ve got a firmware dump. Perhaps a raw read off a chip? An update file you downloaded off the internet? Now what? Taking a firmware dump and turning it into something useful can sometimes be painful. Sometimes you’ll be faced with proprietary barely documented file formats, strange raw dat...

ImageMagick remote execution vulnerability analysis and exploit-vulnerability warning-the black bar safety net

1.1 ImageMagick description 1. ImageMagick description ImageMagick is a set of powerful, stable and open source set of tools and development kits that can be used to read, write and process the more than 8 9 basic format of the picture file, including the popular TIFF, JPEG, GIF, PNG, PDF, and...

[SECURITY] Fedora 18 Update: optipng-0.7.4-1.fc18

OptiPNG is a PNG optimizer that recompresses image files to a smaller size, without losing any information. This program also converts external formats BMP, GIF, PNM and TIFF to optimized PNG, and performs PNG integrity checks and corrections...

O3Read 0.0.3 - HTML Parser Buffer Overflow

source: https://www.securityfocus.com/bid/12000/info o3read is prone to a buffer overflow vulnerability. This issue is exposed when the program parses HTML content during file format conversion. This issue is considered to be remote in nature since it is possible that files may originate from an...