WPS Office 2016 - .xls Heap Memory Corruption

WPS Office 2016 - .xls Heap Memory Corruption Application: WPS Office Platforms: Windows Versions: Version 2016 Author: Francis Provencher of COSIG Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1 Introduction =============== WPS Office an acronym for...

WPS Office < 2016 - '.ppt' Heap Memory Corruption

Application: WPS Office Platforms: Windows Versions: Version before 2016 Author: Francis Provencher of COSIG Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1 Introduction =============== WPS Office an acronym for Writer, Presentation and Spreadsheets,2...

WPS Office < 2016 - '.ppt' Heap Memory Corruption

Exploit for windows platform in category dos / poc Application: WPS Office Platforms: Windows Versions: Version before 2016 Author: Francis Provencher of COSIG Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1 Introduction =============== WPS Office an...

WPS Office < 2016 - '.xls' Heap Memory Corruption

Application: WPS Office Platforms: Windows Versions: Version 2016 Author: Francis Provencher of COSIG Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1 Introduction =============== WPS Office an acronym for Writer, Presentation and Spreadsheets,2...

DEBIAN-CVE-2015-8792

The KaxInternalBlock::ReadData function in libMatroska before 1.4.4 allows context-dependent attackers to obtain sensitive information from process heap memory via crafted EBML lacing, which triggers an invalid memory access...

CVE-2015-8792

The KaxInternalBlock::ReadData function in libMatroska before 1.4.4 allows context-dependent attackers to obtain sensitive information from process heap memory via crafted EBML lacing, which triggers an invalid memory access...

DEBIAN-CVE-2015-8791

The EbmlElement::ReadCodedSizeValue function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted length value in an EBML id, which triggers an invalid memory access...

CVE-2015-8791

The EbmlElement::ReadCodedSizeValue function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted length value in an EBML id, which triggers an invalid memory access...

DEBIAN-CVE-2015-8790

The EbmlUnicodeString::UpdateFromUTF8 function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted UTF-8 string, which triggers an invalid memory access...

CVE-2015-8790

The EbmlUnicodeString::UpdateFromUTF8 function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted UTF-8 string, which triggers an invalid memory access...

VideoLAN VLC Media Player 2.2.1 - .mp4 Heap Memory Corruption

VideoLAN VLC Media Player 2.2.1 - .mp4 Heap Memory Corruption Application: VLC media player Platforms: Windows Versions: Version 2.2.1 Author: Francis Provencher of COSIG Website: http://www.protekresearchlab.com/ Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technical details 4 POC...

VideoLAN VLC Media Player 2.2.1 - '.mp4' Heap Memory Corruption

Exploit for windows platform in category dos / poc Application: VLC media player Platforms: Windows Versions: Version 2.2.1 Author: Francis Provencher of COSIG Website: http://www.protekresearchlab.com/ Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1...

VideoLAN VLC Media Player 2.2.1 - '.mp4' Heap Memory Corruption

Application: VLC media player Platforms: Windows Versions: Version 2.2.1 Author: Francis Provencher of COSIG Website: http://www.protekresearchlab.com/ Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1 Introduction =============== VLC media player common...

Amazon Linux: Security Advisory (ALAS-2016-633)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PDF-XChange Viewer 2.5.315.0 - Shading Type 7 Heap Memory Corruption

PDF-XChange Viewer 2.5.315.0 - Shading Type 7 Heap Memory Corruption Title: PDF-XChange Viewer - Shading Type 7 Heap Memory Corruption Application: PDF-XChange Viewer Version 2.5.315.0 Platform: Windows Software Link: http://www.tracker-software.com/ Date: 2015-11-15 Author: Sébastien Morin from...

PDF-XChange Viewer 2.5.315.0 - Shading Type 7 Heap Memory Corruption

Exploit for windows platform in category dos / poc Title: PDF-XChange Viewer - Shading Type 7 Heap Memory Corruption Application: PDF-XChange Viewer Version 2.5.315.0 Platform: Windows Software Link: http://www.tracker-software.com/ Date: 2015-11-15 Author: Sébastien Morin from COSIG Contact:...

PDF-XChange Viewer 2.5.315.0 - Shading Type 7 Heap Memory Corruption

Title: PDF-XChange Viewer - Shading Type 7 Heap Memory Corruption Application: PDF-XChange Viewer Version 2.5.315.0 Platform: Windows Software Link: http://www.tracker-software.com/ Date: 2015-11-15 Author: Sébastien Morin from COSIG Contact: https://twitter.com/COSIG @COSIG Personal contact:...

Medium: libldb

Issue Overview: A denial of service flaw was found in the ldbwildcardcompare function of libldb. A remote attacker could send a specially crafted packet that, when processed by an application using libldb for example the AD LDAP server in Samba, would cause that application to consume an excessiv...

libldb: remote memory read in the Samba LDAP server

A memory-read flaw was found in the way the libldb library processed LDB DN records with a null byte. An authenticated, remote attacker could use this flaw to read heap-memory pages from the server...

libldb: remote memory read in the Samba LDAP server

A memory-read flaw was found in the way the libldb library processed LDB DN records with a null byte. An authenticated, remote attacker could use this flaw to read heap-memory pages from the server...