Denial Of Service (DoS) Through Integer Underflow

libgdkpixbuf-2.0.so is vulnerable to denial of service DoS attacks. A malicious user can pass an ICO file to the loadresources function in io-icns.c to cause an integer underflow, crashing the application...

XnView Multiple Denial of Service Vulnerabilities (Aug 2018)

XnView is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xnview:xnview";...

CVE-2018-15174

XnView 2.45 allows remote attackers to cause a denial of service Read Access Violation at the Instruction Pointer and application crash or possibly have unspecified other impact via a crafted ICO file...

CVE-2018-15174

XnView 2.45 allows remote attackers to cause a denial of service Read Access Violation at the Instruction Pointer and application crash or possibly have unspecified other impact via a crafted ICO file...

Design/Logic Flaw

XnView 2.45 allows remote attackers to cause a denial of service Read Access Violation at the Instruction Pointer and application crash or possibly have unspecified other impact via a crafted ICO file...

CVE-2018-15174

XnView 2.45 allows remote attackers to cause a denial of service Read Access Violation at the Instruction Pointer and application crash or possibly have unspecified other impact via a crafted ICO file...

CVE-2018-15174

XnView 2.45 is affected by CVE-2018-15174. A crafted ICO file can remotely trigger a denial of service via a Read Access Violation at the Instruction Pointer, potentially causing an application crash or related impact. This CVE is corroborated across multiple sources (e.g., Red Hat, NVD, CNVD, Op...

KICKICO Hacked: Cybercriminal Steals $7.7 Million from ICO Platform

Again some bad news for cryptocurrency users. KICKICO, a blockchain-based initial coin offering ICO support platform, has fallen victim to a suspected cyber attack and lost more than 70 million KICK tokens or KickCoins worth an estimated $7.7 million. In a statement released on its Medium post on...

ICO hacked: Hackers steal $8 million from KICKICO Blockchain network

By Waqas Another day, another ICO hacked. This time, KICKICO, an Initial Coin Offering ICO project that lets users conduct ICOs, pre-ICOs, crowdfunding and crowdinvesting campaigns have suffered a security breach and as a result, hackers have stolen more than 70 million KickCoins which is around...

Denial Of Service (DoS) Through Out-of-Bounds Write

libgdkpixbuf-2.0.so is vulnerable to denial of service DoS attacks. A malicious user can pass a ICO file to the OneLine32 function in io-ico.c, causing a out-of-bounds write that can crash the application...

A week in security (July 9 – July 15)

Last week, we talked about domestic abuse fuelled by IoT, doing threat intel programs right, blocking ICO fraud, and man-in-the-middle attacks. We also explained why we block shady ad blockers and provided tips to online shoppers for Prime Day. Other news: Reports revealed that low-end Android...

Block all or nothing to prevent ICO fraud?

At Malwarebytes, we feel we have reached a point where we need to ask our customers how to proceed on the subject of ICO scams. Asking for your opinion may seem strange to some of you, but Malwarebytes comes from a community of mutual help and trust. If you were unaware of this, reading how our C...

CVE-2018-13686

The mintToken function of a smart contract implementation for ICO Dollar ICOD, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

Integer overflow

The mintToken function of a smart contract implementation for ICO Dollar ICOD, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13686

CVE-2018-13686 concerns the mintToken function of the ICOD Ethereum token smart contract. The root cause is an integer overflow in mintToken that allows the contract owner to set the balance of an arbitrary address to any value, effectively compromising balances. The affected component is the min...

CVE-2018-13561

The CVE-2018-13561 entry concerns a smart contract issue in YourCoin (ICO), Contract Name ETH033, where the mintToken function contains an integer overflow that allows the contract owner to set any user’s balance to an arbitrary value. This is the stated vulnerability and impact: an owner-control...

CVE-2018-13686

The mintToken function of a smart contract implementation for ICO Dollar ICOD, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13218

The sell function of a smart contract implementation for ICO Dollar ICOD, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

CVE-2018-13198

The sell function of a smart contract implementation for STeX Exchange ICO STE, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

Integer overflow

The sell function of a smart contract implementation for STeX Exchange ICO STE, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...