The Firmware Analysis and Comparison Tool: FACT

The Firmware Analysis and Comparison Tool formerly known as Fraunhofer’s Firmware Analysis Framework FAF is intended to automate most of the firmware analysis process. It unpacks arbitrary firmware files and processes several analysis. Additionally, it can compare several images or single files...

FreeType 2 Null Pointer Dereference Vulnerability

FreeType 2 is a software font engine characterized by being small, efficient, highly customizable and portable while producing high quality output glyph images. A null pointer dereference vulnerability exists in the InsGETVARIATION function in ttinterp.c in FreeType 2. An attacker could exploit...

Description of the security update for Office 2013: January 9, 2018

Description of the security update for Office 2013: January 9, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...

CVE-2017-17789

In GIMP 2.8.22, there is a heap-based buffer overflow in readchanneldata in plug-ins/common/file-psp.c...

With 1.4 Billion Stolen Log-Ins on the Dark Web, it’s Time to Take Password Management Seriously

Last week you may have seen some worrying news: researchers probing the darkest corners of the underground web found a secret trove containing 1.4 billion breached usernames and passwords. Yes, that’s right: 1.4 BILLION. Yours might very well be among them, and if you reuse the same password acro...

CVE-2017-15528

CVE-2017-15528 affects the Norton Security for Mac installer (pre-7.6). The vulnerability is a failure to properly validate SSL certificates during HTTPS connections, enabling a man‑in‑the‑middle where an attacker can spoof a valid server and modify or spoof content retrieved over HTTPS. The prac...

Description of the security update for Outlook 2016: September 12, 2017

None None...

Artifex Ghostscript GhostXPS Denial of Service Vulnerability (CNVD-2017-22388)

Artifex Ghostscript is an open source PostScript a page description language and programming language for the electronics industry and desktop publishing parser from Artifex Software. A security vulnerability exists in the 'InsMDRP' function of the base/ttinterp.c file in Artifex Ghostscript...

Artifex Ghostscript GhostXPS heap buffer overflow vulnerability (CNVD-2017-22392)

Artifex Ghostscript is an open source PostScript a page description language and programming language for the electronics industry and desktop publishing parser from Artifex Software. A security vulnerability exists in the 'InsIP' function of the base/ttinterp.c file in Artifex Ghostscript GhostX...

Artifex Ghostscript GhostXPS heap buffer overflow vulnerability (CNVD-2017-22393)

Artifex Ghostscript is an open source PostScript a page description language and programming language for the electronics industry and desktop publishing parser from Artifex Software. A security vulnerability exists in the 'InsMIRP' function of the base/ttinterp.c file in Artifex Ghostscript...

CVE-2017-9611

The InsMIRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly have unspecified other impact via a crafted document...

DEBIAN-CVE-2017-9611

The InsMIRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly have unspecified other impact via a crafted document...

UBUNTU-CVE-2017-9611

The InsMIRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly have unspecified other impact via a crafted document...

Description of the security update for Outlook 2013: June 13, 2017

Description of the security update for Outlook 2013: June 13, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...

Description of the security update for Outlook 2016: June 13, 2017

None None...

GStreamer plug-ins: User-assisted execution of arbitrary code

Background The GStreamer plug-ins provide decoders to the GStreamer open source media framework. Description Multiple vulnerabilities have been discovered in various GStreamer plug-ins. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user or...

GLSA-201705-10 : GStreamer plug-ins: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201705-10 GStreamer plug-ins: User-assisted execution of arbitrary code Multiple vulnerabilities have been discovered in various GStreamer plug-ins. Please review the CVE identifiers referenced below for details. Impact : A remote...

[SECURITY] Fedora 26 Update: gstreamer1-plugins-bad-free-1.12.0-1.fc26

GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins that aren't tested well enough, or the code is not of good enough quality...

EulerOS 2.0 SP2 : gstreamer1-plugins-bad-free (EulerOS-SA-2017-1007)

According to the versions of the gstreamer1-plugins-bad-free package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An integer overflow flaw, leading to a heap-based buffer overflow, was found in GStreamer's VMware VMnc video file format...

[SECURITY] Fedora 25 Update: python-sleekxmpp-1.3.2-1.fc25

SleekXMPP is a flexible XMPP library for python that allows you to create clients, components or servers for the XMPP protocol. Plug-ins can be create to cover every current or future XEP...