159 matches found
Design/Logic Flaw
The Widevine Trusted Application in Android 6.0.1 before 2016-03-01 allows attackers to obtain sensitive TrustZone secure-storage information by leveraging kernel access, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 20860039...
UBUNTU-CVE-2016-0825
The Widevine Trusted Application in Android 6.0.1 before 2016-03-01 allows attackers to obtain sensitive TrustZone secure-storage information by leveraging kernel access, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 20860039...
CVE-2016-0825
The CVE-2016-0825 issue concerns the Widevine Trusted Application on Android 6.0.1 before 2016-03-01. According to the sources, an attacker with kernel access could disclose TrustZone secure-storage information, demonstrated by obtaining Signature or SignatureOrSystem permissions. The vulnerabili...
CVE-2016-0825
The Widevine Trusted Application in Android 6.0.1 before 2016-03-01 allows attackers to obtain sensitive TrustZone secure-storage information by leveraging kernel access, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 20860039...
Caution Urged over Patched Windows USB Driver Flaw
USB-related vulnerabilities make people nervous; you need look no further than Stuxnet and BadUSB to see the dangers associated with infected portable storage devices and peripherals. Yesterday, Microsoft patched a flaw in the Windows USB Mass Storage Class Driver that could put some people on...
The vulnerability of the Android operating system allows a perpetrator to obtain confidential information and bypass security mechanisms.
The vulnerability of the Android operating system’s kernel is related to deficiencies in access control for certain functions. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information or bypass security mechanisms...
Apple iO Disk Image Processing Information Disclosure Vulnerability
Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. Apple iOS suffers from a security vulnerability in the handling of disk files that allows attackers to build malicious applications and gain access to the kernel layout...
Windows XP Zero Day Tied To Reader Flaw, Exploited in Wild
If your organization needed more incentive to move off Windows XP, a new zero-day vulnerability made public recently may be it. The bug, which is being exploited in the wild, allows local privilege escalation and kernel access. But in the bigger picture, it’s another indicator that attackers migh...
PT-2013-4224 · Microsoft · Windows Xp +8
Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2 through R2 SP1 Microsoft Windows 7 version SP1 Microsoft Windows 8 Microsof...
kernel: sysctl: restrict write access to dmesg_restrict
The sysrqsysctlhandler function in kernel/sysctl.c in the Linux kernel before 2.6.39 does not require the CAPSYSADMIN capability to modify the dmesgrestrict value, which allows local users to bypass intended access restrictions and read the kernel ring buffer by leveraging root privileges, as...
Information disclosure by setuid mount.cifs
Description The mount.cifs program allows a user to pass in the name of a credentials file or a file containing a password via several different means. When installed as a setuid program, it does not check to see whether the user would have had access to this file prior to gaining root privileges...
CVE-2002-2016
User-mode Linux UML 2.4.17-8 does not restrict access to kernel address space, which allows local users to execute arbitrary code...
Microsoft Windows Kernel Access Validation Request Buffer Overflow Vulnerability
Description The Microsoft Windows kernel is prone to a buffer overflow in the system that validates access requests. Successful exploits could allow arbitrary code to run in the context of the kernel. Only local users can exploit this vulnerability. Technologies Affected Microsoft Windows 2000...
PT-2004-1600 · Openbsd · Openbsd
Name of the Vulnerable Software and Affected Versions: OpenBSD versions 3.5 and earlier Description: The issue is related to multiple integer overflows in several procfs files for OpenBSD, including procfs cmdline.c, procfs fpregs.c, procfs linux.c, procfs regs.c, procfs status.c, and procfs...
[Full-Disclosure] EEYE: Symantec Multiple Firewall Remote DNS KERNEL Overflow
Symantec Multiple Firewall Remote DNS KERNEL Overflow Release Date: May 12, 2004 Date Reported: April 19, 2004 Severity: High Remote Kernel Access Vendor: Symantec Systems Affected: Symantec Norton Internet Security 2002 Symantec Norton Internet Security 2003 Symantec Norton Internet Security 200...
[Full-Disclosure] EEYE: Symantec Multiple Firewall NBNS Response Remote Heap Corruption
Symantec Multiple Firewall NBNS Response Remote Heap Corruption Release Date: May 12, 2004 Date Reported: April 19, 2004 Severity: High Remote Kernel Code Execution Vendor: Symantec Systems Affected: Symantec Norton Internet Security 2002 Symantec Norton Internet Security 2003 Symantec Norton...
Дырка в linux-подсистеме FreeBSD
Из-за особенностей эмуляции файловой системе при определенных условиях пользователь может запустить собственные LKM Loadable Kernel Mode получив доступ ко всей системе...
Linux Kernel 2.0.37 - Segment Limit Privilege Escalation
Linux Kernel 2.0.37 - Segment Limit Privilege Escalation / source: https://www.securityfocus.com/bid/523/info This vulnerability has to do with the division of the address space between a user process and the kernel. Because of a bug, if you select a non-standard memory configuration, sometimes...
Linux Kernel 2.0.37 - Segment Limit Privilege Escalation
/ source: https://www.securityfocus.com/bid/523/info This vulnerability has to do with the division of the address space between a user process and the kernel. Because of a bug, if you select a non-standard memory configuration, sometimes user level processes may be given access upto 252Mb of...