What the Fuzz: Radamsa

What the Fuzz: Radamsa Radamsa is a test case generator for robustness testing, a.k.a. a fuzzer. It is typically used to test how well a program can withstand malformed and potentially malicious inputs. It works by reading sample files of valid data and generating interestingly different outputs...

Revive Adserver: Reflected XSS on Zones > Invocation Code

"Cricetinae" : This report is similar to my earlier report: 170156. Short Description The Close text parameter in Inventory Zone Invocation Code is vulnerable to Cross-Site Scripting vulnerability. Steps to Reproduce 1. Logon or Work as an agent. 2. Navigate to Inventory Zones Invocation Code...

flash-plugin: use-after-free issue fixed in APSB16-36

Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in October 2016...

VMware Tools Local Information Disclosure Vulnerability

VMware Tools is a set of enhancements that come with VMware's VMWare virtual machines. It is a set of drivers provided by VMware to enhance the performance of virtual graphics cards and hard drives, as well as to synchronize the clocks of the virtual machines with those of the host computer. A...

VMware Tools 9.x / 10.x < 10.1.0 Kernel Memory Address Disclosure (VMSA-2016-0017) (Mac OS X)

The version of VMware Tools installed on the remote macOS or Mac OS X host is 9.x or 10.x prior to 10.1.0. It is, therefore, affected by an information disclosure vulnerability in the System Integrity Protection SIP feature. A local attacker can exploit this issue to obtain kernel memory addresse...

Adobe Flash Player for Mac <= 23.0.0.185 Arbitrary Code Execution (APSB16-36)

The version of Adobe Flash Player installed on the remote macOS or Mac OS X host is equal or prior to version 23.0.0.185. It is, therefore, affected by an arbitrary code execution vulnerability due to a use-after-free error. An unauthenticated, remote attacker can exploit this, by convincing a us...

VMware Fusion 8.x < 8.5.0 Kernel Memory Address Disclosure (VMSA-2016-0017) (Mac OS X)

The version of VMware Fusion installed on the remote macOS or Mac OS X host is 8.x prior to 8.5.0. It is, therefore, affected by an information disclosure vulnerability in the System Integrity Protection SIP feature. A local attacker can exploit this issue to obtain kernel memory addresses and...

Adobe Flash Player Security Update (APSB16-36) - Mac OS X

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...

Adobe Reader and Acrobat Memory Corruption Vulnerability (CNVD-2016-10265)

Adobe Reader, etc. are the United States of America Auduby Adobe company's products. Adobe Reader is a free PDF file reader; Acrobat is a PDF file editing and conversion tools; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDF.Classic and Continuous are the two update...

VMSA-2016-0017:VMware product updates address multiple information disclosure issues

VMSA-2016-0017 VMware product updates address multiple information disclosure issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0017 VMware Security Advisory Severity: Moderate VMware Security Advisory Synopsis: VMware product updates address multiple information...

CVE-2016-7854

Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

Mac OS X 10.x < 10.12 Multiple Vulnerabilities

Binary data 9620.prm...

Oracle VirtualBox Multiple Security Bypass And DoS Vulnerabilities - Mac OS X

Oracle VirtualBox is prone to multiple security bypass and denial of service vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...

Google Chrome Security Updates (stable-channel-update-for-desktop-2016-10) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Oracle VirtualBox VRDE Privilege Escalation Vulnerability - Mac OS X

Oracle VirtualBox is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Mozilla Thunderbird Security Advisories (MFSA2016-88, MFSA2016-88) - Mac OS X

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

Google Chrome Security Updates (stable-channel-update_30-2013-07) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

chromium-browser: out of bounds read in devtools

Devtools in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled objects after a tab crash, which allowed a remote attacker to perform an out of bounds memory read via crafted PDF files...

CVE-2016-7017

Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

CVE-2016-7013

Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...