PotPlayer 1.7.x - Stack Buffer Overflow Vulnerability

Document Title: =============== PotPlayer 1.7.x - Stack Buffer Overflow Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2090 Video: https://www.youtube.com/watch?v=CZNVyll5n-k Release Date: ============= 2017-08-19 Vulnerability Laboratory ID VL-ID:...

RubyMine 2016.1 - CMD Manual Buffer Overflow Exploitation

Document Title: =============== RubyMine 2016.1 - CMD Manual Buffer Overflow Exploitation References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2089 Video: https://www.youtube.com/watch?v=4Sk0rq1Z8Qk Release Date: ============= 2017-08-18 Vulnerability Laboratory ID VL-ID:...

gdal: Heap-buffer-overflow in ReadGrib1Sect2

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6023193733103616 Project: gdal Fuzzer: libFuzzergdalfilesystemfuzzer Fuzz target binary: gdalfilesystemfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

fuchsia_fidl: Crash in fidl::Lexer::Peek

Detailed report: https://oss-fuzz.com/testcase?key=6200421431377920 Project: fuchsiafidl Fuzzer: libFuzzerfuchsiafidlfuzzer Fuzz target binary: fuchsiafidlfuzzer Job Type: libfuzzerasanfuchsiafidluntrusted Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x614000010000 Crash State:...

RubyMine 2016.1 - CMD Manual Buffer Overflow Exploitation

Document Title: =============== RubyMine 2016.1 - CMD Manual Buffer Overflow Exploitation References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2089 Video: https://www.youtube.com/watch?v=4Sk0rq1Z8Qk Release Date: ============= 2017-08-17 Vulnerability Laboratory ID VL-ID:...

USN-3387-1: Git vulnerability | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Description Brian Neel, Joern Schneeweisz, and Jeff King discovered that Git did not properly handle host names in ‘ssh://’ URLs. A remote attacker could use this to construct a git repository that when accessed coul...

strongswan: Index-out-of-bounds in traffic_selector_create_from_rfcNUMBER_format

Project: https://github.com/strongswan/strongswan.git Detailed report: https://oss-fuzz.com/testcase?key=6094496901103616 Project: strongswan Fuzzer: libFuzzerstrongswanfuzzcerts Fuzz target binary: fuzzcerts Job Type: libfuzzerubsanstrongswan Platform Id: linux Crash Type: Index-out-of-bounds...

librawspeed: Use-of-uninitialized-value in rawspeed::RawImageDataU16::doLookup

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=4525303118430208 Project: librawspeed Fuzzer: libFuzzerlibrawspeedTiffDecoderFuzzer-DngDecoder Fuzz target binary: TiffDecoderFuzzer-DngDecoder Job Type: libfuzzermsanlibrawspeed Platform Id:...

gdal: Heap-buffer-overflow in ParseSect4

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5592302649081856 Project: gdal Fuzzer: libFuzzergdalfilesystemfuzzer Fuzz target binary: gdalfilesystemfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

fuchsia_fidl: Stack-buffer-overflow in fidl::StringView::operator<

Detailed report: https://oss-fuzz.com/testcase?key=5376132784324608 Project: fuchsiafidl Fuzzer: libFuzzerfuchsiafidlfuzzer Fuzz target binary: fuchsiafidlfuzzer Job Type: libfuzzerubsanfuchsiafidl Platform Id: linux Crash Type: Stack-buffer-overflow READ 2 Crash Address: 0x7ffd4d8165d8 Crash...

Spam Domains Imitating Popular Banks Spreading Trickbot Banking Trojan

Santander Bank customers should be aware of an effective spam campaign spreading the Trickbot banking Trojan that is coming from domains similar to those used by the financial institution. Researchers at My Online Security and the SANS Institute’s Internet Storm Center say that Santander is not t...

Apple iOS v10.3 - UI SMS Access Permission Vulnerability

Document Title: =============== Apple iOS v10.3 - UI SMS Access Permission Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2079 Video: https://www.youtube.com/watch?v=jePRogkoon8 Advisory: https://www.vulnerability-lab.com/getcontent.php?id=2078...

gdal: Heap-buffer-overflow in ReadGrib1Sect2

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5105499915681792 Project: gdal Fuzzer: libFuzzergdalfilesystemfuzzer Fuzz target binary: gdalfilesystemfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

gdal: Heap-buffer-overflow in CPLScanDouble

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6707582309761024 Project: gdal Fuzzer: libFuzzergdalfilesystemfuzzer Fuzz target binary: gdalfilesystemfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

ffmpeg: Index-out-of-bounds in decode_header

Detailed report: https://oss-fuzz.com/testcase?key=6421736130084864 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDSNOWfuzzer Fuzz target binary: ffmpegAVCODECIDSNOWfuzzer Job Type: libfuzzerubsanffmpeguntrusted Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

gdal: Heap-buffer-overflow in GDALArrayBandBlockCache::FlushCache

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=4875299600728064 Project: gdal Fuzzer: libFuzzergdaltranslatefuzzer Fuzz target binary: gdaltranslatefuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...

harfbuzz: Use-of-uninitialized-value in unsafe_to_break_set_mask

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5255344882188288 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-fuzzer Fuzz target binary: hb-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

librawspeed: Heap-buffer-overflow in void rawspeed::UncompressedDecompressor::decode12BitRaw<

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=5463043595042816 Project: librawspeed Fuzzer: libFuzzerlibrawspeedTiffDecoderFuzzer-OrfDecoder Job Type: libfuzzerasanlibrawspeed Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

gdal: Heap-buffer-overflow in RPFTOCReadFromBuffer

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5046604035784704 Project: gdal Fuzzer: libFuzzergdalfuzzer Fuzz target binary: gdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

Microsoft Edge XAML File Improper Access Control Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on vulnerable installations of Microsoft Edge. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of XA...