libxslt/xslt: Use-of-uninitialized-value in xmlOutputBufferWriteEscape

Project: https://gitlab.gnome.org/GNOME/libxslt.git Detailed report: https://oss-fuzz.com/testcase?key=5760846728265728 Project: libxslt Fuzzer: libFuzzerlibxsltxslt Fuzz target binary: xslt Job Type: libfuzzermsanlibxslt Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

libxslt/xslt: Use-of-uninitialized-value in xmlStrlen

Project: https://gitlab.gnome.org/GNOME/libxslt.git Detailed report: https://oss-fuzz.com/testcase?key=5669481868689408 Project: libxslt Fuzzer: libFuzzerlibxsltxslt Fuzz target binary: xslt Job Type: libfuzzermsanlibxslt Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

Mozilla Firefox Language Pack XUL Injection Sandbox Escape Vulnerability

This vulnerability allows remote attackers to escape the sandbox on affected installations of Mozilla Firefox. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists due to possibility of XUL...

ffmpeg/ffmpeg_AV_CODEC_ID_MSS2_fuzzer: Index-out-of-bounds in vc1_decode_ac_coeff

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5666071933091840 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDMSS2fuzzer Fuzz target binary: ffmpegAVCODECIDMSS2fuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds...

njs/njs_process_script_fuzzer: Use-of-uninitialized-value in njs_regexp_exec_result

Project: http://hg.nginx.org/njs Detailed report: https://oss-fuzz.com/testcase?key=5127028405174272 Project: njs Fuzzer: libFuzzernjsprocessscriptfuzzer Fuzz target binary: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

graphicsmagick/coder_MVG_fuzzer: Heap-buffer-overflow in TraceSquareLinecap

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5733013528248320 Project: graphicsmagick Fuzzer: aflgraphicsmagickcoderMVGfuzzer Fuzz target binary: coderMVGfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type:...

icu/collator_rulebased_fuzzer: Crash in icu_64::UCharsTrie::branchNext

Detailed report: https://oss-fuzz.com/testcase?key=5693360544677888 Project: icu Fuzzer: libFuzzericucollatorrulebasedfuzzer Fuzz target binary: collatorrulebasedfuzzer Job Type: libfuzzermsanicu Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f8c94ee4a30 Crash State:...

ffmpeg/ffmpeg_AV_CODEC_ID_ATRAC9_fuzzer: Index-out-of-bounds in parse_gradient

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5738260074070016 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDATRAC9fuzzer Fuzz target binary: ffmpegAVCODECIDATRAC9fuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type:...

freetype2/bzip2: Crash in BZ2_decompress

Detailed report: https://oss-fuzz.com/testcase?key=5644042643177472 Project: freetype2 Fuzzer: aflfreetype2bzip2 Fuzz target binary: bzip2 Job Type: aflasanfreetype2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x63000013000c Crash State: BZ2decompress BZ2bzDecompress...

imagemagick/encoder_pdf_fuzzer: Use-of-uninitialized-value in ReadPDFInfo

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5629534981849088 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpdffuzzer Fuzz target binary: encoderpdffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

icu/collator_rulebased_fuzzer: Heap-buffer-overflow in icu_64::CollationIterator::appendCEsFromCE32

Detailed report: https://oss-fuzz.com/testcase?key=5695958395912192 Project: icu Fuzzer: libFuzzericucollatorrulebasedfuzzer Fuzz target binary: collatorrulebasedfuzzer Job Type: libfuzzerasanicu Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x614000010698 Crash State:...

mruby/mruby_fuzzer: Use-of-uninitialized-value in ht_copy

Project: https://github.com/mruby/mruby.git Detailed report: https://oss-fuzz.com/testcase?key=5098398899765248 Project: mruby Fuzzer: libFuzzermrubyfuzzer Fuzz target binary: mrubyfuzzer Job Type: libfuzzermsanmruby Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

imagemagick/encoder_heic_fuzzer: Heap-buffer-overflow in derive_collocated_motion_vectors

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5743506502451200 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

icu/collator_rulebased_fuzzer: Crash in icu_64::UCharsTrie::branchNext

Project: https://github.com/unicode-org/icu.git Detailed report: https://oss-fuzz.com/testcase?key=5649936613376000 Project: icu Fuzzer: libFuzzericucollatorrulebasedfuzzer Fuzz target binary: collatorrulebasedfuzzer Job Type: libfuzzerasanicu Platform Id: linux Crash Type: UNKNOWN READ Crash...

ffmpeg/ffmpeg_AV_CODEC_ID_APNG_fuzzer: Heap-buffer-overflow in handle_p_frame_apng

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5684905029140480 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDAPNGfuzzer Fuzz target binary: ffmpegAVCODECIDAPNGfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash...

ffmpeg/ffmpeg_AV_CODEC_ID_DNXHD_fuzzer: Heap-buffer-overflow in ff_combine_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5747756078989312 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDDNXHDfuzzer Fuzz target binary: ffmpegAVCODECIDDNXHDfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ Cras...

imagemagick/encoder_pjpeg_fuzzer: Use-of-uninitialized-value in encode_mcu_DC_first

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5712832717389824 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpjpegfuzzer Fuzz target binary: encoderpjpegfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

Symantec Messaging Gateway Privilege Escalation

SUMMARY Symantec has released an update to address an issue that was discovered in the Symantec Messaging Gateway SMG product. AFFECTED PRODUCTS Symantec Messaging Gateway SMG --- CVE | Affected Versions | Remediation CVE-2019-12751 | Prior to 10.7.1 | Upgrade to 10.7.1 ISSUES CVE-2019-12751 ---...

icu/collator_rulebased_fuzzer: Use-of-uninitialized-value in isMatchAtCPBoundary

Project: https://github.com/unicode-org/icu.git Detailed report: https://oss-fuzz.com/testcase?key=5644492876546048 Project: icu Fuzzer: libFuzzericucollatorrulebasedfuzzer Fuzz target binary: collatorrulebasedfuzzer Job Type: libfuzzermsanicu Platform Id: linux Crash Type:...

Nagios XI Magpie_debug.php Root Remote Code Execution Exploit

This Metasploit module exploits two vulnerabilities in Nagios XI 5.5.6. One allows for unauthenticated remote code execution and another allows for local privilege escalation. When combined, these two vulnerabilities give us a root reverse shell. This module requires Metasploit:...