The vulnerability of the Microsoft Visio graphical editor, allowing a hacker to execute arbitrary code

The vulnerability of Microsoft Visio’s graphical editor is due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted UML data within an Office document...

Acoustica Pianissimo 1.0 Build 12 - Registration ID Buffer Overflow (PoC)

Acoustica Pianissimo 1.0 Build 12 - Registration ID Buffer Overflow PoC Acoustica Pianissimo 1.0 Build 12 Registration ID Buffer Overflow PoC Vendor: Acoustica, Inc. Product web page: http://www.acoustica.com Affected version: 1.0 Build 12 Summary: Pianissimo virtual piano uses a combination of...

Report Recommends Series of Cybersecurity Changes at FAA

The Federal Aviation Administration needs to upgrade and update its information security capabilities–including building a threat-modeling capability and implementing federal security guidelines–in order to ensure the safety of the nation’s aviation infrastructure, according to a new report by th...

Students Built Open Source Web-Based Threat Modeling Tool

Threat models help application developers answer some fundamental questions about potential risks and how to cut off vulnerabilities before they’re put into production. Some software development lifecycles, however, don’t include threat modeling as part of the code-building process because they’v...

Privacyware Privatefirewall 7.0 Privilege Escalation

Privacyware Privatefirewall 7.0 Unquoted Service Path Privilege Escalation Vendor: PWI, Inc. Product web page: http://www.privacyware.com Affected version: 7.0.30.3 Summary: Privatefirewall multi-layered endpoint security software protects 32 and 64 bit Windows desktops and servers from malware a...

Microsoft Releases Free Threat Modeling Tool 2014

Threat modeling has been part of the security culture at Microsoft for the better part of a decade, an important piece of the Security Development Lifecycle that’s at the core of Trustworthy Computing. Today, Microsoft updated its free Threat Modeling Tool with a number of enhancements that bring...

Threat Modeling, Legos and Dancing Babies

SAN FRANCISCO–The concept of threat modeling has evolved quite a lot in the last few years, moving from an activity that massive software companies such as Microsoft and Google use to anticipate and defend against potential threats to their products to something that many smaller organizations...

Fedora Update for blender FEDORA-2012-13639

Check for the Version of blender OpenVAS Vulnerability Test Fedora Update for blender FEDORA-2012-13639 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 18 Update: blender-2.63a-9.fc18

Blender is the essential software solution you need for 3D, from modeling, animation, rendering and post-production to interactive creation and playba ck. Professionals and novices can easily and inexpensively publish stand-alone, secure, multi-platform content to the web, CD-ROMs, and other medi...

[SECURITY] Fedora 16 Update: blender-2.59-7.fc16

Blender is the essential software solution you need for 3D, from modeling, animation, rendering and post-production to interactive creation and playba ck. Professionals and novices can easily and inexpensively publish stand-alone, secure, multi-platform content to the web, CD-ROMs, and other medi...

[SECURITY] Fedora 17 Update: blender-2.63a-4.fc17

Blender is the essential software solution you need for 3D, from modeling, animation, rendering and post-production to interactive creation and playba ck. Professionals and novices can easily and inexpensively publish stand-alone, secure, multi-platform content to the web, CD-ROMs, and other medi...

A CISO's Guide To Application Security – Part 3: Toward an AppSec Center of Excellence

This post is the third in a 4-part series on Application Security, or “AppSec”. The series will define the components of a sound AppSec program, delineate the growing threats to software, weigh the costs of a data breach, and outline the CISO’s responsibility in managing software security risk...

Thinking About Software Security Holistically

While assessing software systems of all types a few common mistakes regularly come up. These aren’t mistakes that lead directly to vulnerabilities, but mistakes in how some software companies think about security, that can lead to invalid assumptions, and ultimately which can allow real security...

Google/Trimble SketchUp Detection

Google SketchUp or Trimble SketchUp formerly Google SketchUp is installed on the remote host. SketchUp is a 3-D modeling application. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid56712; scriptversion"1.13"; scriptsetattributeattribute:"pluginmodificationdate",...

Google SketchUp v8.x - Memory Corruption Vulnerability

Document Title: =============== Google SketchUp v8.x - Memory Corruption Vulnerability Release Date: ============= 2011-09-12 Vulnerability Laboratory ID VL-ID: ==================================== 99 Product & Service Introduction: =============================== Google SketchUp Pro is 3D modeli...

Google SketchUp v8.x - Memory Corruption Vulnerability

Document Title: =============== Google SketchUp v8.x - Memory Corruption Vulnerability Release Date: ============= 2011-09-12 Vulnerability Laboratory ID VL-ID: ==================================== 99 Product & Service Introduction: =============================== Google SketchUp Pro is 3D modeli...

Microsoft Releases New Versions of Software Security Tools

Microsoft has released new versions of several of its software security tools, including its Threat Modeling Tool and a pair of fuzzers. All of the tools are part of the company’s Security Development Lifecycle program, which it has been sharing with external organizations for a few years now...

Fedora Update for blender FEDORA-2011-8474

Check for the Version of blender OpenVAS Vulnerability Test Fedora Update for blender FEDORA-2011-8474 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 14 Update: blender-2.49b-14.fc14

Blender is the essential software solution you need for 3D, from modeling, animation, rendering and post-production to interactive creation and playba ck. Professionals and novices can easily and inexpensively publish stand-alone, secure, multi-platform content to the web, CD-ROMs, and other medi...

[SECURITY] Fedora 15 Update: blender-2.49b-16.fc15

Blender is the essential software solution you need for 3D, from modeling, animation, rendering and post-production to interactive creation and playba ck. Professionals and novices can easily and inexpensively publish stand-alone, secure, multi-platform content to the web, CD-ROMs, and other medi...