EUVD-2007-6485

Malware in sbrugna...

The vulnerability of the FASTFAT component of the Windows operating system, related to the issue of buffer out-of-bound operations, allows an attacker to read data from deleted system files.

The vulnerability of the FASTFAT component of the Windows operating system is related to the execution of operations outside the memory buffer. Exploiting this vulnerability allows an attacker to read data from deleted files in the operating system by mounting another file system that contains a...

kernel: sync of excessive duration via an XFS v5 image with crafted metadata

A flaw was discovered in the XFS source in the Linux kernel. This flaw allows an attacker with the ability to mount an XFS filesystem, to trigger a denial of service while attempting to sync a file located on an XFS v5 image with crafted metadata...

Race condition

deepin-clone before 1.1.3 uses a predictable path /tmp/.deepin-clone/mount/ in the Helper::temporaryMountDevice function to temporarily mount a file system as root. An unprivileged user can prepare a symlink at this location to have the file system mounted in an arbitrary location. By winning a...