294 matches found
CVE-2015-8683
The putcontig8bitCIELab function in tifgetimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service out-of-bounds read via a packed TIFF image...
Comodo AntiVirus - Forwards Emulated API Calls to the Real API During Scans
Comodo AntiVirus - Forwards Emulated API Calls to the Real API During Scans Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=769 Comodo Antivirus includes a x86 emulator that is used to unpack and monitor obfuscated executables, this is common practice among antivirus products. T...
CVE-2015-8683
The putcontig8bitCIELab function in tifgetimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service out-of-bounds read via a packed TIFF image...
Avast! - Out-of-Bounds Write Decrypting PEncrypt Packed executables
Avast! - Out-of-Bounds Write Decrypting PEncrypt Packed executables Source: https://code.google.com/p/google-security-research/issues/detail?id=554 The attached PEncrypt packed executable causes an OOB write on Avast Server Edition. gdb bt 0 0xf6f5e64a in EmulatePolyCodePOLYINFO, int from...
Avast! - Out-of-Bounds Write Decrypting PEncrypt Packed executables
Source: https://code.google.com/p/google-security-research/issues/detail?id=554 The attached PEncrypt packed executable causes an OOB write on Avast Server Edition. gdb bt 0 0xf6f5e64a in EmulatePolyCodePOLYINFO, int from /proc/self/cwd/defs/15092301/engine.so 1 0xf6f7d334 in...
The vulnerability of the Kaspersky Anti-Virus antivirus protection allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of Kaspersky Anti-Virus lies in a memory corruption that occurs during the unpacking of executable files. Exploiting this vulnerability allows an attacker to cause service interruptions or execute arbitrary code using the executable file packed with UPX during the antivirus...
Kaspersky AntiVirus - ExeCryptor Parsing Memory Corruption
Kaspersky AntiVirus - ExeCryptor Parsing Memory Corruption Source: https://code.google.com/p/google-security-research/issues/detail?id=525 Fuzzing packed executables found the attached crash, it might be usable as an information leak as part of another bug, so filing as a low-risk bug. If I had t...
Kaspersky AntiVirus - Yodas Protector Unpacking Memory Corruption
Kaspersky AntiVirus - Yodas Protector Unpacking Memory Corruption Source: https://code.google.com/p/google-security-research/issues/detail?id=528 The attached testcase was found by fuzzing packed PE files, I suspect it was packed using "Yoda's protector". This vulnerability is obviously exploitab...
Researchers to Develop Long-Lasting Solid-State Batteries
Whenever you go to Buy any Electronic Gadget — Phone, Tablet, Laptop, Watch — the most important specification isn’t its processor speed or its camera quality. It’s how long the device’s battery backup is. Imagine easy access to such batteries that provide more battery power after charging it onc...
AutoCAD DWG and DXF To PDF Converter 2.2 - Buffer Overflow Exploit
Exploit for windows platform in category local exploits Exploit Title: AutoCAD DWG and DXF To PDF Converter v2.2 Buffer Overflow Date: 9-5-2015 Software Link: http://www.verypdf.com/autocad-dwg-dxf-to-pdf/dwgdxftopdfsetup.exe Exploit Author: Robbie Corley Contact: email protected Website: CVE:...
ClamAV < 0.98.7 Multiple DoS Vulnerabilities - Windows
ClamAV is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:clamav:clamav"...
ClamAV < 0.98.7 Multiple DoS Vulnerabilities - Linux
ClamAV is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:clamav:clamav"...
Amazon Linux AMI : clamav (ALAS-2015-537)
ClamAV before 0.98.7 allows remote attackers to cause a denial of service infinite loop via a crafted y0da cryptor file. CVE-2015-2221 ClamAV before 0.98.7 allows remote attackers to cause a denial of service infinite loop via a crafted xz archive file. CVE-2015-2668 ClamAV before 0.98.7 allows...
DLA-233-1 clamav - security update
Bulletin has no description...
CVE-2015-2222
ClamAV before 0.98.7 allows remote attackers to cause a denial of service crash via a crafted petite packed file...
DEBIAN-CVE-2015-2222
ClamAV before 0.98.7 allows remote attackers to cause a denial of service crash via a crafted petite packed file...
CVE-2015-2222
ClamAV before 0.98.7 allows remote attackers to cause a denial of service crash via a crafted petite packed file...
CVE-2015-2222
ClamAV before 0.98.7 allows remote attackers to cause a denial of service crash via a crafted petite packed file...