[SECURITY] [DSA 2873-1] file security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2873-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso March 11, 2014 http://www.debian.org/security/faq -...

DSA-2873-1 file - several

Bulletin has no description...

Debian Security Advisory DSA 2873-1 (file - several vulnerabilities)

Several vulnerabilities have been found in file, a file type classification tool. Aaron Reffett reported a flaw in the way the file utility determined the type of Portable Executable PE format files, the executable format used on Windows. When processing a defective or intentionally prepared PE...

PHP 5.5.x < 5.5.10 Multiple Vulnerabilities

According to its banner, the version of PHP 5.5.x installed on the remote host is a version prior to 5.5.10. It is, therefore, potentially affected by the following vulnerabilities : - An error exists related to the Fileinfo extension and the bundled libmagic library that could allow denial of...

Apple Boot Camp Support Software < 5.1 AppleMNT.sys Driver PE Header Memory Corruption

The version of Apple Boot Camp Support Software installed on the remote host is a version prior to 5.1. As such, the AppleMNT.sys driver included in it reportedly has a bounds checking issue that can be triggered when parsing a Portable Executable PE file with a malformed header. A local attacker...

CVE-2014-1253

AppleMNT.sys in Apple Boot Camp 5 before 5.1 allows local users to cause a denial of service kernel memory corruption or possibly have unspecified other impact via a malformed header in a Portable Executable PE file...

CVE-2014-1253

AppleMNT.sys in Apple Boot Camp 5 before 5.1 allows local users to cause a denial of service kernel memory corruption or possibly have unspecified other impact via a malformed header in a Portable Executable PE file...

CVE-2014-1253

CVE-2014-1253: A bounds‑checking issue in the AppleMNT.sys driver of Apple Boot Camp (pre-5.1) lets a local attacker trigger kernel memory corruption by loading a malformed Portable Executable header, potentially causing a crash or other impact. Affected product: Boot Camp Support Software prior ...

Microsoft Windows WinVerifyTrust PE Validation Security Bypass (MS13-098; CVE-2013-3900)

A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to an error in the way the WinVerifyTrust function handles Windows Authenticode signature verification for portable executable PE files. A remote attacker could trigger this flaw by sending a...

QuickHeal AntiVirus buffer overflow

Buffer overflow on PE files parsing...

CVE-2013-6767

Stack-based buffer overflow in pepoly.dll in Quick Heal AntiVirus Pro 7.0.0.1 allows local users to execute arbitrary code or cause a denial of service process crash via a long .text value in a PE file...

Stack overflow

Stack-based buffer overflow in pepoly.dll in Quick Heal AntiVirus Pro 7.0.0.1 allows local users to execute arbitrary code or cause a denial of service process crash via a long .text value in a PE file...

file -- out-of-bounds access in search rules with offsets from input file

Aaron Reffett reports: softmagic.c in file ... and libmagic allows context-dependent attackers to cause a denial of service out-of-bounds memory access and crash via crafted offsets in the softmagic of a PE executable...

QuickHeal AntiVirus 7.0.0.1 - Stack Overflow Vulnerability

Document Title: =============== QuickHeal AntiVirus 7.0.0.1 - Stack Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1171 Resources: http://packetstormsecurity.com/files/124477/QuickHeal-AntiVirus-7.0.0.1-Stack-Buffer-Overflow.html...

QuickHeal AntiVirus 7.0.0.1 - Stack Overflow Vulnerability

Document Title: =============== QuickHeal AntiVirus 7.0.0.1 - Stack Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1171 Resources: http://packetstormsecurity.com/files/124477/QuickHeal-AntiVirus-7.0.0.1-Stack-Buffer-Overflow.html...

CVE-2013-3900

Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the forma...

Input validation

The WinVerifyTrust function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly validate PE file digests during...

Microsoft WinVerifyTrust Signature Validation Vulnerability (2893294)

This host is missing a critical security update according to Microsoft Bulletin MS13-098. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2013-3900

Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the forma...

PT-2013-1328

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to the WinVerifyTrust function in Windows, which is associated with the improper verification of PE file digests during Authenticode signature checking. This can allow a...