The vulnerability of the Parus-Budget unified information system for government management, related to buffer overflows, allows an attacker to execute arbitrary code on the client side.

The vulnerability of the unified information system for government management, Parus-Budget, is related to buffer overflow attacks. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the client side by adding a printer with a name longer than 254 characters...

The vulnerability of the Parus-Budget unified information system for government management, related to insufficient verification of input data, allows a perpetrator to execute arbitrary codes.

The vulnerability of the unified information system for government management, Parus-Budget, is related to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by filling the buffer with incorrect port names from the printe...

Canon Oce ColorWave 3500 Security Breach

The Canon Oce ColorWave 3500 is a color printer from Canon Japan. The device is based on solid ink bead printing technology and image logic scanning processing, integrating CAD, GIS and full-coverage, full-color image printing in a single device to provide more professional functionality for the...

Microsoft Windows/Windows Server Elevation of Privilege Vulnerability (CNVD-2021-66111)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA Microsoft Windows is an operating system for personal devices Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in the Microsoft Windows/Windows Server...

Microsoft Windows Local Spooler Bypass Vulnerability

Windows: Local Spooler CVE-2020-1337 Bypass One way of exploiting this on Windows 10 2004 is to understand that FileNormalizedNameInformation will fail if the new path after the mount point is not under the root directory of the server. For example the admin$ share points to c:\windows. If you se...

Canon Inkjet Extended Survey Program 5.1.0.8 - (IJPLMSVC.EXE) - Unquoted Service Path Vulnerability

Exploit Title: Canon Inkjet Extended Survey Program 5.1.0.8 - 'IJPLMSVC.EXE' - Unquoted Service Path Discovery by: Carlos Roa Vendor Homepage: https://www.usa.canon.com/internet/portal/us/home Tested Version: 5.1.0.8 Vulnerability Type: Unquoted Service Path Tested on OS: Windows 7 Professional 6...

StressPrinters

Please note: You can download the required file from the Citrix downloads website by visiting the following link:https://www.citrix.com/downloads/citrix-tools StressPrinters Version 1.3.2 Created date: 03/30/2006 Modified date: 6/19/2013 Description Many printer driver problems in Terminal...

Citrix UPD Finder - CTXUPDINFO

CTXUPDINFO.EXE Created Date: 8/29/2014 Updated Date: 10/03/2014 Where to download ? Certain legacy Citrix tools are now available on request only. Please submit the request here - https://forms.gle/obA39PEz5qpDiSPq8 Once we verify your request, we will provide access to the download location...

A week in security (October 26 – November 1)

We had a very busy week at Malwarebytes Labs. We offered advice on Googles patch for an actively exploited zero-day bug that affects Chrome users, our podcast talked about finding consumer value in Cybersecurity Awareness Month with Jamie Court, we provided guidance about keeping ransomware cash...

[SECURITY] Fedora 32 Update: lout-3.40-18.fc32

Lout is a document formatting system designed and implemented by Jeffrey Kingston at the Basser Department of Computer Science, University of Sydney, Australia. The system reads a high-level description of a document similar in style to LaTeX and produces a PostScript file which can be printed on...

PT-2022-8861 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability was found in the Linux kernel, where accessing a deallocated instance in printer ioctl occurs because it tries to access a printer dev instance that had been freed by...

HP printer issue on Mac: What happened?

Apple holds the keys to nearly all recent Mac software. This is a story of those keys, and how a Hewlett Packard HP error caused problems for a lot of people. Code signing and certificates First, its important to understand that when I say "keys," what I really mean is "certificates." These...

PT-2020-4576

Name of the Vulnerable Software and Affected Versions Парус-Бюджет affected versions not specified Description The issue is related to a buffer overflow in the unified state management information system. Exploitation of this issue may allow a remote attacker to execute arbitrary code on the clie...

PT-2020-4575

Name of the Vulnerable Software and Affected Versions Парус-Бюджет affected versions not specified Description The issue is related to insufficient input validation in the unified state management information system. It allows a remote attacker to execute arbitrary code by overflowing a buffer wi...

HPSBPI03693 rev. 1 - Certain HP OfficeJet Printers, Remote Denial of Service (DoS)

Potential Security Impact Denial of Service DOS Source: HP, HP Product Security Response Team PSRT Reported by: MT-SRG and VARAS VULNERABILITY SUMMARY HP has identified a potential security vulnerability with certain HP OfficeJet printers. The vulnerability could be exploited remotely to create a...

freerdp: out-of-bounds read in irp functions

In FreeRDP before 2.1.0, there is an out-of-bound read in irp functions parallelprocessirpcreate, serialprocessirpcreate, driveprocessirpwrite, printerprocessirpwrite, rdpeirecvpdu, serialprocessirpwrite. This has been fixed in 2.1.0...

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Microsoft

CVE-2020-1337 Windows Privilege Escalation this is a WWWwrite...

printer-parts.gr Cross Site Scripting vulnerability OBB-1229394

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

PT-2020-22325

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of "Use-of-uninitialized-value". The crash state includes functions such as ARM post printer, fill insn, and cs disasm...

Certain printers do not print in Windows Server 2012

Certain printers do not print in Windows Server 2012 Summary This update resolves the following issue: Addresses an issue that might prevent certain printers from printing. The print spooler might generate an error or close unexpectedly when attempting to print, and no output will come from the...