CVE-2016-7081

Multiple heap-based buffer overflows in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS via unspecified vectors...

CVE-2016-7081

VMware Workstation 12.x (both Pro and Player) before 12.5.0 is affected by multiple heap-based buffer overflow vulnerabilities in Cortado ThinPrint handling, allowing a guest OS user to cause host code execution. CVEs include CVE-2016-7081 through CVE-2016-7086; impact is local, with potential ar...

[SECURITY] Fedora 25 Update: ghostscript-9.20-2.fc25

Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable Document Format PDF files. Ghostscript translates PostScript code into many...

Apple iOS < 10.0 Multiple Vulnerabilities

Binary data 9619.prm...

OpenSSL: OOB read in TS_OBJ_print_bio()

An out of bounds read flaw was found in the way OpenSSL formatted Public Key Infrastructure Time-Stamp Protocol data for printing. An attacker could possibly cause an application using OpenSSL to crash if it printed time stamp data from the attacker...

Epson WorkForce Lack Of Firmware Signing / CSRF

OpenSource Security Ralf Spenneberg Am Bahnhof 3-5 48565 Steinfurt [email protected] OS-S Security Advisory 2016-19 Title: Epson WorkForce multi-function printers do not use signed firmware images and allow unauthorized malicious firmware-updates Authors: Yves-Noel Weweler , Ralf Spenneberg , Hendrik...

Design/Logic Flaw

Printing UIKit in Apple iOS before 10 mishandles environment variables, which allows local users to discover cleartext AirPrint preview content by reading a temporary file...

CVE-2016-4749

CVE-2016-4749 affects Printing UIKit in iOS prior to 10. The issue arises from mishandling environment variables during AirPrint preview, allowing a local user to read a temporary file and disclose cleartext AirPrint preview content. Apple’s security content for iOS 10 notes this as an AirPrint/P...

Apple iOS Security Restriction Bypass Vulnerability (CNVD-2016-07686)

Apple iOS is an operating system developed by Apple for mobile devices. A security restriction bypass vulnerability exists in the Printing UIKit in Apple iOS versions prior to 10. An attacker can exploit this vulnerability to bypass security restrictions, perform unauthorized actions, or obtain...

Apple iOS < 10 Multiple Vulnerabilities (BlueBorne)

Binary data appleios100check.nbin...

VMSA-2016-0014:VMware ESXi, Workstation, Fusion, and Tools updates address multiple security issues

VMSA-2016-0014.1 VMware ESXi, Workstation, Fusion, and Tools updates address multiple security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0014.1 VMware Security Advisory Severity: Critical VMware Security Advisory Synopsis: VMware ESXi, Workstation, Fusion, an...

MS16-098: Description of the security update for Windows kernel-mode drivers: August 9, 2016

None None...

Police Unlock Dead Man's Phone by 3D-Printing his Fingerprint

Now no more fight with Apple or any smartphone maker, as federal authorities have discovered a new tool for unlocking phones, as far as your phone is using any biometric sensor… 3D Printing! Yes, Police in Michigan is considering 3D printing a dead man’s fingers so they could unlock smartphones i...

CUPS: Buffer overflow

Background CUPS, the Common Unix Printing System, is a full-featured print server. Description A vulnerability has been discovered in CUPS concerning the handling of compressed raster files. Impact A remote attacker could possibly execute arbitrary code with the privileges of the process...

July 2016 Microsoft Patch Tuesday Security Patches

Networked printers have always posed an interesting attack vector, mostly for academics looking for vulnerabilities, and vandals sending garbage to the print bin. Microsoft, today, however patched a legitimate vulnerability that an attacker could abuse to attack corporate and home networks...

The vulnerability of the CUPS printing server allows a attacker to modify the device configuration file or execute arbitrary code.

The vulnerability of the addjob function in the scheduler/ipp.c file of the CUPS printing server is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to modify the device configuration file remotely or execute arbitrary code using specially crafted...

Microsoft IIS 5.0 ISAPI Internet Printing Protocol Extension Buffer Overflow - ver 2 (CVE-2001-0241)

A buffer overflow in this extension IIS 5.0 can permit remote attackers to execute arbitrary code on the web server with the same privileges as the web server. The ISAPI .printer extension permits the submitting and controlling of print jobs over HTTP. There exists an unchecked buffer in the Host...

webmail.sheridanprinting.com XSS vulnerability

Vulnerable URL: http://webmail.sheridanprinting.com/webmail/?color=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 11:05 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

foomatic-rip Arbitrary Command Execution Vulnerability

Foomatic is a database-driven printing system developed by the Linux Foundation's OpenPrinting Working Group, which integrates a general-purpose back-end printing system for Unix with an open-source printer driver. foomatic-rip a.k.a. foomatic-filters is an internal component that helps the...

foomatic-rip memory corruption vulnerability

Foomatic is a database-driven printing system developed by the Linux Foundation's OpenPrinting Working Group, which integrates a general-purpose back-end printing system for Unix with an open-source printer driver. foomatic-rip a.k.a. foomatic-filters is an internal component that helps the...