DEBIAN-CVE-2017-17502

ReadCMYKImage in coders/cmyk.c in GraphicsMagick 1.3.26 has a magick/import.c ImportCMYKQuantumType heap-based buffer over-read via a crafted file...

Fedora 25 : firefox (2017-9a6569beb6)

Updated to the latest version - Firefox 57 Please note that this update is incompatible with many recent Firefox add-ons, please see Fedora Magazine article for details: https://fedoramagazine.org/firefox-57-coming-soon-quantum-leap/ ---- Update to Firefox 57 a.k.a. Quantum This update may break...

Firefox 57 "Quantum" Released – 2x Faster Web Browser

It is time to give Firefox another chance. The Mozilla Foundation today announced the release of its much awaited Firefox 57, aka Quantum web browser for Windows, Mac, and Linux, which claims to defeat Google's Chrome. It is fast. Really fast. Firefox 57 is based on an entirely revamped design an...

The vulnerability of the ReadMATImage function in the coder/mat.c file of the console image editing tool ImageMagick allows a hacker to cause a memory access violation.

The vulnerability of the ReadMATImage function in the coder/mat.c file of the console image editing tool ImageMagick is related to resource management errors. Exploiting this vulnerability may allow an attacker, operating remotely, to cause a loss of access to memory associated with the quantumin...

Chinese Quantum Satellite Sends First ‘Unhackable’ Data to Earth

In what appears to be the world's first quantum satellite transmission, China has successfully sent an "unbreakable" code over a long distance from an orbiting satellite to the Earth, achieving a milestone in the next generation encryption based on "quantum cryptography." In August last year, Chi...

DEBIAN-CVE-2017-11724

The ReadMATImage function in coders/mat.c in ImageMagick through 6.9.9-3 and 7.x through 7.0.6-3 has memory leaks involving the quantuminfo and cloneinfo data structures...

UBUNTU-CVE-2017-11724

The ReadMATImage function in coders/mat.c in ImageMagick through 6.9.9-3 and 7.x through 7.0.6-3 has memory leaks involving the quantuminfo and cloneinfo data structures...

A week in security (July 17 – July 23)

Over the last week, we have covered Play Protect, android’s new security system and how the Dutch police ran Hansa Market after the take down of Alpha Bay, both major players on the Dark Web. We also provided some tips on how to stay cyber safe this summer. We also saw how the Terror exploit kit...

UBUNTU-CVE-2017-10794

When GraphicsMagick 1.3.25 processes an RGB TIFF picture with metadata indicating a single sample per pixel in coders/tiff.c, a buffer overflow occurs, related to QuantumTransferMode...

Post-Quantum RSA

Interesting research on a version of RSA that is secure against a quantum computer: Post-quantum RSA Daniel J. Bernstein, Nadia Heninger, Paul Lou, and Luke Valenta Abstract: This paper proposes RSA parameters for which 1 key generation, encryption, decryption, signing, and verification are...

PT-2017-3701 · Schneider Electric · Modicon Premium +3

Name of the Vulnerable Software and Affected Versions: Schneider Electric Modicon M340 versions affected versions not specified Schneider Electric Modicon Premium versions affected versions not specified Schneider Electric Modicon Quantum versions affected versions not specified Schneider Electri...

PT-2018-15: Arbitrary Code Execution in Schneider Electric's Modicon Quantum

The specialists of the Positive Research center have detected an Arbitrary Code Execution vulnerability in Schneider Electric's Modicon Quantum. A vulnerability allows attackers to execute arbitrary code, cause a denial of service, or load a malicious firmware via an FTP command used to upgrade t...

PT-2018-19: Authorization Bypass in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200

The specialists of the Positive Research center have detected an Authorization Bypass vulnerability in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200. Vulnerability allows attackers to bypass authorization using requests to CGI functions. How to fix Use the...

PT-2017-3703 · Schneider Electric · Modicon Premium +3

Name of the Vulnerable Software and Affected Versions: Schneider Electric Modicon BMXNOR0200 affected versions not specified Schneider Electric Modicon M340 affected versions not specified Schneider Electric Modicon Premium affected versions not specified Schneider Electric Modicon Quantum PLC...

PT-2017-3704 · Schneider Electric · Modicon Premium +3

Name of the Vulnerable Software and Affected Versions: Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 affected versions not specified Description: A buffer overflow issue exists in the web services that process SOAP requests, potentially allowing a remote...

PT-2017-3702 · Schneider Electric · Modicon Premium +3

Name of the Vulnerable Software and Affected Versions: Schneider Electric Modicon Premium versions affected versions not specified Schneider Electric Modicon Quantum PLC versions affected versions not specified Schneider Electric Modicon M340 versions affected versions not specified Schneider...

CVE-2016-7530

The quantum handling code in ImageMagick allows remote attackers to cause a denial of service divide-by-zero error or out-of-bounds write via a crafted file...

Out-of-bounds

The quantum handling code in ImageMagick allows remote attackers to cause a denial of service divide-by-zero error or out-of-bounds write via a crafted file...

CVE-2016-7530

The quantum handling code in ImageMagick allows remote attackers to cause a denial of service divide-by-zero error or out-of-bounds write via a crafted file...

CVE-2016-7530

CVE-2016-7530 relates to ImageMagick. The vulnerability affects the quantum handling code within ImageMagick and allows remote attackers to cause a denial of service by processing a crafted file. The impact described is a divide-by-zero error or an out-of-bounds write, as stated in the descriptio...