CVE-2017-8776

CVE-2017-8776 affects Quick Heal Internet Security, Total Security, and AntiVirus Pro 10.1.0.316. Connected documents confirm a root cause: approximately 165 PE files in the default installation do not use ASLR/DEP protections, leaving the product with reduced defenses against directed attacks. I...

CVE-2017-8775

Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 are vulnerable to Memory Corruption while parsing a malformed Mach-O file...

DEBIAN-CVE-2017-8112

hw/scsi/vmwpvscsi.c in QEMU aka Quick Emulator allows local guest OS privileged users to cause a denial of service infinite loop and CPU consumption via the message ring page count...

CVE-2017-8112

CVE-2017-8112 affects QEMU (hw/scsi/vmw_pvscsi.c). The vulnerability allows a local guest OS user with privileges to trigger an infinite loop in the message ring page count, causing a denial of service (CPU exhaustion). The provided documents do not specify a vendor/version scope or a remediation...

CVE-2017-8086

CVE-2017-8086: In QEMU, a memory leak in v9fs_list_xattr (hw/9pfs/9p-xattr.c) can be triggered by the orig_value path, allowing local privileged guest users to cause denial of service via memory consumption. Public metrics show CVSSv2/3 for this issue (4.9, 6.5). The connected advisories (e.g., D...

CVE-2017-8112

hw/scsi/vmwpvscsi.c in QEMU aka Quick Emulator allows local guest OS privileged users to cause a denial of service infinite loop and CPU consumption via the message ring page count...

CVE-2017-7980

Heap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator Qemu 2.8 and earlier allows local guest OS users to execute arbitrary code or cause a denial of service crash via vectors related to a VNC client updating its display after a VGA operation...

UBUNTU-CVE-2017-7980

Heap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator Qemu 2.8 and earlier allows local guest OS users to execute arbitrary code or cause a denial of service crash via vectors related to a VNC client updating its display after a VGA operation...

The vulnerability of the iOS operating system allows a hacker to obtain an Apple ID identifier.

The vulnerability of the iOS operating system’s Accounts component is related to the lack of protection for service data. Exploiting this vulnerability could allow a local attacker to obtain an Apple ID, by taking advantage of authentication vulnerabilities during a quick screen lock in iCloud...

The vulnerability of the iOS operating system, which allows a perpetrator to make phone calls to arbitrary numbers

The vulnerability of the Quick Look component in the iOS operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to make phone calls to arbitrary numbers remotely...

Important: Red Hat Security Advisory: qemu-kvm-rhev security update

An update for qemu-kvm-rhev is now available for Red Hat OpenStack Platform 10.0 Newton. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Description of the security update for Outlook 2016: April 11, 2017

None None...

Description of the security update for Outlook 2010: April 11, 2017

Description of the security update for Outlook 2010: April 11, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...

CVE-2017-7377

CVE-2017-7377 affects QEMU’s 9pfs (hw/9pfs/9p.c): the functions v9fs_create and v9fs_lcreate allow local guest OS privileged users to cause denial of service (file descriptor or memory consumption) when an in-use fid is referenced. The issue is triggered by vectors related to an already in-use fi...

Edit and Replay Network Traffic: tcpreplay

Edit and Replay Network Traffic Tcpreplay is a suite of GPLv3 licensed utilities for UNIX and Win32 under Cygwin operating systems for editing and replaying network traffic which was previously captured by tools like tcpdump and Ethereal / Wireshark . It allows you to classify traffic as client o...

UBUNTU-CVE-2017-7377

The 1 v9fscreate and 2 v9fslcreate functions in hw/9pfs/9p.c in QEMU aka Quick Emulator allow local guest OS privileged users to cause a denial of service file descriptor or memory consumption via vectors related to an already in-use fid...

CVE-2017-2404

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Quick Look" component. It allows remote attackers to trigger telephone calls to arbitrary numbers via a tel: URL in a PDF document, as exploited in the wild in October 2016...

CVE-2017-2404

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Quick Look" component. It allows remote attackers to trigger telephone calls to arbitrary numbers via a tel: URL in a PDF document, as exploited in the wild in October 2016...

CVE-2017-2404

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Quick Look" component. It allows remote attackers to trigger telephone calls to arbitrary numbers via a tel: URL in a PDF document, as exploited in the wild in October 2016...

CVE-2017-2404

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Quick Look" component. It allows remote attackers to trigger telephone calls to arbitrary numbers via a tel: URL in a PDF document, as exploited in the wild in October 2016...