ImageMagick DoS

The vulnerability of the ReadRLEImage function in the coder/rle.c file of the console image editing tool ImageMagick is caused by buffer overflow. Exploiting this vulnerability could allow an attacker, operating remotely, to cause a service failure termination of the application through the use o...

UBUNTU-CVE-2016-10049

Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick before 6.9.4-4 allows remote attackers to cause a denial of service application crash or have other unspecified impact via a crafted RLE file...

CVE-2015-2263: Undefined Security Weakness

Cloudera Manager 4.x, 5.0.x before 5.0.6, 5.1.x before 5.1.5, 5.2.x before 5.2.5, and 5.3.x before 5.3.3 uses global read permissions for files in its configuration directory when starting YARN NodeManager, which allows local users to obtain sensitive information by reading the files, as...

AZL-7179 CVE-2017-6836 affecting package audiofile 0.3.6-27

Heap-based buffer overflow in the Expand3To4Module::run function in libaudiofile/modules/SimpleModule.h in Audio File Library aka audiofile 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 allows remote attackers to cause a denial of service crash via a crafted file...

DEBIAN-CVE-2014-9844

The ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service out-of-bounds read via a crafted image file...

CVE-2017-6836

Heap-based buffer overflow in the Expand3To4Module::run function in libaudiofile/modules/SimpleModule.h in Audio File Library aka audiofile 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 allows remote attackers to cause a denial of service crash via a crafted file...

CVE-2017-6836: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the Expand3To4Module::run function in libaudiofile/modules/SimpleModule.h in Audio File Library aka audiofile 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 allows remote attackers to cause a denial of service crash via a crafted file...

PT-2017-17363 · Libaudiofile +2 · Audio File Library +2

Name of the Vulnerable Software and Affected Versions: Audio File Library versions 0.3.0 through 0.3.6 Description: The issue is a heap-based buffer overflow in the Expand3To4Module::run function in libaudiofile/modules/SimpleModule.h. This allows remote attackers to cause a denial of service cra...

PT-2017-1601

Name of the Vulnerable Software and Affected Versions Microsoft Internet Information Server IIS in Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 Description T...

Cisco AnyConnect SBL 4.3.04027 Local Privilege Escalation (CVE-2017-3813)

Run CMD.EXE with system privileges 1. Start Cisco anyconnect from logon screen. 2. Once the Cisco app comes up where you can select a profile and hit connect hold CTRL and hit B. 3. When the Cisco about window appears then select the URL at the bottom. This will open Internet Explorer or you can...

Shutter user-assisted remote code execution

Description. /usr/bin/shutter in Shutter through 0.93.1 allows user-assisted remote attackers to execute arbitrary commands via a crafted image name that is mishandled during a "Run a plugin" action. 2. Proof of concept. 1 Rename an image to something like "$firefox" 2 Open the renamed file in...

UBUNTU-CVE-2017-5991

An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9791f58ba3afdb9d465. The pdfrunxobject function in pdf-op-run.c encounters a NULL pointer dereference during a Fitz fzpaintpixmapwithmask painting operation. Versions 1.11 and later are unaffected...

PT-2017-16811 · Artifex +1 · Mupdf +1

Name of the Vulnerable Software and Affected Versions: Artifex MuPDF versions prior to 1912de5f08e90af1d9d0a9791f58ba3afdb9d465 Artifex MuPDF versions prior to 1.11 Description: An issue was discovered in the pdf run xobject function in pdf-op-run.c, which encounters a NULL pointer dereference...

CVE-2016-2787

The Puppet Communications Protocol in Puppet Enterprise 2015.3.x before 2015.3.3 does not properly validate certificates for the broker node, which allows remote non-whitelisted hosts to prevent runs from triggering via unspecified vectors...

DEBIAN-CVE-2016-3180

Tor Browser Launcher aka torbrowser-launcher before 0.2.4, during the initial run, allows man-in-the-middle attackers to bypass the PGP signature verification and execute arbitrary code via a Trojan horse tar file and a signature file with the valid tarball and signature...

Android Privilege Escalation

The vulnerability of the Contacts component in the Android operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to execute an application with privileges of the current user...

PT-2017-9922

Name of the Vulnerable Software and Affected Versions IBM UrbanCode Deploy affected versions not specified Description The issue allows a malicious user to access the Agent Relay ActiveMQ Broker JMX interface and run plugins on the agent. Recommendations At the moment, there is no information abo...

Vulnerabilities Leave iTunes, Apple's App Store Open to Script Injection

Apple is reportedly aware of and is in the middle of fixing a pair of vulnerabilities that exist in iTunes and the App Store. If exploited, researchers claim an attacker could inject malicious script into the application side of the vulnerable module or function. Vulnerability Lab’s Benjamin Kunz...

CVE-2016-8468

An elevation of privilege vulnerability in Binder could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as Moderate because it first requires compromising a privileged process and is mitigated by current platform...

Cannot read event log Veeam MP – Management Servers

Challenge Error accessing event log on SCOM Management servers - Error 31551, 31552 in Event logs. Cause Starting in Veeam Management Pack for Microsoft System Center version 8, Dataset rules are used to collect host security profiles and snapshots. When a collector is installed on an agent, no...