DEBIAN-CVE-2017-9098

ImageMagick before 7.0.5-2 and GraphicsMagick before 1.3.24 use uninitialized memory in the RLE decoder, allowing an attacker to leak sensitive information from process memory space, as demonstrated by remote attacks against ImageMagick code in a long-running server process that converts image da...

The WannaCry Ransomware Hackers Made Some Real Amateur Mistakes

Researchers say the worst ransomware epidemic ever is also poorly run, shoddily coded, and barely profitable. The post The WannaCry Ransomware Hackers Made Some Real Amateur Mistakes appeared first on WIRED...

Microsoft Edge CVE-2017-0241 Remote Privilege Escalation Vulnerability

Description Microsoft Edge is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Edge Recommendations Block external access at the network boundary, unless external parties require service. Filter...

ZTE Anyservice suffers from s2-045 remote command execution vulnerability

ZTE Anyservice is a fast-response, highly customizable solution for customers. A s2-045 remote command execution vulnerability exists in the ZTE anyservice device, which allows attackers to remotely execute commands and gain server privileges...

s2-045 Remote Code Execution Vulnerability in the igateway Gateway System

The igateway gateway is a gateway system produced by Guangzhou Yihang Interconnection Communication Co. The igateway gateway system suffers from a s2-045 remote code execution vulnerability, which allows remote attackers to exploit the vulnerability to execute commands and gain server privileges...

This Week in Security News

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. Below you’ll find a quick recap of topics followed by links to news articles and/or our blog posts providing additional insight. Be sure to check back...

FreeType 2 'cff_parser_run' function boundary write heap buffer overflow vulnerability

FreeType 2 is a C-based , portable open source font engine library developed by the FreeType team , which can be used to rasterize and map characters into bitmaps and provide support for other font-related businesses . A heap-based buffer overflow vulnerability exists in the 'cffparserrun' functi...

DEBIAN-CVE-2016-7519

The ReadRLEImage function in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds read via a crafted file...

CVE-2017-7690

Proxifier for Mac before 2.19.2, when first run, allows local users to gain privileges by replacing the KLoader binary with a Trojan horse program...

PonyOS 4.0 fluttershy LD_LIBRARY_PATH Privilege Escalation

!/usr/bin/python PonyOS 4.0 has added several improvements over previous releases including support for setuid binaries and dynamic libraries. The run-time linker does not sanitize environment variables when running setuid files allowing for local root exploitation through manipulated...

UBUNTU-CVE-2016-10328

FreeType 2 before 2016-12-16 has an out-of-bounds write caused by a heap-based buffer overflow related to the cffparserrun function in cff/cffparse.c...

CVE-2016-8726

An exploitable null pointer dereference vulnerability exists in the Web Application /forms/webrunScript iwfilename functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. An HTTP POST request with a blank line in the header will cause a segmentation fault in the web server...

The vulnerability of the console-based graphic editor ImageMagick and the operating system OpenSUSE Leap allows a hacker to trigger a service failure.

The vulnerability of the ReadRLEImage function in the console-based image editing tool ImageMagick and the operating system OpenSUSE Leap is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability allows an attacker to cause a service failure application termination by...

The vulnerability of the console-based graphic editor ImageMagick, which allows a hacker to trigger a service failure

The vulnerability of the ReadRLEImage function in the coder/rle.c file of the console image editing tool ImageMagick is caused by buffer overflow. Exploiting this vulnerability could allow an attacker, operating remotely, to cause a service failure termination of the application through the use o...

UBUNTU-CVE-2016-10049

Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick before 6.9.4-4 allows remote attackers to cause a denial of service application crash or have other unspecified impact via a crafted RLE file...

AZL-7179 CVE-2017-6836 affecting package audiofile 0.3.6-27

Heap-based buffer overflow in the Expand3To4Module::run function in libaudiofile/modules/SimpleModule.h in Audio File Library aka audiofile 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 allows remote attackers to cause a denial of service crash via a crafted file...

DEBIAN-CVE-2014-9844

The ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service out-of-bounds read via a crafted image file...

PT-2017-17363 · Libaudiofile +2 · Audio File Library +2

Name of the Vulnerable Software and Affected Versions: Audio File Library versions 0.3.0 through 0.3.6 Description: The issue is a heap-based buffer overflow in the Expand3To4Module::run function in libaudiofile/modules/SimpleModule.h. This allows remote attackers to cause a denial of service cra...

Cisco AnyConnect SBL 4.3.04027 Local Privilege Escalation (CVE-2017-3813)

Run CMD.EXE with system privileges 1. Start Cisco anyconnect from logon screen. 2. Once the Cisco app comes up where you can select a profile and hit connect hold CTRL and hit B. 3. When the Cisco about window appears then select the URL at the bottom. This will open Internet Explorer or you can...

Shutter user-assisted remote code execution

Description. /usr/bin/shutter in Shutter through 0.93.1 allows user-assisted remote attackers to execute arbitrary commands via a crafted image name that is mishandled during a "Run a plugin" action. 2. Proof of concept. 1 Rename an image to something like "$firefox" 2 Open the renamed file in...