CVE-2014-1542

Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code via vectors related to a crafted AudioBuffer channel count and sample rate...

Threat Outbreak Alert: Fake Product Sample Request Email Messages on May 1, 2014

Medium Alert ID: 34025 First Published: 2014 May 2 15:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product sample request for the recipient. The text in the email message attempts to convince the recipient to ope...

Threat Outbreak Alert: Fake Product Sample Request Email Messages on April 22, 2014

Medium Alert ID: 33888 First Published: 2014 April 22 14:47 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product request for the recipient. The text in the email message attempts to convince the recipient to open th...

Office modular exploit sample analysis-vulnerability warning-the black bar safety net

1 Overview Online disclosure of a suspected CVE-2 0 1 4-1 7 6 1 RTF sample, hanhai source analysis found that the sample is not a CVE-2 0 1 4-1 7 6 1, but in a RTF sample includes both the two vulnerabilities, respectively, for the CVE-2 0 1 2-0 1 5 8 and CVE-2 0 1 3-3 9 0 6, compare the special...

Office”combination”formula exploits the sample analysis-vulnerability warning-the black bar safety net

by hcl, nine8 of code audit labs of vulnhunt.com 1 Overview Online disclosure of a suspected CVE-2 0 1 4-1 7 6 1 RTF sample, hanhai source analysis found that the sample is not a CVE-2 0 1 4-1 7 6 1, but in a RTF sample includes both the two vulnerabilities, respectively, for the CVE-2 0 1 2-0 1 ...

Threat Outbreak Alert: Fake Sample Order Notification Email Messages on April 15, 2014

Medium Alert ID: 33815 First Published: 2014 April 16 11:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a sample order for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Product Sample Request Email Messages on April 3, 2014

Medium Alert ID: 33633 First Published: 2014 April 3 14:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order request for the recipient. The text in the email message attempts to convince the recipient to op...

Threat Outbreak Alert: Fake Product Sample Order Email Messages on June 23, 2014

Medium Alert ID: 33149 First Published: 2014 March 3 14:49 GMT Last Updated: 2014 June 25 13:05 GMT Version: 20 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product sample order for the recipient. The text in the email message...

Out-of-bounds

The takdecodeframe function in libavcodec/takdec.c in FFmpeg before 2.1.4 does not properly validate a certain bits-per-sample value, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted TAK aka Tom's lossless...

CVE-2014-2097

The takdecodeframe function in libavcodec/takdec.c in FFmpeg before 2.1.4 does not properly validate a certain bits-per-sample value, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted TAK aka Tom's lossless...

CVE-2014-0774: Stack-based Buffer Overflow

Stack-based buffer overflow in the C++ sample client in Schneider Electric OPC Factory Server OFS TLXCDSUOFS33 - 3.35, TLXCDSTOFS33 - 3.35, TLXCDLUOFS33 - 3.35, TLXCDLTOFS33 - 3.35, and TLXCDLFOFS33 - 3.35 allows local users to gain privileges via vectors involving a malformed configuration file...

PT-2014-3836

Name of the Vulnerable Software and Affected Versions Schneider Electric OPC Factory Server OFS versions 3.35 Description The issue is related to a stack-based buffer overflow in the C++ sample client. This can be exploited by local users to gain privileges through vectors involving a malformed...

[Rekall] Memory Forensics Analysis Framework

The Rekall Framework is a completely open collection of tools, implemented in Python under the GNU General Public License, for the extraction of digital artifacts from volatile memory RAM samples. The extraction techniques are performed completely independent of the system being investigated but...

Threat Outbreak Alert: Fake Product Sample Email Messages on January 25, 2014

Medium Alert ID: 32570 First Published: 2014 January 27 14:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain product sample photos for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Product Sample Attachment Email Messages on December 15, 2013

Medium Alert ID: 32170 First Published: 2013 December 16 14:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product sample attachment for the recipient. The text in the email message attempts to convince the recipie...

Threat Outbreak Alert: Fake Product Sample Request Email Messages on November 19, 2013

Medium Alert ID: 31831 First Published: 2013 November 20 16:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product sample request for the recipient. The text in the email message attempts to convince the recipient ...

Threat Outbreak Alert: Fake Product Sample Request Email Messages on November 7, 2013

Medium Alert ID: 31673 First Published: 2013 November 7 20:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product request for the recipient. The text in the email message attempts to persuade the recipient to open...

Threat Outbreak Alert: Fake Product Sample Request Email Messages on November 4, 2013

Medium Alert ID: 31613 First Published: 2013 November 4 20:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product sample request for the recipient. The text in the email message attempts to convince the recipient t...

Threat Outbreak Alert: Fake Product Sample Request Email Messages on October 30, 2013

Medium Alert ID: 31556 First Published: 2013 October 30 18:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product sample request for the recipient. The text in the email message attempts to convince the recipient t...

OpenJDK: Specially crafted sample model integer overflow (2D, 8007014)

Unspecified vulnerability in the 2D component in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than...