eScan Anti-Virus Denial of Service Vulnerability

eScan Anti-Virus is a comprehensive anti-virus and content security solution. A denial of service vulnerability exists in the driver file econceal.sys in eScan Antivirus 14.0.1400.2029. The vulnerability arises due to an unverified input value from IOCtl 0x8300210C. A local user can exploit this...

eScan Anti-Virus Denial of Service Vulnerability (CNVD-2018-02623)

eScan Anti-Virus is a comprehensive anti-virus and content security solution. A denial of service vulnerability exists in the driver file econceal.sys in eScan Antivirus 14.0.1400.2029. The vulnerability arises due to an unverified input value from IOCtl 0x830020E0 or 0x830020E4. A local user can...

Input validation

xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code...

DEBIAN-CVE-2017-12185

xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code...

CVE-2017-12185

xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code...

ALPINE-CVE-2017-12185

xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code...

CVE-2017-12185

xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code...

CVE-2017-12185

xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code...

CVE-2017-12185

CVE-2017-12185 affects the X.Org X server (xorg-x11-server) prior to 1.19.5. The vulnerability is due to missing length validation in the MIT-SCREEN-SAVER extension, which can cause the X server to crash or potentially allow arbitrary code execution when processed by a malicious X client. The pro...

CVE-2017-12185

xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code...

CVE-2017-12185

xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code...

January 17, 2018—KB4057144 (OS Build 15063.877)

None None...

App Layering/Unidesk: Desktops Blue-screen with "IRQL_NOT_LESS_OR_EQUAL" STOP 0x0000000A

Desktop will appear to become unresponsive to the end-user, but if you look at the VM console, you will see that it's actually blue-screening with STOP 0xA. Analysis of the dump file will point to unirsd.sys...

CVE-2017-8443

In Kibana X-Pack security versions prior to 5.4.3 if a Kibana user opens a crafted Kibana URL the result could be a redirect to an improperly initialized Kibana login screen. If the user enters credentials on this screen, the credentials will appear in the URL bar. The credentials could then be...

Microsoft’s Jan. 2018 Patch Tuesday Lowdown

Microsoft on Tuesday released 14 security updates, including fixes for the Spectre and Meltdown flaws detailed last week, as well as a zero-day vulnerability in Microsoft Office that is being exploited in the wild. Separately, Adobe pushed a security update to its Flash Player software. Last week...

CVE-2018-5276

In Malwarebytes Premium 3.3.1.2183, the driver file FARFLT.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e018. NOTE: the vendor reported that they "have not been able to reproduce the issu...

Delta Industrial Automation Screen Editor Memory Error Causes Vulnerability

Delta Industrial Automation Screen Editor is a set of automation screen editor software from Delta Electronics. A memory misreference vulnerability exists in Delta Industrial Automation Screen Editor version 2.00.23.00 and earlier. The vulnerability can be exploited to execute arbitrary code via ...

Delta Industrial Automation Screen Editor Stack Buffer Overflow Vulnerability

Delta Industrial Automation Screen Editor is a set of automation screen editor software from Delta Electronics. A stack buffer overflow vulnerability exists in Delta Industrial Automation Screen Editor version 2.00.23.00 and earlier. A remote attacker can exploit this vulnerability to execute...

Delta Industrial Automation Screen Editor Arbitrary Code Execution Vulnerability

Delta Industrial Automation Screen Editor is a set of automation screen editor software from Delta Electronics. A security vulnerability exists in Delta Industrial Automation Screen Editor version 2.00.23.00 and earlier. The vulnerability can be exploited by an attacker to execute arbitrary code...

Delta Industrial Automation Screen Editor Type Obfuscation Vulnerability

Delta Industrial Automation Screen Editor is a set of automation screen editor software from Delta Electronics. A type confusion vulnerability exists in Delta Industrial Automation Screen Editor version 2.00.23.00 and earlier. A remote attacker can exploit this vulnerability to execute arbitrary...