4627 matches found
ASSURE Case Study: One
The engagement The client needed to meet the requirements of the Network Information Systems NIS CAF. There was a target profile for the NIS CAF that the CAA had set out for the client’s systems. However, we discovered early on that this had the potential to be a transformational piece of work fo...
Zelio Soft Memory Use After Free
The vulnerability of Zelio Soft’s software for Zelio Logic intelligent relays lies in the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2021-21832
A memory corruption vulnerability exists in the ISO Parsing functionality of Disc Soft Ltd Deamon Tools Pro 8.3.0.0767. A specially crafted malformed file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...
Memory corruption
A memory corruption vulnerability exists in the ISO Parsing functionality of Disc Soft Ltd Deamon Tools Pro 8.3.0.0767. A specially crafted malformed file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2021-21832
A memory corruption vulnerability exists in the ISO Parsing functionality of Disc Soft Ltd Deamon Tools Pro 8.3.0.0767. A specially crafted malformed file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2021-21832
CVE-2021-21832 affects Disc Soft Ltd Daemon Tools Pro 8.3.0.0767. Multiple connected sources describe a memory corruption vulnerability in the ISO Parsing functionality caused by an integer overflow during allocation when processing a crafted ISO file, leading to an out-of-bounds write. The TALOS...
CVE-2021-21832
A memory corruption vulnerability exists in the ISO Parsing functionality of Disc Soft Ltd Deamon Tools Pro 8.3.0.0767. A specially crafted malformed file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...
PT-2021-14802 · Disc Soft · Daemon Tools Pro
Name of the Vulnerable Software and Affected Versions: Disc Soft Ltd Deamon Tools Pro version 8.3.0.0767 Description: A memory corruption issue exists in the ISO Parsing functionality. This can be triggered by a specially crafted malformed file, leading to an out-of-bounds write. An attacker can...
Disc Soft Ltd Daemon Tools Pro ISO Parsing memory corruption vulnerability
Summary A memory corruption vulnerability exists in the ISO Parsing functionality of Disc Soft Ltd Deamon Tools Pro 8.3.0.0767. A specially crafted malformed file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability. Tested Versions Disc Soft...
openCryptoki: Soft token does not check if an EC key is valid
A flaw was found in openCryptoki. The openCryptoki Soft token does not check if an EC key is valid when an EC key is created via CCreateObject, nor when CDeriveKey is used with ECDH public data. This may allow a malicious user to extract the private key by performing an invalid curve attack...
ALBA-2021:3054 opencryptoki bug fix and enhancement update
The opencryptoki packages contain version 2.11 of the PKCS11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor with the PKCS11 firmware loaded, the IBM eServer Cryptographic Accelerator FC 4960 ...
PT-2021-1172
Name of the Vulnerable Software and Affected Versions: openCryptoki versions prior to the fixed version in AlmaLinux 8.5 Description: The issue concerns the opencryptoki packages, which contain version 2.11 of the PKCS11 API. The problem is that the soft token does not check if an EC key is valid...
CVE-2021-32576
Acronis True Image prior to 2021 Update 4 for Windows allowed local privilege escalation due to improper soft link handling issue 1 of 2...
CVE-2021-32578
Acronis True Image prior to 2021 Update 4 for Windows allowed local privilege escalation due to improper soft link handling issue 2 of 2...
CVE-2021-32576
Acronis True Image prior to 2021 Update 4 for Windows allowed local privilege escalation due to improper soft link handling issue 1 of 2...
CVE-2021-32578
Acronis True Image prior to 2021 Update 4 for Windows allowed local privilege escalation due to improper soft link handling issue 2 of 2...
Privilege escalation
Acronis True Image prior to 2021 Update 4 for Windows allowed local privilege escalation due to improper soft link handling issue 2 of 2...
Privilege escalation
Acronis True Image prior to 2021 Update 4 for Windows allowed local privilege escalation due to improper soft link handling issue 1 of 2...