Moderate: Red Hat Security Advisory: Red Hat JBoss Data Virtualization 6.4 security update

An update is now available for Red Hat JBoss Data Virtualization. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

imagemagick/encoder_sun_fuzzer: Use-of-uninitialized-value in ScaleQuantumToChar

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6198194854690816 Project: imagemagick Fuzzer: libFuzzerimagemagickencodersunfuzzer Fuzz target binary: encodersunfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

Symantec Endpoint Protection Manager File Upload

File upload vulnerability in Symantec Endpoint Protection Manager Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

Error : "Cannot Connect to Server" with Citrix Receiver for Mac 12.7, Unable to Launch Applications

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Mac Receiver 12.7: Unable to launch application Error: "Cannot connect to server" while connecting...

mupdf/pdf_fuzzer: Use-of-uninitialized-value in pdf_parse_file_spec

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=5996991491342336 Project: mupdf Fuzzer: libFuzzermupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

imagemagick/encoder_mpc_fuzzer: Use-of-uninitialized-value in GetEXIFProperty

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5736450319450112 Project: imagemagick Fuzzer: libFuzzerimagemagickencodermpcfuzzer Fuzz target binary: encodermpcfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

graphicsmagick/coder_PICT_fuzzer: Unknown signal in DestroyCacheInfo

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=6624475274543104 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderPICTfuzzer Fuzz target binary: coderPICTfuzzer Job Type: libfuzzerubsangraphicsmagick Platform Id: linux Crash Type:...

imagemagick/encoder_mvg_fuzzer: Heap-buffer-overflow in FileToBlob

Detailed report: https://oss-fuzz.com/testcase?key=4892658276237312 Project: imagemagick Fuzzer: aflimagemagickencodermvgfuzzer Fuzz target binary: encodermvgfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow WRITE \ Crash Address: 0x63200002c801 Crash State:...

ReelPhish: A Real-Time Two-Factor Phishing Tool

Social Engineering and Two-Factor Authentication Social engineering campaigns are a constant threat to businesses because they target the weakest chain in security: people. A typical attack would capture a victim’s username and password and store it for an attacker to reuse later. Two-Factor...

imagemagick/encoder_epsi_fuzzer: Heap-buffer-overflow in ParseInternalDoctype

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6320685661028352 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderepsifuzzer Fuzz target binary: encoderepsifuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

libreoffice/htmlfuzzer: Heap-use-after-free in SwTextFootnote::GetTextNode

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4530720392347648 Project: libreoffice Fuzzer: libFuzzerlibreofficehtmlfuzzer Fuzz target binary: htmlfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...

Fedora 26 : flatpak (2018-b5ecac9405)

This is a security fix release that fixes a sandbox escape in the flatpak dbus proxy. This issue was found by Gabriel Campana of The Google Security Team. Major changes in 0.10.3 - Fix dbus proxy vulnerability in authentication phase - Make permission handling ignore unknown permissions for...

Threat Outbreak Alert RuleID31909: Email Messages Distributing Malicious Software on February 6, 2018

Medium Alert ID: 56680 First Published: 2018 February 6 17:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31909 may contain the following files: Name |...

Boomerang spam bombs Malwarebytes forum—not a smart move

Tech support scammers are generally not the best and brightest. As such, they will occasionally post ads for their fake companies in the comment sections here or on the Malwarebytes forums. Last week, however, scammers struggled with configuring their spambots, resulting in spam bombs on the foru...

graphicsmagick/coder_PCT_fuzzer: Unknown signal in _int_memalign

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=4832092207710208 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderPCTfuzzer Fuzz target binary: coderPCTfuzzer Job Type: libfuzzerubsangraphicsmagick Platform Id: linux Crash Type:...

wireshark/fuzzshark_ip_proto-udp: Heap-use-after-free in next_tvb_add_handle

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed report: https://oss-fuzz.com/testcase?key=6177897392898048 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type:...

chakra: Heap-use-after-free in WScriptJsrt::LoadScript

Project: https://github.com/Microsoft/ChakraCore.git Detailed report: https://oss-fuzz.com/testcase?key=5682962172477440 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0x611000044bc0 Crash State: WScriptJsrt::LoadScri...

openthread/ip6-send-fuzzer: Stack-buffer-overflow in ot::NetworkData::ServiceTlv::GetServiceDataLength

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5433723441905664 Project: openthread Fuzzer: libFuzzeropenthreadip6-send-fuzzer Fuzz target binary: ip6-send-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Crash Type:...

mupdf/pdf_fuzzer: Crash in pdf_read_new_xref

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=4558604561547264 Project: mupdf Fuzzer: libFuzzermupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7173ffffffe0 Cra...

imagemagick/encoder_miff_fuzzer: Heap-buffer-overflow in FileToBlob

Detailed report: https://oss-fuzz.com/testcase?key=5119439830777856 Project: imagemagick Fuzzer: aflimagemagickencodermifffuzzer Fuzz target binary: encodermifffuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow WRITE \ Crash Address: 0x632000074801 Crash State...