PT-2017-11824

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader versions 2017.009.20058 and earlier Adobe Acrobat Reader versions 2017.008.30051 and earlier Adobe Acrobat Reader versions 2015.006.30306 and earlier Adobe Acrobat Reader version 11.0.20 and earlier Description The issue i...

June 13, 2017—KB4022715 (OS Build 14393.1358)

None None...

Ruby UTF-8 Parser Denial of Service Vulnerability

Ruby is a cross-platform, object-oriented, dynamically typed programming language. A security vulnerability in the 'parseryyerror' function of Ruby's UTF-8 parser allows remote attackers to exploit the vulnerability to submit a special request for a denial of service attack...

CVE-2017-11362

In PHP 7.x before 7.0.21 and 7.1.x before 7.1.7, ext/intl/msgformat/msgformatparse.c does not restrict the locale length, which allows remote attackers to cause a denial of service stack-based buffer overflow and application crash or possibly have unspecified other impact within International...

Fedora 26 : pcre (2017-188135cba8)

This release fixes a crash when finding a Unicode property for a character with a code point greater than 0x10ffff in UTF-32 library while UTF mode is disabled and JIT mde enabled. It also fixes a buffer overlflow in pcretest tool when copying a string in UTF-32 mode. Note that Tenable Network...

Fedora 26 : pcre2 (2017-e4c6ab648b)

This release fixes a crash when finding a Unicode property for a character with a code point greater than 0x10ffff in UTF-32 library while UTF mode is disabled and JIT mode is enabled. It also fixes an incortect cast in UTF validation routine. Note that Tenable Network Security has extracted the...

EulerOS 2.0 SP2 : icu (EulerOS-SA-2017-1129)

According to the version of the icu packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Stack-based buffer overflow in the uresgetByKeyWithFallback function in common/uresbund.cpp in International Components for Unicode ICU before 54.1 fo...

Counter Strike: Condition Zero - .BSP Map File Code Execution

Counter Strike: Condition Zero - .BSP Map File Code Execution !/usr/bin/env python Counter Strike: Condition Zero BSP map exploit By @DigitalCold Jun 11, 2017 E-DB Note: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/42325.zip bsp-exploit-source.zip from binasc...

CVE-2017-9225

An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A stack out-of-bounds write in onigencunicodegetcasefoldcodesbystr occurs during regular expression compilation. Code point 0xFFFFFFFF is not properly handled in...

MGASA-2017-0193 Updated rxvt-unicode packages fix security vulnerability

The rxvt-unicode package has been patched to harden it against potential integer overflow issues when printing escape sequences...

Updated rxvt-unicode packages fix security vulnerability

The rxvt-unicode package has been patched to harden it against potential integer overflow issues when printing escape sequences...

PT-2017-19429

Name of the Vulnerable Software and Affected Versions rxvt-unicode affected versions not specified Description The issue concerns potential integer overflow problems when printing escape sequences. Recommendations At the moment, there is no information about a newer version that contains a fix fo...

ansible: Security issue with lookup return not tainting the jinja2 environment

An input validation flaw was found in Ansible, where it fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup calls, they could inject Unicode strings to be parsed by the jinja2 templating system, resulting in code execution. By default, the...

Code injection

TeamSpeak Client 3.0.19 allows remote attackers to cause a denial of service application crash via the Unicode character followed by the Unicode character...

CVE-2017-9982

TeamSpeak Client 3.0.19 allows remote attackers to cause a denial of service application crash via the Unicode character followed by the Unicode character...

CVE-2017-9982

TeamSpeak Client 3.0.19 allows remote attackers to cause a denial of service application crash via the Unicode character followed by the Unicode character...

CVE-2017-9982

TeamSpeak Client 3.0.19 allows remote attackers to cause a denial of service application crash via the Unicode character followed by the Unicode character...

CVE-2017-9982

CVE-2017-9982 affects TeamSpeak Client 3.0.19. A remote attacker can trigger a denial of service (application crash) by sending a specific sequence of Unicode characters. The connected documents corroborate the DoS impact and the affected version, but do not provide exploitation details or offici...

Weblate: Improper validation of unicode characters #3

Hi! This issue also exists at Translations. Link: https://demo.weblate.org/translate/hello/master/gl/?type=all Screenshots F197895 F197896 Shuaib...

Weblate: Improper validation of unicode characters still not fixed #2

As resolved in 229483, I can't see a fix in the Full name field. The issue persists. Though this time it shows the decoded character on the error page but its not saved. Screenshot showing this is attached below. F197856 F197857 Shuaib...