CVE-2016-5163

The bidirectional-text implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not ensure left-to-right LTR rendering of URLs, which allows remote attackers to spoof the address bar via crafted right-to-left RTL Unicode text, related to...

CVE-2016-3861: Improper Restriction of Operations within the Bounds of a Memory Buffer

LibUtils in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 mishandles conversions between Unicode character encodings with different encoding widths, which allows remote attackers to execute arbitrary code or cause a denial of...

Google Android - libutils UTF16 to UTF8 Conversion Heap Buffer Overflow

Google Android - libutils UTF16 to UTF8 Conversion Heap Buffer Overflow Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=840 There's an inconsistency between the way that the two functions in libutils/Unicode.cpp handle invalid surrogate pairs in UTF16, resulting in a mismatch...

Chrome 53 Fixes Address Spoofing Vulnerability, 32 Other Bugs

Google continued its onslaught of summer Chrome patches Wednesday when it pushed out version 53 of the browser, fixing 33 bugs, half of which were rated “high” severity by the company. Google paid at least $56,500 in rewards to researchers who discovered vulnerabilities in the browser this time...

CVE-2016-5163

The bidirectional-text implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not ensure left-to-right LTR rendering of URLs, which allows remote attackers to spoof the address bar via crafted right-to-left RTL Unicode text, related to...

CVE-2016-3861

LibUtils in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 mishandles conversions between Unicode character encodings with different encoding widths, which allows remote attackers to execute arbitrary code or cause a denial of...

PT-2016-6283

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 53.0.2785.89 on Windows and OS X Google Chrome versions prior to 53.0.2785.92 on Linux Opera affected versions not specified Description The issue is related to the bidirectional-text implementation, which does...

Kaspersky Internet Security KLIF Driver NtUserCreateWindowEx_HANDLER Denial of Service

Summary A denial of service vulnerability exists in the syscall filtering functionality of the Kaspersky Internet Security KLIF driver. A specially crafted native api call request can cause a access violation exception in KLIF kernel driver resulting in local denial of service. An attacker can ru...

Firefox, Chrome are caught: for the mainstream the browser's address fraud vulnerabilities-vulnerability warning-the black bar safety net

! Researcher Rafay Baloch yesterday disclosed the vulnerability details, he was in year 3, on Singapore's Black Hat Asia to do about the address bar spoofing of speech. The vulnerability principle Baloch in the personal web site said that the vulnerability of the main reason is that Chrome and...

Browser Address Bar Spoofing Vulnerability Disclosed

Chrome, Firefox and likely other major browsers are afflicted by a vulnerability that allows attackers to spoof URLs in the address bar. While Mozilla said it has patched the flaw in the affected Android version of the Firefox browser, Google said Chrome will be fixed in an upcoming September...

openSUSE Security Update : pcre2 (openSUSE-2016-966)

This update for pcre2 fixes the following issues : - pcre2 10.22 : - The POSIX wrapper function regcomp did not used to support back references and subroutine calls if called with the REGNOSUB option. It now does. - A new function, pcre2codecopy, is added, to make a copy of a compiled pattern. -...

Windows Gather Avira Password Extraction

This module extracts the weakly hashed password which is used to protect a Avira Antivirus 'Windows Gather Avira Password Extraction', 'Description' = %q This module extracts the weakly hashed password which is used to protect a Avira Antivirus MSFLICENSE, 'Author' = 'Robert Kugler / robertchrk',...

International Components for Unicode/C++ Denial of Service Vulnerability

International Components for Unicode ICU is a set of libraries for the C/C++ and Java programming languages to manipulate Unicode data, and an open source project to support the internationalization of software. The 'ulocacceptLanguageFromHTTP' function in the common/uloc.cpp file of Internationa...

ALPINE-CVE-2016-6293

The ulocacceptLanguageFromHTTP function in common/uloc.cpp in International Components for Unicode ICU through 57.1 for C/C++ does not ensure that there is a '\0' character at the end of a certain temporary array, which allows remote attackers to cause a denial of service out-of-bounds read or...

CVE-2016-6293

The ulocacceptLanguageFromHTTP function in common/uloc.cpp in International Components for Unicode ICU through 57.1 for C/C++ does not ensure that there is a '\0' character at the end of a certain temporary array, which allows remote attackers to cause a denial of service out-of-bounds read or...

CVE-2016-6293: Improper Restriction of Operations within the Bounds of a Memory Buffer

The ulocacceptLanguageFromHTTP function in common/uloc.cpp in International Components for Unicode ICU through 57.1 for C/C++ does not ensure that there is a '\0' character at the end of a certain temporary array, which allows remote attackers to cause a denial of service out-of-bounds read or...

The vulnerability of the International Components for Unicode library allows a attacker to trigger a service failure or cause other adverse effects.

The vulnerability of the collator implementation i18n/ucol.cpp in the International Components for Unicode library is related to resource management errors. Exploiting this vulnerability may allow a malicious actor to cause service failures or other effects through a specially crafted sequence of...

The vulnerability of the International Components for Unicode library allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the resolveImplicitLevels function common/ubidi.c in the implementation of the Unicode Bidirectional Algorithm of the International Components for Unicode library is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability can allow an attacker to caus...

The vulnerability of the International Components for Unicode library allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the resolveImplicitLevels function in the implementation of the Unicode Bidirectional Algorithm of the International Components for Unicode library is related to errors in number processing. Exploiting this vulnerability can allow a malicious actor to cause service failures o...

InstantHMI 6.1 - Privilege Escalation

Exploit for windows platform in category local exploits Title: InstantHMI - EoP: User to ADMIN CWE Class: CWE-276: Incorrect Default Permissions Date: 01/06/2016 Vendor: Software Horizons Product: InstantHMI Version: 6.1 Download link: http://www.instanthmi.com/ihmisoftware.htm Tested on: Windows...