ICU library 52 < 54 - Multiple Vulnerabilities

Heap overflow and integer overflow in ICU library v52 to v54 Discovered by Pedro Ribeiro [email protected], Agile Information Security ================================================================================= Disclosure: 04/05/2015 / Last updated: 07/05/2015 Background on the affected...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure.

The platform/fonts/shaping/HarfBuzzShaper.cpp file of Google Chrome browser contains errors related to incorrect initialization of long fields. As a result, the bug may cause a service failure through the use of a specially crafted Unicode-formatted text message...

WebDrive 12.2 (B4172) - Buffer Overflow (PoC)

WebDrive 12.2 B4172 - Buffer Overflow PoC Document Title: =============== WebDrive 12.2 B4172 - Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1500 Release Date: ============= 2015-06-01 Vulnerability Laboratory ID VL-ID:...

Jildi FTP Client 1.5.2 b1138 - Buffer Overflow Vulnerability

Document Title: =============== Jildi FTP Client 1.5.2 b1138 - Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1503 Release Date: ============= 2015-06-03 Vulnerability Laboratory ID VL-ID: ==================================...

Jildi FTP Client 1.5.2 b1138 Buffer Overflow

Document Title: =============== Jildi FTP Client 1.5.2 b1138 - Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1503 Release Date: ============= 2015-06-03 Vulnerability Laboratory ID VL-ID: ==================================...

Jildi FTP Client 1.5.2 b1138 - Buffer Overflow Vulnerability

Document Title: =============== Jildi FTP Client 1.5.2 b1138 - Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1503 Release Date: ============= 2015-06-03 Vulnerability Laboratory ID VL-ID: ==================================...

WebDrive 12.2 (Build # 4172) - Buffer OverFlow PoC

Exploit for windows platform in category remote exploits !/usr/bin/python Exploit Title:WebDrive Buffer OverFlow PoC Author: metacom Vendor Homepage: http://www.webdrive.com/products/webdrive/ Software Link: https://www.webdrive.com/products/webdrive/download/ Version: 12.2 build 4172 32 bit Date...

Apple iOS CoreText Unicode Denial of Service Vulnerability

Apple iOS is an operating system used by Apple on smart devices. A security vulnerability in CoreText in Apple iOS allows a remote attacker to exploit specially crafted Unicode text to crash or restart an application...

WebDrive 12.2 (B4172) - Buffer Overflow Vulnerability

Document Title: =============== WebDrive 12.2 B4172 - Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1500 Release Date: ============= 2015-06-01 Vulnerability Laboratory ID VL-ID: ==================================== 1500...

WebDrive 12.2 (B4172) - Buffer Overflow Vulnerability

Document Title: =============== WebDrive 12.2 B4172 - Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1500 Release Date: ============= 2015-06-01 Vulnerability Laboratory ID VL-ID: ==================================== 1500...

How to Fix iPhone Crash Text Message Bug

We reported you about a new bug in the core component of iOS and OS X that causes the device's Messages app to crash and iPhones to reboot if it receives a certain string of characters, Arabic characters, via text message. Many have since fallen victims to this specially crafted sequence of Unico...

Apple Publishes Workaround for Unicode iMessage Bug

Apple has quickly given iPhone users a workaround for a pesky iMessage bug that’s been making the rounds this week. The bug, which some users have dubbed a “text message attack,” has been frustrating many iPhone users since surfacing on Wednesday. It occurs when a user receives a text message tha...

CVE-2015-1157

CoreText in Apple iOS 8.x through 8.3 allows remote attackers to cause a denial of service reboot and messaging disruption via crafted Unicode text that is not properly handled during display truncation in the Notifications feature, as demonstrated by Arabic characters in 1 an SMS message or 2 a...

CVE-2015-1157

CVE-2015-1157 affects CoreText in Apple iOS 8.x through 8.3. A crafted Unicode string is not handled correctly during Notification display truncation, allowing remote attackers to cause a denial of service (reboot and messaging disruption) via SMS or WhatsApp messages. Impact aligns with DoS; no ...

CVE-2015-1157

CoreText in Apple iOS 8.x through 8.3 allows remote attackers to cause a denial of service reboot and messaging disruption via crafted Unicode text that is not properly handled during display truncation in the Notifications feature, as demonstrated by Arabic characters in 1 an SMS message or 2 a...

This Simple Text Message Can Crash and Reboot Your iPhone

A newly discovered bug in Apple's iOS mobile operating system has emerged this evening that lets iPhone users crash another user’s iPhone by just sending a tiny string of text characters in a message. The bug is related to the Messages app and the notification system used by iPhone and iPad devic...

CVE-2014-8147

The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode ICU before 55.1 uses an integer data type that is inconsistent with a header file, which allows remote attackers to cause a denial of service...

CVE-2014-8147

The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode ICU before 55.1 uses an integer data type that is inconsistent with a header file, which allows remote attackers to cause a denial of service...

DEBIAN-CVE-2014-8147

The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode ICU before 55.1 uses an integer data type that is inconsistent with a header file, which allows remote attackers to cause a denial of service...

CVE-2014-8146

The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode ICU before 55.1 does not properly track directionally isolated pieces of text, which allows remote attackers to cause a denial of service...