5267 matches found
Identity Theft on the Job Market
Identity theft is getting more subtle: "My job application was withdrawn by someone pretending to be me": When Mr Fearn applied for a job at the company he didn't hear back. He said the recruitment team said they'd get back to him by Friday, but they never did. At first, he assumed he was...
CVE-2019-3971
Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to a local Denial of Service affecting CmdVirth.exe via its LPC port "cmdvrtLPCServerPort". A low privileged local process can connect to this port and send an LPCDATAGRAM, which triggers an Access Violation due to hardcoded NULLs used fo...
Hardcoded credentials
Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to a local Denial of Service affecting CmdVirth.exe via its LPC port "cmdvrtLPCServerPort". A low privileged local process can connect to this port and send an LPCDATAGRAM, which triggers an Access Violation due to hardcoded NULLs used fo...
CVE-2019-3971
Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to a local Denial of Service affecting CmdVirth.exe via its LPC port "cmdvrtLPCServerPort". A low privileged local process can connect to this port and send an LPCDATAGRAM, which triggers an Access Violation due to hardcoded NULLs used fo...
Facebook to Pay $5 Billion Fine to Settle FTC Privacy Investigation
After months of negotiations, the United States Federal Trade Commission FTC has approved a record $5 billion settlement with Facebook over its privacy investigation into the Cambridge Analytica scandal. The settlement will put an end to a wide-ranging probe that began more than a year ago and...
Facebook to Pay $5 Billion Fine to Settle FTC Privacy Investigation
After months of negotiations, the United States Federal Trade Commission FTC has approved a record $5 billion settlement with Facebook over its privacy investigation into the Cambridge Analytica scandal. The settlement will put an end to a wide-ranging probe that began more than a year ago and...
Microsoft Font Subsetting - DLL Heap Corruption in ComputeFormat4CmapData
Microsoft Font Subsetting - DLL Heap Corruption in ComputeFormat4CmapData -----===== Background =====----- The Microsoft Font Subsetting DLL fontsub.dll is a default Windows helper library for subsetting TTF fonts; i.e. converting fonts to their more compact versions based on the specific glyphs...
Mozilla Spidermonkey - Unboxed Objects Uninitialized Memory Access Exploit
/ Mozilla Spidermonkey - Unboxed Objects Uninitialized Memory Access For constructors, Spidermonkey implements a "definite property analysis" 1 to compute which properties will definitely exist on the constructed objects. Spidermonkey then directly allocates the constructed objects with the final...
Microsoft Windows - Font Subsetting DLL Heap-Based Out-of-Bounds Read in MergeFonts
Microsoft Windows - Font Subsetting DLL Heap-Based Out-of-Bounds Read in MergeFonts -----===== Background =====----- The Microsoft Font Subsetting DLL fontsub.dll is a default Windows helper library for subsetting TTF fonts; i.e. converting fonts to their more compact versions based on the specif...
CVE-2019-13262
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x00000000003283eb...
CVE-2019-13261
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000328384...
CVE-2019-13245
FastStone Image Viewer 7.0 has a User Mode Write AV starting at image00400000+0x00000000001a95b1...
CVE-2019-13248
ACDSee Free 1.1.21 has a User Mode Write AV starting at IDEACDStd!JPEGTransW+0x0000000000002450...
CVE-2019-13251
ACDSee Free 1.1.21 has a User Mode Write AV starting at IDEACDStd!IEPSetColorProfile+0x00000000000c47ff...
CVE-2019-13246
FastStone Image Viewer 7.0 has a User Mode Write AV starting at image00400000+0x00000000001a9601...
CVE-2019-13249
ACDSee Free 1.1.21 has a User Mode Write AV starting at IDEACDStd!IEPSetColorProfile+0x00000000000b9e7a...
CVE-2019-13258
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000328165...
CVE-2019-13257
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x00000000003273aa...