CORE-2013-0807 - Divide Error in Windows Kernel

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Divide Error in Windows Kernel 1. Advisory Information Title: Divide Error in Windows Kernel Advisory ID: CORE-2013-0807 Advisory URL: http://www.coresecurity.com/advisories/divide-error-in-windows-kernel Date published: 2013-12-...

[CVE-2013-6986] Insecure Data Storage in Subway Ordering for California (ZippyYum) 3.4 iOS mobile application

Title: CVE-2013-6986 Insecure Data Storage in Subway Ordering for California ZippyYum 3.4 iOS mobile application Published: December 7, 2013 Reported to Vendor: May 2013 CVE Reference: CVE-2013-6986 https://vulners.com/cve/CVE-2013-6986 CVSS v2 Base Score: 4.9 CVSS v2 Vector...

Microsoft Windows multiple security vulnerabilities

Memory corruption in graphics library, signature check bypass, use-after-free in scripting, multiple privilege escalations...

Photo Video Album Transfer 1.0 iOS - Multiple Vulnerabilities

Document Title: =============== Photo Video Album Transfer 1.0 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1166 Release Date: ============= 2013-12-10 Vulnerability Laboratory ID VL-ID:...

Phone Drive Eightythree 4.1.1 iOS - Multiple Vulnerabilities

Document Title: =============== Phone Drive Eightythree 4.1.1 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1168 Release Date: ============= 2013-12-11 Vulnerability Laboratory ID VL-ID: ==================================...

Advisory 01/2013: PHP openssl_x509_parse() Memory Corruption Vulnerability

SektionEins GmbH www.sektioneins.de -= Security Advisory =- Advisory: PHP opensslx509parse Memory Corruption Vulnerability Release Date: 2013/12/13 Last Modified: 2013/12/13 Author: Stefan Esser stefan.esseratsektioneins.de Application: PHP 4.0.6 - PHP 4.4.9 PHP 5.0.x PHP 5.1.x PHP 5.2.x PHP 5.3....

[SECURITY] [DSA 2817-1] libtar security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2817-1 [email protected] http://www.debian.org/security/ Luciano Bello December 14, 2013 http://www.debian.org/security/faq -...

libtar integer overflows

Few integer overflows...

iOS applications multiple seucrity vulnereabilities

Multiple application with remote data access are vulnerable...

FileMaster SY-IT v3.1 iOS - Multiple Web Vulnerabilities

Document Title: =============== FileMaster SY-IT v3.1 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1170 Release Date: ============= 2013-12-16 Vulnerability Laboratory ID VL-ID: ====================================...

RealPlayer buffer overflow

Buffer overflow on RMP files parsing...

QT resources exhaustion

Resources exhaustion leads to denial of service...

AST-2013-006: Buffer Overflow when receiving odd length 16 bit SMS message

Asterisk Project Security Advisory - AST-2013-006 Product Asterisk Summary Buffer Overflow when receiving odd length 16 bit SMS message Nature of Advisory Buffer Overflow and Remote Crash Susceptibility Remote SMS Messages Severity Major Exploits Known None Reported On September 26, 2013 Reported...

[slackware-security] libiodbc (SSA:2013-350-01)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 slackware-security libiodbc SSA:2013-350-01 New libiodbc packages are available for Slackware 13.1, 13.37, 14.0, 14.1, and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: +--------------------------+...

Wireshark DoS

Problems with NTLMSSPv2 and BSSGP dissectors...

NEW VMSA-2013-0016 VMware ESXi and ESX unauthorized file access through vCenter Server and ESX

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ----------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2013-0016 Synopsis: VMware ESXi and ESX unauthorized file access through vCenter Server and ESX Issue date: 2013-12-22 Updated on:...

APPLE-SA-2013-12-16-2 OS X Mavericks v10.9.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2013-12-16-2 OS X Mavericks v10.9.1 OS X Mavericks v10.9.1 is now available and includes the content of Safari 7.0.1. For further details see "About the security content of Safari 6.1.1 and Safari 7.0.1" at http://support.apple.com/kb/HT6082 ...

libiodbc rpath vulnerability

Unsafe rpath vulnerability in test applications...

AST-2013-007: Asterisk Manager User Dialplan Permission Escalation

Asterisk Project Security Advisory - AST-2013-007 Product Asterisk Summary Asterisk Manager User Dialplan Permission Escalation Nature of Advisory Permission Escalation Susceptibility Remote Authenticated Sessions Severity Minor Exploits Known None Reported On November 25, 2013 Reported By Matt...

[USN-2057-1] Qt vulnerability

========================================================================== Ubuntu Security Notice USN-2057-1 December 17, 2013 qt4-x11, qtbase-opensource-src vulnerability ========================================================================== A security issue affects these releases of Ubuntu...

[SECURITY] [DSA 2826-1] denyhosts security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2826-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez December 22, 2013 http://www.debian.org/security/faq -...

llvm unsafe rpath

rpath is set to /tmp...

APPLE-SA-2013-12-19-1 Motion 5.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2013-12-19-1 Motion 5.1 Motion 5.1 is now available and addresses the following: Motion Available for: OS X Mavericks v10.9 or later Impact: A maliciously crafted .motn file could lead to arbitrary code execution Description: An integer...

CORE-2013-0903 - RealPlayer Heap-based Buffer Overflow Vulnerability

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ RealPlayer Heap-based Buffer Overflow Vulnerability 1. Advisory Information Title: RealPlayer Heap-based Buffer Overflow Vulnerability Advisory ID: CORE-2013-0903 Advisory URL:...

APPLE-SA-2013-12-16-1 Safari 6.1.1 and Safari 7.0.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2013-12-16-1 Safari 6.1.1 and Safari 7.0.1 Safari 6.1.1 and Safari 7.0.1 are now available and address the following: Safari Available for: OS X Lion v10.7.5, OS X Lion Server v10.7.5, OS X Mountain Lion v10.8.5, OS X Mavericks v10.9 Impact:...

VMWare ESX / ESXi privilege escalation

Files access privilege escalation...

Apple Motion buffer overflow

Buffer overflow on .motn files parsing...

[slackware-security] llvm (SSA:2013-350-03)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 slackware-security llvm SSA:2013-350-03 New llvm packages are available for Slackware 14.0, 14.1, and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: +--------------------------+...

[ MDVSA-2013:298 ] php

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:298 http://www.mandriva.com/en/support/security/ Package : php Date : December 20, 2013 Affected: Enterprise Server 5.0 Problem Description: A vulnerability has been discovered and corrected in php: The...

Asterisk security vulnerabilities

SMS parsing buffer overflow, Asterisk Manager privilege escalation...

Apple Safari multiple security vulnerabilities

Information leakage, multiple memory corruptions...

[SECURITY] [DSA 2825-1] wireshark security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2825-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 20, 2013 http://www.debian.org/security/faq -...

denyhosts DoS

Invalid regular expression can be exploited to ban arbitrary IP address...

OpenStack multiple security vulnerabilities

DoS, information leakage...

ANSSI certificate is used for spoofing

ANSSI agency uses valid intermediate certificate in traffic sniffing device...

[ MDVSA-2013:291 ] kernel

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:291 http://www.mandriva.com/en/support/security/ Package : kernel Date : December 17, 2013 Affected: Business Server 1.0 Problem Description: Multiple vulnerabilities has been found and corrected in the Linu...

[USN-2062-1] OpenStack Horizon vulnerability

========================================================================== Ubuntu Security Notice USN-2062-1 December 20, 2013 horizon vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

[USN-2058-1] curl vulnerability

========================================================================== Ubuntu Security Notice USN-2058-1 December 18, 2013 curl vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities

Multiple memory corruptions, XSS, information leakage, certificate check bypass...

GnuPG acoustic attack

It's possible to resover sensitive information via acousitc emanations...

[USN-2061-1] OpenStack Keystone vulnerability

========================================================================== Ubuntu Security Notice USN-2061-1 December 19, 2013 keystone vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

[SECURITY] [DSA 2822-1] xorg-server security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2822-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 18, 2013 http://www.debian.org/security/faq -...

Linux kernel multiple security vulnerabilities

Weak permissions, information leakage, privilege escalation, DoS...

cURL certificates spoofing

Имя хоста не проверяется при включенном CURLOPTSSLVERIFYPEER...

[USN-2059-1] GnuPG vulnerability

========================================================================== Ubuntu Security Notice USN-2059-1 December 18, 2013 gnupg vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

X.Org integer overflow

Integer overflow...

Microsoft SignalR library crossite scripting

Forever Frame transport crossite scripting...

Microsoft Internet Explorer multiple security vulnerabilities

Multiple memory corruption and privilege escalations...

Microsoft Exchange Server multiple security vulnerabilities

Machine authentication check code execution, crossite scripting, Oracle components code execution...

Microsoft SharePoint code execution

It's possible to executed code via SharePoint page content...