OpenStack Image Registry and Delivery Service (Glance) 2014.2 through 2014.2.2 does not properly remove images, which allows remote authenticated users to cause a denial of service (disk consumption) by creating a large number of images using the task v2 API and then deleting them before the uploads finish, a different vulnerability than CVE-2015-1881.
Monthly Archives: February 2015
CVE-2015-0555 (ipolis_device_manager)
Buffer overflow in the XnsSdkDeviceIpInstaller.ocx ActiveX control in Samsung iPOLiS Device Manager 1.12.2 allows remote attackers to execute arbitrary code via a long string in the first argument to the (1) ReadConfigValue or (2) WriteConfigValue function.
CVE-2015-1572
Heap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code by causing a crafted block group descriptor to be marked as dirty. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0247.
CVE-2015-1605
Multiple SQL injection vulnerabilities in Dell ScriptLogic Asset Manager (aka Quest Workspace Asset Manager) before 9.5 allow remote attackers to execute arbitrary SQL commands via unspecified vectors to (1) GetClientPackage.aspx or (2) GetProcessedPackage.aspx.
CVE-2015-1881
OpenStack Image Registry and Delivery Service (Glance) 2014.2 through 2014.2.2 does not properly remove images, which allows remote authenticated users to cause a denial of service (disk consumption) by creating a large number of images using the task v2 API and then deleting them, a different vulnerability than CVE-2014-9684.
AVG Android App Performance Report Q4 2014
Q3-Q4 2014 Report
Press Release
Games, Music and Shopping Apps Hit Smartphones Hardest
Full Report
Image Gallery
Gemalto: ‘SIM Products Are Secure’
Gemalto officials say that while they are still in the process of investigating whether the company was compromised by the NSA and GCHQ to access the encryption keys for its SIM cards, they say they believe their products and platforms are secure. In a statement issued Monday, Gemalto officials said they are still trying to […]
Games, Music and Shopping Apps Hit Smartphones Hardest
AMSTERDAM and SAN FRANCISCO – February 24, 2015 – Music lovers, smartphone shoppers and mobile gamers around the world could find their favorite apps are the ones eating up most of their battery life, data plan and phone storage. The results of the latest app performance research from AVG Technologies, N.V. (NYSE: AVG), the online security company™ for 197 million active users, rank the popular music streaming service Spotify, new games like Deer Hunter 2014, and even the Amazon shopping app as among the most resource hungry apps globally.
The quarterly AVG Android App Performance Report analyzes aggregated, anonymous data from over one million AVG Android app users to discover the top performance-affecting apps worldwide. Installed on over 600,000 devices across AVG’s user base, popular Spotify has moved up two places from where AVG had ranked it in Q3 to take second position behind the social networking app from Facebook, whose constant background notification checks still have the greatest impact on overall Android device performance, consistent with last quarter’s findings.
There were also four major new trends among AVG users, as identified in the latest report:
- Game On: demonstrating the ever-changing gaming landscape, last quarter’s gaming chart toppers, FarmVille and Puzzle & Dragons, showed major declines in their installed user base, contributing to the reason they dropped out of the AVG Q4 performance rankings. They are replaced by new entrants, Boom Beach for overall impact and Deer Hunter 2014 for storage consumption.
- Seasonal Shopping Fever: over the holiday shopping and sales period, the official Amazon for Android app entered the charts this quarter, ranked number five in the top 10 list of most all-round resource-consuming apps.
- Home Cinema Gets Smart: previously listed in the top three battery draining apps, Netflix this quarter no longer appears in the tables at all following a November update that has resulted in significantly less battery drain. Good news for film fans!
- Helping Hands that Hinder: tools like Clean Master or background apps like Samsung’s Security Policies designed to help keep smartphones secure and smooth, actually rank among the highest drainers of battery, storage and data plan.
“In this quarter’s app report we saw some expected seasonal changes in the app landscape, such as uplift in usage of social, purchasing and GPS-based location apps,” said Yuval Ben-Itzhak, Chief Technology Officer, AVG Technologies. “What surprised us, however, was that some of those tools and security updates aimed at improving your phone experience, were in fact impacting it quite heavily. This is not something most people would expect so we hope our report will encourage people to understand how to manage their apps to prevent them impacting negatively on their favorite mobile past-times.”
The full report, which breaks down the performance impact further according to battery drain, storage consumption and data traffic, can be downloaded from AVG Now.
| Overall Performance Impact Rank | App Name | Category | Developer |
| 1 | Social | ||
| 2 | Spotify | Music & Audio | Spotify Ltd. |
| 3 | Social | ||
| 4 | Path | Social | Path Inc. |
| 5 | Amazon Shopping | Retail | Amazon |
###
About AVG Technologies (NYSE: AVG)
AVG is the online security company providing leading software and services to secure devices, data and people. Over 197 million active users, as of December 31, 2014, use AVG´s products and services. AVG’s Consumer portfolio includes internet security, performance optimization, and personal privacy and identity protection for mobile devices and desktops. The AVG Business portfolio – delivered by managed service providers, VARs and resellers – offers IT administration, control and reporting, integrated security, and mobile device management that simplify and protect businesses.
All trademarks are the property of their respective owners.

Yuval Ben-Itzhak, CTO, AVG Technologies
Contacts:
US
Katie Han
Waggener Edstrom for AVG
+ 1 (212) 551 4807
UK
Samantha Woodman
Waggener Edstrom for AVG
+ 44 (0)20 7632 3840
Webgate Buffer Overflow
Various Webgate technology suffers from multiple buffer overflow vulnerabilities.