The rtsp_getdlsendtime method in the CNC_Ctrl control in Samsung SmartViewer allows remote attackers to execute arbitrary code via an index value.
Monthly Archives: November 2015
ACSC Releases 2015 Threat Report
Original release date: November 02, 2015
The Australian Cyber Security Centre (ACSC) has released its 2015 Threat Report. This report provides threat information that Australian organizations are facing, such as cyber espionage, cyber attacks, and cyber crime. Mitigation and remediation steps are also included to assist organizations with preventing and responding to such threats.
ACSC is the government authority for providing protective security advice to the private sector and state and territory governments across the Australia’s national infrastructure.
This product is provided subject to this Notification and this Privacy & Use policy.
Packet Storm New Exploits For October, 2015
This archive contains 166 exploits that were added to Packet Storm in October, 2015.
Xplico Network Forensic Analysis Tool 1.1.1
Xplico is an open source Network Forensic Analysis Tool (NFAT) that allows for data extraction from traffic captures. It supports extraction of mail from POP, IMAP, and SMTP, can extract VoIP streams, etc. This is the version that has a GUI allowing you to view photos, texts and videos contained in MMS messages.
actiTIME 2015.2 Privilege Escalation / Open Redirect
actiTIME 2015.2 suffers from multiple security vulnerabilities including open redirection, HTTP response splitting, and unquoted service path elevation of privilege.
Spetnik TCPing Utility 2.1.0 Buffer Overflow
If TCPing is called with an specially crafted CL argument it will cause an exception and overwrite the pointers to next SEH record and SEH handler with our buffer and malicious shellcode. Spetnik TCPing version 2.1.0 is affected.
Gentoo Linux Security Advisory 201510-08
Gentoo Linux Security Advisory 201510-8 – Multiple vulnerabilities have been found in cups-filters, the worst of which could lead to arbitrary code execution. Versions less than 1.0.71 are affected.
Debian Security Advisory 3389-1
Debian Linux Security Advisory 3389-1 – Security support for elasticsearch in jessie is hereby discontinued. The project no longer releases information on fixed security issues which allow backporting them to released versions of Debian and actively discourages from doing so.
Gentoo Linux Security Advisory 201510-02
Gentoo Linux Security Advisory 201510-2 – A heap-based buffer overflow in QEMU could result in execution of arbitrary code. Versions less than 2.3.0-r4 are affected.
Gentoo Linux Security Advisory 201510-03
Gentoo Linux Security Advisory 201510-3 – Multiple vulnerabilities have been found in Wireshark, allowing attackers to cause Denial of Service condition. Versions less than 1.12.7 are affected.