[slackware-security] bind (SSA:2017-103-01)
Category Archives: Security
Security
Bugtraq: [security bulletin] HPESBGN03728 rev.1 – HPE Operations Agent using OpenSSL, Remote Denial of Service (DoS), Unauthorized Access to Data
[security bulletin] HPESBGN03728 rev.1 – HPE Operations Agent using OpenSSL, Remote Denial of Service (DoS), Unauthorized Access to Data
Bugtraq: [SYSS-2017-009] agorum core Pro – Improper Restriction of XML External Entity Reference ('XXE')
[SYSS-2017-009] agorum core Pro – Improper Restriction of XML External Entity Reference (‘XXE’)
Bugtraq: concrete5 v8.1.0 Host Header Injection
concrete5 v8.1.0 Host Header Injection
RHEA-2017:0977-1: Red Hat Enterprise MRG Realtime 2.5 enhancement update
Red Hat Enterprise Linux: Updated Red Hat Enterprise MRG Realtime packages that add one enhancement are
now available for Red Hat Enterprise MRG 2.5.
Exploit Kit Activity Quiets, But Is Far From Silent
Here are the exploit kits to watch for over the next three to six months.
Adobe Creative Cloud Desktop Application <= v4.0.0.185 Privilege Escalation
Posted by hyp3rlinx on Apr 14
[+] Credits: John Page aka hyp3rlinx
[+] Website: hyp3rlinx.altervista.org
[+] Source:
http://hyp3rlinx.altervista.org/advisories/ADOBE-CREATIVE-CLOUD-PRIVILEGE-ESCALATION.txt
[+] ISR: apparitionSec
Vendor:
==============
www.adobe.com
Product:
========================================
Adobe Creative Cloud Desktop Application
<= v4.0.0.185
Vulnerability Type:
=====================
Privilege Escalation
CVE Reference:
==============…
CVE-2017-7864
FreeType 2 before 2017-02-02 has an out-of-bounds write caused by a heap-based buffer overflow related to the tt_size_reset function in truetype/ttobjs.c.
CVE-2017-7870
LibreOffice before 2017-01-02 has an out-of-bounds write caused by a heap-based buffer overflow related to the tools::Polygon::Insert function in tools/source/generic/poly.cxx.
CVE-2017-7862
FFmpeg before 2017-02-07 has an out-of-bounds write caused by a heap-based buffer overflow related to the decode_frame function in libavcodec/pictordec.c.