Heap Overflow Archives - SSD Secure Disclosure

SSD Advisory – Linux BlueZ Information Leak and Heap Overflow

Leave a Comment / Vulnerability publication / By SSD Secure Disclosure technical team

(This advisory follows up on a presentation provided during our offensive security event in 2018 in Hong Kong – come join us at TyphoonCon – June 2019 in Seoul for more offensive security lectures and training)Vulnerabilities SummaryThe following advisory discuss about two vulnerabilities found in Linux BlueZ bluetooth module.One of the core ideas behind Bluetooth …

SSD Advisory – Linux BlueZ Information Leak and Heap Overflow Read More »

SSD Advisory – iOS/macOS Safari Sandbox Escape via QuartzCore Heap Overflow

3 Comments / Vulnerability publication / By SSD Secure Disclosure technical team

Vulnerabilities Summary QuartzCore ( https://developer.apple.com/documentation/quartzcore ), also known as CoreAnimation, is a framework use by macOS and iOS to build an animatable scene graph. CoreAnimation uses a unique rendering model where the grapohics operations are run in a separate process. On macOS, the process is WindowServer and on iOS the name is backboardd. Both of …

SSD Advisory – iOS/macOS Safari Sandbox Escape via QuartzCore Heap Overflow Read More »

SSD Advisory – Python Bytecode Disassembler and Decompiler (pycdc) Multiple Vulnerabilities

1 Comment / Vulnerability publication / By SSD Secure Disclosure technical team

Vulnerabilities summary The following advisory describes 12 (twelve) vulnerabilities found in Python Bytecode Disassembler and Decompiler (pycdc). Python Bytecode Disassembler and Decompiler (pycdc) “aims to translate compiled Python byte-code back into valid and human-readable Python source code. While other projects have achieved this with varied success, Decompyle++ is unique in that it seeks to support …

SSD Advisory – Python Bytecode Disassembler and Decompiler (pycdc) Multiple Vulnerabilities Read More »

SSD安全公告–GraphicsMagick多个漏洞

1 Comment / Vulnerability publication / By SSD Secure Disclosure technical team

漏洞概要以下安全公告描述了在GraphicsMagick中发现的两个漏洞。 GraphicsMagick是“图像处理方面的瑞士军刀。基础包中的源码共有267K行(根据David A. Wheeler统计)，它提供了强大而有效的工具和库，支持读，写超过88种主要图像处理格式，包括DPX，GIF，JPEG，JPEG-2000，PNG，PDF，PNM和TIFF等重要格式。在GraphicsMagick中发现的两个漏洞是：内存信息泄露堆溢出漏洞提交者一位独立的安全研究人员Jeremy Heng（@nn_amon）和Terry Chia（Ayrx）向 Beyond Security 的 SSD 报告了该漏洞厂商响应厂商已经发布了这些漏洞的补丁(15237:e4e1c2a581d8 and 15238:7292230dd18)。获取更多信息： ftp://ftp.graphicsmagick.org/pub/GraphicsMagick/snapshots/ChangeLog.txt

SSD Advisory – GraphicsMagick Multiple Vulnerabilities

2 Comments / Vulnerability publication / By SSD Secure Disclosure technical team

Vulnerabilities summary The following advisory describes two (2) vulnerabilities found in GraphicsMagick. GraphicsMagick is “The swiss army knife of image processing. Comprised of 267K physical lines (according to David A. Wheeler’s SLOCCount) of source code in the base package (or 1,225K including 3rd party libraries) it provides a robust and efficient collection of tools and …

SSD Advisory – GraphicsMagick Multiple Vulnerabilities Read More »

SSD Advisory – Adobe Reader DC – execMenuItem Off-by-One Heap Buffer Overflow

1 Comment / Vulnerability publication / By SSD Secure Disclosure technical team

Vulnerability Summary The following advisory describes a JavaScript execMenuItem off-by-One heap buffer overflow, that can potentially lead to Remote Code Execution, found in Adobe Reader DC version 15.23.20056.213124. Credit An independent security researcher, Steven Seeley, has reported this vulnerability to Beyond Security’s SecuriTeam Secure Disclosure program Vendor response The vendor has released patches to address …

SSD Advisory – Adobe Reader DC – execMenuItem Off-by-One Heap Buffer Overflow Read More »

SSD Advisory – IBM Informix Dynamic Server and Informix Open Admin Tool Multiple Vulnerabilities

Leave a Comment / Vulnerability publication / By SSD Secure Disclosure technical team

Vulnerabilities Summary The following advisory describes six (6) vulnerabilities found in Informix Dynamic Server and Informix Open Admin Tool. IBM Informix Dynamic Server Exceptional, low maintenance online transaction processing (OLTP) data server for enterprise and workgroup computing. IBM Informix Dynamic Server has many features that cater to a variety of user groups, including developers and …

SSD Advisory – IBM Informix Dynamic Server and Informix Open Admin Tool Multiple Vulnerabilities Read More »

SSD Advisory – Pervasive SQL Heap Overflow

1 Comment / Vulnerability publication / By SSD Secure Disclosure technical team

Vulnerability Summary The following advisory describes Heap overflow vulnerability that can lead to remote code execution in Pervasive SQL server (Version 12.01.031.000). Credit An independent security researcher has reported this vulnerability to Beyond Security’s SecuriTeam Secure Disclosure program.

Heap Overflow

SSD Advisory – Linux BlueZ Information Leak and Heap Overflow

SSD Advisory – iOS/macOS Safari Sandbox Escape via QuartzCore Heap Overflow

SSD Advisory – Python Bytecode Disassembler and Decompiler (pycdc) Multiple Vulnerabilities

SSD安全公告–GraphicsMagick多个漏洞

SSD Advisory – GraphicsMagick Multiple Vulnerabilities

SSD Advisory – Adobe Reader DC – execMenuItem Off-by-One Heap Buffer Overflow

SSD Advisory – IBM Informix Dynamic Server and Informix Open Admin Tool Multiple Vulnerabilities

SSD Advisory – Pervasive SQL Heap Overflow

Get in touch

?

?

Get in touch