DEF CON 2019: New Class of SQLite Exploits Open Door to iPhone Hack
Researchers exploit a SQLite memory corruption issue outside of a browser. Continue reading DEF CON 2019: New Class of SQLite Exploits Open Door to iPhone Hack
Category Archives: Memory corruption
Microsoft Issues Multiple Critical Patches for Edge Browser
Microsoft January Patch Tuesday roundup includes four critical patches for its Edge browser. Continue reading Microsoft Issues Multiple Critical Patches for Edge Browser
VU#317277: Texas Instruments Microcontrollers CC2640 and CC2650 are vulnerable to heap overflow
Texas Instruments Microcontrollers CC2640 and CC2650 are vulnerable to heap overflow Continue reading VU#317277: Texas Instruments Microcontrollers CC2640 and CC2650 are vulnerable to heap overflow
Mozilla Patches Critical Code Execution Bug in Firefox 62
The update includes nine security patches overall. Continue reading Mozilla Patches Critical Code Execution Bug in Firefox 62
Popular ‘Circle with Disney’ Parental Control System Riddled With 23 Vulnerabilities
A popular parental monitoring system, called Circle with Disney, receives 23 patches for a wide range of serious vulnerabilities. Continue reading Popular ‘Circle with Disney’ Parental Control System Riddled With 23 Vulnerabilities
OpenVPN Patches Critical Remote Code Execution Vulnerability
OpenVPN patched four vulnerabilities privately disclosed by Dutch researcher Guido Vranken, including a critical issue that could lead to remote code execution. Continue reading OpenVPN Patches Critical Remote Code Execution Vulnerability
VMware Patches VM Escape Vulnerability
VMware patched a vulnerability in Workstation and Fusion that could allow an attacker to run code on a host machine. Continue reading VMware Patches VM Escape Vulnerability
Obihai Patches Memory Corruption, DoS, CSRF Vulnerabilities in IP Phones
Obihai Technology recently patched a slew of issues in its ObiPhone IP phone products that could have led to memory corruption, a buffer overflow, and denial of service conditions, among other outcomes.
Continue reading Obihai Patches Memory Corruption, DoS, CSRF Vulnerabilities in IP Phones
A Month Without Adobe Flash Player Patches
Adobe rolled out patches for four vulnerabilities in Adobe Experience Manager, the first time since January its monthly patch release cycle has not included a Flash Player security update. Continue reading A Month Without Adobe Flash Player Patches
Patched libarchive Vulnerabilities Have Big Reach
Libarchive was patched against three memory-related vulnerabilities, putting pressure on admins to ensure third-party software that also uses the library is patched. Continue reading Patched libarchive Vulnerabilities Have Big Reach