Category Archives: Bugs

Advisories for Ruby&Perl

Posted on August 6, 2016 by Icewall

[table] Vulnerability,CVE Ruby Fiddle::Function.new Heap Overflow Vulnerability,CVE-2016-2339 Ruby pack_pack Use After Free Vulnerability,CVE-2016-2338 Ruby Psych::Emitter start_document Heap Overflow Vulnerability,CVE-2016-2338 Ruby TclTkIp ip_cancel_eval Type Confusion Vulnerabilities,CVE-2016-2337 Ruby WIN32OLE ole_invoke and ole_query_interface Type Confusion Vulnerabilities,CVE-2016-2336 Ruby TkUtil class multiple vulnerabilities – Type … Continue reading →

Posted in Bez kategorii, Bugs, Security | Tagged , , , , , | Leave a comment

(English) Microsoft .NET/Silverlight Manifest Resource Information Disclosure Vulnerability [CVE-2015-6114 TALOS-CAN-0130]

Posted on December 8, 2015 by Icewall

:: Description An exploitable information leak or denial of service vulnerability exists in the manifest resource parsing functionality of the .NET Framework. A specially crafted resource can cause an integer overflow resulting in an out of bounds read which may … Continue reading →

Posted in Analiza, Bez kategorii, Bugs, Security | Tagged , , , , , | Leave a comment

(English) Microsoft Windows FastFAT.sys Sectors per FAT Denial of Service Vulnerability

Posted on November 5, 2015 by Icewall

Do You remember story about MS14-063 from last year ? It turns out there is continuation of it, but this time inside FAT12 partition. [VIDEO] Time to stick the magic stick Analysis Affected systems From Windows NT to Windows 7 … Continue reading →

Posted in Bez kategorii, Bugs, Security | Tagged , , , , , , , | Leave a comment

Story about MS14-063

Posted on October 25, 2014 by Icewall

Last week Microsoft released patch for reported by me vulnerability in FastFat driver marking it as: MS14-063 – Vulnerability in FAT32 Disk Partition Driver Could Allow Elevation of Privilege (2998579) [CVE-2014-4115]. Let me present some of the most interesting parts … Continue reading →

Posted in Bugs, Security | Tagged , , , , | Leave a comment

(English) Few vulnerabilities in

Posted on March 23, 2012 by Icewall

After two mails to VLC security team and lack of answer I decided to public this research before any patch. Presented here vulns are not too evil (Local DoS) so making them public will not cause any damage for VLC … Continue reading →

Posted in Bugs, Security | Tagged , , , | Leave a comment