ed

OpenBSD 2.9 Released




ed

FreeBSD 4.4 Released




ed

OpenBSD 3.0 Released




ed

FreeBSD 4.5 Released




ed

OpenBSD 3.1 Released




ed

FreeBSD 4.6 Released




ed

FreeBSD Bug Gives Untrusted Root Access





ed

Critical FreeBSD Bug Squashed













ed

Alleged Computer Hacker Granted Bail




ed

SIM Card Hack Suspect Released On Bail




ed

Alleged Ponzi Mastermind Stanford Pwned In Antigua




ed

Deutsche Telekom Hack Suspect Arrested At London Airport












ed

At Least 77 Killed In Nice, France Terror Attack







ed

Two French Teenagers Charged Over Despacito YouTube Hack






ed

Avast Anti-Virus Local Credential Disclosure

Avast Anti-Virus versions prior to 19.1.2360 suffer from a local credential disclosure vulnerability.




ed

ESET Generic Malformed Archive Bypass

Various ESET products suffer from a malformed archive bypass vulnerability. The parsing engine supports the ZIP archive format. The parsing engine can be bypassed by specifically manipulating an ZIP Archive Compression Information Field so that it can be accessed by an end-user but not the Anti-Virus software. The AV engine is unable to scan the container and gives the file a "clean" rating.




ed

Bitdefender Malformed Archive Bypass

The parsing engine for various Bitdefender products supports the RAR archive format. The parsing engine can be bypassed by specifically manipulating an RAR Archive (HOST_OS) so that it can be accessed by an end-user but not the anti-virus software. The AV engine is unable to scan the archive and issues the file a "clean" rating.




ed

Bitdefender Generic Malformed Archive Bypass

The Bitdefender parsing engine supports the RAR archive format. The parsing engine can be bypassed by specifically manipulating an RAR Archive (Compressed Size) so that it can be accessed by an end-user but not the Anti-Virus software. The AV engine is unable to scan the archive and issues the file a "clean" rating. All Bitdefender Products and Vendors that have licensed the Engine before Dec 12, 2019 are affected.




ed

Bitdefender Malformed Archive Bypass

The Bitdefender parsing engine supports the RAR archive format. The parsing engine can be bypassed by specifically manipulating an RAR Archive (RAR Compression Information) so that it can be accessed by an end-user but not the Anti-Virus software. The AV engine is unable to scan the archive and issues the file a "clean" rating. All Bitdefender Products and Vendors that have licensed the Engine before Dec 12, 2019 are affected.




ed

ESET Generic Malformed Archive Bypass

The ESET parsing engine can be bypassed by specifically manipulating a ZIP Archive Compression Information Field so that it can be accessed by an end-user but not the Anti-Virus software. The AV engine is unable to scan the container and gives the file a "clean" rating.




ed

Kaspersky Generic Malformed Archive Bypass

The Kaspersky parsing engine supports the ZIP archive format. The parsing engine can be bypassed by specifically manipulating an ZIP Archive (File Name length Field) so that it can be accessed by an end-user but not the Anti-Virus software. The AV engine is unable to scan the container and gives the file a "clean" rating.




ed

Bitdefender Generic Malformed Archive Bypass

The Bitdefender parsing engine supports the GZIP archive format. The parsing engine can be bypassed by specifically manipulating a GZIP Archive (Compression Method) so that it can be accessed by an end-user but not the Anti-Virus software. The AV engine is unable to scan the archive and issues the file a "clean" rating.




ed

QuickHeal Generic Malformed Archive Bypass

The QuickHeal parsing engine supports the ZIP archive format. The parsing engine can be bypassed by specifically manipulating an ZIP Archive (GPFLAG) so that it can be accessed by an end-user but not the Anti-Virus software. The AV engine is unable to scan the archive and issues the file a "clean" rating.




ed

iPhone iMessage Malformed Message Bricking

An issue exists where a malformed iMessage can brick an iPhone. A method in IMCore can throw an NSException due to a malformed message containing a property with key IMExtensionPayloadLocalizedDescriptionTextKey with a value that is not a NSString.