CVE-2019-1118

Related Files

Ubuntu Security Notice USN-4609-1

Posted Oct 29, 2020

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 4609-1 - Fabian Henneke discovered that GOsa incorrectly handled client cookies. An authenticated user could exploit this with a crafted cookie to perform file deletions in the context of the user account that runs the web server. It was discovered that GOsa incorrectly handled user access control. A remote attacker could use this issue to log into any account with a username containing the word "success". Various other issues were also addressed.

tags | advisory, remote, web

systems | linux, ubuntu

advisories | CVE-2018-1000528, CVE-2019-11187, CVE-2019-14466

SHA-256 | daa46d595ce73c679a0617cf76033ccd2ccb549456af6f754422eaa95cc0f686

Download | Favorite | View

Microsoft DirectWrite / AFDKO OpenType Stack Corruption Due To Negative cubeStackDepth

Posted Jul 10, 2019

Authored by Google Security Research, mjurczyk

Microsoft DirectWrite / AFDKO suffers from a stack corruption vulnerability in OpenType font handling due to negative cubeStackDepth.

tags | exploit

advisories | CVE-2019-1118

SHA-256 | 151943d6fedcadaa27f44c6659dd65a5bae0b90b376bb58c73d25d660f26876e

Download | Favorite | View