exploit – Page 1198 –

>> Microsoft Windows Uniscribe USP10!otlValueRecord::adjustPos Out-Of-Bounds Memory Read

USER: deepcore // 2017-06-21 // 0 CMT

Microsoft Windows suffers from a Uniscribe font processing out-of-bounds memory read vulnerability in USP10!otlValueRecord::adjustPos.

[EXPLOIT]

>> Microsoft Windows Uniscribe USP10!otlReverseChainingLookup::apply Out-Of-Bounds Memory Read

USER: deepcore // 2017-06-21 // 0 CMT

Microsoft Windows suffers from a Uniscribe font processing out-of-bounds memory read vulnerability in USP10!otlReverseChainingLookup::apply.

[EXPLOIT]

>> Microsoft Windows Kernel nt!NtQueryInformationResourceManager Stack Memory Disclosure

USER: deepcore // 2017-06-21 // 0 CMT

The Microsoft Windows kernel suffers from a stack memory disclosure vulnerability in nt!NtQueryInformationResourceManager (information class 0).

[EXPLOIT]

>> Microsoft Windows Kernel ATMFD.DLL Malformed Index Out-Of-Bounds Read

USER: deepcore // 2017-06-21 // 0 CMT

The Microsoft Windows kernel suffers from an ATMFD.DLL out-of-bounds read vulnerability via a malformed Name INDEX in the CFF table.

[EXPLOIT]

>> Microsoft Windows Kernel nt!NtQueryInformationWorkerFactory Stack Memory Disclosure

USER: deepcore // 2017-06-21 // 0 CMT

The Microsoft Windows kernel suffers from a stack memory disclosure vulnerability in nt!NtQueryInformationWorkerFactory (WorkerFactoryBasicInformation).

[EXPLOIT]

>> Bitdefender Malicious RAR Denial Of Service

USER: deepcore // 2017-06-21 // 0 CMT

Bitdefender AV crashes when fed malicious RAR files from 2013.

[EXPLOIT]

>> Unrar VMSF_DELTA Arbitrary Memory Write

USER: deepcore // 2017-06-21 // 0 CMT

It appears that the VMSF_DELTA memory corruption that was reported to Sophos AV in 2012 (and fixed there) was actually inherited from upstream unrar. For unknown reasons, whoever fixed the…