Posts Tagged Pedro Ribeiro

2 results.

Debian: 2853-1: horde3: Remote code execution

Feb08
by Ike on February 8, 2014 at 4:40 pm
Posted In: Uncategorized

(Feb 5) Pedro Ribeiro from Agile Information Security found a possible remote code execution on Horde3, a web application framework. Unsanitized variables are passed to the unserialize() PHP function. A remote attacker could specially-crafted one of those variables allowing her to load and [More…]

 Comment 

Debian: 2784-1: xorg-server: use-after-free

Oct24
by Ike on October 24, 2013 at 5:28 am
Posted In: Uncategorized

(Oct 22) Pedro Ribeiro discovered a use-after-free in the handling of ImageText requests in the Xorg Xserver, which could result in denial of service or privilege escalation. [More…]

 Comment 

60 queries. 8.75 mb Memory usage. 2.148 seconds.