ZeroDay Findings
Sign inSign up

Every 4 hours

Cyber

Keywords match titles. Record type separates incidents, intel, and research from CVEs.

  1. Research · Dec 21, 2023 · ZeroDay Catalog

    Heap Buffer Overflow Vulnerability in Google Chromium WebRTC

    A heap buffer overflow vulnerability has been identified in Google Chromium's WebRTC, potentially allowing remote exploitation through crafted HTML.

    What changed

    A critical heap buffer overflow vulnerability has been discovered in the WebRTC component of Google Chromium. This flaw could be exploited by a remote attacker through a specially crafted HTML page, leading to potential heap corruption.

    The vulnerability poses significant risks to users, particularly in environments where real-time communication is essential.

    Who is affected

    The vulnerability primarily affects various web browsers that utilize the WebRTC framework, with Google Chrome being the most notable example.

    Organizations and individuals relying on real-time communication features in their web applications may also be at risk.

    • Google Chrome users
    • Developers utilizing WebRTC in their applications
    • Organizations implementing real-time communication solutions

    What to do

    It is crucial for users and organizations to stay informed about updates from Google regarding this vulnerability. Applying patches and updates as soon as they are available will mitigate the risks associated with this flaw.

    Regularly review security advisories and ensure that all web applications leveraging WebRTC are secure against potential exploitation.

    • Monitor Google security updates for patches related to this vulnerability.
    • Implement security best practices for web applications using WebRTC.
    • Educate users about the risks of interacting with untrusted HTML content.

    Original report

  2. Research · Dec 12, 2023 · ZeroDay Catalog

    Segmentation Fault Vulnerability in NCurse v6.4-20230418

    A segmentation fault vulnerability has been identified in NCurse v6.4-20230418, potentially impacting system stability and performance.

    What changed

    A critical segmentation fault vulnerability has been discovered in NCurse version 6.4-20230418, specifically within the _nc_wrap_entry() component. This flaw can lead to unexpected behavior and system crashes, affecting applications that rely on this library.

    The presence of this vulnerability necessitates immediate attention from users and administrators to mitigate potential disruptions.

    Who is affected

    The vulnerability impacts various users and systems that utilize the NCurse library, particularly in environments where terminal handling is critical.

    Organizations that depend on NCurse for text-based user interfaces in applications may experience instability.

    • Developers using NCurse for terminal interface applications.
    • Organizations relying on NCurse for system management tools.
    • End-users of software that integrates NCurse for user interaction.

    What to do

    It is recommended that users of NCurse v6.4-20230418 assess their systems for this vulnerability and take appropriate action to mitigate risks.

    Updating to a patched version of NCurse or implementing workarounds to avoid the affected component is essential.

    • Monitor official channels for updates from the vendor, Invisible Island.
    • Consider upgrading to a newer version of NCurse that addresses this vulnerability.
    • Evaluate the impact on applications utilizing NCurse and prepare for potential downtime.

    Original report