Advisories

A chronological list of vulnerabilities published by STAR Labs researchers, with technical details, affected versions, and disclosure timelines.

Advisory Mar 17, 2020

(CVE-2020-9816) macOS libFontParser HeapOverflow Vulnerability

CVE: CVE-2020-9816 Tested Versions: macOS Catalina 10.15.1 (19B88) Product URL(s): https://apple.com Description of the vulnerability This vulnerability exists …

ByPeter Nguyễn Vũ Hoàng

Advisory Jan 15, 2020

(CVE-2020-2682) Oracle VirtualBox VBoxVHWAHandleTable Out-Of-Bounds Access Privilege Escalation

CVE: CVE-2020-2682 Tested Versions: Oracle VirtualBox 5.2.18 revision r123745 Product URL(s): https://virtualbox.org Description of the vulnerability VirtualBox …

ByPham Hong Phi

Advisory Jan 14, 2020

(CVE-2020-2674) Oracle VirtualBox OHCI Use-After-Free

CVE: CVE-2020-2674 Tested Versions: Oracle VirtualBox 5.2.18 revision r123745 Product URL(s): https://virtualbox.org Description of the vulnerability VirtualBox …

ByPham Hong Phi

Advisory Dec 10, 2019

(CVE-2019-16452) Adobe Acrobat/Reader getSound JSObject Use-after-Free - TianFu Cup 2019

CVE: CVE-2019-16452 Tested Versions: Adobe Acrobat and Reader versions 2019.012.20035 and earlier Product URL(s): https://acrobat.adobe.com/us/en/acrobat.html …

ByPhan Thanh Duy

Advisory Dec 04, 2019

(CVE-2020-0889) Microsoft Jet Database Format Record Length Memory Corruption

CVE: CVE-2020-0889 Tested Versions: msexcl40.dll 4.0.9801.17 Product URL(s): https://microsoft.com Description of the vulnerability msexcl40.dll is a part of …

ByShi Ji, Meysam Firouzi

Advisory Dec 04, 2019

(CVE-2020-2902) Oracle VirtualBox Direct3D 9 Shader Out-of-Bounds Write Remote Code Execution Vulnerability

CVE: CVE-2020-2902 Tested Versions: Microsoft Direct3D 9 Runtime version 10.0.17763.1 Product URL(s): https://microsoft.com Description of the vulnerability …

ByPham Hong Phi

Advisory Nov 13, 2019

(CVE-2020-0961) Microsoft Jet Database file position integer overflow Memory Corruption

CVE: CVE-2020-0961 Tested Versions: msexcl40.dll 4.0.9801.17 Product URL(s): https://microsoft.com Description of the vulnerability msexcl40.dll is a part of …

ByShi Ji, Meysam Firouzi

Advisory Nov 12, 2019

(CVE-2019-1406) Microsoft Jet Engine ColumnLvText Type Confusion

CVE: CVE-2019-1406 Tested Versions: Windows 10 version 1903 and below Windows 7 Product URL(s): https://www.microsoft.com The Microsoft Jet Database Engine …

ByShi Ji & Meysam Firouzi

Advisory Oct 20, 2019

(CVE-2019-2984) Oracle VirtualBox Video Hardware Acceleration NULL Pointer Dereferences

CVE: CVE-2019-2984 Tested Versions: Oracle VirtualBox 5.2.18 revision r123745 Product URL(s): https://virtualbox.org VirtualBox is a x86 and AMD64/Intel64 …

ByPhạm Hồng Phi

Advisory Oct 20, 2019

(CVE-2019-3002) Oracle VirtualBox Integer Divide by Zero in hdaR3StreamInit

CVE: CVE-2019-3002 Tested Versions: Oracle VirtualBox 6.0.4 revision r128413 Product URL(s): https://virtualbox.org VirtualBox is a x86 and AMD64/Intel64 …

ByPhạm Hồng Phi