Mac OS X : Apple Safari < 6.0.3 Multiple Vulnerabilities

The version of Apple Safari installed on the remote Mac OS X 10.7 or 10.8 host is earlier than 6.0.3. It is, therefore, potentially affected by several issues : - Multiple memory corruption vulnerabilities exist in WebKit that could lead to unexpected program termination or arbitrary code...

Safari < 6.0.3 Multiple Vulnerabilities

Binary data 6712.prm...

CVE-2013-0955

CVE-2013-0955 affects WebKit as used in Apple iOS before 6.1. The vulnerability is a memory corruption issue in WebKit that can be triggered by a crafted website, potentially allowing remote code execution or causing a denial of service (application crash). The impact is dependent on the WebKit h...

Creative Software AutoUpdate Engine - ActiveX Control Buffer Overflow (Metasploit)

$Id: creativesoftwarecachefolder.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2010-0955

The CVE-2010-0955 entry refers to a SQL injection in Bild Flirt Community 2.0, specifically in index.php where the id parameter can be exploited to execute arbitrary SQL commands remotely. Affected component: Bild Flirt Community 2.0 (index.php). Root cause: unsafely concatenated id parameter in ...

Apple QuickTime Image Description Atom Sign Extension Memory Corruption (CVE-2009-0955)

QuickTime is a media player application developed by Apple. It is capable of playing back numerous multimedia file formats from local file system or remote servers. There exists a sign extension based memory corruption vulnerability in Apple QuickTime. The vulnerability is due to improper...

Creative Software AutoUpdate Engine ActiveX Control Buffer Overflow

$Id: creativesoftwarecachefolder.rb This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

RHEL 5 : java-1.4.2-ibm (RHSA-2008:0955)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2008:0955 advisory. - Java RE allows Same Origin Policy to be Bypassed 6687932 CVE-2008-3104 - Java Web Start, arbitrary file creation 6703909 CVE-2008-3112 -...

Advisory: Apple QuickTime Image Description Atom Sign Extension Memory Corruption

INTRODUCTION ============ According to QuickTime's specification, The sample description atom STSD stores information that allows QuickTime to decode samples in the media. It has the following structure: 0 DWORD Size 4 DWORD Type 8 BYTE Version 9 BYTE3 FLAGS 12 DWORD Number of entries 16 DWORD...

CVE-2009-0955

creationtimestamp| type| source ---|---|--- 2009-06-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8862...

CVE-2009-0955

CVE-2009-0955 affects Apple QuickTime prior to 7.6.2 due to a sign-extension vulnerability in the Image Description Atom handling for Apple Video files. A remote attacker could entice a user to open a crafted QuickTime movie, triggering a memory corruption flaw that may lead to arbitrary code exe...

QuickTime < 7.6.2 Multiple Vulnerabilities (Mac OS X)

The version of QuickTime installed on the remote Mac OS X host is older than 7.6.2. Such versions contain several vulnerabilities : - A heap buffer overflow in QuickTime's handling of MS ADPCM encoded audio data may lead to an application crash or arbitrary code execution. CVE-2009-0185 - A memor...

RHEL 4 : nfs-utils (RHSA-2009:0955)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2009:0955 advisory. - nfs-utils: missing tcpwrappers support CVE-2008-1376 Note that Nessus has not tested for this issue but has instead relied only on the application'...

Critical: Red Hat Security Advisory: java-1.4.2-ibm security update

Updated java-1.4.2-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 3 Extras, Red Hat Enterprise Linux 4 Extras, and Red Hat Enterprise Linux 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response...

Creative Software AutoUpdate Engine ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in Creative Software AutoUpdate Engine. When sending an overly long string to the cachefolder property of CTSUEng.ocx an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...

DSquare Exploit Pack: D2SEC_CREATIVE

Name| d2seccreative ---|--- CVE| CVE-2008-0955 Exploit Pack| D2ExploitPack Description| Creative Software AutoUpdate Engine ActiveX Stack Overflow Notes|...

CVE-2008-0955

The CVE-2008-0955 issue is a stack-based buffer overflow in the Creative Labs AutoUpdate Engine ActiveX CTSUEng.ocx , triggered by a long CacheFolder property value. A remote attacker could execute arbitrary code by enticing a user to a malicious page. Connected sources confirm the vulnerability ...

Creative Software AutoUpdate Engine ActiveX (CTSUEng.ocx) Unspecified Overflow

The remote host contains the Creative Software AutoUpdate Engine ActiveX control, which is used to automatically update Creative Labs software. The version of this control installed on the remote host reportedly contains an unspecified stack-based buffer overflow. If an attacker can trick a user ...

CVE-2008-0955

creationtimestamp| type| source ---|---|--- 2008-05-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5681 2010-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16539 2018-05-29 15:50:33+00:00| seen|...

Creative Software AutoUpdate Engine ActiveX stack buffer overflow

Overview The Creative Labs AutoUpdate Engine ActiveX control contains a stack buffer overflow, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The Creative Software AutoUpdate Engine ActiveX control is a component that provides...