18185 matches found
Debian DSA-1541-1 : openldap2.3 - several vulnerabilities
Several remote vulnerabilities have been discovered in OpenLDAP, a free implementation of the Lightweight Directory Access Protocol. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-5707 Thomas Sesselmann discovered that slapd could be crashed by a...
Borland Interbase 2007 - 'ibserver.exe' Buffer Overflow (PoC)
POC.pl !/usr/bin/perl -w Author: Liu Zhen Hua use IO::Socket; use strict; my $host=$ARGV0; sub usage print "usage: perl poc.pl serverip\n"; if $ARGV newProto='tcp', PeerAddr=$host, PeerPort=3050; my $pad0 = "\x41"x1000; "\x00\x00\x03\xE8" my $pad5 = "\x43"x16; my $exploit =...
Alsaplayer < 0.99.80-rc3 Vorbis Input Local Buffer Overflow Exploit
No description provided by source. I have released this exploit for the alsaplayer bug CVE-2007-5301. You can find all the needed files at http://www.wekk.net/research/CVE-2007-5301/ With my modified version of vorbiscomment, you can generate a ogg exploit like this: whats@debian:$...
CVE-2007-5406
kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy formerly Verity KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, does not properly parse long tokens, which allows remote attackers to cause a denial of service CPU and memory...
CVE-2007-6020
CVE-2007-6020 describes multiple stack-based buffer overflows in the Folio Flat File speed reader (foliosr.dll) of Autonomy KeyView 10.3.0.0, used by IBM Lotus Notes and Symantec Mail Security (SMSSMTP/Exchange/Domino) and activePDF DocConverter. Secunia and NVD detail that boundary errors occur ...
CVE-2007-5406
CVE-2007-5406 affects Autonomy KeyView (kpagrdr.dll) components used in Applix graphics parsing, including versions 2.0.0.2 and 10.3.0.0. Secunia notes that parsing the ENCODING attribute and long tokens in Applix documents can trigger buffer overflows, enabling remote attackers to cause a denial...
CVE-2007-5405
CVE-2007-5405 is an Autonomy KeyView (kpagrdr.dll) buffer-overflow vulnerability affecting Applix Graphics (.ag) parsing. Secunia and related advisories document three overflow paths: (1) unsafe parsing of ENCODING in the *BEGIN tag, (2) boundary errors from overly long tokens, and (3) initial *B...
CVE-2007-5399
Summary (CVE-2007-5399) : Multiple heap-based buffer overflows in the Autonomy/Verity KeyView EML reader (emlsr.dll) affect Autonomous KeyView 10.3.0.0, used by IBM Lotus Notes. Vulnerabilities arise from parsing problematic EML headers (To, Cc, Bcc, From, Date, Subject, Priority, Importance, X-M...
[CVE-2007-5301] alsaplayer PoC - exploit
Hello, I have released this PoC for the alsaplayer bug CVE-2007-5301. You can find all the needed files at http://www.wekk.net/research/CVE-2007-5301/ !/bin/sh http://www.wekk.net/research/CVE-2007-5301/CVE-2007-5301-exploit.sh Exploit for alsaplayer before 0.99.80-rc3. Tested with the debian etc...
Alsaplayer < 0.99.80-rc3 Vorbis Input Local Buffer Overflow Exploit
Exploit for linux platform in category local exploits =================================================================== Alsaplayer 0.99.80-rc3 Vorbis Input Local Buffer Overflow Exploit =================================================================== I have released this exploit for the...
alsaplayer-overflow.txt
I have released this exploit for the alsaplayer bug CVE-2007-5301. You can find all the needed files at http://www.wekk.net/research/CVE-2007-5301/ With my modified version of vorbiscomment, you can generate a ogg exploit like this: whats@debian:$ vorbiscomment.whats -w -t "TITLE=$perl -e 'print...
AlsaPlayer 0.99.80-rc3 - Vorbis Input Local Buffer Overflow
AlsaPlayer 0.99.80-rc3 - Vorbis Input Local Buffer Overflow I have released this exploit for the alsaplayer bug CVE-2007-5301. You can find all the needed files at http://www.wekk.net/research/CVE-2007-5301/ With my modified version of vorbiscomment, you can generate a ogg exploit like this:...
CVE-2007-5301
creationtimestamp| type| source ---|---|--- 2008-04-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5424...
AlsaPlayer < 0.99.80-rc3 - Vorbis Input Local Buffer Overflow
I have released this exploit for the alsaplayer bug CVE-2007-5301. You can find all the needed files at http://www.wekk.net/research/CVE-2007-5301/ With my modified version of vorbiscomment, you can generate a ogg exploit like this: whats@debian:$ vorbiscomment.whats -w -t "TITLE=$perl -e 'print...
Immunity Canvas: FLASH_DUKE
Name| flashduke ---|--- CVE| CVE-2007-0071 Exploit Pack| CANVAS Description| Adobe Flash Player DefineSceneAndFrameLabelData Tag Overflow Notes| CVE Name: CVE-2007-0071 VENDOR: Adobe VersionsAffected: Adobe Flash Player 9.0.115.0 and below Repeatability: References:...
CVE-2007-6019
CVE-2007-6019 affects Adobe Flash Player 9.0.115.0 and earlier (and 8.0.39.0 and earlier). The vulnerability arises from a modified DeclareFunction2 Actionscript tag that can prevent object instantiation, enabling remote arbitrary-code execution when a crafted SWF is processed. Remediation mentio...
CVE-2007-0071
Adobe Flash Player 9.0.115.0 and earlier (and 8.0.39.0 and earlier) are affected by CVE-2007-0071 due to an integer overflow triggered by a crafted SWF with a negative Scene Count value. The overflow occurs when a signed comparison is passed and the value is used as an offset of a NULL pointer, l...
squid security update
2.6.STABLE6-5.el51.3 - fix for 439801 - regression introduced in fix for CVE-2007-6239 - Resolves: 439992...
CVE-2008-1089
Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote attackers to execute arbitrary code via a Visio file containing crafted object header data, aka "Visio Object Header Vulnerability."...