Fedora 8 : konversation-1.0.1-4.fc8 (2008-2062)

removes /usr/share/apps/konversation/scripts/media which can be used to execute a command via carefully crafted media Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and forma...

Debian DSA-1538-1 : alsaplayer - buffer overrun

Erik Sjolund discovered a buffer overflow vulnerability in the Ogg Vorbis input plugin of the alsaplayer audio playback application. Successful exploitation of this vulnerability through the opening of a maliciously crafted Vorbis file could lead to the execution of arbitrary code. %NASLMINLEVEL...

Borland Interbase 2007 - 'ibserver.exe' Buffer Overflow (PoC)

POC.pl !/usr/bin/perl -w Author: Liu Zhen Hua use IO::Socket; use strict; my $host=$ARGV0; sub usage print "usage: perl poc.pl serverip\n"; if $ARGV newProto='tcp', PeerAddr=$host, PeerPort=3050; my $pad0 = "\x41"x1000; "\x00\x00\x03\xE8" my $pad5 = "\x43"x16; my $exploit =...

CVE-2007-5406

kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy formerly Verity KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, does not properly parse long tokens, which allows remote attackers to cause a denial of service CPU and memory...

CVE-2007-5399

Summary (CVE-2007-5399) : Multiple heap-based buffer overflows in the Autonomy/Verity KeyView EML reader (emlsr.dll) affect Autonomous KeyView 10.3.0.0, used by IBM Lotus Notes. Vulnerabilities arise from parsing problematic EML headers (To, Cc, Bcc, From, Date, Subject, Priority, Importance, X-M...

CVE-2007-5405

CVE-2007-5405 is an Autonomy KeyView (kpagrdr.dll) buffer-overflow vulnerability affecting Applix Graphics (.ag) parsing. Secunia and related advisories document three overflow paths: (1) unsafe parsing of ENCODING in the *BEGIN tag, (2) boundary errors from overly long tokens, and (3) initial *B...

CVE-2007-5406

CVE-2007-5406 affects Autonomy KeyView (kpagrdr.dll) components used in Applix graphics parsing, including versions 2.0.0.2 and 10.3.0.0. Secunia notes that parsing the ENCODING attribute and long tokens in Applix documents can trigger buffer overflows, enabling remote attackers to cause a denial...

CVE-2007-6020

CVE-2007-6020 describes multiple stack-based buffer overflows in the Folio Flat File speed reader (foliosr.dll) of Autonomy KeyView 10.3.0.0, used by IBM Lotus Notes and Symantec Mail Security (SMSSMTP/Exchange/Domino) and activePDF DocConverter. Secunia and NVD detail that boundary errors occur ...

Alsaplayer < 0.99.80-rc3 Vorbis Input Local Buffer Overflow Exploit

Exploit for linux platform in category local exploits =================================================================== Alsaplayer 0.99.80-rc3 Vorbis Input Local Buffer Overflow Exploit =================================================================== I have released this exploit for the...

AlsaPlayer 0.99.80-rc3 - Vorbis Input Local Buffer Overflow

AlsaPlayer 0.99.80-rc3 - Vorbis Input Local Buffer Overflow I have released this exploit for the alsaplayer bug CVE-2007-5301. You can find all the needed files at http://www.wekk.net/research/CVE-2007-5301/ With my modified version of vorbiscomment, you can generate a ogg exploit like this:...

CVE-2007-5301

creationtimestamp| type| source ---|---|--- 2008-04-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5424...

[CVE-2007-5301] alsaplayer PoC - exploit

Hello, I have released this PoC for the alsaplayer bug CVE-2007-5301. You can find all the needed files at http://www.wekk.net/research/CVE-2007-5301/ !/bin/sh http://www.wekk.net/research/CVE-2007-5301/CVE-2007-5301-exploit.sh Exploit for alsaplayer before 0.99.80-rc3. Tested with the debian etc...

alsaplayer-overflow.txt

I have released this exploit for the alsaplayer bug CVE-2007-5301. You can find all the needed files at http://www.wekk.net/research/CVE-2007-5301/ With my modified version of vorbiscomment, you can generate a ogg exploit like this: whats@debian:$ vorbiscomment.whats -w -t "TITLE=$perl -e 'print...

AlsaPlayer < 0.99.80-rc3 - Vorbis Input Local Buffer Overflow

I have released this exploit for the alsaplayer bug CVE-2007-5301. You can find all the needed files at http://www.wekk.net/research/CVE-2007-5301/ With my modified version of vorbiscomment, you can generate a ogg exploit like this: whats@debian:$ vorbiscomment.whats -w -t "TITLE=$perl -e 'print...

Immunity Canvas: FLASH_DUKE

Name| flashduke ---|--- CVE| CVE-2007-0071 Exploit Pack| CANVAS Description| Adobe Flash Player DefineSceneAndFrameLabelData Tag Overflow Notes| CVE Name: CVE-2007-0071 VENDOR: Adobe VersionsAffected: Adobe Flash Player 9.0.115.0 and below Repeatability: References:...

CVE-2007-6019

CVE-2007-6019 affects Adobe Flash Player 9.0.115.0 and earlier (and 8.0.39.0 and earlier). The vulnerability arises from a modified DeclareFunction2 Actionscript tag that can prevent object instantiation, enabling remote arbitrary-code execution when a crafted SWF is processed. Remediation mentio...

CVE-2007-0071

An integer overflow vulnerability exists in Adobe Flash Player versions 9.0.115.0 and earlier , and 8.0.39.0 and earlier . The flaw occurs when the player fails to sufficiently validate data while parsing malformed SWF files . Specifically, a crafted SWF file with a negative Scene Count value can...

squid security update

2.6.STABLE6-5.el51.3 - fix for 439801 - regression introduced in fix for CVE-2007-6239 - Resolves: 439992...

CVE-2008-1089

Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote attackers to execute arbitrary code via a Visio file containing crafted object header data, aka "Visio Object Header Vulnerability."...

Microsoft Security Bulletin MS08-019 – Important Vulnerabilities in Microsoft Visio Could Allow Remote Code Execution &#40;949032&#41;

Microsoft Security Bulletin MS08-019 – Important Vulnerabilities in Microsoft Visio Could Allow Remote Code Execution 949032 Published: April 8, 2008 Version: 1.0 General Information Executive Summary This security update resolves privately reported vulnerabilities in Microsoft Office Visio that...