Stable Channel Update

The Chrome team is excited to announce the promotion of Chrome 30 to the Stable channel for Windows, Mac, Linux and Chrome Frame. Chrome 30.0.1599.66 contains a number of fixes and improvements, including: Easier searching by image A number of new apps/extension APIs Lots of under the hood change...

Lattice Semiconductor PAC-Designer Symbol Value Buffer Overflow (CVE-2012-2915)

A stack buffer overflow vulnerability has been reported in Lattice Semiconductor PAC-Designer. The vulnerability is due to the improper handling of validation of specially crafted pac files. Successful exploitation would result in execution of arbitrary code, but requires tricking a user into...

Scientific Linux Security Update : gstreamer-plugins on SL4.x i386/x86_64

The gstreamer-plugins packages contain plug-ins used by the GStreamer streaming-media framework to support a wide variety of media formats. An integer overflow flaw, a boundary error, and multiple off-by-one flaws were found in various ModPlug music file format library libmodplug modules, embedde...

Lattice Semiconductor PAC-Designer 6.21 - Symbol Value Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Lattice...

Lattice Semiconductor PAC-Designer 6.21 Symbol Value Buffer Overflow

Exploit for windows platform in category local exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Lattice Semiconductor PAC-Designer 6.21 Overflow

!/usr/bin/python -w ------------------------------------------------------------------------------------ Exploit: Lattice Semiconductor PAC-Designer 6.21 possibly all versions CVE: CVE-2012-2915 Author: b33f Ruben Boonen - http://www.fuzzysecurity.com/ OS: WinXP SP1 Software:...

CVE-2011-2915

CVE-2011-2915 describes an off-by-one error in libmodplug’s CSoundFile::ReadAMS2 (src/load_ams.cpp) prior to 0.8.8.4, which can be triggered by a crafted AMS file with many instruments to cause memory corruption, potentially enabling code execution or denial of service. Public references discuss ...

Lattice Semiconductor PAC-Designer 6.21 (*.PAC) Exploit

Exploit for windows platform in category local exploits !/usr/bin/python -w ------------------------------------------------------------------------------------ Exploit: Lattice Semiconductor PAC-Designer 6.21 possibly all versions CVE: CVE-2012-2915 Author: b33f Ruben Boonen -...

Lattice Semiconductor PAC-Designer 6.21 - '.PAC' Local Overflow

!/usr/bin/python -w ------------------------------------------------------------------------------------ Exploit: Lattice Semiconductor PAC-Designer 6.21 possibly all versions CVE: CVE-2012-2915 Author: b33f Ruben Boonen - http://www.fuzzysecurity.com/ OS: WinXP SP1 Software:...

CVE-2012-2915

creationtimestamp| type| source ---|---|--- 2012-06-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19006 2012-06-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19175 2018-05-29 15:50:33+00:00| seen|...

Lattice Semiconductor PAC-Designer 6.21 - .PAC Local Overflow

Lattice Semiconductor PAC-Designer 6.21 - .PAC Local Overflow !/usr/bin/python -w ------------------------------------------------------------------------------------ Exploit: Lattice Semiconductor PAC-Designer 6.21 possibly all versions CVE: CVE-2012-2915 Author: b33f Ruben Boonen -...

CVE-2012-2915

Stack-based buffer overflow in Lattice Semiconductor PAC-Designer 6.2.1344 allows remote attackers to execute arbitrary code via a long string in a Value tag in a SymbolicSchematicData definition tag in PAC Design .pac file...

CVE-2012-2915

Lattice Semiconductor PAC-Designer is affected by a stack-based buffer overflow in the SymbolicSchematicData/Value field of PAC (.pac) files, allowing remote code execution. Public details indicate the vulnerability exists in PAC-Designer versions around 6.21 (and possibly earlier), triggered by ...

Lattice Semiconductor PAC-Designer 6.21 Symbol Value Buffer Overflow

This module exploits a vulnerability found in Lattice Semiconductor PAC-Designer 6.21. As a .pac file, when supplying a long string of data to the 'value' field under the 'SymbolicSchematicData' tag, it is possible to cause a memory corruption on the stack, which results in arbitrary code executi...

GLSA-201203-14 : Audacious Plugins: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201203-14 Audacious Plugins: User-assisted execution of arbitrary code Multiple vulnerabilities have been found in Audacious Plugins: The 'CSoundFile::ReadWav' function in loadwav.cpp contains an integer overflow which could cause...

Fedora Update for libmodplug FEDORA-2011-10452

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Debian Security Advisory DSA 2415-1 (libmodplug)

The remote host is missing an update to libmodplug announced via advisory DSA 2415-1. OpenVAS Vulnerability Test $Id: deb24151.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2415-1 libmodplug Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

[SECURITY] [DSA 2415-1] libmodplug security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2415-1 [email protected] http://www.debian.org/security/ Nico Golde February 21, 2012 http://www.debian.org/security/faq -...

[USN-1255-1] libmodplug vulnerabilities

========================================================================== Ubuntu Security Notice USN-1255-1 November 09, 2011 libmodplug vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivative...

Ubuntu: Security Advisory (USN-1255-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...