318 matches found
python security and bug fix update
2.7.5-76.0.1 - Add Oracle Linux distribution in platform.py orabug 20812544 2.7.5-76 - Remove an unversioned obsoletes tag Resolves: rhbz1627059 2.7.5-75 - Provide the /usr/libexec/platform-python symlink to the main binary Resolves: rhbz1599159 2.7.5-74 - Fix OSERROR 17 due to...
3ds XSS vulnerability
Open Bug Bounty ID: OBB-644242 Description| Value ---|--- Affected Website:| 3ds Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
python security update
2.7.5-69.0.1 - Add Oracle Linux distribution in platform.py orabug 20812544 2.7.5-70 - Remove 3DS cipher to mitigate CVE-2016-2183 sweet32. Resolves: rhbz1584545...
Nintendo 3DS DNS Client Resolver Predictable TXID
Nintendo: 3DS DNS Client Resolver Library Uses Predictable TXID I bought a New Nintendo 3DS XL US with firmware 11.2.0-35U, and I've noticed that that DNS client resolved on the 3DS uses a simple incrementing TXID for lookups. This does not provide enough entropy to prevent remote attackers from...
Nintendo 3DS DNS Client Resolver Predictable TXID Vulnerability
The Nintendo 3DS DNS client resolver library uses a predictable incremented TXID allowing for the spoofing of responses. Nintendo: 3DS DNS Client Resolver Library Uses Predictable TXID I bought a New Nintendo 3DS XL US with firmware 11.2.0-35U, and I've noticed that that DNS client resolved on th...
Nintendo: 3DS DNS Client Resolver Library Uses Predictable TXID
I bought a New Nintendo 3DS XL US with firmware 11.2.0-35U, and I've noticed that that DNS client resolved on the 3DS uses a simple incrementing TXID for lookups. This does not provide enough entropy to prevent remote attackers from spoofing responses. For example, see MS08-020 when this happened...
CVE-2016-9307
Multiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute arbitrary code when reading or converting malformed 3DS format files...
CVE-2016-9307
Autodesk FBX-SDK contains a buffer overflow vulnerability (CVE-2016-9307) affecting 2017.0 and earlier versions, identified as prior to 2017.1. When reading or converting malformed 3DS format files, attackers could trigger a buffer overflow and potentially execute arbitrary code. The CVE is docum...
CVE-2016-9307
Multiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute arbitrary code when reading or converting malformed 3DS format files...
Autodesk 3ds Max Application Callbacks Arbitrary Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/36634/info Autodesk 3ds Max is prone to a vulnerability that lets attackers execute arbitrary commands in the context of the vulnerable application. This issue affects the following: 3ds Max 6 through 9 3ds Max 2008 throu...
Google SketchUp <= 7.1.6087 - 'lib3ds' 3DS Importer Memory Corruption
No description provided by source. !/usr/bin/python Google SketchUp = v7.1.6087 'lib3ds' 3DS Importer Memory Corruption Code by: mrme Found by Corelabs Advisory: http://www.coresecurity.com/content/google-sketchup-vulnerability Download:...
GLSA-201405-23 : lib3ds: User-assisted execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-201405-23 lib3ds: User-assisted execution of arbitrary code An array index error has been discovered in lib3ds. Impact : A remote attacker could entice a user to open a specially crafted 3DS file using an application linked agains...
lib3ds: User-assisted execution of arbitrary code
Background lib3ds is a library for managing 3D-Studio Release 3 and 4 .3DS files. Description An array index error has been discovered in lib3ds. Impact A remote attacker could entice a user to open a specially crafted 3DS file using an application linked against lib3ds, possibly resulting in...
Catia V5-6R2013 - CATV5_Backbone_Bus Stack Buffer Overflow (PoC)
Catia V5-6R2013 - CATV5BackboneBus Stack Buffer Overflow PoC ''' Title: Dassault Syst�mes Catia V5-6R2013 "CATV5BackboneBus" Stack Buffer Overflow Date: 2-18-2014 Author: Mohamed Shetta Email: mshetta |at| live |dot| com Vendor Homepage:...
Autodesk 多个产品DWG处理代码执行漏洞(CVE-2013-3665)
CVECAN ID: CVE-2013-3665 Autodesk是二维和三维设计、工程及娱乐软件厂商，旗下拥有拥有“AutoCAD”、“3DS Max”等知名软件。 多个Autodesk产品在处理DWG文件时存在安全漏洞，可被恶意用户利用执行任意代码，从而破坏用户系统。 0 Autodesk AutoCAD 2013 Autodesk AutoCAD 2012 Autodesk AutoCAD 2011 Autodesk AutoCAD Civil 3D 2013.x Autodesk AutoCAD Civil 3D 2012.x Autodesk AutoCAD Civil 3D...
Nintendo 3DS also got Hacked Within 24 Hours after Release !
The new Nintendo 3DS didn't last 24 hours in Japan before hackers jailbroke the device to support Revolution For DS R4 flash cards that play old Nintendo games. Although R4 cards were built for Nintendo DS, the hackers show how they can use the storage cards to run homebrew and older Nintendo gam...
Google SketchUp < 7.1 M2 Multiple Vulnerabilities - Windows
Google SketchUp is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Google SketchUp 7.1.6087 Memory Corruption
!/usr/bin/python Google SketchUp = v7.1.6087 'lib3ds' 3DS Importer Memory Corruption Code by: mrme Found by Corelabs Advisory: http://www.coresecurity.com/content/google-sketchup-vulnerability Download: http://download.cnet.com/Google-SketchUp/3000-66774-11097712.html Greetz to: Corelan Security...
Google SketchUp memory corruption
Memory corruption on 3DS files parsing...
[CORE-2009-1209] Google SketchUp 'lib3ds' 3DS Importer Memory Corruption
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Google SketchUp 'lib3ds' 3DS Importer Memory Corruption 1. Advisory Information Title: Google SketchUp 'lib3ds' 3DS Importer Memory Corruption Advisory Id:...