CVE-2016-8386

CVE-2016-8386 affects Iceni Argus with a heap-based buffer overflow in the PDF-to-XML/font processing flow. Root cause: a signedness bug in icnBufferAlloc can allocate an undersized buffer, which is then used by GetTables/GetTables+ipDataFeedRead to read data and can overflow the memory, potentia...

GLSA-201607-02 : libpcre: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201607-02 libpcre: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in libpcre. Please review the CVE identifiers referenced below for details. Impact : An attacker can possibly execute arbitrary code or crea...

RedHat Update for pcre RHSA-2016:1025-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for pcre CESA-2016:1025 centos7

Check the version of pcre SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882492";...

Oracle Linux 7 : pcre (ELSA-2016-1025)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1025 advisory. - Fix CVE-2015-2328 infinite recursion compiling pattern with recursive reference in a group with indefinite repeat bug 1330508 - Fix CVE-2015-8385...

Scientific Linux Security Update : pcre on SL7.x x86_64 (20160511)

Security Fixes : - Multiple flaws were found in the way PCRE handled malformed regular expressions. An attacker able to make an application using PCRE process a specially crafted regular expression could use these flaws to cause the application to crash or, possibly, execute arbitrary code...

FreeBSD : php -- multiple vulnerabilities (85eb4e46-cf16-11e5-840f-485d605f4717)

PHP reports : - Core : - Fixed bug 71039 exec functions ignore length but look for NULL termination. - Fixed bug 71323 Output of streamgetmetadata can be falsified by its input. - Fixed bug 71459 Integer overflow in iptcembed. - PCRE : - Upgraded bundled PCRE library to 8.38.CVE-2015-8383,...

CVE-2015-8386

Summary (CVE-2015-8386) PCRE before 8.38 mishandles the interaction between lookbehind assertions and mutually recursive subpatterns in crafted regular expressions, allowing remote attackers to cause a denial of service (buffer overflow) or potentially other impact. This vulnerability affects the...

FastStone MaxView 2.8 Stack Overflow

Title : FastStone MaxView 2.8 .jpg local Stack Overflow PoC Program : FastStone MaxView Author : Dr.3v1l Date : 2015 01 July Website : http://www.faststone.org Download : http://www.faststonesoft.net/DN/FSMaxViewSetup28.exe Version : 2.8 Type : .jpg File local Stack Overflow PoC 01. Vulnerability...

CVE-2014-8386

CVE-2014-8386 affects Advantech ADAMView 4.3 and earlier. It describes multiple stack-based buffer overflows that allow a remote attacker to execute arbitrary code by supplying a crafted GNI file (display properties or conditional bitmap parameters). Public references include NVD entry, Exploit-D...

Advantech ADAMView Conditional Bitmap Remote Code Execution (CVE-2014-8386)

A stack-buffer overflow has been reported in Advantech ADAMView. The vulnerability is due to insufficient validation of conditional bitmaps from a file...

Advantech ADAMView Display Properties Parameter Remote Code Execution (CVE-2014-8386)

A remote code execution vulnerability has been reported in Advantech ADAMView. The vulnerability is due to insufficient validation of display properties from a file. A remote attacker can exploit this vulnerability by enticing a user to download and process a maliciously crafted file...

Advantech AdamView 4.30.003 - (.gni) SEH Buffer Overflow Exploit

Exploit for windows platform in category local exploits !/usr/bin/env ruby Exploit Title: Advantech AdamView .gni SEH Buffer Overflow Date: Dec 09 2014 Vulnerability Discovery: Daniel Kazimirow and Fernando Paez - Core Security Exploit Author: Muhamad Fadzil Ramli Software Link:...

Advantech AdamView 4.30.003 - .gni Local Buffer Overflow (SEH)

Advantech AdamView 4.30.003 - .gni Local Buffer Overflow SEH !/usr/bin/env ruby Exploit Title: Advantech AdamView .gni SEH Buffer Overflow Date: Dec 09 2014 Vulnerability Discovery: Daniel Kazimirow and Fernando Paez - Core Security Exploit Author: Muhamad Fadzil Ramli Software Link:...

Advantech AdamView 4.30.003 - '.gni' Local Buffer Overflow (SEH)

!/usr/bin/env ruby Exploit Title: Advantech AdamView .gni SEH Buffer Overflow Date: Dec 09 2014 Vulnerability Discovery: Daniel Kazimirow and Fernando Paez - Core Security Exploit Author: Muhamad Fadzil Ramli Software Link: http://downloadt.advantech.com/download/downloadsr.aspx?FileId=1-179WGW...

Advantech AdamView 4.3 Buffer Overflow Vulnerability

Advantech AdamView version 4.3 has two different fields vulnerable to buffer overflow attacks, which can be exploited by attackers in order to execute arbitrary code by running files with the '.gni' extension that is associated with the AdamView software. Advantech AdamView Buffer Overflow 1...

Advantech AdamView Buffer Overflow

Advisory ID Internal CORE-2014-0008 1. Advisory Information Title: Advantech AdamView Buffer Overflow Advisory ID: CORE-2014-0008 Advisory URL:http://www.coresecurity.com/advisories/advantech-adamview-buffer-overflow Date published: 2014-11-19 Date of last update: 2014-11-19 Vendors contacted:...