FotoTagger 2.12.0.0 Buffer Overflow

""""""""""""""""""""""""""""""""""""""""""""""""""""""""""" """ :::::: :: :: :: :: :: :::: """ """ :: :: :: :: :::::: .. :::: :: """ """ ::::: ::: ::::: :: :: :: :: :: :::: """ """ :: :: :: :: : :: :: :: :: :: :: """ """ :::::: :: :: ::::: :: :::::: :: :: :::: rs.ir """ """ :: """ """ """...

FotoTagger 2.12.0.0 - .XML Buffer Overflow (PoC)

FotoTagger 2.12.0.0 - .XML Buffer Overflow PoC """"""""""""""""""""""""""""""""""""""""""""""""""""""""""" """ :::::: :: :: :: :: :: :::: """ """ :: :: :: :: :::::: .. :::: :: """ """ ::::: ::: ::::: :: :: :: :: :: :::: """ """ :: :: :: :: : :: :: :: :: :: :: """ """ :::::: :: :: ::::: :: :::::: ...

FotoTagger 2.12.0.0 (.XML File) Buffer Overflow PoC

Exploit for unknown platform in category dos / poc =================================================== FotoTagger 2.12.0.0 .XML File Buffer Overflow PoC =================================================== Anti-Security Research Team & Security Institute + Bug : FotoTagger v2.12.0.0 Buffer Overflo...

Authentication flaw

The getAnnots Doc method in the JavaScript API in Adobe Reader and Acrobat 9.1, 8.1.4, 7.1.1, and earlier allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a PDF file that contains an annotation, and has an OpenAction entry with JavaScript code...

CVE-2009-1492

The getAnnots Doc method in the JavaScript API in Adobe Reader and Acrobat 9.1, 8.1.4, 7.1.1, and earlier allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a PDF file that contains an annotation, and has an OpenAction entry with JavaScript code...

Adobe Reader 'getAnnots()' Javascript函数远程代码执行漏洞

BUGTRAQ ID: 34736 Adobe Reader是一款PDF文件解析程序。 Adobe Reader处理Javascript存在问题，远程攻击者可以利用漏洞以运行用户权限执行任意代码。 构建包含超长名的注解，在使用'getAnnots' Javascript函数解析时可触发缓冲区溢出，导致以运行Adobe Reader应用程序的安全上下文执行任意代码。 Adobe Acrobat Reader 8.1.4 Adobe Acrobat Reader 9.1 目前没有解决方案提供： http://www.adobe.com/ // //Exploit made by Arr1va...

Adobe Reader 8.1.49.1 - GetAnnots() Remote Code Execution

Adobe Reader 8.1.49.1 - GetAnnots Remote Code Execution // //Exploit made by Arr1val //Proved in adobe 9.1 and adobe 8.1.4 on linux // //Steps: //- create a pdf with an annotation a note i used an annotation with a very long AAAAA name, but that might be omitted //- attach the following script to...

Adobe Reader getAnnots Exploit

// //Exploit made by Arr1val //Proved in adobe 9.1 and adobe 8.1.4 on linux // //Steps: //- create a pdf with an annotation a note i used an annotation with a very long AAAAA name, but that might be omitted //- attach the following script to the OpenAction of the pdf. // var memory; function...

Make XWork ParametersInterceptor safe from parameter injection attacks

The XWork ParametersInterceptor is a security nightmare as it gives user input submitted form parameters unfettered access to getter/setter methods on action objects. In addition, the interceptor has been shown in the past to be vulnerable to Unicode attacks. Rather than fight a constant and ofte...

Black Ice软件BiAnno.ocx控件远程栈溢出漏洞

BUGTRAQ ID: 29635 Annotation SDK/ActiveX是Black Ice图形工具包中的图形编辑插件。 Annotation SDK/ActiveX插件所安装的BiAnno Control ActiveX控件（BiAnno.ocx）在处理AnnoSaveToTiff函数参数时存在栈溢出漏洞，如果用户受骗访问了恶意网页并向该函数传送了超长参数的话，就可以触发这个溢出，导致执行任意指令。 Black Ice Annotation SDK/ActiveX Plug-In 10.9.5.0 临时解决方法：...

CVE-2008-2745

Stack-based buffer overflow in BiAnno ActiveX Control BiAnno.ocx in Black Ice Software Annotation Plugin 10.95 allows remote attackers to execute arbitrary code via a long parameter to the AnnoSaveToTiff method...

CVE-2008-2745

CVE-2008-2745 : A stack-based buffer overflow in BiAnno ActiveX Control (BiAnno.ocx) of the Black Ice Software Annotation Plugin 10.95 allows remote attackers to execute arbitrary code by sending a long parameter to the AnnoSaveToTiff method. The connected documents confirm a remote-code-executio...

CVE-2008-2745: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in BiAnno ActiveX Control BiAnno.ocx in Black Ice Software Annotation Plugin 10.95 allows remote attackers to execute arbitrary code via a long parameter to the AnnoSaveToTiff method...

blackicebianno2-overflow.txt

------------------------------------------------------------------------------ Black Ice Software Annotation Plugin BiAnno.ocx Remote Buffer Overflow 2 url: http://www.blackice.com File : BiAnno.ocx Ver. : 10.9.5.0 CLSID: B27DC3CE-FF81-4DCF-9B80-0E69D61BED2A Mark.: RegKey Safe for Script: True...

Black Ice Software Annotation Plugin (BiAnno.ocx) BOF Exploit (2)

No description provided by source. ------------------------------------------------------------------------------ Black Ice Software Annotation Plugin BiAnno.ocx Remote Buffer Overflow 2 url: http://www.blackice.com File : BiAnno.ocx Ver. : 10.9.5.0 CLSID: B27DC3CE-FF81-4DCF-9B80-0E69D61BED2A...

Black Ice Software Annotation Plugin (BiAnno.ocx) Remote BOF Exploit

No description provided by source. -------------------------------------------------------------------------- Black Ice Software Annotation Plugin BiAnno.ocx Remote Buffer Overflow url: http://www.blackice.com File : BiAnno.ocx Ver. : 10.9.5.0 CLSID: B27DC3CE-FF81-4DCF-9B80-0E69D61BED2A...

Black Ice Software Annotation Plugin - BiAnno.ocx Remote Buffer Overflow

Black Ice Software Annotation Plugin - BiAnno.ocx Remote Buffer Overflow -------------------------------------------------------------------------- Black Ice Software Annotation Plugin BiAnno.ocx Remote Buffer Overflow url: http://www.blackice.com File : BiAnno.ocx Ver. : 10.9.5.0 CLSID:...

Black Ice Software Annotation Plugin (BiAnno.ocx) Remote BOF Exploit

Exploit for unknown platform in category remote exploits ==================================================================== Black Ice Software Annotation Plugin BiAnno.ocx Remote BOF Exploit ====================================================================...

Black Ice Software Annotation Plugin - 'BiAnno.ocx' Remote Buffer Overflow

-------------------------------------------------------------------------- Black Ice Software Annotation Plugin BiAnno.ocx Remote Buffer Overflow url: http://www.blackice.com File : BiAnno.ocx Ver. : 10.9.5.0 CLSID: B27DC3CE-FF81-4DCF-9B80-0E69D61BED2A Mark.: RegKey Safe for Script: True RegKey...

Black Ice Software Annotation Plugin - 'BiAnno.ocx' Remote Buffer Overflow (2)

------------------------------------------------------------------------------ Black Ice Software Annotation Plugin BiAnno.ocx Remote Buffer Overflow 2 url: http://www.blackice.com File : BiAnno.ocx Ver. : 10.9.5.0 CLSID: B27DC3CE-FF81-4DCF-9B80-0E69D61BED2A Mark.: RegKey Safe for Script: True...