Google Chrome < 3.0.195.21 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 3.0.195.21. Such versions are reportedly affected by multiple issues : - Google Chrome's inbuilt RSS/ATOM reader renders untrusted JavaScript in an RSS/ATOM feed. Provided a victim connects to a RSS/ATOM feed link controlle...

ZDI-09-045: Microsoft DirectShow Quicktime Atom Parsing Memory Corruption Vulnerability

ZDI-09-045: Microsoft DirectShow Quicktime Atom Parsing Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-045 July 14, 2009 -- CVE ID: CVE-2009-1539 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows...

Microsoft DirectShow Quicktime Atom Parsing Memory Corruption Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required in that a target must visit a malicious page or open a malicious video file. The specific flaw exists within the parsing of the length records of...

Firefox browser engine crashes

The browser engine in Mozilla Firefox 3 before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to 1...

Apple QuickTime CRGN Atom Local Crash Exploit

No description provided by source. 0:000 !exploitable -v HostMachine\HostUser Executing Processor Architecture is x86 Debuggee is in User Mode Debuggee is a live user mode debugging session on the local machine Event Type: Exception Exception Faulting Address: 0x66830f9b First Chance Exception...

Apple QuickTime CRGN Atom Overflow

Try it with your latest quicktime player. -------------------------------------------------------------- 0:000 !exploitable -v HostMachine\HostUser Executing Processor Architecture is x86 Debuggee is in User Mode Debuggee is a live user mode debugging session on the local machine Event Type:...

Apple QuickTime - CRGN Atom Local Crash

Apple QuickTime - CRGN Atom Local Crash 0:000 !exploitable -v HostMachine\HostUser Executing Processor Architecture is x86 Debuggee is in User Mode Debuggee is a live user mode debugging session on the local machine Event Type: Exception Exception Faulting Address: 0x66830f9b First Chance Excepti...

Apple QuickTime CRGN Atom Remote Overflow PoC

Exploit for linux platform in category dos / poc ============================================= Apple QuickTime CRGN Atom Remote Overflow PoC ============================================= 0:000 !exploitable -v HostMachine\HostUser Executing Processor Architecture is x86 Debuggee is in User Mode...

Apple QuickTime - CRGN Atom Local Crash

0:000 !exploitable -v HostMachine\HostUser Executing Processor Architecture is x86 Debuggee is in User Mode Debuggee is a live user mode debugging session on the local machine Event Type: Exception Exception Faulting Address: 0x66830f9b First Chance Exception Type: STATUSSTACKOVERFLOW 0xC00000FD...

Apple QuickTime Image Description Atom Sign

print " -----------BID 35166----------" print " w3bd3vil at gmail dot com" print "Apple QuickTime Image Description Atom Sign Extension Vulnerability PoC" print " -----------BID 35166----------" bytes = 0x00, 0x00, 0x00, 0x08, 0x77, 0x69, 0x64, 0x65, 0x00, 0x02, 0xD6, 0x48, 0x6D, 0x64, 0x61, 0x74...

Apple QuickTime Image Description Atom Sign Extension PoC

Exploit for unknown platform in category dos / poc ========================================================= Apple QuickTime Image Description Atom Sign Extension PoC ========================================================= Exploit: inj3ct0r.com/sploits/6880.py 0day.today 2018-04-05...

Microsoft DirectX DirectShow QuickTime movie parsing vulnerability

Added: 06/03/2009 CVE: CVE-2009-1537 BID: 35139 OSVDB: 54797 Background DirectX is a feature of the Windows operating system used for streaming media. Within DirectX, the DirectShow technology performs client-side audio and video sourcing, manipulation and rendering. Problem A command execution...

Apple QuickTime - Image Description Atom Sign Extension (PoC)

print " -----------BID 35166----------" print " w3bd3vil at gmail dot com" print "Apple QuickTime Image Description Atom Sign Extension Vulnerability PoC" print " -----------BID 35166----------" bytes = 0x00, 0x00, 0x00, 0x08, 0x77, 0x69, 0x64, 0x65, 0x00, 0x02, 0xD6, 0x48, 0x6D, 0x64, 0x61, 0x74...

Microsoft DirectX DirectShow QuickTime movie parsing vulnerability

Added: 06/03/2009 CVE: CVE-2009-1537 BID: 35139 OSVDB: 54797 Background DirectX is a feature of the Windows operating system used for streaming media. Within DirectX, the DirectShow technology performs client-side audio and video sourcing, manipulation and rendering. Problem A command execution...

Apple QuickTime - Image Description Atom Sign Extension (PoC)

Apple QuickTime - Image Description Atom Sign Extension PoC print " -----------BID 35166----------" print " w3bd3vil at gmail dot com" print "Apple QuickTime Image Description Atom Sign Extension Vulnerability PoC" print " -----------BID 35166----------" bytes = 0x00, 0x00, 0x00, 0x08, 0x77, 0x69...

Heap overflow

Heap-based buffer overflow in Apple QuickTime before 7.6.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service application crash via a movie file containing crafted Clipping Region CRGN atom types...

CVE-2009-0954

Heap-based buffer overflow in Apple QuickTime before 7.6.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service application crash via a movie file containing crafted Clipping Region CRGN atom types...

CVE-2009-0954

Heap-based buffer overflow in Apple QuickTime before 7.6.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service application crash via a movie file containing crafted Clipping Region CRGN atom types...

QuickTime < 7.6.2 Multiple Vulnerabilities (Windows)

The version of QuickTime installed on the remote Windows host is older than 7.6.2. Such versions contain several vulnerabilities : - An integer underflow in QuickTime's handling of PICT images may result in a heap-based buffer overflow and, in turn, to an application crash or arbitrary code...

Apple QuickTime CRGN Atom Parsing Heap Buffer Overflow Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of QuickTime Player. User interaction is required to exploit this vulnerability in that the target must either open a malicious file, or visit a malicious web page. The specific flaw exists during parsing of...