Foolabs Xpdf contains a denial of service vulnerability

Overview Foolabs Xpdf contains a denial of service vulnerability caused by the t1lib library incorrectly parsing Type 1 fonts. Description According to Foolabs: Xpdf is an open source viewer for Portable Document Format PDF files. These are sometimes also called 'Acrobat' files, from the name of...

USN-1049-1: Firefox and Xulrunner vulnerabilities

Jesse Ruderman, Igor Bukanov, Olli Pettay, Gary Kwong, Jeff Walden, Henry Sivonen, Martijn Wargers, David Baron and Marcia Knous discovered several memory issues in the browser engine. An attacker could exploit these to crash the browser or possibly run arbitrary code as the user invoking the...

DJ Legend 6.01 Denial of Service Vulnerability

Exploit for windows platform in category dos / poc ============================================== DJ Legend 6.01 Denial of Service Vulnerability ============================================== Exploit Title :DJ Legend Denial of Service Vulnerability Software : DJ Legend Software link :...

RarCrack 0.2 Buffer Overflow

!/usr/bin/env ruby overflow.rb / / / / / / / / / / / / // / / / / / / / // / \ / / / // / , / // / // / // // / // ||/// //// Title: RarCrack 0.2 Buffer Overflow POC Date: 19.09.2010 Author: TheUnKn@wn Email: theunknown at group51.org Twitter: @TheUnKn0wn Homepage: http://group51.org Software...

Ubuntu 10.04 LTS : thunderbird regression (USN-978-2)

USN-978-1 fixed vulnerabilities in Thunderbird. Some users reported stability problems under certain circumstances. This update fixes the problem. We apologize for the inconvenience. Several dangling pointer vulnerabilities were discovered in Thunderbird. An attacker could exploit this to crash...

ffdshow Video Codec - Denial of Service

!/usr/bin/perl Exploit Title: Malformed MP4 Local DoS for ffdshow Video Codec tryouts rev. 3467 20100713 x86 Date: 08/08/2010 Author: Nishant Das Patnaik Web: http://nishantdaspatnaik.yolasite.com Software Link: ftp://majorgeeks.mirror.internode.on.net/multimedia/K-LiteCodecPack620Mega.exe Versio...

Fedora 12 : libtiff-3.9.4-1.fc12 (2010-10333)

Fix numerous crashing bugs, including CVE-2010-1411, CVE-2010-2065, CVE-2010-2067, and CVE-2010-2233 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 13 : libtiff-3.9.4-1.fc13 (2010-10334)

Fix numerous crashing bugs, including CVE-2010-1411, CVE-2010-2065, CVE-2010-2067, and CVE-2010-2233 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

File Sharing Wizard 1.5.0 Buffer Overflow

!/usr/bin/python http://www.sharing-file.net/ File Sharing Wizard Version 1.5.0 build on 26-8-2008 controlling EAX ESP points to our buffer buffer grows if we increase our string more details on http://www.s3cur1ty.de have fun m1k3 at m1k3 dot at import socket import sys if lensys.argv " sys.exit...

File Sharing Wizard v1.5.0 Buffer Overflow PoC

Exploit for windows platform in category dos / poc ============================================== File Sharing Wizard v1.5.0 Buffer Overflow PoC ============================================== !/usr/bin/python http://www.sharing-file.net/ File Sharing Wizard Version 1.5.0 build on 26-8-2008...

File Sharing Wizard 1.5.0 - Buffer Overflow (PoC)

File Sharing Wizard 1.5.0 - Buffer Overflow PoC !/usr/bin/python http://www.sharing-file.net/ File Sharing Wizard Version 1.5.0 build on 26-8-2008 controlling EAX ESP points to our buffer buffer grows if we increase our string more details on http://www.s3cur1ty.de have fun m1k3 at m1k3 dot at...

HomeFTP Server r1.10.3 (build 144) Denial of Service Exploit

Exploit for windows platform in category dos / poc ============================================================ HomeFTP Server r1.10.3 build 144 Denial of Service Exploit ============================================================ !/usr/bin/python HomeFTP Server r1.10.3 build 144 Denial of Servi...

RHEL 4 / 5 : tar (RHSA-2010:0141)

The remote Redhat Enterprise Linux 4 / 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2010:0141 advisory. - tar/cpio stack crashing in safernamesuffix CVE-2007-4476 - tar, cpio: Heap-based buffer overflow by expanding a specially-crafted...

Internet Explorer HTML CSS Tag Rendering Memory Corruption (MS10-018; CVE-2010-0807)

A remote code execution vulnerability has been reported in Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has been deleted. To trigger this issue, an attacker may create a malicious web page that will cause Internet Explorer to exit unexpectedly...

Remote Help HTTP GET Request Format String Denial Of Service Vulnerability

Remote Help is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WFTPD REST命令远程拒绝服务漏洞

BUGTRAQ ID: 38762 WFTPD是一款Windows平台下的FTP服务软件。 WFTPD服务器在处理REST命令时存在拒绝服务漏洞，远程攻击者可以通过REST命令在指定了无效的起始位置后请求文件导致FTP服务终止。 Texas Imperial Software WFTPD 3.3 厂商补丁： Texas Imperial Software ----------------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.wftpd.com/default.html WFTPD 3.3...

tar security update

2:1.15.1-23.0.1.2 - CVE-2007-4476 - fix stack crashing in safernamesuffix - CVE-2010-0624 - fix heap-based buffer overflow by expanding a specially-crafted archive...

cpio security update

2.6-23.1 - CVE-2010-0624 fix heap-based buffer overflow by expanding a specially-crafted archive - CVE-2007-4476 fix stack crashing in safernamesuffix...

httpdx 1.53b Denial Of Service

!/usr/bin/perl Exploit Title: httpdx1.53b sockets++ crash Remote Denial of Service exploit Date: 22.02.2010 Author: d3b4g Software Link: http://httpdx.sourceforge.net/downloads/ Version: 1.53b Tested on: windows xpsp3 vmware webpage:www.d3b4g.info I'm from tiny little island's of maldivies The...

Mandriva Update for blogtk MDVA-2010:070-1 (blogtk)

Check for the Version of blogtk OpenVAS Vulnerability Test Mandriva Update for blogtk MDVA-2010:070-1 blogtk Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...