21 matches found
EUVD-2012-4681
Malware in sbrugna...
CVE-2012-4756
Multiple untrusted search path vulnerabilities in CyberLink LabelPrint 2.5.3602 allow local users to gain privileges via a Trojan horse 1 mfc71loc.dll or 2 mfc71enu.dll file in the current working directory, as demonstrated by a directory that contains a .lpp file. NOTE: the provenance of this...
CyberLink LabelPrint 2.5 Stack Buffer Overflow
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "CyberLink LabelPrint 2.5 Stack Buffer Overflow", 'Description' = %q This module exploits a stack buffer overflow in CyberLink LabelPrint 2.5 and...
CyberLink LabelPrint < 2.5 - Buffer Overflow (SEH Unicode) Exploit
Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: CyberLink LabelPrint =2.5 File Project Processing Unicode Stack Overflow Date: September 23, 2017 Exploit Author: f3ci Vendor Homepage: https://www.cyberlink.com/ Software Link:...
CyberLink LabelPrint Buffer Overflow Vulnerability
CyberLink LabelPrint is a fast and easy to use CD-ROM labeling software that supports the latest lightscribe CD-ROM cover burning technology. A stack buffer overflow vulnerability exists in CyberLink LabelPrint version 2.5. A remote attacker can use the 'author', 'artist', 'artist' or ' default'...
Stack overflow
Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the 1 author inside the INFORMATION tag, 2 name inside the INFORMATION tag, 3 artist inside the TRACK tag, or 4 default inside the TEXT tag parameter in an lpp project file...
CVE-2017-14627
Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the 1 author inside the INFORMATION tag, 2 name inside the INFORMATION tag, 3 artist inside the TRACK tag, or 4 default inside the TEXT tag parameter in an lpp project file...
CVE-2017-14627
Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the 1 author inside the INFORMATION tag, 2 name inside the INFORMATION tag, 3 artist inside the TRACK tag, or 4 default inside the TEXT tag parameter in an lpp project file...
CVE-2017-14627
CyberLink LabelPrint 2.5 (and below) is affected by a stack-based buffer overflow in processing .lpp project files. The vulnerability allows a remote attacker to execute arbitrary code via long values in the author, name, artist, or default fields inside INFORMATION, TRACK, or TEXT tags. Proof-of...
CVE-2017-14627
Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the 1 author inside the INFORMATION tag, 2 name inside the INFORMATION tag, 3 artist inside the TRACK tag, or 4 default inside the TEXT tag parameter in an lpp project file...
CyberLink LabelPrint 2.5 - Local Buffer Overflow (SEH Unicode)
CyberLink LabelPrint 2.5 - Local Buffer Overflow SEH Unicode !/usr/bin/python Exploit Title: CyberLink LabelPrint =2.5 File Project Processing Unicode Stack Overflow Date: September 23, 2017 Exploit Author: f3ci Vendor Homepage: https://www.cyberlink.com/ Software Link:...
CVE-2017-14627: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the 1 author inside the INFORMATION tag, 2 name inside the INFORMATION tag, 3 artist inside the TRACK tag, or 4 default inside the TEXT tag parameter in an lpp project file...
PT-2017-13589
Name of the Vulnerable Software and Affected Versions CyberLink LabelPrint version 2.5 Description The issue allows remote attackers to execute arbitrary code via specific parameters in an lpp project file, including the author and name parameters inside the INFORMATION tag, the artist parameter...
CyberLink LabelPrint < 2.5 - Local Buffer Overflow (SEH Unicode)
!/usr/bin/python Exploit Title: CyberLink LabelPrint =2.5 File Project Processing Unicode Stack Overflow Date: September 23, 2017 Exploit Author: f3ci Vendor Homepage: https://www.cyberlink.com/ Software Link:...
CyberLink LabelPrint 2.5 Stack Buffer Overflow
This module exploits a stack buffer overflow in CyberLink LabelPrint 2.5 and below. The vulnerability is triggered when opening a .lpp project file containing overly long string characters via open file menu. This results in overwriting a structured exception handler record and take over the...
CVE-2012-4756
Multiple untrusted search path vulnerabilities in CyberLink LabelPrint 2.5.3602 allow local users to gain privileges via a Trojan horse 1 mfc71loc.dll or 2 mfc71enu.dll file in the current working directory, as demonstrated by a directory that contains a .lpp file. NOTE: the provenance of this...
Design/Logic Flaw
Multiple untrusted search path vulnerabilities in CyberLink LabelPrint 2.5.3602 allow local users to gain privileges via a Trojan horse 1 mfc71loc.dll or 2 mfc71enu.dll file in the current working directory, as demonstrated by a directory that contains a .lpp file. NOTE: the provenance of this...
CVE-2012-4756
Multiple untrusted search path vulnerabilities in CyberLink LabelPrint 2.5.3602 allow local users to gain privileges via a Trojan horse 1 mfc71loc.dll or 2 mfc71enu.dll file in the current working directory, as demonstrated by a directory that contains a .lpp file. NOTE: the provenance of this...
CVE-2012-4756
CVE-2012-4756 affects CyberLink LabelPrint 2.5.3602, where local users can gain privileges via untrusted search path using (1) mfc71loc.dll or (2) mfc71enu.dll in the current working directory, demonstrated by a directory containing a .lpp file. The issue stems from untrusted search paths allowin...
CVE-2012-4756: Undefined Security Weakness
Multiple untrusted search path vulnerabilities in CyberLink LabelPrint 2.5.3602 allow local users to gain privileges via a Trojan horse 1 mfc71loc.dll or 2 mfc71enu.dll file in the current working directory, as demonstrated by a directory that contains a .lpp file. NOTE: the provenance of this...