CVE-2014-0994

Heap-based buffer overflow in the ReadDIB function in the Vcl.Graphics.TPicture.Bitmap implementation in the Visual Component Library VCL in Embarcadero Delphi XE6 20.0.15596.9843 and C++ Builder XE6 20.0.15596.9843 allows context-dependent attackers to execute arbitrary code via the...

CVE-2014-0994: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the ReadDIB function in the Vcl.Graphics.TPicture.Bitmap implementation in the Visual Component Library VCL in Embarcadero Delphi XE6 20.0.15596.9843 and C++ Builder XE6 20.0.15596.9843 allows context-dependent attackers to execute arbitrary code via the...

Delphi and C++ Builder VCL library Heap Buffer Overflow

1. Advisory Information Title: Delphi and C++ Builder VCL library Heap Buffer Overflow Advisory ID: CORE-2014-0006 Advisory URL:http://www.coresecurity.com/core-labs/advisories/delphi-and-c-builder-vcl-library-heap-buffer-overflow Date published: 2014-09-16 Date of last update: 2014-09-16 Vendors...

Buffer overflow

Buffer overflow in the Vcl.Graphics.TPicture.Bitmap implementation in the Visual Component Library VCL in Embarcadero Delphi XE6 20.0.15596.9843 and C++ Builder XE6 20.0.15596.9843 allows remote attackers to execute arbitrary code via a crafted BMP file...

CVE-2014-0993

Summary of CVE-2014-0993 / CVE-2014-0994 (Delphi/C++ Builder VCL BMP handling) Affected products: Embarcadero Delphi XE6 and C++ Builder XE6 (VCL Graphics, TPicture.Bitmap). The VCL ReadDIB/Bitmap handling processes BMP files and uses BITMAPINFOHEADER.biClrUsed to determine color table read size....

CVE-2014-0993: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Vcl.Graphics.TPicture.Bitmap implementation in the Visual Component Library VCL in Embarcadero Delphi XE6 20.0.15596.9843 and C++ Builder XE6 20.0.15596.9843 allows remote attackers to execute arbitrary code via a crafted BMP file...

Delphi and C++ Builder VCL library Buffer Overflow

1. Advisory Information Title: Delphi and C++ Builder VCL library Buffer Overflow Advisory ID: CORE-2014-0004 Advisory URL:http://www.coresecurity.com/core-labs/advisories/delphi-and-c-builder-vcl-library-buffer-overflow Date published: 2014-08-20 Date of last update: 2014-08-20 Vendors contacted...

IrcDelphi Daemon Server Denial of Service

No description provided by source. DCA-0010 Software - IrcDelphi Daemon Server Vendor Product Description - IRC Daemon IRCd, IRC Server coded in Delphi/Kylix using Indy components. Easy to use and light irc daemon. Bug Description - The IRC Daemon does not sanitize the variable NICK correctly...

Google Chrome 34.0.1847.131 DLL Hijacking

google chrom latest Version 34.0.1847.131 m 32-bit DLL Order Hijacking Exploit Title: google chrom Version 34.0.1847.131 m 32-bit DLL Order Hijacking Date: 2014/04/25 Exploit Author: Aryan Bayaninejad Linkedin : https://www.linkedin.com/profile/view?id=276969082 Vendor Homepage:...

Kmplayer 3.8.0.122 / 3.8.0.123 DLL Hijacking

Kmplayer 3.8.0.122 / 3.8.0.123 DLL Hijacking Exploit Title: KmPlayer 3.8.0.123 DLL Hijacking Date: 2014/04/22 Exploit Author: Aryan Bayaninejad Linkedin : https://www.linkedin.com/profile/view?id=276969082 Vendor Homepage: http://www.kmplayer.com/ Software Link:...

Trojan.Ferret DDoS Botnet Discovered

Researchers at Arbor Networks have identified a new DDoS bot with a fancy for ferrets. Following a clue in a tweet, researcher Dennis Schwarz found Trojan.Ferret, including a command and control panel with some insight into targets. To date, a relatively small number of malware samples and comman...

Obamacare Website Denial-of-Dervice Tool Discovered

Arbor Networks’ Security Engineering and Response Team ASERT has discovered a denial-of-service tool specifically designed to target the U.S. government’s healthcare enrollment marketplace, Healthcare.gov. Healthcare.gov is established by the Affordable Care Act ACA in the United States, perhaps...

Narilam malware target Iran Financial SQL Databases

Symantec recently identified a database-corrupting piece of malware targeting systems mostly in Iran, but despite early speculation that it could be related to the likes of Stuxnet and Flame, it appears to be targeting small businesses rather than the country's infrastructure. Malware Dubbed...

Optima DDOS 10a Botnet leaked on Underground Forums

Optima DDOS 10a botnet leaked on Underground Forums On underground forums "Optima DDOS 10a Botnet " full version posted for all to download and use. Complete new version of the acclaimed DDoS bot Optima Darkness. In this new version 10a according to the author was raised in secrecy bot system and...

DarkComet-RAT v4.0 Fix1 Released - Fully Cryptable

DarkComet-RAT v4.0 Fix1 Released - Fully Cryptable DarkComet-RAT v4.0 Change log - DarkComet-RAT is now compiled on Delphi XE instead of Delphi 2010. - Synthax highlighter added in remote keylogger. - Multithreading is now more efficient, no more freezing, using a new powerfull and stable...

Trojan Poison Ivy 2.3.2 - Critical Null Pointer Vulnerability

Document Title: =============== Trojan Poison Ivy 2.3.2 - Critical Null Pointer Vulnerability Release Date: ============= 2011-08-08 Vulnerability Laboratory ID VL-ID: ==================================== 113 Product & Service Introduction: =============================== Poison Ivy is an advance...

BarCodeWiz ActiveX LoadProperties Buffer Overflow

Added: 05/23/2011 CVE: CVE-2010-2932 BID: 42097 OSVDB: 66882 Background BarCodeWiz Barcode ActiveX Control is a tool for generating barcodes in Microsoft Office documents, and for Visual Basic, Visual C++, VB.NET, C, or Delphi developer looking to include barcodes in programs. Problem The...

Prevx Registry value “KCSI” Exploit

Exploit for windows platform in category local exploits =================================== Prevx Registry value “KCSI” Exploit =================================== Prevx, trying to read the data contained in the registry value”\PCSI\KCSI”, and eventually make it null if it contains data...

Borland Delphi Professionnel v 5.0 DLL Hijacking Exploit

Exploit for windows platform in category local exploits ======================================================== Borland Delphi Professionnel v 5.0 DLL Hijacking Exploit ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-...

Embarcadero Delphi XE (2011) DLL preloading exploit

Exploit for windows platform in category local exploits =================================================== Embarcadero Delphi XE 2011 DLL preloading exploit =================================================== Exploit Title : Embarcadero Delphi XE 2011, DLL preloading exploit Author : STRELiTZIA...