681 matches found
CVE-2013-3928
CVE-2013-3928 : A stack-based buffer overflow exists in the ReadFile function of flt_BMP.dll used by Chasys Draw IES (BMP parsing). The flaw allows remote attackers to trigger arbitrary code execution by supplying a specially crafted BMP file (affecting versions prior to 4.11.02). Confirmed affec...
PT-2014-2713
Name of the Vulnerable Software and Affected Versions Chasys Draw IES versions prior to 4.11.02 Description The issue is related to a stack-based buffer overflow in the ReadFile function in flt BMP.dll. This occurs when processing crafted biPlanes and biBitCount fields in a BMP file, allowing...
CVE-2013-3928: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in the ReadFile function in fltBMP.dll in Chasys Draw IES before 4.11.02 allows remote attackers to execute arbitrary code via crafted biPlanes and biBitCount fields in a BMP file...
Chasys Draw IES BMP Buffer Overflow (CVE-2013-3928)
A buffer overflow vulnerability has been reported in Chasys Draw IES. The vulnerability is due to an image parsing input validation error in Chasys Draw IES when parsing a file in BMP format. A remote attacker could trigger this issue via a specially crafted BMP file. Successful exploitation will...
Chasys Draw IES - Local Buffer Overflow (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Chasys Draw IES...
Chasys Draw IES Buffer Overflow Vulnerability
This Metasploit module exploits a buffer overflow vulnerability found in Chasys Draw IES version 4.10.01. The vulnerability exists in the module fltBMP.dll, while parsing BMP files, where the ReadFile function is used to store user provided data on the stack in a insecure way. It results in...
Chasys Draw IES Buffer Overflow
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Chasys Draw IES...
Using symbolic execution to solve a tiny ASCII maze.
In this post we'll exercise the symbolic execution engine KLEE over a funny ASCII Maze yet another toy example! | VS. | Maze dimensions: 11x7 Player pos: 1x1 Iteration no. 0 Program the player moves with a sequence of 'w', 's', 'a' or 'd' Try to reach the prize! +-+---+---+ |X| || | | --+ | | | |...
Chasys Draw IES Buffer Overflow
This module exploits a buffer overflow vulnerability found in Chasys Draw IES version 4.10.01. The vulnerability exists in the module fltBMP.dll, while parsing BMP files, where the ReadFile function is used to store user provided data on the stack in an insecure way. It results in arbitrary code...
Renren seven years activities of the lottery machine can break through the limit of infinite shake-vulnerability warning-the black bar safety net
http://seven.renren.com/websitecelebrate There is a lottery machine, shake it out, the results did not, suggesting that the next rocker to be in the next one hour. ! http://s.xnimg.cn/a49632/actimg/12anniversary/js/anniversary.js Found so a JS file that contains the 7 anniversary of the page the...
CVE-2013-0420
Unspecified vulnerability in the VirtualBox component in Oracle Virtualization 4.0, 4.1, and 4.2 allows local users to affect integrity and availability via unknown vectors related to Core. NOTE: The previous information was obtained from the January 2013 Oracle CPU. Oracle has not commented on...
PT-2013-2318
Name of the Vulnerable Software and Affected Versions Oracle Virtualization versions 4.0 through 4.2 Description The issue affects the integrity and availability of the system, related to the Core component in the VirtualBox part of Oracle Virtualization. It is reportedly connected to an incorrec...
CVE-2012-2940
MediaChance Real-DRAW PRO 5.2.4 allows remote attackers to cause a denial of service application crash via a crafted 1 PNG, 2 WMF, 3 PSD, 4 TGA, 5 TTF, 6 BMP, 7 TIFF, or 8 PCX file...
CVE-2012-2940
MediaChance Real-DRAW PRO 5.2.4 is affected. The CVE-2012-2940 entry describes a denial of service (application crash) triggered by processing crafted image files in multiple formats (PNG, WMF, PSD, TGA, TTF, BMP, TIFF, PCX) remotely. The connected documents corroborate the same description acros...
CVE-2012-2940
MediaChance Real-DRAW PRO 5.2.4 allows remote attackers to cause a denial of service application crash via a crafted 1 PNG, 2 WMF, 3 PSD, 4 TGA, 5 TTF, 6 BMP, 7 TIFF, or 8 PCX file...
PT-2012-4381
Name of the Vulnerable Software and Affected Versions MediaChance Real-DRAW PRO version 5.2.4 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, by sending a crafted file. The types of files that can cause this issue include PNG, WMF, PS...
CVE-2012-2940: Improper Input Validation
MediaChance Real-DRAW PRO 5.2.4 allows remote attackers to cause a denial of service application crash via a crafted 1 PNG, 2 WMF, 3 PSD, 4 TGA, 5 TTF, 6 BMP, 7 TIFF, or 8 PCX file...
Real-DRAW PRO 5.2.4 - Import File Crash
Real-DRAW PRO 5.2.4 Import File Crash =================================================================================== Exploit Title:Real-DRAW PRO 5.2.4 Malicious PNG File Denial of service Vendor : http://www.mediachance.com/ Author: Ahmed Elhady Mohamed Email : [email protected]...
Real-DRAW PRO 5.2.4 Import File Crash
Exploit for windows platform in category dos / poc Real-DRAW PRO 5.2.4 Import File Crash =================================================================================== Exploit Title:Real-DRAW PRO 5.2.4 Malicious PNG File Denial of service Vendor : http://www.mediachance.com/ Author: Ahmed...
Real-DRAW PRO 5.2.4 - Import File Crash
Real-DRAW PRO 5.2.4 - Import File Crash Real-DRAW PRO 5.2.4 Import File Crash =================================================================================== Exploit Title:Real-DRAW PRO 5.2.4 Malicious PNG File Denial of service Vendor : http://www.mediachance.com/ Author: Ahmed Elhady Mohame...