1988 matches found
BitComet 0.60 Torrent File Handling Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16311/info BitComet is prone to a buffer-overflow vulnerability. This issue presents itself when the application attempts to process a malformed '.torrent' file. Exploitation of this issue could allow attacker-supplied...
GEdit 2.0/2.2 Large IOStream File Memory Corruption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9090/info A problem has been reported in the handling of certain file types by gEdit. Memory corruption may occur when handling files containing long strings. Because of this, it may be possible to cause memory corruption...
httpdx 1.5.3 PNG File Handling Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/38638/info The 'httpdx' program is prone to a denial-of-service vulnerbaility. Remote attackers can exploit this issue to cause the server to stop responding, denying service to legitimate users. This issue affects httpdx...
Soda PDF Professional 1.2.155 PDF/WWF File Handling DoS
No description provided by source. !/usr/bin/perl Soda PDF Professional 1.2.155 PDF/WWF File Handling Restriction of Service RoS Vendor: LULU software Product web page: http://www.sodapdf.com Affected version: 1.2.155.1729 Professional with OCR Summary: Increase your efficiency with Soda PDF...
Slackware Linux 3.4 liloconfig-color temporary file Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/77/info liloconfig-color creates the file /tmp/reply insecurely and follows symbolic links. An attacker can create a symbolic link from /tmp/reply to any file and wait for root to run the program. This will clober the...
ERS Viewer 2011 ERS File Handling Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
HTML Email Creator & Sender 2.3 - Local Buffer Overflow PoC (SEH)
No description provided by source. /0day HTML Email Creator & Sender v2.3 Local Buffer OverflowSeh Poc Debugging info Seh handler is overwriten , the offset is at 60 bytes in our buffer so you have to build your buffer as follows: PONTER TO NEXT SEH-------SEH HANDLER----NOP------SHELLCODE | | | |...
Google Chrome < 14.0.835.163 PDF File Handling Memory Corruption
No description provided by source. ----------------Security Adisory---------------- Title: Google Chrome 14.0.835.163 PDF File Handling Memory Corruption Vulnerability CVE-2011-2841 Sec-Security: Hich CVE-Number: CVE-2011-2841 Date of discovery: 04/06/2011MM/DD/YYYY Fix date: 06/28/2011MM/DD/YYYY...
Microsoft Windows OLE Object File Handling Remote Code Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
Microsoft Windows Media Player 11 ScriptCommand Multiple Information Disclosure Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/35335/info Microsoft Windows Media Player is prone to multiple information-disclosure vulnerabilities because it fails to properly restrict access to certain functionality when handling media files. An attacker can exploi...
Sony Playstation 3 (PS3) 4.31 - Save Game Preview SFO File Handling Local Command Execution
No description provided by source...
Oreans WinLicense 2.1.8.0 - XML File Handling Unspecified Memory Corruption
No description provided by source. !/usr/bin/perl Oreans WinLicense v2.1.8.0 XML File Handling Unspecified Memory Corruption Vendor: Oreans Technologies Product web page: http://www.oreans.com Affected version: 2.1.8.0 32/64bit Summary: WinLicense combines the same protection-level as Themida wit...
Adobe Photoshop CS4 Extended 11.0 ABR File Handling Remote Buffer Overflow PoC
No description provided by source...
RealNetwork RealPlayer 10.5 MID File Handling Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22050/info RealNetwork RealPlayer is prone to a remote denial-of-service vulnerability because the application fails to handle specially crafted files. Exploiting this issue allows remote attackers to crash the applicatio...
PHP 5.4.x < 5.4.30 Multiple Vulnerabilities
According to its banner, the version of PHP 5.4.x installed on the remote host is a version prior to 5.4.30. It is, therefore, affected by the following vulnerabilities : - Boundary checking errors exist related to the Fileinfo extension, Composite Document Format CDF handling and the functions...
PHP 5.5.x < 5.5.14 Multiple Vulnerabilities
According to its banner, the version of PHP 5.5.x installed on the remote host is a version prior to 5.5.14. It is, therefore, affected by the following vulnerabilities : - Boundary checking errors exist related to the Fileinfo extension, Composite Document Format CDF handling and the functions...
Symantec Encryption Desktop for OS X World-Writable Files Insecure File Handling
SUMMARY Symantecs Encryption Desktop for OS X installs some temporary files with world-writable attributes during installation. In a multi-user environment, a malicious user could manipulate these world-writable files to read and write files or create files with another users permissions. AFFECTE...
openSUSE Security Update : puppet (openSUSE-SU-2012:0835-1)
Fixed bnc747657: CVE-2012-1053, CVE-2012-1054: improper privilege dropping and file handling flaws This was done by updating to the new version in stable branch. The stable branch receives only security fixes and this update does not provide any new features. - Fixed bnc755869 CVE-2012-1988:...
Updated emacs packages fix CVE-2014-3421-4
Updated emacs packages fix security vulnerabilities: Steve Kemp discovered multiple temporary file handling issues in Emacs. A local attacker could use these flaws to perform symbolic link attacks against users running Emacs CVE-2014-3421, CVE-2014-3422, CVE-2014-3423, CVE-2014-3424...
(Pwn2Own) Adobe Reader Sandbox Bypass Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of fil...