9578 matches found
Ramble vulnerability mining of the file parsing-vulnerability-vulnerability warning-the black bar safety net
Blog post author: dragonltx Directory 1 - Preface 2 - file Fuzz introduction 3 - file Fuzz FY record 4 – Outlook 5 - epilogue 1 - Introduction ! ! From 2 0 1 0 year Google admitted suffered serious hack attacks, the APT advanced persistent threat will become the security circles known of...
Microsoft Office PNG File Parsing Buffer Overflow (MS13-051; CVE-2013-1331) - ver 2
A remote code execution vulnerability has been reported in Microsoft Office...
Fedora 18 : lynis-1.3.6-1.fc18 (2013-22758)
1.3.6 2013-12-03 New : - Support for the dntpd time daemon - New Apache test for modules HTTP-6632 - Apache test for modevasive HTTP-6640 - Apache test for modqos HTTP-6641 - Apache test for modspamhaus HTTP-6642 - Apache test for ModSecurity HTTP-6643 - Check for installed package audit tool...
SuSE 11.2 Security Update : OpenJDK 1.6 (SAT Patch Number 8598)
OpenJDK 1.6 was updated to the new Icedtea release 1.12.7, which includes many fixes for bugs and security issues : - S8006900, CVE-2013-3829: Add new date/time capability - S8008589: Better MBean permission validation - S8011071, CVE-2013-5780: Better crypto provider handling - S8011081,...
MS13-091: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2885093)
The remote Windows host is running a version of Microsoft Office or Office Compatibility Pack that is affected by multiple remote code execution vulnerabilities while parsing WordPerfect document files. If an attacker can trick a user on the affected host into opening a specially crafted file, it...
MS13-085: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2885080)
The remote Windows host is running a version of Microsoft Office, Microsoft Excel, Office Compatibility Pack, or Microsoft Excel Viewer that is affected by remote code execution vulnerabilities in the way that Microsoft Excel parses file contents. CVE-2013-3889, CVE-2013-3890. If an attacker can...
Little CMS library DoS
Crash on file parsing...
ClamAV UPX File PE parsing Memory Access Error (CVE-2013-2020)
A memory access error vulnerability exists in ClamAV antivirus software. The vulnerability is due to an errors in "pe.c" while parsing UPX-packed executable files. Remote attackers could exploit the vulnerability to cause a denial of service condition. Successful exploitation would lead to...
MS13-044: Vulnerability in Microsoft Visio Could Allow Information Disclosure (2834692)
The remote host contains a version of Microsoft Visio that is affected by an information disclosure vulnerability due to a flaw in the way Visio parses specially crafted XML files containing external entities. By tricking a user into opening a specially crafted file with Visio, a remote attacker...
RealNetworks RealPlayer Heap Based BoF Vulnerability - Mac OS X
RealPlayer is prone to heap based buffer overflow vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Java t2k Type1 Subroutine Indexing Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...
Common server to resolve the vulnerability summary-vulnerability warning-the black bar safety net
Author : laterain +IIS6. 0 Directory resolution:/xx.asp/xx.jpg xx.jpg can be replaced with any text filee.g. xx.txt, the text content for the back door code IIS6. 0 will be xx.jpg parsing of asp files. Suffix resolution:/xx. asp;. jpg IIS6. 0 would put such a suffix the file is successfully parse...
WellinTech KingView KingMess Log File Parsing Buffer Overflow (CVE-2012-4711)
A buffer overflow vulnerability has been reported in KingView's KingMess. The vulnerability is due to an error while parsing log files. An attacker can exploit this vulnerability by enticing a user to open a specially crafted log file...
QlikView integer overflow
Integer overflow on .qvw files parsing...
KingView Log File Parsing Buffer Overflow Vulnerability
This Metasploit module exploits a vulnerability found in KingView "KingView Log File Parsing Buffer Overflow", 'Description' = %q This module exploits a vulnerability found in KingView = 6.55. It exists in the KingMess.exe application when handling log files, due to the insecure usage of sprintf...
WellinTech KingView KingMess.exe Log File Parsing Overflow
Added: 03/22/2013 CVE: CVE-2012-4711 BID: 57909 OSVDB: 89690 Background WellinTech is a China-based company which produces KingView, a Web-based SCADA application for Windows-based control, monitoring, and data collection that is used internationally. Problem WellinTech KingView KingMess.exe is...
WellinTech KingView KingMess.exe Log File Parsing Overflow
Added: 03/22/2013 CVE: CVE-2012-4711 BID: 57909 OSVDB: 89690 Background WellinTech is a China-based company which produces KingView, a Web-based SCADA application for Windows-based control, monitoring, and data collection that is used internationally. Problem WellinTech KingView KingMess.exe is...
WellinTech KingView KingMess.exe Log File Parsing Overflow
Added: 03/22/2013 CVE: CVE-2012-4711 BID: 57909 OSVDB: 89690 Background WellinTech is a China-based company which produces KingView, a Web-based SCADA application for Windows-based control, monitoring, and data collection that is used internationally. Problem WellinTech KingView KingMess.exe is...
WellinTech KingView KingMess.exe Log File Parsing Overflow
Added: 03/22/2013 CVE: CVE-2012-4711 BID: 57909 OSVDB: 89690 Background WellinTech is a China-based company which produces KingView, a Web-based SCADA application for Windows-based control, monitoring, and data collection that is used internationally. Problem WellinTech KingView KingMess.exe is...