CVE-2011-3625

creationtimestamp| type| source ---|---|--- 2012-05-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18954 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/mplayersamibof.rb 2025-10-23 21:12:56+00:00|...

Apple QuickTime TeXML Style Element Stack Buffer Overflow

This module exploits a vulnerability found in Apple QuickTime. When handling a TeXML file, it is possible to trigger a stack-based buffer overflow, and then gain arbitrary code execution under the context of the user. This is due to the QuickTime3GPP.gtx component not handling certain Style...

Heap spraying Adobe Illustrator

Due to the recent patched vulnerabilities in Adobe Illustrator CVE-2012-2023, CVE-2012-2024, CVE-2012-2025, and CVE-2012-2026 it becomes interesting to analyze the exploitability facts of the .ai file format. Early versions of the AI file format are true EPS files with a restricted, compact synta...

Microsoft Visio Viewer VSD文件格式远程代码执行漏洞(MS12-031)

BUGTRAQ ID: 53328 CVE ID: CVE-2012-0018 Microsoft Visio是Windows操作系统下运行的流程图软件，它现在是Microsoft Office软件的一个部分。 MMicrosoft Visio在验证Visio文件格式的某些属性的实现上存在远程代码执行漏洞，攻击者可通过特制的Visio文件利用此漏洞破坏内存，以当前用户权限执行任意代码。 0 Microsoft Visio Viewer 2010 SP1 Microsoft Visio Viewer 2010 0 厂商补丁： Microsoft ---------...

CVE-2012-0018: Improper Input Validation

Microsoft Visio Viewer 2010 Gold and SP1 does not properly validate attributes in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "VSD File Format Memory Corruption Vulnerability."...

Microsoft Visio Viewer VSD File Format CVE-2012-0018 Remote Code Execution Vulnerability

Description Microsoft Visio Viewer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will result in a denial-of-service condition. Technologies Affected...

Microsoft Excel File Format Code Execution (MS12-030; CVE-2012-0141)

A remote code execution vulnerability has been reported in Microsoft Excel...

Wireshark Heap Based BOF and Denial of Service Vulnerabilities - Mac OS X

Wireshark is prone to heap based buffer overflow and denial of service vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CPE17 Autorun Killer <= 1.7.1 Stack Buffer Overflow Exploit

Exploit for windows platform in category local exploits CPE17 Autorun Killer 'CPE17 Autorun Killer %q readfile function is vulnerable it can be overflow , 'Author' = 'Xelenonz' , 'Version' = '0.1', 'Payload' = 'EncoderType' = Msf::Encoder::Type::AlphanumMixed, 'EncoderOptions' =...

CPE17 Autorun Killer 1.7.1 Buffer Overflow

CPE17 Autorun Killer 'CPE17 Autorun Killer %q readfile function is vulnerable it can be overflow , 'Author' = 'Xelenonz' , 'Version' = '0.1', 'Payload' = 'EncoderType' = Msf::Encoder::Type::AlphanumMixed, 'EncoderOptions' = 'BufferRegister'='ECX', , 'DefaultOptions' = 'DisablePayloadHandler' =...

Shadow Stream Recorder 3.0.1.7 Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Shadow Stream...

xRadio 0.95b - Local Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'xRadio 0.95b Buff...

GSM SIM Editor 5.15 - Local Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'GSM SIM Editor 5....

RedHat Update for libtiff RHSA-2012:0468-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

libtiff: Heap-buffer overflow due to TileSize calculation when parsing tiff files

Multiple integer overflows in tiffgetimage.c in LibTIFF 3.9.4 allow remote attackers to execute arbitrary code via a crafted tile size in a TIFF file, which is not properly handled by the 1 gtTileSeparate or 2 gtStripSeparate function, leading to a heap-based buffer overflow...

NetOp Remote Control Client 9.5 Buffer Overflow

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

K-Lite Mega Codec Pack 5.7.0 (.avi) use-after-free vulnerability

Exploit for windows platform in category local exploits Application :K-Lite Mega Codec Pack 5.7.0 .avi use-after-free vulnerability Auther : Senator of Pirates E-Mail : email protected FaceBook : /SenatorofPirates Bug : ---- Registers: eax=aa000080 ebx=00000000 ecx=719b3800 edx=00100000...

Format string

The scanner engine in PrivaWall Antivirus 5.6 and earlier does not recognize the Office XML aka Open Document XML file format, which allows remote attackers to bypass malware detection via a crafted file embedded in a WordML document...

CVE-2012-1904

mp4fformat.dll in the QuickTime File Format plugin in RealNetworks RealPlayer 15 and earlier, and RealPlayer SP 1.1.4 Build 12.0.0.756 and earlier, allows remote attackers to cause a denial of service memory corruption and application crash via a crafted MP4 file...

PT-2012-3641

Name of the Vulnerable Software and Affected Versions RealPlayer versions 15 and earlier RealPlayer SP versions 1.1.4 Build 12.0.0.756 and earlier Description The issue allows remote attackers to cause a denial of service, resulting in memory corruption and application crash, via a crafted MP4...