2010 matches found
Total Video Player 1.31 Proof Of Concept
------------------------------------------------------------------ Title: Total Video Player Crash Poc Date: June 17 2012 Author: 0dem Software Link: http://totalvideoplayer.en.softonic.com/ Version: 1.31 Tested on: Win XP Sp3 Description: Player will hang, when trying to open malformed .m3u file...
Microsoft OLE Object File Handling vulnerability
Added: 06/15/2012 CVE: CVE-2011-3400 BID: 50977 OSVDB: 77663 Background Object Linking and Embedding OLE allows applications to create and edit compound documents. For example, a Microsoft Excel spreadsheet can be embedded within a Microsoft Word application. Problem A vulnerability when handling...
Microsoft OLE Object File Handling vulnerability
Added: 06/15/2012 CVE: CVE-2011-3400 BID: 50977 OSVDB: 77663 Background Object Linking and Embedding OLE allows applications to create and edit compound documents. For example, a Microsoft Excel spreadsheet can be embedded within a Microsoft Word application. Problem A vulnerability when handling...
Fedora 15 : groff-1.21-4.fc15 (2012-8590)
older security fixes : - CVE-2009-5044: insecure temporary file handling in pdfroff - CVE-2009-5080: improper handling of failed attempts to create temporary directories in eqn2graph/pic2graph/grap2graph - CVE-2009-5081: roff2.pl and groffer.pl use easy-to-guess temporary file names Note that...
Fedora 17 : groff-1.21-9.fc17 (2012-8577)
older security fixes - CVE-2009-5044: insecure temporary file handling in pdfroff - CVE-2009-5080: improper handling of failed attempts to create temporary directories in eqn2graph/pic2graph/grap2graph - CVE-2009-5081: roff2.pl and groffer.pl use easy-to-guess temporary file names Note that Tenab...
Fedora 16 : groff-1.21-4.fc16 (2012-8596)
older security fixes : - CVE-2009-5044: insecure temporary file handling in pdfroff - CVE-2009-5080: improper handling of failed attempts to create temporary directories in eqn2graph/pic2graph/grap2graph - CVE-2009-5081: roff2.pl and groffer.pl use easy-to-guess temporary file names Note that...
Photodex ProShow Producer 5.0.3256 load File Handling Buffer Overflow
This module exploits a stack-based buffer overflow in Photodex ProShow Producer v5.0.3256 in the handling of the plugins load list file. An attacker must send the crafted "load" file to victim, who must store it in the installation directory. The vulnerability will be triggered the next time...
ispVM System XCF File Handling Overflow
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "ispVM System XCF...
QuickTime < 7.7.2 Multiple Vulnerabilities
Binary data 6489.prm...
SuSE 10 Security Update : Linux Kernel (x86_64) (ZYPP Patch Number 5735)
This patch updates the SUSE Linux Enterprise 10 SP1 kernel. It fixes various bugs and security issues. The following security issues are addressed : - fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local use...
Mobipocket Reader CHM File Handling Remote Overflow
All versions of Mobipocket Reader are potentially affected by a stack-based buffer overflow vulnerability. The application does not properly validate user input and can allow crafted 'CHM' files to either crash the application or execute arbitrary code if an attack is successful. Note that...
Lattice Semiconductor ispVM System XCF File Handling Overflow
This module exploits a vulnerability found in ispVM System 18.0.2. Due to the way ispVM handles .xcf files, it is possible to cause a buffer overflow with a specially crafted file, when a long value is supplied for the version attribute of the ispXCF tag. It results in arbitrary code execution...
opencart 1.5.2.1 - Multiple Vulnerabilities
Author: Janek Vind "waraxe" Date: 06. April 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-84.html Description of vulnerable software: OpenCart is a turn-key ready "out of the box" shopping cart solution. You simply install, select your template, add products and your ready to...
Microsys PROMOTIC Project File Handling Use-after-free Remote Code Execution
Binary data scadapromoticuseafterfree.nbin...
Netop Remote Control dws File Handling Overflow
Netop Remote Control Guest is installed on the remote Windows host and is less than version 10.0 build 2011087. As such, it reportedly has a flaw in handling '.dws' script files that can be utilized to trigger a buffer overflow. By tricking the user into opening a specially crafted '.dws' file, a...
Csound hetro File Handling Stack Buffer Overflow
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Csound hetro File Handling Stack Buff...
Csound hetro File Handling Stack Buffer Overflow
Exploit for windows platform in category local exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...
Csound - '.hetro' File Handling Stack Buffer Overflow (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Csound hetro File Handling Stack Buff...
Xion Audio Player 1.0.127 Denial Of Service
!/usr/bin/python ------------------------------------------------------------------- Xion Audio Player 1.0.127 .aiff Denial of Service Vulnerability found by condis Download : http://xion.r2.com.au/index.php?page=download Tested on : Windows XP SP3 Professional PL Registers : EAX 00000000 ECX...
IrfanView < 4.33 Boundary Error Multiple Image File Handling Remote Overflow
The remote Windows host contains a version of IrfanView earlier than 4.33. As such, it is reportedly affected by a heap-based buffer overflow vulnerability due to the way the application handles RLE compressed bitmap files. An attacker could trick a user into opening specially crafted DIB, RLE, o...