DSA-1995-1 openoffice.org - several

Bulletin has no description...

RealNetworks RealPlayer IVR Format Remote Code Execution Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within RealPlayer's...

n.player buffer overflow

Buffer overflow on skin file parsing...

HT-MP3Player 1.0 HT3 File Parsing Buffer Overflow

$Id: htmp3playerht3bof.rb 7724 2009-12-06 05:50:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft IIS PHP File Parsing

IIS 6 0day php original exploit : http://www.securityfocus.com/bid/37460 by: PouyaServer When the upload pictures to File.php;file.jpg when, IIS will automatically parse the php format. to change the file name webshell 1.php;1.jpg Direct access to IE resloves the PHP that is the php shell into...

Microsoft IIS 0Day Vulnerability in Parsing Files (semi-colon bug)

Microsoft IIS 0Day Vulnerability in Parsing Files semi-colon bug Application: Microsoft Internet Information Services - IIS All versions Impact: Highly Critical for Web Applications Finding Date: April 2007 Report Date: Dec. 2009 Found by: Soroush Dalili Irsdl 4t yahoo d0t com Website:...

Mozilla Codesighs memory corruption

Buffer overflow on file parsing...

libvorbis library multiple security vulnerabilities

Multiple vulnerabilities on ogg files parsing...

GIMP integer overflow

Integer overflow on .BPM, .PSD files parsing...

Free Download Manager Torrent File Parsing Multiple Remote BOF

Exploit for unknown platform in category local exploits ========================================================================================== Free Download Manager Torrent File Parsing Multiple Remote Buffer Overflow Vulnerabilities...

Microsoft Word memory corruption

Memory corruption during Microsoft word file parsing...

Nullsoft Winamp CAF File Processing Integer Overflow (CVE-2009-0186)

Nullsoft Winamp is a multimedia player application that is capable of playing many formats of audio and video files. Winamp can play CD tracks, MP3 music files or MPEG video files as well as numerous other formats. It is also capable of reading CAF media file which has file extension .caf. A...

SafeNet SoftRemote buffer overflow

Buffer overflow on policy file parsing...

Microsoft Windows Explorer Invalid URL File Parsing Stack Overflow (CVE-2006-3351)

The Microsoft Windows series of operating systems is one of the most popular systems in use on workstations, home computers, and servers. All versions of the OS include a graphical shell interface, called Windows Explorer. There exists a stack exhaustion vulnerability in Microsoft Windows Explore...

Microsoft DirectX WAV and AVI File Parsing Code Execution (MS07-064; CVE-2007-3895)

Microsoft DirectX is a set of libraries that aim for accelerated video and audio experience on Microsoft Windows operating system. DirectX can parse multiple audio or video file formats which include WAV and AVI files. The default handler of AVI and WAV files on Windows systems is Windows Media...

Microsoft IIS is parsing the file name“x. asp;x.jpg/x.php;x.jpg”vulnerability-vulnerability warning-the black bar safety net

| Microsoft IIS is parsing the file name“x. asp;x.jpg/x.php;x.jpg”vulnerability --- When the file is named x. asp;x. jpg, Microsoft IIS will automatically to the asp format to be parsed. 而 当 文件 名为 x.php;x. jpg, Microsoft IIS will automatically in php format to be parsed. So we just upload after x...

win2003 II6 parsing vulnerability practical and application-vulnerability warning-the black bar safety net

New win2003 IIS6 parsing vulnerability iis6 file parsing vulnerability announced. Use The webshell file name changed 1. asp;. jpg Direct IE access is parsed into ASP That is the asp shell into X. asp;. jpg in win2003 IIS6 environment will automatically resolve to the asp We have to combat it out ...

[Backports-security-announce] Security update for devscripts

Adam D. Barratt uploaded new packages for devscripts which fixed the following security problem: CVE-2009-2946: When parsing watch files, uscan applied "mangle rules" by evaluating them as Perl code without any sanitisation. This could have lead to the execution of arbitrary code by users or...

CVE-2009-2498

The CVE-2009-2498 entry corresponds to a code-execution vulnerability in Microsoft Windows Media Format Runtime (versions 9.0, 9.5, 11) and Windows Media Services 9.1/2008, triggered by parsing malformed ASF/WMV/WMA headers. Connected advisories (e.g., CPAI-2014-1114; OpenVAS 901012) corroborate ...

Microsoft Windows AVI Media File Parsing Vulnerabilities (971557)

This host is missing a critical security update according to Microsoft Bulletin MS09-038. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...