RealNetworks RealPlayer文件解析函数多个漏洞

RealPlayer是一款流行的媒体播放程序。 RealPlayer解析特殊构建的文件存在多个内存破坏问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 -当解析特殊构建的.mov文件，存在如下有问题代码： --//- snip ----//----------------------------------------------------- 62448F24 8B4D E2 MOV ECX,DWORD PTR SS:EBP-1E ; 1 62448F27 8B45 DE MOV EAX,DWORD PTR SS:EBP-22 62448F2A 2BC1 SUB EAX,E...

Microsoft Windows Explorer PNG DoS

Infinite loop on invalid PNG file parsing...

CVE-2007-4322

BlockHosts vulnerability CVE-2007-4322 affects BlockHosts before 2.0.4 and CVE-2007-2765 affects BlockHosts before 2.0.3. The issue is improper parsing of daemon log files (sshd/vsftpd) that allows remote attackers to inject arbitrary deny entries into /etc/hosts.allow and cause a denial of servi...

CVE-2007-4321

fail2ban 0.8 and earlier does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and cause a denial of service by adding arbitrary IP addresses to the sshd log file, as demonstrated by logging in via ssh with a client protocol versi...

[Full-disclosure] n.runs-SA-2007.024 - CA eTrust Antivirus Infinite Loop DoS (remote) Advisory

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2007.024 25-Jul-2007 Vendor: Computer Associates, http://www.ca.com Affected Products: CA eTrust Antivirus, http://www3.ca.com/solutions/product.aspx?ID=156 Vulnerability: Infinite Loop DoS remote Risk: HIGH Vendor communication:...

Panda Antivirus EXE File Parsing Overflow

The version of Panda Antivirus installed on the remote host reportedly contains a buffer overflow in its file parsing engine. Using a specially crafted EXE file, a remote attacker may be able to leverage this issue to crash the affected application or to execute arbitrary code. C Tenable Network...

2007-07-20 - n.runs-SA-2007.016 - NOD32 Antivirus CAB parsing Arbitrary Code Execution Advisory

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2007.016 20-Jul-2007 Vendor: ESET, http://eset.com Affected Products: ESET NOD32 Antivirus Vulnerability: Arbitrary Code Execution remote Risk: HIGH Vendor communication: 2007/05/07 Initial notification to ESET 2007/05/07 ESET Response...

NOD32 Antivirus multiple security vulnerabilities

Race conditions on CAB parsing, division by zero on ASPACK and FSG parsing, infinite loop on ASPACK parsing...

Flash Player/Plugin Video file parsing Remote Code Execution POC

No description provided by source. Author:yunshu http://www.ph4nt0m.org poc: http://www.milw0rm.com/sploits/07162007-flashflv9.0.45.0exp.zip sebug.net...

Flash PlayerPlugin Video - File Parsing Remote Code Execution

Flash PlayerPlugin Video - File Parsing Remote Code Execution Author:yunshu http://www.ph4nt0m.org poc: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/4188.zip 07162007-flashflv9.0.45.0exp.zip milw0rm.com 2007-07-16...

Flash Player/Plugin Video - File Parsing Remote Code Execution

Author:yunshu http://www.ph4nt0m.org poc: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30288.zip 07162007-flashflv9.0.45.0exp.zip milw0rm.com 2007-07-16...

Sun Java Webstart buffer overflow

Buffer overflow on JNLP file parsing...

CVE-2007-2972

The file parsing engine in Avira Antivir Antivirus before 7.04.00.24 allows remote attackers to cause a denial of service application crash via a crafted UPX compressed file, which triggers a divide-by-zero error...

Design/Logic Flaw

The file parsing engine in Avira Antivir Antivirus before 7.04.00.24 allows remote attackers to cause a denial of service application crash via a crafted UPX compressed file, which triggers a divide-by-zero error...

CVE-2007-2974

Buffer overflow in the file parsing engine in Avira Antivir Antivirus before 7.03.00.09 allows remote attackers to execute arbitrary code via a crafted LZH archive file, resulting from an "integer cast around."...

Buffer overflow

Buffer overflow in the file parsing engine in Avira Antivir Antivirus before 7.03.00.09 allows remote attackers to execute arbitrary code via a crafted LZH archive file, resulting from an "integer cast around."...

CVE-2007-2972

The file parsing engine in Avira Antivir Antivirus before 7.04.00.24 allows remote attackers to cause a denial of service application crash via a crafted UPX compressed file, which triggers a divide-by-zero error...

CVE-2007-2972

CVE-2007-2972 affects Avira AntiVir Antivirus (pre-7.04.00.24) where the file parsing engine mishandles UPX-compressed files, triggering a divide-by-zero and causing an application crash (DoS). The vulnerability is described as a denial-of-service via crafted UPX inputs. The available connected d...

Acoustica MP3 CD Burner 4.32 - Local Buffer Overflow (PoC)

/ Credit's to n00b for finding this bug and poc.. Acoustica MP3 CD Burner 4.32 local buffer-overflow poc code. Date : May 31'st 2007 Tested:On win xp sp 2. Acoustica Is prone to a buffer-overflow when parasing a .asx playlist file If you can entice some one to open a specialy crafted .asx play li...

CVE-2007-2765

CVE-2007-2765 concerns BlockHosts prior to 2.0.3, where improper parsing of daemon logs lets remote attackers add arbitrary entries to /etc/hosts.allow, enabling a denial of service by injecting IPs into a log file. Related entries (e.g., CVE-2007-4322/4323) describe a similar issue affecting Blo...