9287 matches found
TugZip 3.5 Zip File Parsing Buffer Overflow Vulnerability
This module exploits a stack-based buffer overflow vulnerability in the latest version 3.5 of TugZip archiving utility. In order to trigger the vulnerability, an attacker must convince someone to load a specially crafted zip file with TugZip by double click or file open. By doing so, an attacker...
CVE-2008-4508: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in the file parsing function in Tonec Internet Download Manager, possibly 5.14 and earlier, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted AppleDouble file containing a long string. NOTE: this is probably a...
Microsoft GDI+ GIF文件远程代码执行漏洞（MS08-052）
BUGTRAQ ID: 31020 CVE ID：CVE-2008-3013 CNCVE ID：CNCVE-20083013 Microsoft Windows是一款微软开发的操作系统。 Microsoft Windows GDI+子系统解析特殊构建的GIF文件存在问题，远程攻击者可以利用漏洞进行内存破坏，可导致以登录用户进程权限执行任意代码。 提供畸形的图形扩展扩展可触发可利用的内存破坏条件，构建特殊的GIF文件，诱使用户访问，可触发此漏洞。 Microsoft Works 8.0 Microsoft Windows XP Professional x64 Edition SP2...
Microsoft Windows GDI+ BMP File Parsing Integer Overflow (MS08-052; CVE-2004-0904; CVE-2008-3015)
Bitmap BMP is an image file format used to store bitmap digital images. A remote code execution vulnerability has been discovered in the way GDI+ handles integer calculations for BMP files. The vulnerability is due to a buffer overflow when GDI+ fails to properly processes a malformed header in a...
Microsoft GDI+ GIF File Parsing Remote Code Execution Vulnerability
Description Microsoft GDI+ is prone to a remote code-execution vulnerability because the vector graphics link library improperly parses GIF image files. An attacker could exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts may...
mplayer -- DMO File Parsing Buffer Overflow Vulnerability
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
VLC 0.8.6i tta File Parsing Heap Overflow PoC
No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - Orange Bat advisory - Name : VLC 0.8.6i Class : Heap overflow Published : 2008-08-16 Credit : g g orange-bat com - - Details - \modules\demux\tta.c define TTAFRAMETIME 1.04489795918367346939 . . . int...
VLC 0.8.6i tta File Parsing Heap Overflow PoC
Exploit for multiple platform in category dos / poc ============================================= VLC 0.8.6i tta File Parsing Heap Overflow PoC ============================================= -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - Orange Bat advisory - Name : VLC 0.8.6i Class : Heap...
Apple Core Image Fun House buffer overflow
Buffer overflow on .funhouse files parsing...
Microsoft DirectX SAMI File Parsing Stack Based Buffer Overflow Vulnerability
Description Microsoft DirectX is prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. The vulnerability occurs when handling malformed SAMI files. Successfully exploiting this issue allows remote attackers to execute...
Apple iCAL multiple security vulnerabilities
Multiple vulnerabilities on .ics files parsing...
Microsoft antiviral applications multiple security vulnerabilities
Multiple DoS conditions on different file formats parsing...
DEBIAN-CVE-2008-1833
Heap-based buffer overflow in pe.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted WWPack compressed PE binary...
Microsoft project memroy corruption
Memory corruption on file parsing...
Microsoft Visio multiple security vulnerabilities
Memory corruption and code execution on files parsing...
Code injection
Multiple unspecified vulnerabilities in FLA file parsing in Adobe Flash CS3 Professional, Flash Professional 8, and Flash Basic 8 on Windows allow user-assisted remote attackers to execute arbitrary code via a crafted .FLA file...
CVE-2008-1201
Multiple unspecified vulnerabilities in FLA file parsing in Adobe Flash CS3 Professional, Flash Professional 8, and Flash Basic 8 on Windows allow user-assisted remote attackers to execute arbitrary code via a crafted .FLA file...
CVE-2008-1201
Affected software: Adobe Flash CS3 Professional, Flash Professional 8, and Flash Basic 8 running on Windows. Component: FLA file parser. Root cause: parsing malformed FLA files in the FLA parser can lead to arbitrary code execution. Impact: remote code execution with user-assisted exploitation; e...
CVE-2008-1201: Improper Control of Generation of Code
Multiple unspecified vulnerabilities in FLA file parsing in Adobe Flash CS3 Professional, Flash Professional 8, and Flash Basic 8 on Windows allow user-assisted remote attackers to execute arbitrary code via a crafted .FLA file...