Oracle Outside In CorelDRAW file parser stack buffer overflow

Overview Oracle Outside In contains a stack buffer overflow in the CorelDRAW parser, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Oracle Outside In is a set of libraries that can decode over 500 different file formats. Originally...

Oracle to Fix 78 Bugs in July Patch Update

Oracle on Tuesday will issue fixes for 78 vulnerabilities in a number of the company’s products, including its Database Server, Fusion, PeopleSoft and Secure Backup. A number of the bugs Oracle is fixing can be used for remote code execution. The Oracle Critical Patch Update for July is a huge...

Oracle Releases Critical Patch Update for July 2011

Oracle has released its Critical Patch Update for July 2011 to address 78 vulnerabilities across multiple products. This update contains the following security fixes: 13 for Oracle Database Server 3 for Oracle Secure Backup 7 for Oracle Fusion Middleware 18 for Oracle Enterprise Manager 1 for...

KMPlayer 3.0.0.1440 Buffer Overflow

!/usr/bin/python The KMPlayer 3.0.0.1440 .mp3 Buffer Overflow Exploit XPSP3 DEP Bypass Downloaded from: http://download.cnet.com/The-KMPlayer/3000-136324-10659939.html 06 Jun 11 Cobbled together by dookie and ronin This exploit performs DEP bypass on WinXP SP3 with 2 different offsets. In our...

CVE-2011-2146

mount.vmhgfs in the VMware Host Guest File System HGFS in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1 allows guest OS users to determine the existence of host OS files and...

DEBIAN-CVE-2011-2145

mount.vmhgfs in the VMware Host Guest File System HGFS in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1, when a Solaris or FreeBSD guest OS is used, allows guest OS users to...

CVE-2011-1787

Race condition in mount.vmhgfs in the VMware Host Guest File System HGFS in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1 allows guest OS users to gain privileges on the gues...

Design/Logic Flaw

mount.vmhgfs in the VMware Host Guest File System HGFS in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1 allows guest OS users to determine the existence of host OS files and...

Design/Logic Flaw

mount.vmhgfs in the VMware Host Guest File System HGFS in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1, when a Solaris or FreeBSD guest OS is used, allows guest OS users to...

CVE-2011-2146

CVE-2011-2146 concerns the VMware Host Guest File System (HGFS) disclosure issue. The description specifies that mount.vmhgfs in VMware Workstation (7.1.x before 7.1.4), VMware Player (3.1.x before 3.1.4), VMware Fusion (3.1.x before 3.1.3), and VMware ESXi/ESX (versions 3.5–4.1) allows guest OS ...

CVE-2011-1787

Race condition in mount.vmhgfs in the VMware Host Guest File System HGFS in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1 allows guest OS users to gain privileges on the gues...

VMware Patches Bugs in Player, Fusion

VMware has issued an update for a number of its more popular products, fixing several vulnerabilities. Some of the flaws could lead to arbitrary code execution. The patches resolve security issues in the following VMware products: VMware Workstation 7.1.3 and earlier, VMware Player 3.1.3 and...

The KMPlayer 3.0.0.1440 .mp3 Buffer Overflow Exploit XPSP3 DEP Bypass

Exploit for windows platform in category local exploits !/usr/bin/python The KMPlayer 3.0.0.1440 .mp3 Buffer Overflow Exploit XPSP3 DEP Bypass Downloaded from: http://download.cnet.com/The-KMPlayer/3000-136324-10659939.html 06 Jun 11 Cobbled together by dookie and ronin This exploit performs DEP...

VMware Fusion < 3.1.3 (VMSA-2011-0009 / VMSA-2011-0011)

The version of VMware Fusion installed on the Mac OS X host is earlier than 3.1.3. As such, it is reportedly affected by the following three security vulnerabilities : - An attacker with access to a Guest operating system can determine if a path exists in the Host filesystem and whether it's a fi...

VMware Releases Security Advisory

VMware has released security advisory VMSA-2011-0009 to address multiple vulnerabilities in the following products: VMware Workstation 7.1.3 and earlier VMware Player 3.1.3 and earlier VMware Fusion 3.1.2 and earlier ESXi 4.1 without patch ESXi410-201104402-BG ESXi 4.0 without patch...

PHP-Fusion Teams Structure Module 'team_id' SQL Injection Vulnerability

PHP-Fusion Teams Structure Module is prone to an SQL injection vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2010-4791

SQL injection vulnerability in infusions/mguserfotoalbumpanel/mguserfotoalbum.php in the MG User-Fotoalbum mguserfotoalbumpanel module 1.0.1 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the albumid parameter...

Sql injection

SQL injection vulnerability in infusions/mguserfotoalbumpanel/mguserfotoalbum.php in the MG User-Fotoalbum mguserfotoalbumpanel module 1.0.1 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the albumid parameter...

CVE-2010-4791

The CVE-2010-4791 entry describes an SQL injection in MG User-Fotoalbum (mg_user_fotoalbum_panel) module 1.0.1 for PHP-Fusion, triggered via the album_id parameter in infusions/mg_user_fotoalbum_panel/mg_user_fotoalbum.php. The vulnerability allows remote attackers to execute arbitrary SQL comman...

CVE-2010-4791

SQL injection vulnerability in infusions/mguserfotoalbumpanel/mguserfotoalbum.php in the MG User-Fotoalbum mguserfotoalbumpanel module 1.0.1 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the albumid parameter...