3352 matches found
Opera Web Browser 12.11 Crash PoC
No description provided by source. Title : Opera Web Browser 12.11 WriteAV Vulnerability Version : 12.11 Build 1661 and 12.12 Date : 2012-12-03 Vendor : http://www.opera.com/ Impact : High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : windows XP SP3 Author : coolkaveh Opera ...
DirectShow Arbitrary Memory Overwrite Vulnerability (MS13-056)
No description provided by source. Introduction: The Microsoft DirectShow application programming interface API is a media-streaming architecture for Microsoft Windows. Using DirectShow, your applications can perform high-quality video and audio playback or capture. Overview: DirectShow in...
Mozilla FireFox <= 1.0.1 - Remote GIF Heap Overflow Exploit
No description provided by source. / Mozilla FireFox = 1.0.1 Remote GIF Heap Overflow Exploit by Darkeagle of uKt Researcherz darkeagle at linkin-park dot cc greetz to all my friends 8 and... Happy Birthday uKt research team 8 1 year 8 http://unl0ck.org !!!-script kiddie edition-!!!...
Android Web Browser - GIF File Heap-Based Buffer Overflow Vulnerability
source: http://www.securityfocus.com/bid/28005/info Android Web Browser is prone to a heap-based buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized memory buffer. Successfully exploiting this vulnerability can...
XnView 1.98.8 GIF Image Processing Heap Overflow
No description provided by source. Application: XnView GIF Image Processing Heap Overflow Platforms: Windows Secunia: SA48666 PRL: 2012-18 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Report Timeline 3...
eFiction <= 2.0 Fake GIF Shell Upload Exploit
No description provided by source. ?php ---efiction20xpl.php 15.19 17/11/2005 eFiction = 2.0 fake GIF Shell Upload coded by rgod site: http://rgod.altervista.org usage: launch from Apache, fill in requested fields, then go! Sun-Tzu: If fighting is sure to result in victory, then you must fight,...
DIMIN Viewer 5.4.0 GIF Decode Crash PoC
No description provided by source. PoC: http://www.exploit-db.com/sploits/23496.tar.gz CommandLine: C:\Program Files\DIMIN\Viewer5\imgview5.exe Symbol search path is: Invalid Symbol loading may be unreliable without a symbol search path. Use .symfix to have the debugger choose a symbol path. Afte...
Netscape Navigator 4.0.8 'about:' Domain Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2637/info Due to a flaw in Navigator's security code, all URLs in the about: protocol are considered to be part of the same domain. If arbitrary Javascript code is placed in a GIF's comment field, it is treated like a...
Aesop GIF Creator <= 2.1 - (.aep) Buffer Overflow Exploit
No description provided by source. !/usr/bin/python Exploit Title: Aesop GIF Creator = v2.1 .aep Buffer Overflow Exploit Date: 12/15/2010 Author: xsploitedsec URL: http://www.x-sploited.com/ Contact: xsploitedsec at x-sploited.com Software Link: http://www.yukudr.com/h84561/aesopsetup.exe...
Microsoft DirectShow (msvidctl.dll) MPEG-2 Memory Corruption
No description provided by source. $Id: msvidctlmpeg2.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...
Link Request Contact Form 3.4 - Remote Code Execution Vulnerability
No description provided by source. -=--------------------ADVISORY-------------------=- Link Request Contact Form v3.4 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: Link Request Contact Form -=+ Version: 3.4 -=+ Vendor's URL:...
MS Windows GDI+ - Proof of Concept (MS08-052) (2)
No description provided by source. ------------------------------------------------------------------------------------------------------------ Operating System: XP SP2 Gdiplus.dll Version: 5.1.3102.2180 Credit: John Smith, Evil Fingers GIF Template Reference:...
Muhammad A. Muquit wwwcount 2.3 Count.cgi Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/128/info Wwwcount count.cgi is a very popular CGI program used to track website usage. In particular, it enumerates the number of hits on given webpages and increments them on a 'counter'. In October of 1997 two remotely...
gif2tiff buffer overflow
Buffer overflow on gif parsing...
Medium: libtiff
Issue Overview: Use-after-free vulnerability in the t2preadwritepdfimage function in tools/tiff2pdf.c in libtiff 4.0.3 allows remote attackers to cause a denial of service crash or possible execute arbitrary code via a crafted TIFF image. The LZW decompressor in the gif2tiff tool in libtiff 4.0.3...
MGASA-2014-0263 Updated qt3 packages fix security vulnerabilities
Updated qt3 packages fix security vulnerabilities: QXmlSimpleReader in Qt versions prior to 5.2 supports expansion of internal entities in XML documents without placing restrictions to ensure the document does not cause excessive memory usage. If an application using this API processes untrusted...
openSUSE Security Update : gimp (openSUSE-SU-2011:1152-1)
specially crafted gif files could cause an infinite loop or a heap-based buffer overflow in the gif decoder CVE-2011-2896. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update gimp-5151. The text...
openSUSE Security Update : opera (openSUSE-SU-2012:1702-1)
Update to 12.12 - Fixes and Stability Enhancements - New option 'Delete settings and data for all extensions' option off by default in the Delete Private Data dialog - Corrected an issue where using the 'Delete Private Data' dialog could delete extension and settings data - Redesigned the 'Delete...
openSUSE Security Update : gimp (openSUSE-SU-2011:1152-1)
specially crafted gif files could cause an infinite loop or a heap-based buffer overflow in the gif decoder CVE-2011-2896. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update gimp-5151. The text...
openSUSE Security Update : gimp (openSUSE-SU-2012:1131-1)
Fixed 2 gimp security bugs : - fixed bnc724628 CVE-2012-3481: gimp: GIF plugin 'height' / 'len' integer overflow leading to heap-based buffer overflow - fixed bnc763595 CVE-2012-2763: gimp: buffer overflow in script-fu's server component %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...