Unreal Tournament 3 2.1 - 'STEAMBLOB' Remote Denial of Service

Original Advisory: http://aluigi.org/adv/ut3steamer-adv.txt Luigi Auriemma Application: Unreal Tournament III http://www.unrealtournament3.com Versions: = 2.1 aka 3809 Platforms: Windows tested and Linux Bug: unitialized pointer Exploitation: remote, versus server Date: 17 Jul 2010 Author: Luigi...

Ghost Recon Advanced Warfighter - Integer Overflow / Array Indexing Overflow

Source: http://aluigi.org/adv/grawful-adv.txt Luigi Auriemma Applications: Ghost Recon Advanced Warfighter Ghost Recon Advanced Warfighter 2 http://ghostrecon.us.ubi.com/graw2/ Versions: GRAW = 1.35 GRAW2 = 1.05 Platforms: Windows Bugs: A interger overflow B Array indexing overflow Exploitation:...

Mozilla Firefox ConstructFrame With Floating First-letter Memory Corruption (CVE-2009-2462)

Mozilla Firefox is a web browser developed by Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions of HTML, XML, XUL, JavaScript, various graphics formats, and so on. The browser runs on the Windows,...

Microsoft Office Publisher Invalid Memory Reference (MS08-012; CVE-2008-0102)

Microsoft Publisher is an application that allows users to design, layout, and format documents destined to be published in print, on the web, and various other formats. The main use of the application is in publishing brochures, advertisements, and other documents that require a greater degree o...

Memory corruption

The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a fatal error during decoding of a JPEG2000 aka JPX header, which allows remote attackers to cause a denial of service memory corruption and application crash or possibly...

Mandriva Update for ia_ora-gnome MDKA-2007:125 (ia_ora-gnome)

Check for the Version of iaora-gnome OpenVAS Vulnerability Test Mandriva Update for iaora-gnome MDKA-2007:125 iaora-gnome Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

OpenSSL: Denial of service

Background OpenSSL is an Open Source toolkit implementing the Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 as well as a general purpose cryptography library. Description The ASN1STRINGprintex function does not properly check the provided length of a BMPString or...

Authentication flaw

The ASN1STRINGprintex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service invalid memory access and application crash via vectors that trigger printing of a 1 BMPString or 2 UniversalString with an invalid encoded length...

CVE-2009-0590

The ASN1STRINGprintex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service invalid memory access and application crash via vectors that trigger printing of a 1 BMPString or 2 UniversalString with an invalid encoded length...

CVE-2009-0590

The ASN1STRINGprintex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service invalid memory access and application crash via vectors that trigger printing of a 1 BMPString or 2 UniversalString with an invalid encoded length...

CVE-2009-0590

OpenSSL vulnerability CVE-2009-0590 affects the ASN1_STRING_print_ex path for BMPString/UniversalString lengths, enabling a remote attacker to trigger invalid memory access and crash the application (DoS). The issue is present in OpenSSL builds prior to 0.9.8k. Public advisories and security bull...

Vulnerability in OpenSSL CVE-2009-0789

When a malformed ASN1 structure is received it’s contents are freed up and zeroed and an error condition returned. On a small number of platforms where sizeoflong sizeofvoid for example WIN64 this can cause an invalid memory access later resulting in a crash when some invalid structures are read,...

CVE-2009-0756

The JBIG2Stream::readSymbolDictSeg function in Poppler before 0.10.4 allows remote attackers to cause a denial of service crash via a PDF file that triggers a parsing error, which is not properly handled by JBIG2SymbolDict::JBIG2SymbolDict and triggers an invalid memory dereference...

CVE-2009-0756

The JBIG2Stream::readSymbolDictSeg function in Poppler before 0.10.4 allows remote attackers to cause a denial of service crash via a PDF file that triggers a parsing error, which is not properly handled by JBIG2SymbolDict::JBIG2SymbolDict and triggers an invalid memory dereference...

CVE-2009-0756: Undefined Security Weakness

The JBIG2Stream::readSymbolDictSeg function in Poppler before 0.10.4 allows remote attackers to cause a denial of service crash via a PDF file that triggers a parsing error, which is not properly handled by JBIG2SymbolDict::JBIG2SymbolDict and triggers an invalid memory dereference...

Hex Workshop v6 (ColorMap files .cmap) Invalid Memory Reference PoC

No description provided by source. !/usr/bin/perl -w Hex Workshop v6 "ColorMap files .cmap" Invalid Memory Reference Crash POC Discovred by : DATASNIPER for more information vist my blog:http://datasniper.arab4services.net/ the Exploit it's very hard to implemented,if we can make the "reference"...

Hex Workshop v6 (ColorMap files .cmap) Invalid Memory Reference PoC

Exploit for unknown platform in category dos / poc =================================================================== Hex Workshop v6 ColorMap files .cmap Invalid Memory Reference PoC =================================================================== !/usr/bin/perl -w Hex Workshop v6 "ColorMap...

Hex Workshop 6.0 - .cmap Invalid Memory Reference (PoC)

Hex Workshop 6.0 - .cmap Invalid Memory Reference PoC !/usr/bin/perl -w Hex Workshop v6 "ColorMap files .cmap" Invalid Memory Reference Crash POC Discovred by : DATASNIPER for more information vist my blog:http://datasniper.arab4services.net/ the Exploit it's very hard to implemented,if we can ma...

Hex Workshop 6.0 - '.cmap' Invalid Memory Reference (PoC)

!/usr/bin/perl -w Hex Workshop v6 "ColorMap files .cmap" Invalid Memory Reference Crash POC Discovred by : DATASNIPER for more information vist my blog:http://datasniper.arab4services.net/ the Exploit it's very hard to implemented,if we can make the "reference" point to valid memory location...

ClamAV < 0.94 Multiple Vulnerabilities

According to its version, the clamd antivirus daemon on the remote host is earlier than 0.94. Such versions are affected by one or more of the following issues : - A segmentation fault can occur when processing corrupted LZH files. Bug 1052 - Invalid memory access errors in 'libclamav/chmunpack.c...