Google Picasa v3.5 - Local Buffer Overflow Vulnerability

Document Title: =============== Google Picasa v3.5 - Local Buffer Overflow Vulnerability References Source: ==================== OSVDB-ID: 63817 http://osvdb.org/show/osvdb/63817 EDB-ID: 10489 http://www.exploit-db.com/exploits/10489/ Release Date: ============= 2011-06-17 Vulnerability Laborator...

PopScript Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: PopScript Multiple Vulnerabilities home : http://www.D99Y.com Google Dork: Do as you would be done by ; Date: 5/6/2011 Author: NassRawI Software Link: http://www.popscript.com/ 1 SQL injection...

PT-2011-1125 · Red Hat · Libvirt-Devel +5

Name of the Vulnerable Software and Affected Versions: libvirt versions prior to 0.9.0 libvirt-debuginfo versions 0.8.1 libvirt-devel versions 0.8.1 libvirt-python versions 0.8.1 libvirt-client versions 0.8.1 Description: The issue affects the libvirt package in Red Hat Enterprise Linux,...

Microsoft Fax - Cover Page Editor 5.2.3790.3959 Double-Free Memory Corruption

Microsoft Fax - Cover Page Editor 5.2.3790.3959 Double-Free Memory Corruption Source: http://aluigi.org/adv/fxscover1-adv.txt Luigi Auriemma Application: Microsoft Fax Cover Page Editor http://windows.microsoft.com/en-US/windows-vista/Create-or-edit-a-fax-cover-page Versions: = 5.2.3790.3959...

KLA10037 ACE vulnerability in Adobe InDesign

A critical vulnerability was found in Adobe InDesign and InCopy. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited locally and possibly remotely at a point related to an untrusted path via DLL hijacking. Original advisories Adobe...

Oracle Virtual Server Agent Command Injection

Exploit for unix platform in category remote exploits ============================================= Oracle Virtual Server Agent Command Injection ============================================= 1. Advisory Information Advisory ID: BONSAI-2010-0109 Date published: 2010-10-13 Vendors contacted: Oracl...

KLA10177 ACE vulnerability in Google Earth

An untrusted path vulnerability was found in Google Earth. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited locally via specially designed files. Original advisories - Exploitation Public exploits exist for this vulnerability. Relate...

PT-2010-1037 · Linbit +2 · Drbd-Kmp-Default +2

Name of the Vulnerable Software and Affected Versions: drbd-kmp-default versions affected versions not specified Linux kernel versions prior to 2.6.27.53 Linux kernel versions 2.6.32.x prior to 2.6.32.21 Linux kernel versions 2.6.34.x prior to 2.6.34.6 Linux kernel versions 2.6.35.x prior to...

CORE-2009-0803: Virtual PC Hypervisor Memory Protection Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Virtual PC Hypervisor Memory Protection Vulnerability 1. Advisory Information Title: Virtual PC Hypervisor Memory Protection Vulnerability Advisory Id: CORE-2009-0803...

RadASM - '.rap' file Local Buffer Overflow

include include include void genrandomchar,const int; void printchar; unsigned int getFsizeFILE,char; void buildfilechar; int makebindshellunsigned short; void help; void printshell; DWORD SearchStreamconst char ,sizet,const char ,sizet; DWORD GetNtosDelta VOID; DWORD GetOSVersion VOID; DWORD...

Core Security Technologies Advisory 2009.0625

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Internet Explorer Dynamic OBJECT tag and URLMON sniffing vulnerabilities 1. Advisory Information Title: Internet Explorer Dynamic OBJECT tag and URLMON sniffing...

[Suspected Spam][oCERT-2009-019] Ganeti path sanitization errors

2009-019 Ganeti path sanitization errors Description: Ganeti, an open source virtualisation manager, suffers from an input validation bug that poses a security risk. The vulnerability applies to the commands submitted, either locally via gnt- commands or remotely via the HTTP API, to the machine...

KLA10108 DoS vulnerability in Cisco VPN client

Improper error handling was found in Cisco VPN Client. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited locally at a point related to the cvpnd service via cvpnd.exe manipulations. Original advisories Cisco bulletin Related products...

Autodesk SoftImage Scene TOC Arbitrary Command Execution

Advisory ID Internal CORE-2009-0908 1. Advisory Information Title: Autodesk SoftImage Scene TOC Arbitrary Command Execution Advisory Id: CORE-2009-0908 Advisory URL:http://www.coresecurity.com/content/softimage-arbitrary-command-execution Date published: 2009-11-23 Date of last update: 2009-11-20...

Websense Email Security - Denial of Service

Security Advisory NSOADV-2009-002 Title: Websense Email Security Web Administrator DoS Severity: Low Advisory ID: NSOADV-2009-002 Found Date: 28.09.2009 Date Reported: 01.10.2009 Release Date: 20.10.2009 Author: Nikolas Sotiriu Mail: nso-research at sotiriu.de URL:...

A2 Player Pro v2.51 - Stack Overflow Vulnerability (m3u)

Document Title: =============== A2 Player Pro v2.51 - Stack Overflow Vulnerability m3u Release Date: ============= 2009-07-14 Vulnerability Laboratory ID VL-ID: ==================================== 2 Product & Service Introduction: =============================== Audio Player Abstract Advisory...

iDefense Security Advisory 05.14.09: Apple Mac OS X xnu Kernel workqueue_additem/workqueue_removeitem Index Validation Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDefense Security Advisory 05.12.09 http://labs.idefense.com/intelligence/vulnerabilities/ May 12, 2009 I. BACKGROUND Mac OS X is a computer operating systems available from Apple Inc. OS X is the tenth major version of Apple's operating system for...

Amaya 11.1 XHTML Buffer Overflow

=cicatriz ==advisories= / / / / // / / // / o / / .-/ =Amaya 11.1 XHTML Parser Buffer Overflow==/= == =Advisory & Vulnerability Information=== Title: Amaya 11.1 XHTML Parser Buffer Overflow Advisory ID: VUDO-2009-0104 Advisory URL: http://research.voodoo-labs.org/advisories/2 Date founded:...

PT-2009-1060 · Linux +1 · Kpartx +3

Name of the Vulnerable Software and Affected Versions: device-mapper-multipath versions 0.4.5 through 0.4.8 multipath-tools versions prior to 0.4.8-r1 kpartx version 0.4.7 Description: The issue concerns the Device Mapper multipathing driver, which uses world-writable permissions for the socket...

KLA10064 DoS vulnerability in SlySoft

An improper buffer validation vulnerability was found in SlySoft products. By exploiting this vulnerability malicious users can cause a denial of service. This vulnerability can be exploited locally at a point related to ElbyCDIO.sys via a specially designed IOCTL call. Original advisories CloneC...