TFM MMPlayer (m3u/ppl File) Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'TFM MMPlayer...

Guitar Pro 6.1.1 r10791 (.gpx) Crash POC

Exploit for windows platform in category dos / poc !/usr/bin/python --------------------------------------------------------- Guitar Pro 6.1.1 r10791 .gpx Crash POC found by condis Date : 01 May 2012 AD Tested on : Windows XP Professional SP3 PL Description : Each load of malformated file into th...

CyberLink Power2Go - name Attribute (p2g) Stack Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'CyberLink Power2Go name attribute p2g...

Passport PC To Host Malformed .zws file Memory Corruption Vulnerability

Exploit for windows platform in category dos / poc Exploit Title: Passport PC To Host Malformed .zws file Memory Corruption Date: 3-3-12 Author: Silent Dream Software Link: http://www.zephyrcorp.com/terminal-emulation/ Version: Latest 2011-506-S Tested on: Windows XP SP3 my $file =...

Bugbear FlatOut 2005 - .bed File Buffer Overflow

Bugbear FlatOut 2005 - .bed File Buffer Overflow Exploit Title: FlatOut Malformed .bed file Buffer Overflow Date: 11-29-11 Author: Silent Dream Software Link: http://www.gog.com/en/gamecard/flatout Version: Latest Tested on: Windows 7 Tested on GOG.com copy of FlatOut. Exception offset = 61616161...

Bugbear FlatOut 2005 Malformed .bed file Buffer Overflow Vulnerability

Exploit for windows platform in category dos / poc Exploit Title: FlatOut Malformed .bed file Buffer Overflow Date: 11-29-11 Author: Silent Dream Software Link: http://www.gog.com/en/gamecard/flatout Version: Latest Tested on: Windows 7 Tested on GOG.com copy of FlatOut. Exception offset = 616161...

Kool Media Converter 2.6.0 - Denial of Service

!/usr/bin/env python Exploit Title: Kool Media Converter v2.6.0 DOS Date: 10/10/2011 Author: swami E-Mail: flaviodotbaldassiatgmaildotcom Software Link: http://www.bestwebsharing.com/downloads/kool-media-converter-setup.exe Version: 2.6.0 Tested on: Windows XP SP3 ENG --- From Vendor Website Kool...

CVE-2011-4102

Heap-based buffer overflow in the erfreadheader function in wiretap/erf.c in the ERF file parser in Wireshark 1.4.0 through 1.4.9 and 1.6.x before 1.6.3 allows remote attackers to cause a denial of service application crash via a malformed file...

DEBIAN-CVE-2011-4102

Heap-based buffer overflow in the erfreadheader function in wiretap/erf.c in the ERF file parser in Wireshark 1.4.0 through 1.4.9 and 1.6.x before 1.6.3 allows remote attackers to cause a denial of service application crash via a malformed file...

CVE-2011-4102

Heap-based buffer overflow in the erfreadheader function in wiretap/erf.c in the ERF file parser in Wireshark 1.4.0 through 1.4.9 and 1.6.x before 1.6.3 allows remote attackers to cause a denial of service application crash via a malformed file...

BlueZone Malformed .zft file Local Denial of Service

Exploit for windows platform in category dos / poc !/usr/bin/perl -w Exploit Title: BlueZone Desktop Malformed .zft ffeil Local Denial of Service Date: 24-10-11 Author: Iolo Morganwg Version: BlueZone Secure FTP v5.2C1 Build 1469 Download:...

BlueZone Desktop Denial Of Service

Exploit Title: BlueZone Desktop Malformed .zap file Local Denial of Service Date: 10-15-11 Author: Silent Dream Software Link: http://www.rocketsoftware.com/bluezone/downloads/desktop-free-trial Version: Latest Tested on: Windows XP SP3 To trigger: Run this script, double click file to open with...

Internet Explorer vulnerable to cross-site scripting

Overview Internet Explorer contains a cross-site scripting vulnerability. Internet Explorer contains a cross-site scripting vulnerability due to the processing of malformed file names. Keigo Yamazaki of LAC Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer und...

JVN#26408023: Internet Explorer vulnerable to cross-site scripting

Internet Explorer contains a cross-site scripting vulnerability due to the processing of malformed file names. Impact An arbitrary script may be executed on the user's web browser when the setting for "Use folder view for FTP sites" is turned off. Note that this setting is turned on by default...

Integer overflow

Integer underflow in the visualread function in wiretap/visual.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service application crash via a malformed Visual Networks file that triggers a heap-based buffer over-read...

Rsync Multiple Denial of Service Vulnerabilities - Windows

Rsync is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Graphics Filters TIFF Image Converter Heap Overflow (MS10-105; CVE-2010-3947)

Tagged Image File Format TIFF is a container format for storing images, including photographs and line art. A remote code execution vulnerability has been discovered in the way that Microsoft Office parses specially crafted TIFF image files. The vulnerability is due to an error in Microsoft Offic...

Microsoft Office PowerPoint Legacy Files (CVE-2010-2572)

Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A remote attacker could exploit this issue via a malformed PowerPoint file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target system. The vulnerability is due ...

CVE-2010-2998

Array index error in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.0.1 allows remote attackers to execute arbitrary code via malformed sample data in a RealMedia .IVR file, related to a "malformed IVR pointer index" issue...

CVE-2010-2881

IML32.dll in Adobe Shockwave Player before 11.5.8.612 does not properly parse .dir files, which allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a malformed file containing an invalid value, as demonstrated by a value at position 0x24C0 of a...