693 matches found
About shellcodes
In this post we have documented a beginners introduction to shellcode writing. We go from zero to a super simple shellcode using tools you may find already installed in any serious operating system. If you are looking for a digested and more mature way of generating shellcode you should check...
Immunity Canvas: MS12_043
Name| ms12043 ---|--- CVE| CVE-2012-1889 Exploit Pack| CANVAS Description| MS12-043 Microsoft Internet Explorer XML Core Services Uninitialized Memory Corruption Notes| CVE Name: CVE-2012-1889 VENDOR: Microsoft Notes: This exploit takes advantage of an uninitialized variable vulnerability as...
CVE-2012-1186
Integer overflow in the SyncImageProfiles function in profile.c in ImageMagick 6.7.5-8 and earlier allows remote attackers to cause a denial of service infinite loop via crafted IOP tag offsets in the IFD in an image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0248...
DEBIAN-CVE-2012-1186
Integer overflow in the SyncImageProfiles function in profile.c in ImageMagick 6.7.5-8 and earlier allows remote attackers to cause a denial of service infinite loop via crafted IOP tag offsets in the IFD in an image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0248...
Integer overflow
Integer overflow in the SyncImageProfiles function in profile.c in ImageMagick 6.7.5-8 and earlier allows remote attackers to cause a denial of service infinite loop via crafted IOP tag offsets in the IFD in an image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0248...
CVE-2012-1186
Integer overflow in the SyncImageProfiles function in profile.c in ImageMagick 6.7.5-8 and earlier allows remote attackers to cause a denial of service infinite loop via crafted IOP tag offsets in the IFD in an image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0248...
CVE-2012-1186
CVE-2012-1186 affects ImageMagick 6.7.5-8 and earlier. The issue is an integer overflow in the SyncImageProfiles function in profile.c, leading to a remote denial of service (infinite loop) when processing crafted IOP tag offsets in the IFD of an image. This vulnerability exists because of an inc...
CVE-2012-1186
Integer overflow in the SyncImageProfiles function in profile.c in ImageMagick 6.7.5-8 and earlier allows remote attackers to cause a denial of service infinite loop via crafted IOP tag offsets in the IFD in an image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0248...
rpm: incorrect handling of negated offsets in headerVerifyInfo()
The headerVerifyInfo function in lib/header.c in RPM before 4.9.1.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a negative value in a region offset of a package header, which is not properly handled in a numeric range comparison...
Remote code execution vulnerability in smbd
Description Samba versions up to 3.4.0 do not ensure that AndX offsets of the smb daemon smbd are increasing strictly monotonically. Therefore a remote code execution vulnerability exists in the smbd service. A remote attacker could use the vulnerability to launch an exploit over a network...
Kolibri-Server
Kolibri v2.0 is vulnerable to a remote buffer overflow attack. By sending a malformed HEAD request, we are able to overwrite both the return address and an SEH handler. Null bytes terminate the request though, but we are able to partially overwrite with a pointer to a POP + POP + RET instruction...
Fedora 11 : kernel-2.6.30.10-105.2.23.fc11 (2010-1804)
Security bugs: CVE-2010-0410 CVE-2010-0415 563091 Also fixes: xfs: xfsswapextents needs to handle dynamic fork offsets F12510823 Possible system lockups caused by the fix for bug 559100 in the previous updates. Note that Tenable Network Security has extracted the preceding description block...
DEBIAN-CVE-2010-2443
The OJPEGReadBufferFill function in tifojpeg.c in LibTIFF before 3.9.3 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an OJPEG image with undefined strip offsets, related to the TIFFVGetField function...
CVE-2010-2443
The OJPEGReadBufferFill function in tifojpeg.c in LibTIFF before 3.9.3 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an OJPEG image with undefined strip offsets, related to the TIFFVGetField function...
CVE-2010-2443
The OJPEGReadBufferFill function in tifojpeg.c in LibTIFF before 3.9.3 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an OJPEG image with undefined strip offsets, related to the TIFFVGetField function...
kernel: gdth: Prevent negative offsets in ioctl
Array index error in the gdthreadevent function in drivers/scsi/gdth.c in the Linux kernel before 2.6.32-rc8 allows local users to cause a denial of service or possibly gain privileges via a negative event index in an IOCTL request...
kernel: gdth: Prevent negative offsets in ioctl
Array index error in the gdthreadevent function in drivers/scsi/gdth.c in the Linux kernel before 2.6.32-rc8 allows local users to cause a denial of service or possibly gain privileges via a negative event index in an IOCTL request...
kernel: gdth: Prevent negative offsets in ioctl
Array index error in the gdthreadevent function in drivers/scsi/gdth.c in the Linux kernel before 2.6.32-rc8 allows local users to cause a denial of service or possibly gain privileges via a negative event index in an IOCTL request...
php: exif_read_data crash on corrupted JPEG files
The exifreaddata function in the Exif module in PHP before 5.2.10 allows remote attackers to cause a denial of service crash via a malformed JPEG image with invalid offset fields, a different issue than CVE-2005-3353...
wireshark: crash in the packet reassembling
The fragmentaddwork function in epan/reassemble.c in Wireshark 0.8.19 through 1.0.1 allows remote attackers to cause a denial of service crash via a series of fragmented packets with non-sequential fragmentation offset values, which lead to a buffer over-read...