CVE-2013-1998

Multiple buffer overflows in X.org libXi 1.7.1 and earlier allow X servers to cause a denial of service crash and possibly execute arbitrary code via crafted length or index values to the 1 XGetDeviceButtonMapping, 2 XIPassiveGrabDevice, and 3 XQueryDeviceState functions...

Easy LAN Folder Share Version 3.2.0.100 - Buffer Overflow

Exploit for windows platform in category dos / poc Exploit Title: Easy LAN Folder Share Version 3.2.0.100 Buffer Overflow vulnerabilitySEH Date: 14-06-2013 Exploit Author: ariarat Vendor Homepage: http://www.mostgear.com Software Link:...

Apple Quicktime 7 Invalid Atom Length Buffer Overflow

This module exploits a vulnerability found in Apple Quicktime. The flaw is triggered when Quicktime fails to properly handle the data length for certain atoms such as 'rdrf' or 'dref' in the Alis record, which may result a buffer overflow by loading a specially crafted .mov file, and allows...

Asterisk SIP SDP Buffer Overflow (AST-2013-001)

According to the version in its SIP banner, the version of Asterisk running on the remote host is potentially affected by a buffer overflow vulnerability related to SIP SDP headers and h264 video handling. This error could allow execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network...

Hanso Player 2.1.0 - '.m3u' Buffer Overflow

!/usr/bin/python Exploit Title:Buffer Overflow Vulnerability Hanso Player version 2.1.0 Download link :www.hansotools.com/downloads/hanso-player-setup.exe Author: metacom RST version: 2.1.0 Category: poc Tested on: windows 7 German f=open"fuzzzzz.m3u","w" print "Creating expoit." junk="\x41" 5000...

VulnCheck KEV: CVE-2012-5054

Adobe Flash Player contains an integer overflow vulnerability that allows remote attackers to execute code via malformed arguments...

Fedora 17 : OpenImageIO-1.0.11-2.fc17 / gdal-1.9.1-14.fc17.1 / leptonica-1.69-5.fc17 / etc (2013-1473)

Security libwebp release, where an integer overflow allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via a crafted WebP image. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Foxit Advanced PDF Editor Buffer Overflow Vulnerability

The host is installed with Foxit Advanced PDF Editor and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbfoxitadvancedpdfeditorbofvuln.nasl 6086 2017-05-09 09:03:30Z teissa $ Foxit Advanced PDF Editor Buffer Overflow Vulnerability Authors: Arun Kallavi Copyright:...

AIX 6.1 TL 1 : qoslist (IZ71869)

There is a buffer overflow vulnerability in the qoslist command. A locally authenticated attacker can exploit this vulnerability if they have they have been assigned the aix.network.status or aix.network.config.no role-based access control authorizations. The successful exploitation of this...

AIX 5.3 TL 9 : libtt (IZ52846)

There is a buffer overflow vulnerability in the ToolTalk library libtt.a. A remote attacker can exploit this vulnerability when the rpc.ttdbserver is enabled in /etc/inetd.conf. The successful exploitation of this vulnerability allows a remote attacker to execute arbitrary code as the root user...

AIX 5.3 TL 10 : ftpd (IZ83274)

There is a buffer overflow vulnerability in the ftp server. By issuing an overly long NLST command, an attacker may cause a buffer overflow. The successful exploitation of this vulnerability allows a remote attacker to get the DES encrypted user hashes off the server if FTP is configured to allow...

Adobe Flash Player Buffer Overflow Vulnerability (Mac OS X)

This host is installed with Adobe Flash Player and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbadobeprdtsbofvulnjan13macosx.nasl 6093 2017-05-10 09:03:18Z teissa $ Adobe Flash Player Buffer Overflow Vulnerability Mac OS X Authors: Antu Sanadi Copyright: Copyright ...

hplip3 security and bug fix update

3.9.8-15 - Another D-Bus fix, part of bug 501834. 3.9.8-14 - Create debugging files securely CVE-2011-2722, bug 725830. 3.9.8-13 - Several parallel-install fixes bug 501834. 3.9.8-12 - Applied patch to fix CVE-2010-4267, remote stack overflow vulnerability bug 662740...

IBM Cognos tm1admsd.exe Overflow Vulnerability

This Metasploit module exploits a stack buffer overflow in IBM Cognos Analytic Server Admin service. The vulnerability exists in the tm1admsd.exe component, due to a dangerous copy of user controlled data to the stack, via memcpy, without validating the supplied length and data. The module has be...

IBM Lotus QuickR qp2 - ActiveX Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 HttpClients::IE,...

LibreOffice Graphic Object Loading Buffer Overflow Vulnerability (Windows)

This host is installed with LibreOffice and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gblibreofficegraphicobjectbofvulnwin.nasl 5931 2017-04-11 09:02:04Z teissa $ LibreOffice Graphic Object Loading Buffer Overflow Vulnerability Windows Authors: Rachana Shetty...

Microsoft Internet Explorer 9.x <= Remote Stack Overflow PoC

Exploit for windows platform in category dos / poc ---------------------------------------------------------------------- Microsoft Internet Explorer 9.x Vendor: Microsoft Internet Explorer 9.x and below Description: The application is prone to a remote stack overflow vulnerability. Successful...

Quick-to-play player playlist file overflow-vulnerability warning-the black bar safety net

Processing the playlist file, in somewhere again quoting the file name there is no limit to the length and resulting overflow Version: ! ? wpl version="1.0"?& gt; smil head meta name="Generator" content="Nothing is true"/ titletest/title /head body seq media src="AAA...... AAAACRAAAAAAAAAA. wma"/...

CVE-2012-6056

Integer overflow in the dissectsackchunk function in epan/dissectors/packet-sctp.c in the SCTP dissector in Wireshark 1.8.x before 1.8.4 allows remote attackers to cause a denial of service infinite loop via a crafted Duplicate TSN count...

BlazeVideo HDTV Player Pro 6.6 Filename Handling

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "BlazeVideo HDTV...