CVE-2011-1761

Multiple stack-based buffer overflows in the 1 abcnewmacro and 2 abcnewumacro functions in src/loadabc.cpp in libmodplug before 0.8.8.3 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted ABC file. NOTE: some of these details are obtained fr...

Sielco Sistemi Winlog 2.07.14 Buffer Overflow

Exploit for windows platform in category dos / poc !/usr/bin/ruby Exploit Title: Sielco Sistemi Winlog Buffer Overflow = v2.07.14 Date: 05.06.2012 Exploit Author: m1k3 Vendor Homepage: http://www.sielcosistemi.com/en/download/public/winloglite.html Software Link:...

CVE-2012-1173

Multiple integer overflows in tiffgetimage.c in LibTIFF 3.9.4 allow remote attackers to execute arbitrary code via a crafted tile size in a TIFF file, which is not properly handled by the 1 gtTileSeparate or 2 gtStripSeparate function, leading to a heap-based buffer overflow...

Fedora 16 : libreoffice-3.4.5.2-15.fc16 (2012-8042)

CVE-2012-1149 An integer overflow vulnerability in LibreOffice graphic loading code Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Adobe Flash Professional JPG Object Processing BOF Vulnerability (Windows)

This host is installed with Adobe Flash Professional and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbadobeflashprofessionaljpgobjbofvulnwin.nasl 6032 2017-04-26 09:02:50Z teissa $ Adobe Flash Professional JPG Object Processing BOF Vulnerability Windows Authors:...

Wireshark LDSS Dissector Buffer Overflow Vulnerability (Mac OS X)

This host is installed with Wireshark and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbwiresharkldssdissectorbofvulnmacosx.nasl 6018 2017-04-24 09:02:24Z teissa $ Wireshark LDSS Dissector Buffer Overflow Vulnerability Mac OS X Authors: Rachana Shetty Copyright:...

nginx 'ngx_http_mp4_module.c' Buffer Overflow Vulnerability

nginx is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of- service conditions. nginx versions 1.1....

CVE-2012-0043

Buffer overflow in the reassemblemessage function in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a series of fragmented RLC...

Dell Webcam CrazyTalk ActiveX Remote Overflow

The remote Windows host contains an install of the CrazyTalk ActiveX control, bundled with Dell Webcam software, that reportedly fails to sanitize input to the 'BackImage', 'ScriptName', 'ModelName', and 'SRC' properties, which could be abused to trigger a buffer overflow. By tricking a user into...

Dell Webcam Software Bundled - ActiveX Remote Buffer Overflow

Dell Webcam Software Bundled - ActiveX Remote Buffer Overflow Dell Webcam Software Bundled ActiveX Control CrazyTalk4Native.dll sprintf Remote Buffer Overflow Vulnerability Tested against: Microsoft Windows Vista SP2 Microsoft Windows XP SP3 Microsoft Windows 2003 R2 SP2 Internet Explorer 7/8/9...

RM Downloader 3.1.3.3.2010.06.26 Buffer Overflow

require 'msf/core' class Metasploit3 'RM Downloader Version 3.1.3.3.2010.06.26 .m3u Buffer Overflow MSF', 'Description' = %q RM Downloader Version 3.1.3.3.2010.06.26 has buffer overflow vuln. we will create file. File type be m3u. File name is exp.m3u if we open exp.m3u whit RM Downloader Version...

VMSA-2012-0005 : VMware vCenter Server, Orchestrator, Update Manager, vShield, vSphere Client, Workstation, Player, ESXi, and ESX address several security issues

a. VMware Tools Display Driver Privilege Escalation The VMware XPDM and WDDM display drivers contain buffer overflow vulnerabilities and the XPDM display driver does not properly check for NULL pointers. Exploitation of these issues may lead to local privilege escalation on Windows-based Guest...

FlashFXP v4.1.8.1701 - Buffer Overflow Vulnerability

Document Title: =============== FlashFXP v4.1.8.1701 - Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=462 Release Date: ============= 2012-03-01 Vulnerability Laboratory ID VL-ID: ==================================== 462...

Fedora 15 : libpng10-1.0.57-1.fc15 (2012-2008)

This update addresses an integer overflow in the libpng10 PNG library, which could lead to the execution of arbitrary code if a malformed image is processed. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

CVE-2012-0864

Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other versions allows context-dependent attackers to bypass the FORTIFYSOURCE protection mechanism, conduct format string attacks, and write to arbitrary memory via a large number of arguments...

HP OpenView Network Node Manager OVBuildPath Overflow

Added: 02/20/2012 CVE: CVE-2011-3167 BID: 50471 OSVDB: 76775 Background HP OpenView Network Node Manager NNM is a network monitoring solution based on SNMP. Problem User supplied data from the NNM web interface is passed to the OVBuildPath function in ov.dll. This function contains a stack overfl...

CVE-2012-0150

CVE-2012-0150 describes a buffer overflow in the C runtime library (msvcrt.dll) used by multiple Windows versions (Vista SP2, Server 2008 SP2/R2, Windows 7/7 SP1). The vulnerability arises when parsing a crafted media file, copying a version string into a fixed-length stack buffer, allowing remot...

MS12-004 midiOutPlayNextPolyEvent Heap Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "MS12-004...

Ubuntu: Security Advisory (USN-1263-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for openjdk-6 USN-1263-2

Ubuntu Update for Linux kernel vulnerabilities USN-1263-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN12632.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for openjdk-6 USN-1263-2 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net Th...