blenny

Blenny 는 실행 파일의 아이콘 안에 실행 가능한 페이로드 데이터를 숨기는 Windows용 개념 증명PoC 페이로드 난독화 도구입니다. 이름은 검치 블레니에서 따왔으며, 이 물고기는 청소 물고기의 행동과 모습을 흉내 내어 무심한 물고기를 잡아먹습니다. 왜? 정확한 경위는 기억나지 않지만, retr0id@DavidBuchanan314라는 해커가 실행 파일의 아이콘 안에 페이로드를 숨기는 아이디어를 제기했습니다. PNG 파일의 다양한 특성과 Windows 아이콘 파일이 내부에 PNG 데이터를 포함할 수 있다는 점 덕분에, 이...

EUVD-2010-1661

Malware in sbrugna...

laZzzy - Shellcode Loader, Developed Using Different Open-Source Libraries, That Demonstrates Different Execution Techniques

laZzzy is a shellcode loader that demonstrates different execution techniques commonly employed by malware. laZzzy was developed using different open-source header-only libraries. Features Direct syscalls and native Nt functions not all functions but most Import Address Table IAT evasion Encrypte...

[ MDVSA-2010:110 ] clamav

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:110 http://www.mandriva.com/security/ Package : clamav Date : May 27, 2010 Affected: 2008.0, 2009.0, Corporate 4.0, Enterprise Server 5.0 Problem Description: Multiple vulnerabilities was discovered and fixe...

Mandriva Linux Security Advisory : clamav (MDVSA-2010:110)

Multiple vulnerabilities was discovered and fixed in clamav : The clipdf function in libclamav/pdf.c in ClamAV before 0.96.1 allows remote attackers to cause a denial of service crash via a malformed PDF file, related to an inconsistency in the calculated stream length and the real stream length...

Mandriva Update for clamav MDVSA-2010:110 (clamav)

Check for the Version of clamav OpenVAS Vulnerability Test Mandriva Update for clamav MDVSA-2010:110 clamav Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

CVE-2010-1640

Off-by-one error in the parseicon function in libclamav/peicons.c in ClamAV 0.96 allows remote attackers to cause a denial of service crash via a crafted PE icon that triggers an out-of-bounds read, related to improper rounding during scaling...

CVE-2010-1640

Off-by-one error in the parseicon function in libclamav/peicons.c in ClamAV 0.96 allows remote attackers to cause a denial of service crash via a crafted PE icon that triggers an out-of-bounds read, related to improper rounding during scaling...

CVE-2010-1640

Off-by-one error in the parseicon function in libclamav/peicons.c in ClamAV 0.96 allows remote attackers to cause a denial of service crash via a crafted PE icon that triggers an out-of-bounds read, related to improper rounding during scaling...

DEBIAN-CVE-2010-1640

Off-by-one error in the parseicon function in libclamav/peicons.c in ClamAV 0.96 allows remote attackers to cause a denial of service crash via a crafted PE icon that triggers an out-of-bounds read, related to improper rounding during scaling...

Out-of-bounds

Off-by-one error in the parseicon function in libclamav/peicons.c in ClamAV 0.96 allows remote attackers to cause a denial of service crash via a crafted PE icon that triggers an out-of-bounds read, related to improper rounding during scaling...

CVE-2010-1640

CVE-2010-1640 is an off-by-one/read out-of-bounds vulnerability in ClamAV 0.96 (parseicon in libclamav/pe_icons.c) that can cause a remote denial of service via a crafted PE icon. Connected advisories and public feeds corroborate the issue as a remote DoS, tied to improper rounding during scaling...

CVE-2010-1640

Off-by-one error in the parseicon function in libclamav/peicons.c in ClamAV 0.96 allows remote attackers to cause a denial of service crash via a crafted PE icon that triggers an out-of-bounds read, related to improper rounding during scaling...

CVE-2010-1640

Off-by-one error in the parseicon function in libclamav/peicons.c in ClamAV 0.96 allows remote attackers to cause a denial of service crash via a crafted PE icon that triggers an out-of-bounds read, related to improper rounding during scaling...