1644 matches found
ClamAV AntiVirus UPX Compressed PE Executable Files Buffer Overflow (CVE-2005-2920)
A buffer overflow vulnerability has been reported in ClamAV anti-virus product...
Microsoft Windows Signature Validation Remote Code Execution (MS12-024; CVE-2012-0151)
A remote code execution vulnerability has been reported in Windows Authenticode Signature Verification function used for portable executable PE files. The vulnerability is due to an error in the way the Authenticode Signature Verification function validates the file digest of a specially crafted ...
CVE-2012-0151
The Authenticode Signature Verification function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly validate the digest of a signed portable executable P...
KLA10170 LPE vulnerability in Emacs
An untrusted path vulnerability was found in GNU Emacs. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally via a specially designed Lisp expression. Original advisories - Exploitation Related products GNU-Emacs CVE list CVE-2012-0035...
Portable Executable (PE) 16-bit File
A buffer overflow vulnerability has been reported in Microsoft Windows kernel...
Juniper Junos ICMP Ping 'composite next-hop' Remote DoS (PSN-2011-07-297)
According to its self-reported version number, the remote Juniper router is running a version of Junos that is affected by a denial of service vulnerability. Sending an ICMP ping with the record-route or timestamp options can crash an L3VPN PE router with either of the following configurations : ...
Window AutoPwn (WINAUTOPWN) - Auto Hacking/shell Gaining Tool
Window AutoPwn WINAUTOPWN - Auto Hacking/shell Gaining Tool Autohack your targets with least possible interaction. winAUTOPWN Features : - Above 500 vulnerability exploits for softwares applications. - Custom-compiled executables of famous and effective exploits alongwith a few original...
Smiasm - Reverse engineering framework
Smiasm - Reverse engineering framework What is Miasm? Miasm is a a free and open source GPLv2 reverse engineering framework. Miasm aims at analyzing/modifying/generating binary programs. Here is a non exhausting list of features: opening/modifying/generating PE/ELF 32/64 le/be using Elfesteem...
Only modification code [ASM KEYGENME#1]
Решил выложить продолжение своей первой статьи, которая находить тут. В прошлой статье «Реверсинг ASM KEYGENME1 «, в самом начале пропустил момент, с само-модификацией кода тогда мы просто нажали F9, и программа все сделала сама. Сейчас подробней разберем тот фрагмент кода, а лучше напишем...
Design/Logic Flaw
Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when running on FreeBSD or HP-UX, does not properly perform cast operations, which causes syslog-ng to use a default value of -1 to create log files with insecure permissions 07777, which allows local users to read and write to these log files...
PT-2011-2282
Name of the Vulnerable Software and Affected Versions Balabit syslog-ng versions 2.0, 3.0, 3.1, 3.2 OSE and PE Description The issue is related to improper cast operations when running on certain operating systems, resulting in the creation of log files with insecure permissions. This allows loca...
ClamAV antivirus multiple security vulnerabilities
Memory corruption on PDF and PE parsing...
Plugins Dll Hijacking Exploit
Exploit for windows platform in category local exploits ============================= Plugins Dll Hijacking Exploit ============================= Exploit Title: Dll Hijacking Exploit Application: Application plugin support Date: 07 Sept 2010 Author: STRELiTZIA Version: %Applications list% Tested...
Cisco IOS MPLS VPN May Leak Information - Cisco Systems
Devices running Cisco IOS versions 12.0S, 12.2, 12.3 or 12.4 and configured for Multiprotocol Label Switching MPLS Virtual Private Networks VPNs or VPN Routing and Forwarding Lite VRF Lite and using Border Gateway Protocol BGP between Customer Edge CE and Provider Edge PE devices may permit...
CVE-2010-2840
The Presence Engine PE service in Cisco Unified Presence 6.x before 6.07 and 7.x before 7.08 does not properly handle an erroneous Contact field in the header of a SIP SUBSCRIBE message, which allows remote attackers to cause a denial of service process failure via a malformed message, aka Bug ID...
CVE-2010-2840
Cisco CVE-2010-2840 affects the Presence Engine (PE) service in Cisco Unified Presence 6.x before 6.0(7) and 7.x before 7.0(8). A malformed SIP SUBSCRIBE header with an erroneous Contact field can cause a DoS (process failure). The issue is resolved in 6.0(7) and 7.0(8) by official fixes; no expl...
Microsoft Malware Protection Engine File Processing Denial of Service (CVE-2008-1437)
Microsoft Malware Protection Engine provides the scanning, detection and cleaning capabilities for the antivirus and antispyware clients from Microsoft. The applications that use this engine for their operation are: There exists a vulnerability in Microsoft Malware Protection Engine, which can be...
ClamAV < 0.96.1 Multiple DoS Vulnerabilities - Windows
ClamAV is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:clamav:clamav"...
[ MDVSA-2010:110 ] clamav
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:110 http://www.mandriva.com/security/ Package : clamav Date : May 27, 2010 Affected: 2008.0, 2009.0, Corporate 4.0, Enterprise Server 5.0 Problem Description: Multiple vulnerabilities was discovered and fixe...