875 matches found
Microsoft Windows MovieMaker memory corruption
Memory corruption on project file parsing...
CVE-2010-0265
Buffer overflow in Microsoft Windows Movie Maker 2.1, 2.6, and 6.0, and Microsoft Producer 2003, allows remote attackers to execute arbitrary code via a crafted project .MSWMM file, aka "Movie Maker and Producer Buffer Overflow Vulnerability."...
Stack overflow
Stack-based buffer overflow in Ideal Administration 2009 9.7.1, and possibly other versions, allows remote attackers to execute arbitrary code via a long Computer value in an .ipj project file...
CVE-2009-4265
Stack-based buffer overflow in Ideal Administration 2009 9.7.1, and possibly other versions, allows remote attackers to execute arbitrary code via a long Computer value in an .ipj project file...
Microsoft Patches Critical IE, Windows Vulnerabilities
Microsoft today shipped six bulletins with patches for a total of 12 documented security vulnerabilities in a wide range of widely deployed software products. Three of the six bulletins are rated “critical,” Microsoft’s highest severity rating. The most serious issues affect the company’s Interne...
CVE-2009-1608
Multiple buffer overflows in Microchip MPLAB IDE 8.30 and possibly earlier versions allow user-assisted remote attackers to execute arbitrary code via a .MCP project file with long 1 FILEINFO, 2 CATFILTERS, and possibly other fields...
Mandriva Linux Security Advisory : clamav (MDVSA-2008:229)
An off-by-one error was found in ClamAV versions prior to 0.94.1 that could allow remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted VBA project file CVE-2008-5050. Other bugs have also been corrected in 0.94.1 which is being provided with this update...
Mandriva Update for clamav MDVSA-2008:229 (clamav)
Check for the Version of clamav OpenVAS Vulnerability Test Mandriva Update for clamav MDVSA-2008:229 clamav Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
Abee Chm eBook Creator 2.11 - Filename Local Stack Overflow
Abee Chm eBook Creator 2.11 - Filename Local Stack Overflow exploit.py Abee Chm eBook Creator 2.11 Stack overflow Exploit By:Encrypt3d.M!nd it's the same exploit i wrote for chm maker,everything is the same!! but there's a lil note that when importing 'DevilInside.chmprj' a message will pops up a...
CVE-2009-1040
Buffer overflow in WinAsm Studio 5.1.5.0 allows user-assisted remote attackers to execute arbitrary code via a crafted project .wap file...
Buffer overflow
Buffer overflow in WinAsm Studio 5.1.5.0 allows user-assisted remote attackers to execute arbitrary code via a crafted project .wap file...
CVE-2009-1040
Buffer overflow in WinAsm Studio 5.1.5.0 allows user-assisted remote attackers to execute arbitrary code via a crafted project .wap file...
CVE-2009-1040
CVE-2009-1040 affects WinAsm Studio 5.1.5.0 and is described in OpenVAS/NVD as a buffer/heap overflow that allows user-assisted remote attackers to execute arbitrary code via a crafted project (.wap) file. The OpenVAS entry explicitly labels it as a heap overflow vulnerability. The NVD entry prov...
Audacity '.aup'项目文件解析缓冲区溢出漏洞
BUGTRAQ ID: 33160 CNCAN ID：CNCAN-2009010801 Audacity是一款数码音效处理程序。 Audacity处理'.aup'文件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 构建包含超长字符的'.aup'文件，诱使用户使用Audacity导入，可导致以应用程序权限执行任意指令。 Audacity 1.6.2 厂商解决方案 目前没有详细解决方案提供： http://audacity.sourceforge.net/ http://www.sebug.net/exploit/5573/...
RadASM .rap项目文件缓冲区溢出漏洞
BUGTRAQ ID: 32617 RadASM是一款WIN32汇编编辑器，支持MASM、TASM等多种汇编编译器。 如果用户受骗使用RadASM打开了恶意的.rap项目文件并通过Group密钥向缓冲区提供了超长输入的话，就可能触发缓冲区溢出，导致覆盖内存中存储的WindowCallProcA指针并执行任意代码。 Ketil O RadASM 2.2.1.4 Ketil O ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.radasm.com/...
radasm-hijack.txt
!/usr/bin/perl RadAsm Building poc.rap..\n"; print "- poc.rap Created have unf :\n"; win32exec - EXITFUNC=process CMD=calc.exe Size=351 Encoder=PexAlphaNum http://metasploit.com my $shellcode = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49"...
CVE-2008-5050
Off-by-one error in the getunicodename function libclamav/vbaextract.c in Clam Anti-Virus ClamAV before 0.94.1 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted VBA project file, which triggers a heap-based buffer overflow...
Heap overflow
Off-by-one error in the getunicodename function libclamav/vbaextract.c in Clam Anti-Virus ClamAV before 0.94.1 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted VBA project file, which triggers a heap-based buffer overflow...
CVE-2008-5050
Off-by-one error in the getunicodename function libclamav/vbaextract.c in Clam Anti-Virus ClamAV before 0.94.1 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted VBA project file, which triggers a heap-based buffer overflow...
ClamAV get_unicode_name() off-by-one buffer overflow
----------------------------------------------------------------- ClamAV getunicodename off-by-one buffer overflow Copyright c 2008 Moritz Jodeit [email protected] 2008/11/08 ----------------------------------------------------------------- Application details: From http://www.clamav.net/: "Clam...