Safari Webkit 3.2 Remote Memory Leak Exploit

!/usr/bin/perl safariwebkitml.pl Safari Webkit 3.2 Remote Memory Leak Exploit Jeremy Brown [email protected]/jbrownsec.blogspot.com Access violation when writing to 00000018 EIP 6B00A02B WebKit.6B00A02B LastError 00000008 ERRORNOTENOUGHMEMORY Memory leaks are common in browsers.. tested on Vis...

kernel security and bug fix update

2.4.21-58.0.0.0.1.EL - add directio support for qla drivers herb ora 6346849 - support PT Quad card ora 5751043 - io to nfs partition hangs ora 5088963 - add entropy for bnx2 nic ora 5931647 - avoid large allocation-fragmentation in MTU zab - fix clear highpage wli 2.4.21-58.EL - copyuser doesn't...

Microsoft DataGrid ActiveX Control Memory Corruption Vulnerability

Description Microsoft DataGrid ActiveX control is prone to a remote memory-corruption vulnerability. Remote attackers can exploit this issue to execute arbitrary code in the context of the application using the ActiveX control typically Internet Explorer. Successful exploits will compromise the...

Microsoft SQL Server 'sp_replwritetovarbin' Remote Memory Corruption Vulnerability

Description Microsoft SQL Server is prone to a remote memory-corruption vulnerability because it fails to properly handle user-supplied input. Authenticated attackers can exploit this issue to execute arbitrary code and completely compromise affected computers. Failed attacks will likely cause...

Trillian多个远程内存破坏漏洞

BUGTRAQ ID: 32645 Trillian是一个聊天程序，和多种即时通讯程序使用相同的接口，包括AIM、ICQ、Yahoo! Messenger、MSN Messenger和IRC。 Trillian的XML处理代码在处理畸形的XML标签时没有分配充足的空间，将其拷贝到新分配的缓冲区时可能会用攻击者提供的数据覆盖堆结构；此外XML处理代码在处理特殊格式的xml时可能会破坏内部数据结构，之后在释放这个数据结构时应用程序会多次释放单个块，这可能导致执行任意指令。...

DEBIAN-CVE-2008-4314

smbd in Samba 3.0.29 through 3.2.4 might allow remote attackers to read arbitrary memory and cause a denial of service via crafted 1 trans, 2 trans2, and 3 nttrans requests, related to a "cut&paste error" that causes an improper bounds check to be performed...

CVE-2008-4314

smbd in Samba 3.0.29 through 3.2.4 might allow remote attackers to read arbitrary memory and cause a denial of service via crafted 1 trans, 2 trans2, and 3 nttrans requests, related to a "cut&paste error" that causes an improper bounds check to be performed...

Microsoft Internet Explorer Uninitialized Object Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the underlying computer...

Novell eDirectory < 8.8 SP3 Multiple Vulnerabilities (OF, XSS, MC)

The remote host is running eDirectory, a directory service software from Novell. The installed version of Novell eDirectory is affected by multiple issues : - NDS module is affected by a heap overflow vulnerability Bugs 396819 and 396817. - Windows installs of eDirectory NDS module are affected b...

eDirectory < 8.8 SP3 Multiple Vulnerabilities

Binary data 4641.prm...

Microsoft Internet Explorer HTML Component Handling Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability that occurs when the application tries to parse a specially crafted web page. Successfully exploiting this issue would allow an attacker to execute arbitrary code in the context of the currently logged-in...

Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability that occurs when the application tries to parse a specially crafted web page. Successfully exploiting this issue would allow an attacker to execute arbitrary code in the context of the currently logged-in...

Microsoft Internet Explorer HTML Objects Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability that occurs when the application tries to parse a specially crafted web page. Successfully exploiting this issue would allow an attacker to execute arbitrary code in the context of the currently logged-in...

kernel security and bug fix update

2.6.18-92.1.10.0.1.el5 - NET Add entropy support to e1000 and bnx2 John Sobecki orabug 6045759 - splice Fix bad unlockpage in error case Jens Axboe orabug 6263574 - dio fix error-path crashes Linus Torvalds orabug 6242289 - NET fix netpoll race Tina Yang orabugz 5791 2.6.18-92.1.10.el5 - ia64...

kernel security and bug fix update

2.6.9-67.0.22.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix entropy flag in bnx2 driver to generate entropy pool John Sobecki orabug 5931647 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - fix percpu api bugon wit...

EMC Retrospect客户端retroclient.exe远程内存破坏漏洞

BUGTRAQ ID: 30306 EMC Retrospect是Windows平台下的备份和恢复软件。 Retrospect的retroclient.exe进程默认监听于TCP 497端口。如果向该端口连续发送长度为2064字节内容为0x00的报文的话，在30秒到5分钟后状态框会显示：Client networking not available, or service not running。继续发送报文会导致retroclient.exe进程终止，完全损失备份服务。 EMC Retrospect for Windows Client 7.5.116 EMC ---...

FGA-2008-16: EMC Dantz Retrospect 7 backup Client 7.5.116 Remote Memory corruption Vulnerability

FGA-2008-16: EMC Dantz Retrospect 7 backup Client 7.5.116 Remote Memory corruption Vulnerability http://www.fortiguardcenter.com/advisory/FGA-2008-16.html July 20, 2008 -- Affected Vendors: EMC -- Affected Products: EMC Dantz Retrospect 7 backup Client 7.5.116 -- Vulnerability Details: The...

Microsoft Internet Explorer 6 - New ActiveX Object String Concatenation Memory Corruption

Microsoft Internet Explorer 6 - New ActiveX Object String Concatenation Memory Corruption source: https://www.securityfocus.com/bid/30219/info Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Remote attackers can exploit this issue to crash the affected applicatio...

Microsoft Internet Explorer 6 - New ActiveX Object String Concatenation Memory Corruption

source: https://www.securityfocus.com/bid/30219/info Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Remote attackers can exploit this issue to crash the affected application, denying service to legitimate users. Given the nature of this issue, attackers may also...

Microsoft SQL Server On-Disk MTF Data Structures Remote Memory Corruption Vulnerability

Description Microsoft SQL Server is prone to a remote memory-corruption vulnerability because it fails to perform adequate boundary checks on user-supplied input. Authenticated attackers can exploit this issue to execute arbitrary code in the context of the server. Failed attacks will likely caus...