eEye Retina WiFi Scanner '.rws'文件缓冲区溢出漏洞

Bugraq ID: 35624 eEye Retina WiFi Scanner是一款eEye公司开发的无线检测工具。 eEye Retina WiFi Scanner不正确解析'.rws'文件，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 构建包含超长"RWS010"条目的".rws"文件，诱使用户打开，可导致在.data段触发缓冲区溢出，可能导致以应用程序权限执行任意指令。 eEye Digital Security Retina WiFi Scanner 1.0.8 68 目前没有解决方案提供： http://www.eeye.com/ !/usr/bin/python...

eEye Retina WiFi Security Scanner 1.0 - '.rws Parsing' Buffer Overflow (PoC)

!/usr/bin/python Title: Retina WiFi Security Scanner 1.0 .rws parsing Buffer Overflow Vulnerability Summary: Retina WiFi Scanner is a tool to be used to detect IEEE 802.11 WiFi based devices. Vendor: eEye Digital Security Inc. Product Web Page: http://www.eeye.com/ Current Version: 1.0.8.68 Notiz...

Retina WiFi Security Scanner 1.0 Overflow

!/usr/bin/python Title: Retina WiFi Security Scanner 1.0 .rws parsing Buffer Overflow Vulnerability Summary: Retina WiFi Scanner is a tool to be used to detect IEEE 802.11 WiFi based devices. Vendor: eEye Digital Security Inc. Product Web Page: http://www.eeye.com/ Current Version: 1.0.8.68 Notiz...

eEye Retina WiFi Security Scanner 1.0 (.rws Parsing) Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ======================================================================== eEye Retina WiFi Security Scanner 1.0 .rws Parsing Buffer Overflow PoC ======================================================================== !/usr/bin/python Title: Retin...

PT-2007-6745 · Retina X Studios · Mobile Spy

Name of the Vulnerable Software and Affected Versions: Mobile Spy affected versions not specified Description: The issue concerns the storage and transmission of sensitive information. Specifically, it involves storing login credentials in cleartext under a specific registry key and sending login...

EEYE: Windows Metafile AttemptWrite Heap Overflow

Windows Metafile AttemptWrite Heap Overflow Release Date: August 14, 2007 Date Reported: March 27, 2007 Severity: High Code Execution Systems Affected: Windows 2000 SP4 Windows XP SP2 Windows Server 2003 SP1 Overview: eEye Digital Security has discovered a heap overflow vulnerability in the way t...

EEYE: VGX.DLL Compressed Content Heap Overflow Vulnerability

VGX.DLL Compressed Content Heap Overflow Vulnerability Release Date: August 14, 2007 Date Reported: October 24, 2006 Severity: High Code Execution Systems Affected: Internet Explorer 6 SP1 - Windows 2000 SP4 Internet Explorer 6 SP1 - Windows XP SP1 Internet Explorer 6 SP2 - Windows XP SP2 Interne...

EEYE: Sun Java WebStart JNLP Stack Buffer Overflow Vulnerability

Sun Java WebStart JNLP Stack Buffer Overflow Vulnerability Release Date: July 5, 2007 Date Reported: Jan 19, 2007 Severity: High Remote Code Execution Vendor: Sun Microsystems Systems Affected: Java Runtime Environment 6 Update 1, and earlier Java Runtime Environment 5 Update 11, and earlier...

EEYE: Intel Network Adapter Driver Local Privilege Escalation

eEye Research - http://research.eeye.com Intel Network Adapter Driver Local Privilege Escalation Release Date: December 7, 2006 Date Reported: July 10, 2006 Severity: Medium Local Privilege Escalation to Kernel Systems Affected: Windows 2000, XP, 2003, Vista Intel PRO 10/100 - 8.0.27.0 or previou...

[Full-disclosure] EEYE: Internet Explorer Compressed Content URL Heap Overflow Vulnerability

Internet Explorer Compressed Content URL Heap Overflow Vulnerability Release Date: August 24, 2006 Date Reported: August 17, 2006 Severity: High Code Execution Systems Affected: Internet Explorer 6 SP1 with MS06-042 - Windows 2000 Internet Explorer 6 SP1 with MS06-042 - Windows XP SP1 Overview:...

[EEYEB-20060524] Symantec Remote Management Stack Buffer Overflow

Symantec Remote Management Stack Buffer Overflow Release Date: June 12, 2006 Date Reported: May 24, 2006 Severity: High Remote Code Execution Systems Affected: Symantec AntiVirus 10.0.x for Windows all versions Symantec AntiVirus 10.1.x for Windows all versions Symantec Client Security 3.0.x for...

[Full-disclosure] [EEYEB-20060307] Apple QuickTime FPX Integer Overflow

Apple QuickTime FPX Integer Overflow Release Date: May 11, 2006 Date Reported: March 7, 2006 Patch Development Time In Days: 65 Severity: High Remote Code Execution Vendor: Apple Systems Affected: Quicktime on Windows 2000 Quicktime on Windows XP Quicktime on Mac OS X 10.3.9 References: This...

[EEYEB20051011B] - Microsoft Distributed Transaction Coordinator Denial of Service

Microsoft Distributed Transaction Coordinator Denial of Service http://www.eeye.com/html/research/advisories/AD20060509b.html Release Date: May 9, 2006 Date Reported: October 11, 2005 Patch Development Time In Days: 210 Severity: Low Denial of Service Systems Affected: Windows NT 4.0 Windows 2000...

[EEYEB-20051220] Apple QuickTime QTIF Stack Overflow

EEYEB-20051229 Apple QuickTime QTIF Stack Overflow Release Date: January 10, 2006 Date Reported: December 29, 2005 Patch Development Time In Days: 12 days Severity: High Code Execution Vendor: Apple Systems Affected: Quicktime on Windows 2000 Quicktime on Windows XP Quicktime on Mac OS X 10.3.9...

[VulnWatch] [EEYEB-2000801] - Windows Embedded Open Type (EOT) Font Heap Overflow Vulnerability

EEYEB-20050801 Windows Embedded Open Type EOT Font Heap Overflow Vulnerability Release Date: January 10, 2006 Date Reported: July 31, 2005 Time to Patch: 163 Days Severity: High Code Execution Systems Affected: Windows ME Windows 98 Windows NT Windows 2000 Windows XP SP1 / SP2 Windows Server 2003...

[Full-disclosure] [EEYEB-20050329] Windows Metafile Multiple Heap Overflows

Windows Metafile Multiple Heap Overflows Release Date: November 8, 2005 Date Reported: March 29, 2005 Severity: High Code Execution Vendor: Microsoft Systems Affected: Windows 2000 Windows Server 2003 Overview: eEye Digital Security has discovered a heap overflow vulnerability in the way the...

[Full-disclosure] [EEYEB-20050901] Windows Metafile SetPalette Entries Heap OVerflow Vulnerability (Graphics Rendering Engine Vulnerability)

Windows Metafile SetPalette Entries Heap OVerflow Vulnerability Graphics Rendering Engine Vulnerability Release Date: November 8, 2005 Date Reported: September 1, 2005 Severity: High Code Execution Vendor: Microsoft Systems Affected: Windows 2000 Windows XP SP0, SP1 Windows Server 2003 SP0...

[Full-disclosure] [EEYEB-20050627B] Macromedia Flash Player Improper Memory Access Vulnerability

Macromedia Flash Player Improper Memory Access Vulnerability Release Date: November 4, 2005 Date Reported: June 27, 2005 Severity: High Vendor: Macromedia Systems Affected: Macromedia Flash 6 on all Windows platforms Macromedia Flash 7 on all Windows platforms Overview: eEye Digital Security has...

[EEYEB20050803] - Windows UMPNPMGR wsprintfW Stack Buffer Overflow Vulnerability

Windows UMPNPMGR wsprintfW Stack Buffer Overflow Vulnerability Release Date: October 11, 2005 Date Reported: August 3, 2005 Severity: High Remote Code Execution with Authentication Medium Privilege Escalation to SYSTEM Vendor: Microsoft Systems Affected: Windows NT 4.0 Windows 2000 Windows XP eEy...

[EEYEB20050708] Microsoft Distributed Transaction Coordinator Memory Modification Vulnerability

Microsoft Distributed Transaction Coordinator Memory Modification Vulnerability Release Date: October 11, 2005 Date Reported: July 8, 2005 Severity: High Remote Code Execution Vendor: Microsoft Systems Affected: Windows 2000 Server SP0 - SP4 - Vulnerable - Anonymous remotely exploitable by defaul...