CVE-2003-1446

CVE-2003-1446 describes a buffer overflow in the Rogue 5.2-2 save_into_file function (save.c). The flaw allows local users to execute arbitrary code with games group privileges by setting a long HOME environment variable and invoking the save game function with a tilde (~) in the path. Affected p...

CVE-2003-1446: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the saveintofile function in save.c for Rogue 5.2-2 allows local users to execute arbitrary code with games group privileges by setting a long HOME environment variable and invoking the save game function with a tilde...

CVE-2007-4508

Stack-based buffer overflow in Rebellion Asura engine, as used for the server in Rogue Trooper 1.0 and earlier and Prism 1.1.1.0 and earlier, allows remote attackers to execute arbitrary code via a long string in a 0xf007 packet for the challenge B query...

CVE-2007-4508

CVE-2007-4508 describes a stack-based buffer overflow in the Rebellion Asura engine used by Rogue Trooper 1.0 (and earlier) and Prism 1.1.1.0 (and earlier). The overflow occurs via a long string in a 0xf007 packet for the challenge B query, allowing remote code execution. The affected component i...

Buffer-overflow in the Asura engine

Luigi Auriemma Application: Asura engine network SDK http://www.rebellion.co.uk Games: Rogue Trooper = 1.0 Prism: Guard Shield = 1.1.1.0 ...possibly others... Platforms: Windows Bug: challenge buffer-overflow Exploitation: remote, versus server in-game Date: 22 Aug 2007 Author: Luigi Auriemma...

CVE-2007-4508: Undefined Security Weakness

Stack-based buffer overflow in Rebellion Asura engine, as used for the server in Rogue Trooper 1.0 and earlier and Prism 1.1.1.0 and earlier, allows remote attackers to execute arbitrary code via a long string in a 0xf007 packet for the challenge B query...

MS07-047: Vulnerability in Windows Media Player Could Allow Remote Code Execution (936782)

There is a vulnerability in the remote version of Windows Media Player that may allow an attacker to execute arbitrary code on the remote host. To exploit this flaw, one attacker would need to set up a rogue PNG image and send it to a victim on the remote host. C Tenable Network Security, Inc...

Quicktime Multiple Vulnerabilities (Mac OS X 7.1.6 Security Update)

According to its version, the installation of Quicktime on the remote Mac OS X host that contains a bug which might allow a rogue Java program to write anywhere in the heap. An attacker may be able to leverage these issues to execute arbitrary code on the remote host by luring a victim into...

MS07-020: Vulnerability in Microsoft Agent Could Allow Remote Code Execution (932168)

The remote version of Windows contains a flaw in the Microsoft Agent service that could allow an attacker to execute code on the remote host. To exploit this flaw, an attacker would need to set up a rogue website and lure a victim on the remote host into visiting it. C Tenable Network Security,...

Mac OS X Security Update 2007-001

The remote host is running a version of Mac OS X 10.3 or 10.4 which does not have Security Update 2007-001 applied. This update fixes a flaw in QuickTime which may allow a rogue website to execute arbitrary code on the remote host by exploiting an overflow in the RTSP URL handler. TRUSTED...

MOAB-06-01-2007: Multiple Vendor PDF Document Catalog Handling Vulnerability

Summary The Adobe Portable Document Format PDF, specification v. 1.3 defines the root of a document's object hierarchy as the "catalog dictionary". The catalog contains the necessary references to objects and data that compose the document contents and their attributes. Also, it contains directiv...

MOAB-05-01-2007: Apple DiskManagement BOM Local Privilege Escalation Vulnerability

Summary Apple DiskManagement.framework is the back-end for the ' diskutil' tool, used to perform disk/file system maintenance tasks. One of these tasks, permissions repair, involves the usage of BOM Bill Of Materials files, which declare the default file permissions and owner among other...

About the database the simple intrusion and rogue damage-vulnerability warning-the black bar safety net

For domestic and foreign a lot of news, BBS and e-Commerce site using ASP+SQL design, and write an ASP programmer many many have just graduated, so, ASP+SQL attack success rate is relatively high. This type of attack method with the NT version and SQL version is not much relationship, there is no...

Mac OS X Security Update 2006-008

The remote host is running a version of Mac OS X 10.4 that does not have Security Update 2006-008 applied. This update fixes a flaw in QuickTime that may allow a rogue website to obtain the images rendered on the user screen. By combining this flaw with Quartz Composer, an attacker may be able to...

Malware and anti-malware technical analysis-vulnerability warning-the black bar safety net

Malware technology of all kinds, of any one function are likely to become a rogue technology, just like weapons, with the good may justice, with a crooked but become evil accomplice. First of all, I From win32 under some rogue bus analysis start: 1. I want to be a malware, the first thing to do i...

From the IE pop-up ads look at rogue software principles-vulnerability warning-the black bar safety net

A lot of people affected by IE automatically pop-up ads plaguing it, here is a solution ideas, you can get the use of BHO（Browser Helper Objects, browser helper module, making waves of malware. Unfortunately this method is still relatively complex, only the master in use, I hope the master can he...

MS06-024: Vulnerability in Windows Media Player Could Allow Remote Code Execution (917734)

The remote host is running Windows Media Player. There is a vulnerability in the remote version of this software that could allow an attacker to execute arbitrary code on the remote host. To exploit this flaw, one attacker would need to set up a rogue PNG image and send it to a victim on the remo...

[TZO-062006] Safe'nVulnerable

Safe'nSec - Insecure File execution and Auto-startup Ref : TZO-062006-SafenSec Author : Thierry Zoller WWW : http://secdev.zoller.lu Article : http://secdev.zoller.lu/research/safensec.htm I. Background "Safe'n'Sec is complex data and user applications protection against threats and vulnerabiliti...

MS05-035: Vulnerability in Word May Lead to Code Execution (903672)

The remote host is running a version of Microsoft Word that is subject to a flaw that could allow arbitrary code to be run. An attacker may use this to execute arbitrary code on this host. To succeed, the attacker would have to send a rogue Word file to a user of the remote computer and have him...

MS05-032: Vulnerability in Microsoft Agent Could Allow Spoofing (890046)

The remote version of Windows contains a flaw in the Microsoft Agent service that could allow an attacker to spoof the content of a website. To exploit this flaw, an attacker would need to set up a rogue website and lure a victim on the remote host into visiting it. C Tenable Network Security, In...