CVE-2008-7211

The CVE-2008-7211 entry concerns CreativeLabs es1371mp.sys 5.1.3612.0 WDM audio driver used in Ensoniq PCI 1371 sound cards (and on Windows Vista). The root cause is that the driver does not create a Functional Device Object (FDO) to isolate the Physical Device Object (PDO), which allows a local ...

KSP 2009R2 (m3u) Universal Local Buffer Overflow Exploit (SEH)

No description provided by source. !/usr/bin/python Found By :: HACK4LOVE [email protected] KSP 2009R2 m3u Universal Local Buffer Exploit SEH http://ksplayer.boo.pl/index.php --- info:: KSP 2009R2 Sound Player was released 28//8//2009 AND special THANKS FOR His0k4 shellcode=...

KSP 2009R2 - .m3u Universal Local Buffer Overflow (SEH)

KSP 2009R2 - .m3u Universal Local Buffer Overflow SEH !/usr/bin/python Found By :: HACK4LOVE [email protected] KSP 2009R2 m3u Universal Local Buffer Exploit SEH http://ksplayer.boo.pl/index.php --- info:: KSP 2009R2 Sound Player was released 28//8//2009 AND special THANKS FOR His0k4 shellcode...

KSP 2009R2 Buffer Overflow

!/usr/bin/python Found By :: HACK4LOVE [email protected] KSP 2009R2 m3u Universal Local Buffer Exploit SEH http://ksplayer.boo.pl/index.php --- info:: KSP 2009R2 Sound Player was released 28//8//2009 AND special THANKS FOR His0k4 shellcode=...

KSP 2009R2 (m3u) Universal Local Buffer Overflow Exploit (SEH)

Exploit for unknown platform in category local exploits ============================================================== KSP 2009R2 m3u Universal Local Buffer Overflow Exploit SEH ============================================================== !/usr/bin/python Found By :: HACK4LOVE KSP 2009R2 m3u...

Ubuntu 8.04 LTS / 8.10 / 9.04 : libvorbis vulnerability (USN-825-1)

It was discovered that libvorbis did not correctly handle certain malformed ogg files. If a user were tricked into opening a specially crafted ogg file with an application that uses libvorbis, an attacker could execute arbitrary code with the user's privileges. CVE-2009-2663 USN-682-1 provided...

libsndfile: User-assisted execution of arbitrary code

Background libsndfile is a C library for reading and writing files containing sampled sound. Description The following vulnerabilities have been found in libsndfile: Tobias Klein reported that the headerread function in src/common.c uses user input for calculating a buffer size, possibly leading ...

CVE-2009-0223

Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka "Legacy File Format Vulnerability," a different vulnerability than...

Stack overflow

Multiple stack-based buffer overflows in the PowerPoint 95 importer PP7X32.DLL in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote attackers to execute arbitrary code via an inconsistent record length in sound data in a file that uses a PowerPoint 95 PPT95 native file...

CVE-2009-0227

Stack-based buffer overflow in the PowerPoint 4.2 conversion filter PP4X32.DLL in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via a large number of structures in sound data in a file that uses a PowerPoint 4.0 native file format,...

CVE-2009-0222

Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading to a "pointer overwrite" and memory corruption, aka "Legacy File Format Vulnerability," a differen...

CVE-2009-0226

Stack-based buffer overflow in the PowerPoint 4.2 conversion filter in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via a long string in sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory...

CVE-2009-0227

Stack-based buffer overflow in the PowerPoint 4.2 conversion filter PP4X32.DLL in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via a large number of structures in sound data in a file that uses a PowerPoint 4.0 native file format,...

CVE-2009-0226

Stack-based buffer overflow in the PowerPoint 4.2 conversion filter in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via a long string in sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory...

CVE-2009-0225

Microsoft Office PowerPoint 2002 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 95 native file format, leading to improper "array indexing" and memory corruption, aka "PP7 Memory Corruption Vulnerability."...

CVE-2009-1129

Multiple stack-based buffer overflows in the PowerPoint 95 importer PP7X32.DLL in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote attackers to execute arbitrary code via an inconsistent record length in sound data in a file that uses a PowerPoint 95 PPT95 native file...

Stack overflow

Stack-based buffer overflow in the PowerPoint 4.2 conversion filter in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via a long string in sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory...

Memory corruption

Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 95 native file format, leading to memory corruption, aka "PP7 Memory Corruption Vulnerability," a different vulnerability than...

CVE-2009-1137

Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka "Legacy File Format Vulnerability," a different vulnerability than...

Format string

Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka "Legacy File Format Vulnerability," a different vulnerability than...