141 matches found
CVE-2017-10745
XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Stack Buffer Overrun /GS Exception starting at ntdll77df0000!RtlProcessFlsData+0x00000000000000b0."...
Stack overflow
XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Stack Buffer Overrun /GS Exception starting at ntdll77df0000!LdrpInitializeNode+0x000000000000015b."...
Stack overflow
XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted JPEG 2000 file that is mishandled during the opening of a directory in "Browser" mode, because of a "Stack Buffer Overrun" issue...
CVE-2017-10743
XnView Classic for Windows 2.40 is vulnerable to a buffer-overrun in a crafted .rle file, related to a Stack Buffer Overrun at ntdll_77df0000!LdrpInitializeNode. This can allow arbitrary code execution or a denial of service. No remediation details are provided in the documents.
CVE-2017-8781
XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted JPEG 2000 file that is mishandled during the opening of a directory in "Browser" mode, because of a "Stack Buffer Overrun" issue...
CVE-2017-10743
XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Stack Buffer Overrun /GS Exception starting at ntdll77df0000!LdrpInitializeNode+0x000000000000015b."...
PT-2017-11464
Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file. It is related to a "Stack Buffer Overrun /GS Exception starting at ntdll...
CVE-2017-10743: Improper Restriction of Operations within the Bounds of a Memory Buffer
XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Stack Buffer Overrun /GS Exception starting at ntdll77df0000!LdrpInitializeNode+0x000000000000015b."...
CVE-2017-8781: Improper Restriction of Operations within the Bounds of a Memory Buffer
XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted JPEG 2000 file that is mishandled during the opening of a directory in "Browser" mode, because of a "Stack Buffer Overrun" issue...
CVE-2017-10745: Improper Restriction of Operations within the Bounds of a Memory Buffer
XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Stack Buffer Overrun /GS Exception starting at ntdll77df0000!RtlProcessFlsData+0x00000000000000b0."...
PT-2017-18522
Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows remote attackers to execute code via a crafted JPEG 2000 file that is mishandled during the opening of a directory in "Browser" mode, because of a "Stack Buffer Overrun" issu...
PT-2017-11466
Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file. It is related to a "Stack Buffer Overrun /GS Exception starting at ntdll...
MGASA-2014-0070 Updated socat package fixes security vulnerability
Due to a missing check in socat before 2.0.0-b7 during assembly of the HTTP request line, a long target server name in the documentation in the PROXY-CONNECT address can cause a stack buffer overrun. Exploitation requires that the attacker is able to provide the target server name to the...
Updated socat package fixes security vulnerability
Due to a missing check in socat before 2.0.0-b7 during assembly of the HTTP request line, a long target server name in the documentation in the PROXY-CONNECT address can cause a stack buffer overrun. Exploitation requires that the attacker is able to provide the target server name to the...
socat -- buffer overflow with data from command line
Florian Weimer of the Red Hat Product Security Team reports: Due to a missing check during assembly of the HTTP request line a long target server name in the PROXY-CONNECT address can cause a stack buffer overrun. Exploitation requires that the attacker is able to provide the target server name t...
MySQL (Linux) - Stack Buffer Overrun (PoC)
MySQL Linux - Stack Buffer Overrun PoC !/usr/bin/perl =for comment MySQL Server exploitable stack based overrun Ver 5.5.19-log for Linux and below tested with Ver 5.1.53-log for suse-linux-gnu too unprivileged user any account anonymous account?, post auth as illustrated below the instruction...
MySQL (Linux) - Stack Buffer Overrun (PoC)
!/usr/bin/perl =for comment MySQL Server exploitable stack based overrun Ver 5.5.19-log for Linux and below tested with Ver 5.1.53-log for suse-linux-gnu too unprivileged user any account anonymous account?, post auth as illustrated below the instruction pointer is overwritten with 0x41414141 bug...
Microsoft PowerPoint Converter TPrint Record Handling Error (MS09-017; CVE-2009-0227)
Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A stack buffer overrun vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory corruption error in Microsoft PowerPoint when reading sound data from specially crafte...
HP Mercury LoadRunner Agent buffer overflow
magentproc.exe TCP/54345 stack buffer overrun on oversized serveripname paramter...
Exim Sender 3.35 - Verification Remote Stack Buffer Overrun
Exim Sender 3.35 - Verification Remote Stack Buffer Overrun // source: https://www.securityfocus.com/bid/10290/info Exim has been reported prone to a remotely exploitable stack-based buffer overrun vulnerability. This is exposed if sender verification has been enabled in the agent and may be...