Foxit Reader Plugin for Firefox URL String Stack Buffer Overflow

A stack buffer overflow vulnerability has been identified in Foxit Reader Plugin for Firefox. The vulnerability is due to a lack of bounds checking in an essential dll file, and affects handling of URLs. A remote attacker could exploit this vulnerability by enticing a target user to load a...

7T Interactive Graphical SCADA RMS Reports Buffer Overflow

7-Technologies' IGSS is a Supervisory Control and Data Acquisition SCADA system used for monitoring and controlling industrial processes. Multiple buffer overflow vulnerabilities have been reported in 7T Interactive Graphical SCADA System IGSS. The vulnerability is due to boundary errors in the...

Debian Security Advisory DSA 2663-1 (tinc - stack based buffer overflow)

Martin Schobert discovered a stack-based vulnerability in tinc, a Virtual Private Network VPN daemon. When packets are forwarded via TCP, packet length is not checked against the stack buffer length. Authenticated peers could use this to crash the tinc daemon and maybe execute arbitrary code. Not...

Allied Telesyn TFTP (AT-TFTP) Server/Daemon 2.0 - Stack Buffer Overflow (Denial of Service) (PoC)

Exploit Title: AT-TFTP 2.0 long filename stack based buffer overflow - DOS Date: 12.04.2013 Exploit Author: xisone@STM Solutions Vendor Homepage: http://www.alliedtelesis.com/ Software Link:...

Allied Telesyn TFTP (AT-TFTP) ServerDaemon 2.0 - Stack Buffer Overflow (Denial of Service) (PoC)

Allied Telesyn TFTP AT-TFTP ServerDaemon 2.0 - Stack Buffer Overflow Denial of Service PoC Exploit Title: AT-TFTP 2.0 long filename stack based buffer overflow - DOS Date: 12.04.2013 Exploit Author: xisone@STM Solutions Vendor Homepage: http://www.alliedtelesis.com/ Software Link:...

ActFax RAW Server Stack Buffer Overflow

Added: 04/12/2013 BID: 57789 OSVDB: 89944 Background ActFax is a Windows-based software package that sends, receives and electronically stores faxes. Problem The ActFax RAW server is vulnerable to a boundary error when processing the @F000 data field, which could result in stack-based buffer...

FreeBSD : firebird -- Remote Stack Buffer Overflow (6adca5e9-95d2-11e2-8549-68b599b52a02)

Firebird Project reports : The FirebirdSQL server is vulnerable to a stack-based buffer overflow that can be triggered when an unauthenticated user sends a specially crafted packet. The result can lead to remote code execution as the user which runs the FirebirdSQL server. %NASLMINLEVEL 70300 C...

AST-2013-001: Buffer Overflow Exploit Through SIP SDP Header

Asterisk Project Security Advisory - AST-2013-001 Product Asterisk Summary Buffer Overflow Exploit Through SIP SDP Header Nature of Advisory Exploitable Stack Buffer Overflow Susceptibility Remote Unauthenticated Sessions Severity Major Exploits Known No Reported On 6 January, 2013 Reported By Ul...

ALLMediaServer 0.94 Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'ALLMediaServer 0....

BigAnt Server SCH Request Stack Buffer Overflow (CVE-2012-6275)

A stack buffer overflow vulnerability exists in BigAnt Server. The vulnerability is due to a boundary error when handling SCH and DUPF requests. Remote unauthenticated attackers can exploit this vulnerability by sending malicious requests to the target server. Successful exploitation would result...

IconCool MP3 WAV Converter 3.00 Build 120518 - Stack Buffer Overflow Vulnerability

Exploit for windows platform in category dos / poc Exploit Title: IconCool MP3 WAV Converter Stack Buffer Overflow Vulnerability Date: 3/24/2013 Exploit Author: G0li47h Vendor Homepage: http://www.iconcool.com Software Link: http://www.iconcool.com/insticoncoolmp3wavconverter.exe Version: v3.00...

IconCool MP3 WAV Converter 3.00 Build 120518 - Stack Buffer Overflow

IconCool MP3 WAV Converter 3.00 Build 120518 - Stack Buffer Overflow Exploit Title: IconCool MP3 WAV Converter Stack Buffer Overflow Vulnerability Date: 3/24/2013 Exploit Author: G0li47h Vendor Homepage: http://www.iconcool.com Software Link: http://www.iconcool.com/insticoncoolmp3wavconverter.ex...

IconCool MP3 WAV Converter 3.00 Build 120518 - Stack Buffer Overflow

Exploit Title: IconCool MP3 WAV Converter Stack Buffer Overflow Vulnerability Date: 3/24/2013 Exploit Author: G0li47h Vendor Homepage: http://www.iconcool.com Software Link: http://www.iconcool.com/insticoncoolmp3wavconverter.exe Version: v3.00 Build 120518 Tested on: Windows 7 SP1 my $file=...

Cool PDF Image Stream - Remote Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Cool PDF Image Stream Buffer Overflow...

Linux Kernel - 'SCTP_GET_ASSOC_STATS()' Stack Buffer Overflow (PoC)

include include include include define SCTPGETASSOCSTATS 112 define SOLSCTP 132 int mainvoid char buf =...

Linux Kernel - SCTP_GET_ASSOC_STATS() Stack Buffer Overflow (PoC)

Linux Kernel - SCTPGETASSOCSTATS Stack Buffer Overflow PoC include include include include define SCTPGETASSOCSTATS 112 define SOLSCTP 132 int mainvoid char buf =...

TagScanner 5.1 - Stack Buffer Overflow (PoC)

TagScanner 5.1 - Stack Buffer Overflow PoC Title: ====== TagScanner v5.1 - Stack Buffer Overflow Vulnerability Date: ===== 2013-01-22 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=831 VL-ID: ===== 831 Introduction: ============= TagScanner is a multifunction program f...

Portable SDK for UPnP Devices libupnp Root Device Service Name Stack Buffer Overflow (CVE-2012-5960)

A stack buffer overflow vulnerability exists in Intel's SDK for UPnP and the Portable SDK for UPnP. The vulnerability is due to a boundary error while parsing service name URIs in the function called from the SSDP protocol parser. A remote attacker can exploit this vulnerability to execute...

BigAnt Server 2.97 - SCH / DUPF Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'BigAnt Server 2 SCH And DUPF Buffer...

BigAnt Server 2 SCH And DUPF Buffer Overflow

This exploits a stack buffer overflow in BigAnt Server 2.97 SP7. The vulnerability is due to the dangerous usage of strcpy while handling errors. This module uses a combination of SCH and DUPF request to trigger the vulnerability, and has been tested successfully against version 2.97 SP7 over...