Apple Safari "libxml"远程代码执行漏洞

BUGTRAQ ID: 48832 CVE ID: CVE-2011-0216 Safari是苹果计算机的最新作业系统Mac OS X中的浏览器，使用了KDE的KHTML作为浏览器的运算核心。 Safari 5.0.6之前版本在libxml的实现上存在单字节溢出漏洞，攻击者可利用此漏洞在受影响应用程序下执行任意代码或造成拒绝服务。 Apple Safari 5.x Apple Safari 4.x Apple TV 4.3 Apple TV 4.2 Apple TV 4.1 Apple TV 4.0 Apple TV 2.1 Apple TV 1.0 Apple iOS 4.x 厂商补丁...

Aviosoft Digital TV Player Professional 1.0 Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Aviosoft Digital ...

Aviosoft Digital TV Player Professional 1.0 - Local Stack Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Aviosoft Digital ...

Aviosoft Digital TV Player Professional 1.0 Stack Buffer Overflow

Exploit for windows platform in category local exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Aviosoft Digital TV Player Professional 1.x Buffer Overflow

Exploit Title: Aviosoft Digital TV Player Professional 1.x Stack Buffer Overflow Author: modpr0be Software Download: http://www.aviosoft.com/download.php?product=dtvplayerpro Date: 08/11/2011 Tested on: Windows XP SP3, Windows 7 SP1 Thanks: corelanc0d3r, cyb3r.anbu, otoy, sickness, 5m7x,...

Aviosoft Digital TV Player Professional 1.0 Stack Buffer Overflow

This module exploits a vulnerability found in Aviosoft Digital TV Player Pro version 1.x. An overflow occurs when the process copies the content of a playlist file on to the stack, which may result arbitrary code execution under the context of the user. Module Options msf use...

Aviosoft Digital TV Player Professional 1.x - Local Stack Buffer Overflow

Aviosoft Digital TV Player Professional 1.x - Local Stack Buffer Overflow Exploit Title: Aviosoft Digital TV Player Professional 1.x Stack Buffer Overflow Author: modpr0be Software Download: http://www.aviosoft.com/download.php?product=dtvplayerpro Date: 08/11/2011 Tested on: Windows XP SP3,...

Aviosoft Digital TV Player Professional 1.x Stack Buffer Overflow

Exploit for windows platform in category local exploits Exploit Title: Aviosoft Digital TV Player Professional 1.x Stack Buffer Overflow Author: modpr0be Software Download: http://www.aviosoft.com/download.php?product=dtvplayerpro Date: 08/11/2011 Tested on: Windows XP SP3, Windows 7 SP1 Thanks:...

DreamBox DM800 1.5rc1 - File Disclosure

DreamBox DM800 1.5rc1 - File Disclosure !/usr/bin/perl DreamBox DM800 :0:0:root:/home/root:/bin/sh daemon::1:1:daemon:/usr/sbin:/bin/sh bin::2:2:bin:/bin:/bin/sh sys::3:3:sys:/dev:/bin/sh sync::4:65534:sync:/bin:/bin/sync games::5:60:games:/usr/games:/bin/sh man::6:12:man:/var/cache/man:/bin/sh...

DreamBox DM800 1.5rc1 - File Disclosure

!/usr/bin/perl DreamBox DM800 :0:0:root:/home/root:/bin/sh daemon::1:1:daemon:/usr/sbin:/bin/sh bin::2:2:bin:/bin:/bin/sh sys::3:3:sys:/dev:/bin/sh sync::4:65534:sync:/bin:/bin/sync games::5:60:games:/usr/games:/bin/sh man::6:12:man:/var/cache/man:/bin/sh lp::7:7:lp:/var/spool/lpd:/bin/sh...

DreamBox DM800 1.5rc1 Remote Root File Disclosure Exploit

Exploit for hardware platform in category remote exploits !/usr/bin/perl DreamBox DM800 :0:0:root:/home/root:/bin/sh daemon::1:1:daemon:/usr/sbin:/bin/sh bin::2:2:bin:/bin:/bin/sh sys::3:3:sys:/dev:/bin/sh sync::4:65534:sync:/bin:/bin/sync games::5:60:games:/usr/games:/bin/sh...

APPLE-SA-2011-10-12-2 Apple TV Software Update 4.4

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2011-10-12-2 Apple TV Software Update 4.4 Apple TV Software Update 4.4 is now available and addresses the following: Apple TV Available for: Apple TV 4.0 through 4.3 Impact: An attacker with a privileged network position may intercept user...

Apple TV multiple security vulnerabilities

SSL vulnerabilities, vulnerabilities in different media formats parsing...

CVE-2011-3427

The Data Security component in Apple iOS before 5 and Apple TV before 4.4 does not properly restrict use of the MD5 hash algorithm within X.509 certificates, which makes it easier for man-in-the-middle attackers to spoof servers or obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Data Security component in Apple iOS before 5 and Apple TV before 4.4 does not properly restrict use of the MD5 hash algorithm within X.509 certificates, which makes it easier for man-in-the-middle attackers to spoof servers or obtain sensitive information via a crafted certificate...

CVE-2011-3259

The kernel in Apple iOS before 5 and Apple TV before 4.4 does not properly recover memory allocated for incomplete TCP connections, which allows remote attackers to cause a denial of service resource consumption by making many connection attempts...

CVE-2011-3259

The CVE-2011-3259 vulnerability affects Apple iOS prior to 5 and Apple TV prior to 4.4 where the kernel does not promptly recover memory allocated for incomplete TCP connections. This can allow a remote attacker to cause resource exhaustion leading to a denial of service by establishing numerous ...

CVE-2011-3427

The CVE-2011-3427 entry concerns Apple iOS (pre-5) and Apple TV (pre-4.4) Data Security: X.509 certificates may accept MD5-signed certs, weakening cryptographic checks. Root cause: use of the MD5 hash algorithm within certificate validation is not properly restricted, enabling a man-in-the-middle...

CVE-2011-3427

The Data Security component in Apple iOS before 5 and Apple TV before 4.4 does not properly restrict use of the MD5 hash algorithm within X.509 certificates, which makes it easier for man-in-the-middle attackers to spoof servers or obtain sensitive information via a crafted certificate...

PT-2011-4451

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 5 Apple TV versions prior to 4.4 Description The issue concerns the improper restriction of the MD5 hash algorithm within X.509 certificates in the Data Security component. This makes it easier for man-in-the-middle...