MUSE 4.9.0.006 - '.pls' Universal Local Buffer Overflow (SEH)

Exploit Title: MUSE v4.9.0.006 .pls Local Universal Buffer Overflow SEH Date: August 17, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Software Link: http://download.cnet.com/MUSE/3000-21404-42511.html Version: 4.9.0.006 Tested on: Windows XP SP3 En payload = "\x41" 1376 payload +=...

CVE-2010-2995

The SigComp Universal Decompressor Virtual Machine UDVM in Wireshark 0.10.8 through 1.0.14 and 1.2.0 through 1.2.9 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to sigcomp-udvm.c and an off-by-one error, which triggers a buffer...

DEBIAN-CVE-2010-2995

The SigComp Universal Decompressor Virtual Machine UDVM in Wireshark 0.10.8 through 1.0.14 and 1.2.0 through 1.2.9 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to sigcomp-udvm.c and an off-by-one error, which triggers a buffer...

Mediacoder 0.7.5.4710 - Universal Local Buffer Overflow (SEH)

Mediacoder 0.7.5.4710 - Universal Local Buffer Overflow SEH !/usr/bin/env python Mediacoder 0.7.5.4710 "Universal" SEH Buffer Overflow Exploit Coded By: DrIDE Found By: abhishek lyall Usage: Load the evil .m3u file and click on it. Tested On: Windows XPSP3 windows/exec - 534 bytes...

wireshark: SigComp UDVM dissector buffer overruns

The SigComp Universal Decompressor Virtual Machine UDVM in Wireshark 0.10.8 through 1.0.14 and 1.2.0 through 1.2.9 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to sigcomp-udvm.c and an off-by-one error, which triggers a buffer...

wireshark: SigComp UDVM dissector buffer overruns

Buffer overflow in the SigComp Universal Decompressor Virtual Machine dissector in Wireshark 0.10.8 through 1.0.13 and 1.2.0 through 1.2.8 has unknown impact and remote attack vectors...

wireshark: SigComp UDVM dissector infinite loop

The SigComp Universal Decompressor Virtual Machine dissector in Wireshark 0.10.7 through 1.0.13 and 1.2.0 through 1.2.8 allows remote attackers to cause a denial of service infinite loop via unknown vectors...

CVE-2010-2536

Multiple cross-site scripting XSS vulnerabilities in rekonq 0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 a URL associated with a nonexistent domain name, related to webpage.cpp, aka a "universal XSS" issue; 2 unspecified vectors related to webview.cpp; and t...

CVE-2009-4975

Cross-site scripting XSS vulnerability in webview.cpp in QtDemoBrowser allows remote attackers to inject arbitrary web script or HTML via a URL associated with a nonexistent domain name, related to a "universal XSS" issue, a similar vulnerability to CVE-2010-2536...

CVE-2009-4976

Cross-site scripting XSS vulnerability in webkitpart.cpp in kwebkitpart allows remote attackers to inject arbitrary web script or HTML via a URL associated with a nonexistent domain name, related to a "universal XSS" issue, a similar vulnerability to CVE-2010-2536...

CVE-2009-4975

Cross-site scripting XSS vulnerability in webview.cpp in QtDemoBrowser allows remote attackers to inject arbitrary web script or HTML via a URL associated with a nonexistent domain name, related to a "universal XSS" issue, a similar vulnerability to CVE-2010-2536...

CVE-2009-4976

Cross-site scripting XSS vulnerability in webkitpart.cpp in kwebkitpart allows remote attackers to inject arbitrary web script or HTML via a URL associated with a nonexistent domain name, related to a "universal XSS" issue, a similar vulnerability to CVE-2010-2536...

CVE-2009-4975

Technical details (affected products, root cause, exploitability or patch information) are not publicly available in the provided documents; monitor for updates.

CVE-2010-2536

Multiple cross-site scripting XSS vulnerabilities in rekonq 0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 a URL associated with a nonexistent domain name, related to webpage.cpp, aka a "universal XSS" issue; 2 unspecified vectors related to webview.cpp; and t...

Wireshark / Ethereal < 1.0.15 / 1.2.10 Multiple Vulnerabilities

The installed version of Wireshark or Ethereal is potentially affected by multiple vulnerabilities. - The SigComp Universal Decompressor Virtual Machine could potentially overflow a buffer. Bug 4867 - The ANS.1 BER dissector could potentially exhaust the stack memory. Bug 4984 - The GSM A RR...

Mandriva Linux Security Advisory : wireshark (MDVSA-2010:113)

This advisory updates wireshark to the latest versions, fixing several security issues : The SMB dissector in Wireshark 0.99.6 through 1.0.13, and 1.2.0 through 1.2.8 allows remote attackers to cause a denial of service NULL pointer dereference via unknown vectors CVE-2010-2283. Buffer overflow i...

rapidCMS V2 backend authentication bypass vulnerability-vulnerability warning-the black bar safety net

rapidCMS V2 background login authentication has not been strictly filtered, resulting in Universal password bypass vulnerability. Use method: User: something Pass: 'OR '1'='1 Demo : http://site/admin.php...

Mediacoder 0.7.3.4682 - '.m3u' Universal Buffer Overflow

!/usr/bin/perl Exploit Title : Mediacoder v0.7.3.4682 .m3u File Universal Buffer Overflow Exploit tested on windows xp SP 2 FR Date:24/07/2010 download : http://www.dodownload.com/video+multimedia/play+video/mediacoder.html Author: s-dz s-dzatHotmaiL.fr Tjrs mahboul-3lik ; $file=...

Mini-stream RM-MP3 Converter 3.1.2.1 - .pls Local Stack Buffer Overflow Universal

Mini-stream RM-MP3 Converter 3.1.2.1 - .pls Local Stack Buffer Overflow Universal Mini-Stream RM-MP3 Converter v3.1.2.1 .pls Stack Buffer Overflow universal By Madjix lemail ma3andkoum madirou bih Sec4ever.com my $junk="http://"."\x41" x 17425; my $ret = "\xCF\xDA\x05\x10"; jump to ESP - from...

Mini-stream RM-MP3 Converter 3.1.2.1 - '.pls' Local Stack Buffer Overflow Universal

Mini-Stream RM-MP3 Converter v3.1.2.1 .pls Stack Buffer Overflow universal By Madjix lemail ma3andkoum madirou bih Sec4ever.com my $junk="http://"."\x41" x 17425; my $ret = "\xCF\xDA\x05\x10"; jump to ESP - from msrmfilter03.dll my $padding = "\x90" x 24; windows/shellreversetcp - 739 bytes...