PT-2015-7058

Name of the Vulnerable Software and Affected Versions FortiClient versions prior to 5.2.4 Description The issue allows local users to write to arbitrary memory locations via a specific ioctl call, 0x226108, in certain drivers. Recommendations For versions prior to 5.2.4, update to version 5.2.4 o...

CVE-2015-5735: Undefined Security Weakness

The 1 mdare6448.sys, 2 mdare3248.sys, 3 mdare3252.sys, and 4 mdare6452.sys drivers in Fortinet FortiClient before 5.2.4 allow local users to write to arbitrary memory locations via a 0x226108 ioctl call...

Immunity Canvas: ADOBE_FLASH_ID3

Name| adobeflashid3 ---|--- CVE| CVE-2015-5560 Exploit Pack| CANVAS Description| adobeflashid3 Notes| CVE Name: CVE-2015-5560 VENDOR: Adobe Notes: This module exploits a mishandling of large integers during the decoding of an ID3 tag. This situation leads to an integer overflow that eventually...

The vulnerability of the Firefox ESR browser, which allows a hacker to influence the operation of the program

The vulnerability in the nsZipArchive.cpp component, which allows access to arbitrary memory cells of the Firefox ESR browser, is related to errors in the code. Exploiting this vulnerability can allow a remote attacker to influence the behavior of the program using a specially crafted ZIP archive...

The vulnerability of the Firefox browser, which allows a hacker to influence the operation of the program

The vulnerability in the nsZipArchive.cpp component, which allows access to arbitrary memory cells of the Firefox browser, is related to errors in the code. Exploiting this vulnerability can allow a remote attacker to influence the operation of the program using a specially crafted ZIP archive...

The vulnerability of the Thunderbird email client, which allows a hacker to influence the operation of the program

The vulnerability in the nsZipArchive.cpp component, which allows access to arbitrary memory cells of the email client Thunderbird, is related to errors in the code. Exploiting this vulnerability can allow a remote attacker to influence the operation of the program using a specially crafted ZIP...

The vulnerability of the Firefox browser, which allows a hacker to influence the operation of the program

The vulnerability of the nsZipArchive::BuildFileList function, which allows access to arbitrary memory cells and Firefox browsers, is related to code errors. Exploiting this vulnerability could allow a remote attacker to influence the operation of the program using a specially crafted ZIP archive...

Immunity Canvas: ADOBE_FLASH_VALUEOF

Name| adobeflashvalueof ---|--- CVE| CVE-2015-5119 Exploit Pack| CANVAS Description| adobeflashvalueof Notes| CVE Name: CVE-2015-5119 VENDOR: Adobe Notes: Tested on: - Windows 7 x86/x64 IE32/64 8, 9, 11 This module exploits a use after free vulnerability on Adobe Flash Player. When you have a...

(Pwn2Own) Microsoft Internet Explorer DataView Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within jscript9.dll...

PonyOS <= 3.0 - tty ioctl() Local Kernel Exploit

Exploit for linux platform in category local exploits Exploit Title: PonyOS include include int main struct winsize ws; printf"+ PonyOS = 3.0 ioctl local root exploit\n"; memcpy&ws,"\x90\x90\x90\x90\x8b\x45\x08\x89",8; ioctl0, TIOCSWINSZ, &ws; ioctl0, TIOCGWINSZ, void 0x0010f101; printf"- patched...

PonyOS 3.0 tty ioctl() Privilege Escalation

Exploit Title: PonyOS include include int main struct winsize ws; printf"+ PonyOS = 3.0 ioctl local root exploit\n"; memcpy&ws,"\x90\x90\x90\x90\x8b\x45\x08\x89",8; ioctl0, TIOCSWINSZ, &ws; ioctl0, TIOCGWINSZ, void 0x0010f101; printf"- patched syssetuid\n"; asm"movl $0x18,%eax"; asm"xorl...

Linux Kernel (PonyOS 3.0) - TTY ioctl() Local Privilege Escalation

Linux Kernel PonyOS 3.0 - TTY ioctl Local Privilege Escalation / Exploit Title: PonyOS include include int main struct winsize ws; printf"+ PonyOS = 3.0 ioctl local root exploit\n"; memcpy&ws,"\x90\x90\x90\x90\x8b\x45\x08\x89",8; ioctl0, TIOCSWINSZ, &ws; ioctl0, TIOCGWINSZ, void 0x0010f101;...

Adobe Acrobat Pro Spell customDictionaryExport Information Disclosure Vulnerability

This vulnerability allows remote attackers to leak memory addresses from Spell.api on vulnerable installations of Adobe Acrobat Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2015-0664

The IPC channel in Cisco AnyConnect Secure Mobility Client 4.0.00051 and earlier allows local users to write to arbitrary userspace memory locations, and consequently gain privileges, via crafted messages, aka Bug ID CSCus79195...

CVE-2014-8159

The InfiniBand IB implementation in the Linux kernel package before 2.6.32-504.12.2 on Red Hat Enterprise Linux RHEL 6 does not properly restrict use of User Verbs for registration of memory regions, which allows local users to access arbitrary physical memory locations, and consequently cause a...

CVE-2015-1515

The dwall.sys driver in SoftSphere DefenseWall Personal Firewall 3.24 allows local users to write data to arbitrary memory locations, and consequently gain privileges, via a crafted 0x00222000, 0x00222004, 0x00222008, 0x0022200c, or 0x00222010 IOCTL call...

CVE-2015-1515

CVE-2015-1515 affects SoftSphere DefenseWall Personal Firewall 3.24. The dwall.sys driver allows local users to escalate privileges by writing to arbitrary memory locations through crafted IOCTLs (0x00222000, 0x00222004, 0x00222008, 0x0022200c, 0x00222010). Multiple sources corroborate a local pr...

CVE-2015-1515: Undefined Security Weakness

The dwall.sys driver in SoftSphere DefenseWall Personal Firewall 3.24 allows local users to write data to arbitrary memory locations, and consequently gain privileges, via a crafted 0x00222000, 0x00222004, 0x00222008, 0x0022200c, or 0x00222010 IOCTL call...

BullGuard AntiVirus 'BdAgent.sys' Driver Local Privilege Escalation Vulnerability

BullGuard AntiVirus is prone to a local privilege escalation vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2015-1305

McAfee Data Loss Prevention Endpoint DLPe before 9.3.400 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 1 0x00224014 or 2 0x0022c018 IOCTL call...