kernel: arbitrary kernel memory write via i915 GEM ioctl

drivers/gpu/drm/i915/i915gem.c in the Graphics Execution Manager GEM in the Intel i915 driver in the Direct Rendering Manager DRM subsystem in the Linux kernel before 2.6.36 does not properly validate pointers to blocks of memory, which allows local users to write to arbitrary kernel memory...

Linux Kernel VIDIOCSMICROCODE IOCTL Local Memory Overwrite

/ CVE-2010-2963 Arbitrary write memory write via v4l1 compat ioctl. Kees Cook greets to drosenberg, spender, taviso / define GNUSOURCE include include include include include include "expframework.h" include include include include include include include include include include struct capheadert...

Linux Kernel 2.6.36 - VIDIOCSMICROCODE IOCTL Local Memory Overwrite

Linux Kernel 2.6.36 - VIDIOCSMICROCODE IOCTL Local Memory Overwrite // source: https://www.securityfocus.com/bid/44242/info / CVE-2010-2963 Arbitrary write memory write via v4l1 compat ioctl. Kees Cook greets to drosenberg, spender, taviso / define GNUSOURCE include include include include includ...

Microsoft WINS - Service Memory Overwrite (MS04-045) (Metasploit)

$Id: ms04045wins.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Apple QTJava - 'toQTPointer()' Arbitrary Memory Access (Metasploit)

$Id: qtjavapointer.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

CVE-2010-2965

The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and 3.6.1 and other products, allows remote attackers to read or modify arbitrary memory locations, perform function calls, or manage tasks via...

CVE-2010-2965: Incorrect Authorization

The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and 3.6.1 and other products, allows remote attackers to read or modify arbitrary memory locations, perform function calls, or manage tasks via...

PHP < 5.2.14 / 5.3.x < 5.3.3 Multiple Vulnerabilities

Binary data 5616.prm...

PHP < 5.3.3 / 5.2.14 Multiple Vulnerabilities

Binary data 801070.prm...

CVE-2010-1861: Undefined Security Weakness

The sysvshm extension for PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to write to arbitrary memory addresses by using an object's sleep function to interrupt an internal call to the shmputvar function, which triggers access of a freed resource...

Avast! 4.7 - 'aavmker4.sys' Local Privilege Escalation

!/usr/bin/python avast! 4.7 aavmker4.sys privilege escalation http://www.trapkit.de/advisories/TKADV2008-002.txt CVE-2008-1625 Tested on WindXpSp2/Sp3 Dep ON Matteo Memelli ryujin A-T offensive-security.com www.offensive-security.com Spaghetti & Pwnsauce - 17/04/2010 Tested on WinXPSP2/SP3 englis...

CVE-2010-0415: Undefined Security Weakness

The dopagesmove function in mm/migrate.c in the Linux kernel before 2.6.33-rc7 does not validate node values, which allows local users to read arbitrary kernel memory locations, cause a denial of service OOPS, and possibly have unspecified other impact by specifying a node that is not part of the...

CVE-2010-0003

The printfatalsignal function in kernel/signal.c in the Linux kernel before 2.6.32.4 on the i386 platform, when print-fatal-signals is enabled, allows local users to discover the contents of arbitrary memory locations by jumping to an address and then reading a log file, and might allow local use...

[oCERT-2009-017] PHP multiple issues

2009-017 PHP multiple issues Description: PHP, an open source scripting language, suffers from several bugs that may pose a security risk. The reported issues have been discovered in several API functions, issues include buffer overflows, near null reads/writes, arbitrary memory read and an...

Apple QTJava toQTPointer() Arbitrary Memory Access

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Apple QTJava toQTPointer Arbitra...

GLSA-200910-02 : Pidgin: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200910-02 Pidgin: Multiple vulnerabilities Multiple vulnerabilities were found in Pidgin: Yuriy Kaminskiy reported that the OSCAR protocol implementation in Pidgin misinterprets the ICQWebMessage message type as the ICQSMS message...

SuSE9 Security Update : libpng (YOU Patch Number 12141)

Specially crafted PNG files could overwrite arbitrary memory. Attackers could potentially exploit that to execute arbitrary code. CVE-2008-1382 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

SuSE9 Security Update : XFree86 (YOU Patch Number 12170)

This update fixes multiple vulnerabilities reported by iDefense : - RENDER Extension heap buffer overflow. CVE-2008-2360 - RENDER Extension crash. CVE-2008-2361 - RENDER Extension memory corruption . CVE-2008-2362 - MIT-SHM arbitrary memory read. CVE-2008-1379 - RECORD and Security extensions...

Microsoft Windows Kernel win32k.sys Privilege Escalation Vulnerability

Windows XP/2003 is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-2653

Summary: CVE-2009-2653 affects Microsoft Windows XP (SP2/SP3) and Windows Server 2003 (pre-SP1) due to a flaw in the NtUserConsoleControl function in win32k.sys. The OpenVAS and related records describe a local privilege-escalation vulnerability in win32k.sys, enabling an administrator to elevate...