CVE-2009-1356

Stack-based buffer overflow in Elecard AVC HD Player allows remote attackers to execute arbitrary code via a long MP3 filename in a playlist .xpl file...

CVE-2009-1356

CVE-2009-1356 describes a stack-based buffer overflow in Elecard AVC HD Player. The vulnerability is triggered by a long MP3 filename in a playlist (.xpl) file, allowing remote attackers to execute arbitrary code. Affected software is Elecard AVC HD Player; the underlying issue is a buffer overfl...

Elecard AVC HD Player .XPL Stack Buffer Overflow (SEH) PoC

No description provided by source. /ELECARD AVC HD PLAYER STACK BUFFER OVERFLOW SEH OVERWRITE Name: elecard.c CREDITS: the one and only fl0 fl0w 004533AE . F3:A5 REP MOVS DWORD PTR ES:EDI,DWORD PTR DS SEH chain of main thread Address SE handler 0012CB54 FFFFFFFF Open in debugger and you'll see SE...

Elecard AVC HD Player - '.XPL' Stack Buffer Overflow (SEH) (PoC)

/ELECARD AVC HD PLAYER STACK BUFFER OVERFLOW SEH OVERWRITE Name: elecard.c CREDITS: the one and only fl0 fl0w 004533AE . F3:A5 REP MOVS DWORD PTR ES:EDI,DWORD PTR DS SEH chain of main thread Address SE handler 0012CB54 FFFFFFFF Open in debugger and you'll see SEH --FFFFFFFF and NEXTSEH EB049090 /...

Elecard AVC HD Player - .XPL Stack Buffer Overflow (SEH) (PoC)

Elecard AVC HD Player - .XPL Stack Buffer Overflow SEH PoC /ELECARD AVC HD PLAYER STACK BUFFER OVERFLOW SEH OVERWRITE Name: elecard.c CREDITS: the one and only fl0 fl0w 004533AE . F3:A5 REP MOVS DWORD PTR ES:EDI,DWORD PTR DS SEH chain of main thread Address SE handler 0012CB54 FFFFFFFF Open in...

CVE-2009-0443

Stack-based buffer overflow in Elecard AVC HD PLAYER 5.5.90116 allows remote attackers to execute arbitrary code via an M3U file containing a long string in a URL...

Stack overflow

Stack-based buffer overflow in Elecard AVC HD PLAYER 5.5.90116 allows remote attackers to execute arbitrary code via an M3U file containing a long string in a URL...

CVE-2009-0443

Stack-based buffer overflow in Elecard AVC HD PLAYER 5.5.90116 allows remote attackers to execute arbitrary code via an M3U file containing a long string in a URL...

CVE-2009-0443

CVE-2009-0443 : A stack-based buffer overflow in Elecard AVC HD PLAYER 5.5.90116 allows remote attackers to execute arbitrary code via an M3U file containing a long string in a URL. Affected software is Elecard AVC HD PLAYER 5.5.90116. The underlying cause is a stack overflow triggered by a long ...

Elecard AVC HD PLAYER (m3u/xpl file) Local Stack Overflow PoC

No description provided by source. !/usr/bin/perl Elecard AVC HD PLAYER m3u/xpl file Local Stack Overflow POC Found By AlpHaNiX From NullArea.Net proof of concept Stack Get Overflowed Starting from 2353 char EIP overitten ------------------ REGISTRES ------------------ EAX 00000000 ECX 41414141 E...

Elecard AVC HD PLAYER (m3u/xpl file) Local Stack Overflow PoC

Exploit for unknown platform in category dos / poc ============================================================= Elecard AVC HD PLAYER m3u/xpl file Local Stack Overflow PoC ============================================================= !/usr/bin/perl Elecard AVC HD PLAYER m3u/xpl file Local Stack...

Elecard AVC HD player - '.m3u' / '.xpl' Local Stack Overflow (PoC)

!/usr/bin/perl Elecard AVC HD PLAYER m3u/xpl file Local Stack Overflow POC Found By AlpHaNiX From NullArea.Net proof of concept Stack Get Overflowed Starting from 2353 char EIP overitten ------------------ REGISTRES ------------------ EAX 00000000 ECX 41414141 EDX 775A104D ntdll.775A104D EBX...

Elecard AVC HD player - .m3u .xpl Local Stack Overflow (PoC)

Elecard AVC HD player - .m3u .xpl Local Stack Overflow PoC !/usr/bin/perl Elecard AVC HD PLAYER m3u/xpl file Local Stack Overflow POC Found By AlpHaNiX From NullArea.Net proof of concept Stack Get Overflowed Starting from 2353 char EIP overitten ------------------ REGISTRES ------------------ EAX...

setroubleshoot security and bug fix update

setroubleshoot: 2.0.5-3.0.1.el5 - replace missed references to bugzilla.redhat.com with linux.oracle.com 2.0.5-3 - Resolve: bug 436564: socket.getsockopt on ppc generates exception Fix typo in original setroubleshoot-getcredentials.patch 2.0.5-2 - Resolve: bug 437857: python error in system...

CVE-2007-5496

CVE-2007-5496 is a cross-site scripting (XSS) vulnerability in setroubleshoot 2.0.5. An unescaped HTML/JS path could be triggered by crafted (1) file or (2) process name, causing an AVC log entry to be inserted into the HTML document composition for sealert. Public disclosures reference the issue...

RHEL 5 : setroubleshoot (RHSA-2008:0061)

Updated setroubleshoot packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The setroubleshoot packages provide tools to help diagnose SELinux...

setroubleshoot log injection

Cross-site scripting XSS vulnerability in setroubleshoot 2.0.5 allows local users to inject arbitrary web script or HTML via a crafted 1 file or 2 process name, which triggers an Access Vector Cache AVC log entry in a log file used during composition of HTML documents for sealert...

Moderate: Red Hat Security Advisory: setroubleshoot security and bug fix update

Updated setroubleshoot packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The setroubleshoot packages provide tools to help diagnose SELinux...

Fedora 8 : audit-1.6.8-4.fc8 (2008-3012)

This release fixes the init script headers to not provide LSB info. This was causing audit to start too late. It also fixes a problem where saddr fields were not being decoded correctly on avc events in ausearch. This also fixes a buffer overflow in auditlogusercommand that is caught by...

Moderate: Red Hat Security Advisory: conga security, bug fix, and enhancement update

Updated conga packages that correct a security flaw and provide bug fixes and add enhancements are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Conga package is a web-based administration tool for remote cluster and storag...