Lucene search
+L

235 matches found

NVD
NVD
added 2009/02/10 7:0 a.m.19 views

CVE-2009-0443

Stack-based buffer overflow in Elecard AVC HD PLAYER 5.5.90116 allows remote attackers to execute arbitrary code via an M3U file containing a long string in a URL...

9.3CVSS8.1AI score0.05586EPSS
Exploits1References4
Prion
Prion
added 2009/02/10 7:0 a.m.13 views

Stack overflow

Stack-based buffer overflow in Elecard AVC HD PLAYER 5.5.90116 allows remote attackers to execute arbitrary code via an M3U file containing a long string in a URL...

9.3CVSS8.7AI score0.05586EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2009/02/05 8:0 p.m.24 views

CVE-2009-0443

Stack-based buffer overflow in Elecard AVC HD PLAYER 5.5.90116 allows remote attackers to execute arbitrary code via an M3U file containing a long string in a URL...

8.1AI score0.05586EPSS
Exploits1References4
CVE
CVE
added 2009/02/05 8:0 p.m.49 views

CVE-2009-0443

CVE-2009-0443 : A stack-based buffer overflow in Elecard AVC HD PLAYER 5.5.90116 allows remote attackers to execute arbitrary code via an M3U file containing a long string in a URL. Affected software is Elecard AVC HD PLAYER 5.5.90116. The underlying cause is a stack overflow triggered by a long ...

9.3CVSS8.3AI score0.05586EPSS
Exploits1References4Affected Software1
seebug.org
seebug.org
added 2009/02/04 12:0 a.m.12 views

Elecard AVC HD PLAYER (m3u/xpl file) Local Stack Overflow PoC

No description provided by source. !/usr/bin/perl Elecard AVC HD PLAYER m3u/xpl file Local Stack Overflow POC Found By AlpHaNiX From NullArea.Net proof of concept Stack Get Overflowed Starting from 2353 char EIP overitten ------------------ REGISTRES ------------------ EAX 00000000 ECX 41414141 E...

7.1AI score
Exploits0
exploitpack
exploitpack
added 2009/02/02 12:0 a.m.12 views

Elecard AVC HD player - .m3u .xpl Local Stack Overflow (PoC)

Elecard AVC HD player - .m3u .xpl Local Stack Overflow PoC !/usr/bin/perl Elecard AVC HD PLAYER m3u/xpl file Local Stack Overflow POC Found By AlpHaNiX From NullArea.Net proof of concept Stack Get Overflowed Starting from 2353 char EIP overitten ------------------ REGISTRES ------------------ EAX...

0.3AI score
Exploits0
0day.today
0day.today
added 2009/02/02 12:0 a.m.54 views

Elecard AVC HD PLAYER (m3u/xpl file) Local Stack Overflow PoC

Exploit for unknown platform in category dos / poc ============================================================= Elecard AVC HD PLAYER m3u/xpl file Local Stack Overflow PoC ============================================================= !/usr/bin/perl Elecard AVC HD PLAYER m3u/xpl file Local Stack...

7AI score
Exploits0
Exploit DB
Exploit DB
added 2009/02/02 12:0 a.m.34 views

Elecard AVC HD player - '.m3u' / '.xpl' Local Stack Overflow (PoC)

!/usr/bin/perl Elecard AVC HD PLAYER m3u/xpl file Local Stack Overflow POC Found By AlpHaNiX From NullArea.Net proof of concept Stack Get Overflowed Starting from 2353 char EIP overitten ------------------ REGISTRES ------------------ EAX 00000000 ECX 41414141 EDX 775A104D ntdll.775A104D EBX...

7.4AI score
Exploits0
Oracle linux
Oracle linux
added 2008/05/30 12:0 a.m.34 views

setroubleshoot security and bug fix update

setroubleshoot: 2.0.5-3.0.1.el5 - replace missed references to bugzilla.redhat.com with linux.oracle.com 2.0.5-3 - Resolve: bug 436564: socket.getsockopt on ppc generates exception Fix typo in original setroubleshoot-getcredentials.patch 2.0.5-2 - Resolve: bug 437857: python error in system...

4.4CVSS6.5AI score0.00385EPSS
Exploits0
CVE
CVE
added 2008/05/23 2:0 p.m.56 views

CVE-2007-5496

CVE-2007-5496 is a cross-site scripting (XSS) vulnerability in setroubleshoot 2.0.5. An unescaped HTML/JS path could be triggered by crafted (1) file or (2) process name, causing an AVC log entry to be inserted into the HTML document composition for sealert. Public disclosures reference the issue...

1.9CVSS5.1AI score0.00385EPSS
Exploits0References7Affected Software1
Tenable Nessus
Tenable Nessus
added 2008/05/22 12:0 a.m.24 views

RHEL 5 : setroubleshoot (RHSA-2008:0061)

Updated setroubleshoot packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The setroubleshoot packages provide tools to help diagnose SELinux...

4.4CVSS5.9AI score0.00385EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2008/05/20 1:22 p.m.6 views

setroubleshoot log injection

Cross-site scripting XSS vulnerability in setroubleshoot 2.0.5 allows local users to inject arbitrary web script or HTML via a crafted 1 file or 2 process name, which triggers an Access Vector Cache AVC log entry in a log file used during composition of HTML documents for sealert...

1.9CVSS5.8AI score0.00385EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2008/05/20 1:22 p.m.25 views

Moderate: Red Hat Security Advisory: setroubleshoot security and bug fix update

Updated setroubleshoot packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The setroubleshoot packages provide tools to help diagnose SELinux...

4.4CVSS5.9AI score0.00385EPSS
Exploits0References13
Tenable Nessus
Tenable Nessus
added 2008/04/11 12:0 a.m.26 views

Fedora 8 : audit-1.6.8-4.fc8 (2008-3012)

This release fixes the init script headers to not provide LSB info. This was causing audit to start too late. It also fixes a problem where saddr fields were not being decoded correctly on avc events in ausearch. This also fixes a buffer overflow in auditlogusercommand that is caught by...

4.1CVSS5.8AI score0.01047EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2007/11/07 9:0 a.m.30 views

Moderate: Red Hat Security Advisory: conga security, bug fix, and enhancement update

Updated conga packages that correct a security flaw and provide bug fixes and add enhancements are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Conga package is a web-based administration tool for remote cluster and storag...

5CVSS5.8AI score0.01745EPSS
Exploits0References55
Rows per page
Query Builder