Apple iTunes Multiple Vulnerabilities (Jun 2013) - Windows

Apple iTunes is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:itunes"; ifdescription...

Linux Kernel "iscsi_add_notunderstood_response()"缓冲区溢出漏洞

CVE ID: CVE-2013-2850 Linux Kernel是一款开源的操作系统。 Linux iSCSI子系统存在一个基于堆的缓冲区溢出，允许远程攻击者利用漏洞发送特制请求获得内核执行控制。 在处理超大key时"iscsiaddnotunderstoodresponse"函数drivers/target/iscsi/iscsitargetparameters.c存在一个边界错误，允许攻击者发送超过64字节的KEY触发漏洞，可以以应用程序上下文执行任意代码。 要成功利用漏洞需要配置了iSCSI target并监听网络。 0 Linux Kernel 3.0.x Linux...

CVE-2013-3663 - SketchUp BMP RLE8 Heap Overflow

If you are still using a not so old version of SketchUp8M3 you should upgrade it... Title: SketchUp BMP RLE8 Heap Overflow Product: Google SketchUp Advisory ID: BINA-20120523 CVE ID: CVE-2013-3663 Class: Boundary Error Condition Buffer Overflow Vulnerability class: Client side/ file format...

MiniUPnP MiniUPnPd ProcessSSDPRequest Denial of Service (CVE-2013-0229)

A denial of service vulnerability has been reported in MiniUPnP MiniUPnPd. The vulnerability is due to a boundary error in ProcessSSDPRequest function. A remote attacker can exploit this vulnerability by sending specially crafted packet to the target. Successful exploitation could cause the servi...

FreeBSD : plib -- buffer overflow (13bf0602-c08a-11e2-bb21-083e8ed0f47b)

Secunia reports : A vulnerability has been discovered in PLIB, which can be exploited by malicious people to compromise an application using the library. The vulnerability is caused due to a boundary error within the 'ulSetError' function src/util/ulError.cxx when creating the error message, whic...

Sun Java Web Start Splashscreen GIF Decoding Buffer Overflow - Improved Performance (CVE-2008-2086)

The Sun Java Web Start is a component of the Java 2 Runtime Environment JRE. It allows for the network deployment of Java applications. This component enables stand-alone Java applications to be downloaded from a remote network location and invoked on a target machine. There exists a memory...

EMC NetWorker nsrindexd RPC Service Buffer Overflow (CVE-2012-4607)

A buffer overflow vulnerability has been reported in EMC NetWorker. The vulnerability is due to a boundary error when processing crafted RPC requests. A remote unauthenticated attacker could trigger this flaw by sending a crafted RPC request to the server...

ALLMediaServer 0.94 Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'ALLMediaServer 0....

BigAnt Server SCH Request Stack Buffer Overflow (CVE-2012-6275)

A stack buffer overflow vulnerability exists in BigAnt Server. The vulnerability is due to a boundary error when handling SCH and DUPF requests. Remote unauthenticated attackers can exploit this vulnerability by sending malicious requests to the target server. Successful exploitation would result...

Portable SDK for UPnP Devices libupnp Root Device Service Name Stack Buffer Overflow (CVE-2012-5960)

A stack buffer overflow vulnerability exists in Intel's SDK for UPnP and the Portable SDK for UPnP. The vulnerability is due to a boundary error while parsing service name URIs in the function called from the SSDP protocol parser. A remote attacker can exploit this vulnerability to execute...

KLA10165 ACE vulnerability in Foxit

A boundary error was found in Foxit products. By exploiting this vulnerability malicious users can cause deanial of service and execute arbitrary code. This vulnerability can be exploited via a specially dsigned URL. Original advisories Foxit bulletin Related products Foxit-Reader-Plugin...

Microsoft .NET Framework Privilege Elevation Vulnerability (2769324)

This host is missing an important security update according to Microsoft Bulletin MS13-004. OpenVAS Vulnerability Test $Id: secpodms13-004.nasl 5365 2017-02-20 13:46:09Z cfi $ Microsoft .NET Framework Privilege Elevation Vulnerability 2769324 Authors: Antu Sanadi Copyright: Copyright c 2013 SecPo...

Sony PC Companion 2.1 Admin_RemoveDirectory() Unicode Buffer Overflow

Sony PC Companion 2.1 AdminRemoveDirectory Stack-based Unicode Buffer Overload SEH Vendor: Sony Mobile Communications AB Product web page: http://www.sonymobile.com Affected version: 2.10.115 Production 27.1, Build 830 2.10.108 Production 26.1, Build 818 Summary: PC Companion is a computer...

Citrix Access Gateway Plug-in for Windows ActiveX Control StartEPA() Method HTTP Response Header Parsing Overflows (CTX134303)

The Citrix Access Gateway ActiveX control for Citrix Access Gateway Enterprise Edition is installed on the remote Windows host. It is the ActiveX component of the Citrix Access Gateway Plug-in for Windows and provides an SSL-based VPN via a web browser. The installed version of this control...

TurboFTP Server PORT Command Processing Buffer Overflow Vulnerability

TurboFTP server is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Adobe Photoshop PNG Image Processing Buffer Overflow Vulnerabilities - Windows

Adobe Photoshop is prone to buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:photoshopcs6";...

Adobe Photoshop CS6 - .png Parsing Heap Overflow

Adobe Photoshop CS6 - .png Parsing Heap Overflow Application: Adobe Photoshop CS6 PNG Parsing Heap Overflow Platforms: Windows & Macintosh Versions: 13.x Secunia: SA49141 PRL: 2012-27 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter:...

Adobe Photoshop CS6 - '.png' Parsing Heap Overflow

Application: Adobe Photoshop CS6 PNG Parsing Heap Overflow Platforms: Windows & Macintosh Versions: 13.x Secunia: SA49141 PRL: 2012-27 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Report Timeline 3 Technical...

Microsoft Visio DXF File Parsing Code Execution (MS12-059; CVE-2012-1888)

A remote code execution vulnerability has been report in Microsoft Office Visio. The vulnerability is due to a boundary error in Microsoft Office Visio when parsing specially crafted DXF files. A remote attacker can exploit this issue by enticing a target user to open a specially crafted Visio fi...

Scientific Linux Security Update : gnutls on SL5.x i386/x86_64 (20120327)

The GnuTLS library provides support for cryptographic algorithms and for protocols such as Transport Layer Security TLS. GnuTLS includes libtasn1, a library developed for ASN.1 Abstract Syntax Notation One structures management that includes DER Distinguished Encoding Rules encoding and decoding....