6566 matches found
linux/x86 stdin re-open and /bin/sh exec shellcode
linux/x86 stdin re-open and /bin/sh exec shellcode. Shellcode exploit for linx86 platform / $Id: gets-linux.c,v 1.3 2004/06/02 12:22:30 raptor Exp $ gets-linux.c - stdin re-open shellcode for Linux/x86 Copyright c 2003 Marco Ivaldi Local shellcode for stdin re-open and /bin/sh exec. It closes std...
WinRAR LHA Filename Handling Buffer Overflows
The remote host is running WinRAR, an archive manager for Windows. The version of WinRAR installed on the remote host is affected by two stack-based buffer overflows when processing LHA files with specially- crafted filenames. Successful exploitation of either issue enables an attacker to execute...
CVE-2006-3600
Multiple stack-based buffer overflows in the LookupTRM::lookup function in libtunepimp TunePimp 0.4.2 allow remote user-assisted attackers to cause a denial of service application crash and possibly execute code via a long 1 Album release date MBEReleaseGetDate, 2 data, or 3 error strings...
CVE-2006-3600
Multiple stack-based buffer overflows in the LookupTRM::lookup function in libtunepimp TunePimp 0.4.2 allow remote user-assisted attackers to cause a denial of service application crash and possibly execute code via a long 1 Album release date MBEReleaseGetDate, 2 data, or 3 error strings...
Mandrake Linux Security Advisory : php (MDKSA-2006:122)
Multiple buffer overflows in the gd graphics library libgd 2.0.21 and earlier may allow remote attackers to execute arbitrary code via malformed image files that trigger the overflows due to improper calls to the gdMalloc function. One instance in gdiodp.c does not appear to be corrected in the...
CVE-2006-3600
Multiple stack-based buffer overflows in the LookupTRM::lookup function in libtunepimp TunePimp 0.4.2 allow remote user-assisted attackers to cause a denial of service application crash and possibly execute code via a long 1 Album release date MBEReleaseGetDate, 2 data, or 3 error strings...
Microsoft Works - Buffer Overflows / Denial of Service (DoS)-Vulnerabilities
Microsoft Works - Buffer Overflows / Denial of Service DoS-Vulnerabilities ... discovered by Benjamin Tobias Franz Affected Vendor: Microsoft Affected Product: Microsoft Works Description: Microsoft Works Spreadsheet wksss.exe fails to handle specially crafted files. All supported file formats...
CVE-2006-3581
Multiple stack-based buffer overflows in Audacious AdPlug 2.0 and earlier allow remote user-assisted attackers to execute arbitrary code via large 1 DTM and 2 S3M files...
CVE-2006-3581
Audacious AdPlug 2.0 and earlier are affected by multiple stack-based buffer overflows when processing DTM and S3M files. The underlying cause is improper handling of file payloads in AdPlug’s decoding paths, enabling remote user‑assisted code execution. Impact: attacker could run arbitrary code ...
CVE-2006-3582
Multiple heap-based buffer overflows in Audacious AdPlug 2.0 and earlier allow remote user-assisted attackers to execute arbitrary code via the size specified in the package header of 1 CFF, 2 MTK, 3 DMO, and 4 U6M files...
CVE-2006-3582
Multiple heap-based buffer overflows in Audacious AdPlug 2.0 and earlier allow remote user-assisted attackers to execute arbitrary code via the size specified in the package header of 1 CFF, 2 MTK, 3 DMO, and 4 U6M files...
GLSA-200607-03 : libTIFF: Multiple buffer overflows
The remote host is affected by the vulnerability described in GLSA-200607-03 libTIFF: Multiple buffer overflows A buffer overflow has been found in the t2pwritepdfstring function in tiff2pdf, which can been triggered with a TIFF file containing a DocumentName tag with UTF-8 characters. An...
GLSA-200607-02 : FreeType: Multiple integer overflows
The remote host is affected by the vulnerability described in GLSA-200607-02 FreeType: Multiple integer overflows Multiple integer overflows exist in a variety of files bdf/bdflib.c, sfnt/ttcmap.c, cff/cffgload.c, base/ftmac.c. Impact : A remote attacker could exploit these buffer overflows by...
libTIFF: Multiple buffer overflows
Background libTIFF provides support for reading and manipulating TIFF images. Description A buffer overflow has been found in the t2pwritepdfstring function in tiff2pdf, which can been triggered with a TIFF file containing a DocumentName tag with UTF-8 characters. An additional buffer overflow ha...
FreeType: Multiple integer overflows
Background FreeType is a portable font engine. Description Multiple integer overflows exist in a variety of files bdf/bdflib.c, sfnt/ttcmap.c, cff/cffgload.c, base/ftmac.c. Impact A remote attacker could exploit these buffer overflows by enticing a user to load a specially crafted font, which cou...
Multiple AdPlug Adlib library buffer overflows
Stack and heap based buffer overflows on CFF, MTK, DMO, DTM, S3M formats parsing...
CVE-2006-3424
Multiple buffer overflows in WebEx Downloader ActiveX Control, possibly in versions before November 2005, allow remote attackers to execute arbitrary code via unspecified vectors...
[SECURITY] [DSA 1104-2] New OpenOffice.org packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1104-2 [email protected] http://www.debian.org/security/ Martin Schulze July 6th, 2006 http://www.debian.org/security/faq -...
USN-309-1: libmms vulnerability
Several buffer overflows were found in libmms. By tricking a user into opening a specially crafted remote multimedia stream with an application using libmms, a remote attacker could overwrite an arbitrary memory portion with zeros, thereby crashing the program. In Ubuntu 5.10, this affects the...
[Full-disclosure] [USN-309-1] libmms vulnerability
=========================================================== Ubuntu Security Notice USN-309-1 July 05, 2006 libmms vulnerability CVE-2006-2200 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 5.10 This advisory also applies ...