Ubuntu 10.04 LTS / 10.10 : linux, linux-ec2 vulnerabilities (USN-1054-1)

Gleb Napatov discovered that KVM did not correctly check certain privileged operations. A local attacker with access to a guest kernel could exploit this to crash the host system, leading to a denial of service. CVE-2010-0435 Dan Rosenberg discovered that the Linux kernel TIPC implementation...

CVE-2010-3567

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle ha...

CVE-2010-3567

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle ha...

CVE-2010-2741

The OpenType Font OTF format driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 performs an incorrect integer calculation during font processing, which allows local users to gain privileges via a crafted application, aka "OpenType Font Validation Vulnerability."...

OpenType Font (OTF) Format Driver Privilege Elevation Vulnerabilities (2279986)

This host is missing a critical security update according to Microsoft Bulletin MS10-078. OpenVAS Vulnerability Test $Id: secpodms10-078.nasl 5361 2017-02-20 11:57:13Z cfi $ OpenType Font OTF Format Driver Privilege Elevation Vulnerabilities 2279986 Authors: Madhuri D Copyright c 2010 SecPod,...

Backdoor Password In 3Com / Dell / SMC / Foundry / EdgeCore Switches

On the 15th of august 2009, at the HAR2009 conference, the existence of a backdoor password in Accton-based switches was revealed by Edwin Eefting, Erik Smit and Erwin Drent 12. Even though this is a 365-day exploit, it does not seem to be listed in any of the vulnerability databases. Also, I cou...

CVE-2010-2876

CVE-2010-2876 concerns Adobe Shockwave Player. The vulnerability lies in parsing a FFFFFF88 record in Director (.dir/.dcr) files, where values used to compute a heap buffer size are overflowed, leading to heap memory corruption and potential remote code execution. Affected product: Shockwave Play...

Microsoft Windows Contacts DLL Hijacking Exploit

/ Exploit Title: Microsoft Windows Contacts DLL Hijacking Exploit wab32res.dll Date: August 25, 2010 Author: storm [email protected] Tested on: Windows Vista SP2 http://www.gonullyourself.org/ gcc -shared -o wab32res.dll Contacts-DLL.c .contact, .group, .p7c, .vcf, and .wab files are...

PHP-Nuke 8.0 Remote Blind SQL Injection

PHP-Nuke new; my $average = 0; print "+ Calculating average load time it may take a while ...\n"; for my $i = 0; $i get$hosto; my $time = time; $average += int$time-$bef; return $average/5; sub Nuke::Usage print "+ Usage: perl nuke.pl \n"; print "+ the host must be the complete path to...

Traceroute

Collect information about the network route and network distance between the scanner host and the target host. Copyright C 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

minerCPP 0.4b - Remote Buffer Overflow Format String

minerCPP 0.4b - Remote Buffer Overflow Format String !/usr/bin/env python minerCPP 0.4b Remote BOF+Format String Attack Exploit Software Link: http://sourceforge.net/projects/minercpp/ Author: l3D Sites: http://xraysecurity.blogspot.com, http://nullbyte.org.il IRC: irc://irc.nix.co.il Email:...

Fedora 11 : dsniff-2.4-0.9.b1.fc11 / libnids-1.24-1.fc11 (2010-5545)

libnids 1.24 Mar 14 2010: - fixed another remotely triggerable NULL dereference in ipfragment.c - unofficial patch that enables tracking of already established TCP connections - missing reset of some tcp variables upon nidsexit - correct calculation of radiotap header - compilation warning fixes...

Fedora 11 : samba-3.4.5-0.47.fc11 (2010-1190)

Tue Jan 26 2010 Guenther Deschner - 3.4.5-0.47 - Security Release, fixes CVE-2009-3297 - resolves: 532940 - Tue Jan 19 2010 Guenther Deschner - 3.4.5-0.46 - Update to 3.4.5 - Thu Jan 7 2010 Guenther Deschner - 3.4.4-0.45 - Update to 3.4.4 - Thu Oct 29 2009 Guenther Deschner - 3.4.3-0.44 - Update...

CVE-2010-2162

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service heap memory corruption or possibly execute arbitrary code via vectors related to improper length calculation and the 1 STSC, 2 STSZ, and 3 STCO atoms...

CVE-2010-2162

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service heap memory corruption or possibly execute arbitrary code via vectors related to improper length calculation and the 1 STSC, 2 STSZ, and 3 STCO atoms...

Memory corruption

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service heap memory corruption or possibly execute arbitrary code via vectors related to improper length calculation and the 1 STSC, 2 STSZ, and 3 STCO atoms...

win32/xp sp3 Fr (calc.exe) Shellcode 31 bytes

Exploit for win32 platform in category shellcode ============================================= win32/xp sp3 Fr calc.exe Shellcode 31 Bytes ============================================= / | Title: Windows Xp Pro SP3 Fr calc.exe Shellcode 31 Bytes | Type: Shellcode | Author: agix | Platform: win32 ...

Mozilla Firefox Top-level Script Object Offset Calculation Memory Corruption (CVE-2009-3073)

Mozilla Firefox is a web browser developed by Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions of HTML, CSS, XML, XUL, JavaScript, various graphics formats, and so on. The browser runs on the...

Microsoft Windows Outlook Express and Windows Mail Integer Overflow

No description provided by source. Application: Microsoft Outlook Express Microsoft Windows Mail Platforms: Windows 2000 Windows XP Windows Vista Windows server 2003 Windows Server 2008 SR2 Exploitation: Remote Exploitable CVE Number: CVE-2010-0816 Discover Date: 2009-09-11 Author: Francis...

Microsoft Outlook Express and Windows Mail Integer Overflow (MS10-030; CVE-2010-0816)

Windows Mail formerly Outlook Express is an online communication tool for use with Windows. A remote code execution vulnerability has been reported in the way that Windows Mail Client handles specially crafted mail responses. The vulnerability is caused when a common library used by Outlook Expre...