DEBIAN-CVE-2008-5030

Heap-based buffer overflow in the cddbreaddiscdata function in cddb.c in libcdaudio 0.99.12p2 allows remote CDDB servers to execute arbitrary code via long CDDB data...

GEAR Software CD DVD Filter Driver Insecure Method Local Privilege Escalation

The version of GEAR Software's CD DVD Filter kernel driver GEARAspiWDM.sys on the remote host contains an insecure method that allows a local user to make an unlimited number of calls to 'IoAttachDevice' from user-land, thereby enabling him to exploit a local privilege escalation flaw in the...

Gear Software CD DVD Filter driver privilege escalation vulnerability

Overview The Gear Software CD DVD Filter driver contains a privilege escalation vulnerability, which can allow an attacker to gain SYSTEM privileges. Description Gear Software provides a driver called CD DVD Filter, which is provided by GEARAspiWDM.sys. This driver is used by multiple CD/DVD...

[security bulletin] HPSBMA02373 SSRT071467 rev.1 - HP Insight Diagnostics, Remote Unauthorized Access to Files

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01561336 Version: 1 HPSBMA02373 SSRT071467 rev.1 - HP Insight Diagnostics, Remote Unauthorized Access to Files NOTICE: The information in this Security Bulletin should be acted upon as soon as...

CVE-2008-3636

Integer overflow in the IopfCompleteRequest API in the kernel in Microsoft Windows 2000, XP, Server 2003, and Vista allows context-dependent attackers to gain privileges. NOTE: this issue was originally reported for GEARAspiWDM.sys 2.0.7.5 in Gear Software CD DVD Filter driver before 4.001.7, as...

Unfixed XSS vulnerability at cd-log.co.il

Security researcher BlueMax, has submitted on 09/08/2008 a cross-site-scripting XSS vulnerability affecting cd-log.co.il, which at the time of submission ranked 3973593 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/08/2008. It is currently...

Acoustica MP3 CD Burner 4.51 Build 147 (asx file) Local BOF Exploit

No description provided by source. !/usr/bin/perl Acoustica MP3 CD Burner asx file Local BOF Exploit Author: Koshi Date: 08-29-08 0day Application: Acoustica MP3 CD Burner Version: 4.51 Build 147 possibly older Site: http://acoustica.com/download.htm Tested On: Windows XP SP3 Fully Patched Based...

Acoustica MP3 CD Burner 4.51 Build 147 (asx file) Local BOF Exploit

Exploit for unknown platform in category local exploits =================================================================== Acoustica MP3 CD Burner 4.51 Build 147 asx file Local BOF Exploit =================================================================== !/usr/bin/perl Acoustica MP3 CD Burner...

Acoustica MP3 CD Burner 4.51 Build 147 - .asx Local Buffer Overflow

Acoustica MP3 CD Burner 4.51 Build 147 - .asx Local Buffer Overflow !/usr/bin/perl Acoustica MP3 CD Burner asx file Local BOF Exploit Author: Koshi Date: 08-29-08 0day Application: Acoustica MP3 CD Burner Version: 4.51 Build 147 possibly older Site: http://acoustica.com/download.htm Tested On:...

Acoustica MP3 CD Burner 4.51 Build 147 - '.asx' Local Buffer Overflow

!/usr/bin/perl Acoustica MP3 CD Burner asx file Local BOF Exploit Author: Koshi Date: 08-29-08 0day Application: Acoustica MP3 CD Burner Version: 4.51 Build 147 possibly older Site: http://acoustica.com/download.htm Tested On: Windows XP SP3 Fully Patched Based off of n00b's findings...

CVE-2008-0959

Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioInformation2 ActiveX control in NCTAudioInformation2.dll, as used in 1 Power Audio CD Grabber 1.0, 2 Power Audio CD Burner 1.02, 3 CinematicMP3 1.4.0.0, 4 Alive MP3 WAV Converter 3.9.3.2, and possibly other...

Stack overflow

Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioInformation2 ActiveX control in NCTAudioInformation2.dll, as used in 1 Power Audio CD Grabber 1.0, 2 Power Audio CD Burner 1.02, 3 CinematicMP3 1.4.0.0, 4 Alive MP3 WAV Converter 3.9.3.2, and possibly other...

CVE-2008-0959: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioInformation2 ActiveX control in NCTAudioInformation2.dll, as used in 1 Power Audio CD Grabber 1.0, 2 Power Audio CD Burner 1.02, 3 CinematicMP3 1.4.0.0, 4 Alive MP3 WAV Converter 3.9.3.2, and possibly other...

[SECURITY] Fedora 8 Update: blender-2.45-14.fc8

Blender is the essential software solution you need for 3D, from modeling, animation, rendering and post-production to interactive creation and playba ck. Professionals and novices can easily and inexpensively publish stand-alone, secure, multi-platform content to the web, CD-ROMs, and other medi...

CVE-2008-0951

Microsoft Windows Vista does not properly enforce the NoDriveTypeAutoRun registry value, which allows user-assisted remote attackers, and possibly physically proximate attackers, to execute arbitrary code by inserting a 1 CD-ROM device or 2 U3-enabled USB device containing a filesystem with an...

Code injection

Microsoft Windows Vista does not properly enforce the NoDriveTypeAutoRun registry value, which allows user-assisted remote attackers, and possibly physically proximate attackers, to execute arbitrary code by inserting a 1 CD-ROM device or 2 U3-enabled USB device containing a filesystem with an...

CVE-2008-0951

Microsoft Windows Vista does not properly enforce the NoDriveTypeAutoRun registry value, which allows user-assisted remote attackers, and possibly physically proximate attackers, to execute arbitrary code by inserting a 1 CD-ROM device or 2 U3-enabled USB device containing a filesystem with an...

Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : libcdio vulnerability (USN-580-1)

Devon Miller discovered that the iso-info and cd-info tools did not properly perform bounds checking. If a user were tricked into using these tools with a crafted iso image, an attacker could cause a denial of service core dump and possibly execute arbitrary code. Note that Tenable Network Securi...

USN-580-1: libcdio vulnerability

Devon Miller discovered that the iso-info and cd-info tools did not properly perform bounds checking. If a user were tricked into using these tools with a crafted iso image, an attacker could cause a denial of service core dump and possibly execute arbitrary code...

libcdio: User-assisted execution of arbitrary code

Background libcdio is a library for accessing CD-ROM and CD images. Description Devon Miller reported a boundary error in the "printiso9660recurse" function in files cd-info.c and iso-info.c when processing long filenames within Joliet images. Impact A remote attacker could entice a user to open ...