Samba 3.0.21-3.0.24 LSA trans names Heap Overflow

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

Samba lsa_io_trans_names Heap Overflow

This module triggers a heap overflow in the LSA RPC service of the Samba daemon. This module uses the TALLOC chunk overwrite method credit Ramon and Adriano, which only works with Samba versions 3.0.21-3.0.24. Additionally, this module will not work when the Samba "log level" parameter is higher...

File(1) 4.13 - Command File_PrintF Integer Underflow

// source: https://www.securityfocus.com/bid/23021/info The file1 command is prone to an integer-underflow vulnerability because the command fails to adequately handle user-supplied data. An attacker can leverage this issue to corrupt heap memory and execute arbitrary code with the privileges of ...

FreeBSD : ktorrent -- multiple vulnerabilities (73f53712-d028-11db-8c07-0211d85f11fb)

Two problems have been found in KTorrent : - KTorrent does not properly sanitize file names to filter out '..' components, so it's possible for an attacker to create a malicious torrent in order to overwrite arbitrary files within the filesystem. - Messages with invalid chunk indexes aren't...

ktorrent -- multiple vulnerabilities

Two problems have been found in KTorrent: KTorrent does not properly sanitize file names to filter out ".." components, so it's possible for an attacker to create a malicious torrent in order to overwrite arbitrary files within the filesystem. Messages with invalid chunk indexes aren't rejected...

CVE-2006-6601: Undefined Security Weakness

Windows Media Player 10.00.00.4036 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial of service via a .MID MIDI file with a malformed header chunk without any track chunks, possibly involving 1 number of tracks of 2 time division fields that are set to 0...

Sophos Antivirus CHM Chunk Name Length Memory Corruption PoC

Exploit for multiple platform in category dos / poc ============================================================ Sophos Antivirus CHM Chunk Name Length Memory Corruption PoC ============================================================ http://www.inj3ct0r.com/sploits/6240.chm 0day.today 2018-04-03...

Sophos AntiVirus - .CHM Chunk Name Length Memory Corruption (PoC)

Sophos AntiVirus - .CHM Chunk Name Length Memory Corruption PoC Sophos Antivirus CHM Chunk Name Length Memory Corruption Vulnerability https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/2911.chm 12092006-sophosnamelen.chm milw0rm.com 2006-12-10...

Sophos AntiVirus - '.CHM' Chunk Name Length Memory Corruption (PoC)

Sophos Antivirus CHM Chunk Name Length Memory Corruption Vulnerability https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/2911.chm 12092006-sophosnamelen.chm milw0rm.com 2006-12-10...

Sophos Antivirus CHM Chunk Name Length Memory Corruption PoC

No description provided by source. Sophos Antivirus CHM Chunk Name Length Memory Corruption Vulnerability http://www.milw0rm.com/sploits/12092006-sophosnamelen.chm...

GLSA-200611-09 : libpng: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200611-09 libpng: Denial of Service Tavis Ormandy of the Gentoo Linux Security Audit Team discovered that a vulnerability exists in the sPLT chunk handling code of libpng, a large sPLT chunk may cause an application to attempt to...

CVE-2006-5793

The sPLT chunk handling code pngsetsPLT function in pngset.c in libpng 1.0.6 through 1.2.12 uses a sizeof operator on the wrong data type, which allows context-dependent attackers to cause a denial of service crash via malformed sPLT chunks that trigger an out-of-bounds read...

libpng: Denial of service

Background libpng is a free ANSI C library used to process and manipulate PNG images. Description Tavis Ormandy of the Gentoo Linux Security Audit Team discovered that a vulnerability exists in the sPLT chunk handling code of libpng, a large sPLT chunk may cause an application to attempt to read...

Clam AntiVirus <= 0.88.4 CHM Chunk Name Length DoS PoC

No description provided by source. !/usr/bin/perl Clam AntiVirus ClamAV CHM Chunk Name Length DoS Vulnerability Took Damian Put's poc and shortened it just a little. All credits to Damian Put pucikatgazeta.pl [email protected] www.overflow.pl /str0ke my $clam =...

Clam AntiVirus 0.88.4 - CHM Chunk Name Length Denial of Service (PoC)

Clam AntiVirus 0.88.4 - CHM Chunk Name Length Denial of Service PoC !/usr/bin/perl Clam AntiVirus ClamAV CHM Chunk Name Length DoS Vulnerability Took Damian Put's poc and shortened it just a little. All credits to Damian Put pucikatgazeta.pl [email protected] www.overflow.pl /str0ke my $clam =...

Clam AntiVirus <= 0.88.4 CHM Chunk Name Length DoS PoC

Exploit for multiple platform in category dos / poc ====================================================== Clam AntiVirus = 0.88.4 CHM Chunk Name Length DoS PoC ====================================================== !/usr/bin/perl Clam AntiVirus ClamAV CHM Chunk Name Length DoS Vulnerability Took...

Clam AntiVirus 0.88.4 - CHM Chunk Name Length Denial of Service (PoC)

!/usr/bin/perl Clam AntiVirus ClamAV CHM Chunk Name Length DoS Vulnerability Took Damian Put's poc and shortened it just a little. All credits to Damian Put pucikatgazeta.pl [email protected] www.overflow.pl /str0ke my $clam =...

[Reversemode Advisory] Apple Quicktime FLIC File Heap Overflow

Hi, Apple Quicktime = 7.1 is prone to a heap overflow vulnerability. This flaw could lead to a remote code execution,if an attacker tricks the victim to visit a malicious webpage with a specially crafted .fli animation embedded. The flaw is located within the "COLOR64 chunk" Quicktime parser. Sin...

CVE-2006-4384: Undefined Security Weakness

Heap-based buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via the COLOR64 chunk in a FLIC FLC movie...

kernel security update

CentOS Errata and Security Advisory CESA-2006:0617 Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel...