PT-2021-30447

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.214 Description The issue is related to a mismatch between reconstructed freelist depth and cnt in the slub allocator. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2021-26480

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.156 Description The issue is related to a mismatch between reconstructed freelist depth and cnt in the slub allocator. The actual impact and attack plausibility have not yet been proven. Recommendations For...

UVI-2021-1001839 mm, slub: fix mismatch between reconstructed freelist depth and cnt

mm, slub: fix mismatch between reconstructed freelist depth and cnt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.76 by commit...

PT-2021-26309

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.76 Description: The issue is related to a mismatch between reconstructed freelist depth and cnt in the slub component of the Linux Kernel. The actual impact and attack plausibility have not yet been proven...

PT-2021-26344

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.15 Description: The issue is related to a mismatch between reconstructed freelist depth and cnt in the slub allocator. The actual impact and attack plausibility have not yet been proven. Recommendations: F...

PT-2021-20522

Name of the Vulnerable Software and Affected Versions: Zoom On-Premise Meeting Connector Controller versions prior to 4.6.358.20210205 Description: The Zone Controller service does not verify the cnt field sent in incoming network packets, leading to exhaustion of resources and system crash...

CVE-2021-34415: Allocation of Resources Without Limits or Throttling

The Zone Controller service in the Zoom On-Premise Meeting Connector Controller before version 4.6.358.20210205 does not verify the cnt field sent in incoming network packets, which leads to exhaustion of resources and system crash...

Rockwell Automation PM3000 M6 w/ControlNet, Class 0.5 1404-M6xxx-CNT

Binary data 753890.prm...

Rockwell Automation PowerMonitor 5000 1426-M6E-CNT-A PowerMonitor 5000 Series

Binary data 754709.prm...

Rockwell Automation PowerMonitor 5000 1426-M8E-CNT-A PowerMonitor 5000 Series

Binary data 754712.prm...

Rockwell Automation PM3000 M8 w/ControlNet, Class 0.2 1404-M8xxx-CNT-02

Binary data 753895.prm...

Rockwell Automation PM3000 M5 w/ControlNet, Class 0.5 1404-M5xxx-CNT

Binary data 753886.prm...

Rockwell Automation PowerMonitor 5000 1426-M5E-CNT-A PowerMonitor 5000 Series

Binary data 754707.prm...

Microsoft Windows 2000 Help Facility .CNT File :Link Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7102/info The Microsoft Windows 2000 Help facility does not perform sufficient bounds checking on .cnt files. If a .cnt file containing an unusually long :Link URI was opened by the Windows Help facility, a buffer would b...

Microsoft Windows NT 4.0/4.0 SP1/4.0 SP2/4.0 SP3/4.0 SP4/4.0 SP5 Help File Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/261/info Lax permission in the Windows NT help file folder and a buffer overflow in the Help utility may allow malicious users to gain Administrator privileges. The Windows NT Help utility parses and displays help...

Online Community CMS by I-net - SQL Injection

Exploit Title: Online Community CMS by I-net SQL Injection Vulnerability Date: 16-03-2010 Author: Th3 RDX Software Link: www.i-netsolution.com/online-community-php-scripts.html Version: Tested on: Projects Made By Them category: webapp Code :...

Microsoft Help Workshop .CNT file buffer overflow

Added: 01/31/2007 CVE: CVE-2007-0352 BID: 22100 OSVDB: 31898 Background Microsoft Help Workshop is a standard component of Microsoft Visual Studio and is also available as a standalone product. Problem A buffer overflow vulnerability in Microsoft Help Workshop allows command execution when a user...

cnt-exploit.txt

Description: There is a stack based memory corruption in Microsoft Help Workshop while processing .CNT Help Contents files, The tool is standard component of Microsoft Visual Studio 6.0 and 2003 .NET for building and managing help projects and could be also downloaded alone from the Microsoft...

Microsoft Help Workshop buffer overflow

Buffer overflow on .cnt / .hpj files parsing...

CVE-2007-0352: Undefined Security Weakness

Stack-based buffer overflow in Microsoft Help Workshop 4.03.0002 allows user-assisted remote attackers to execute arbitrary code via a crafted .cnt file composed of lines that begin with an integer followed by a space and a long string...