271 matches found
UltraISO <= 8.6.2.2011 (Cue/Bin Files) Local Buffer Overflow PoC
Exploit for unknown platform in category dos / poc ================================================================ UltraISO = 8.6.2.2011 Cue/Bin Files Local Buffer Overflow PoC ================================================================ !/usr/bin/perl Credit:To n00b for finding this bug and...
UltraISO 8.6.2.2011 - '.cue/'.bin' Local Buffer Overflow (PoC)
!/usr/bin/perl Credit:To n00b for finding this bug and writing poc. Ultra ISO stack over flow poc code. Ultra iso is exploitable via opening a specially crafted Cue file..There is A limitation that the user must have the bin file in the same dir as the cue file. This is the reason i have provided...
Magic iso heap over flow <Help>
Ive found a heap over flow in magic iso when opening a .cue file..I was wondering if any one could point me in the right direction to exploiting this as we control the eax and ecx ive seen many diffrent ways of doing this through!peb and uef..Im looking for help in writing a simple poc for servic...
Magic ISO buffer overflow
Buffer overflow on .cue files parsing...
Stack overflow
Stack-based buffer overflow in MagicISO 5.4 build 239 and earlier allows remote attackers to execute arbitrary code via a long filename in a .cue file...
CVE-2007-2682
The CVE-2007-2682 issue affects Adobe Version Cue CS3 Server on Mac OS X (CS3). The installer fails to re-enable the personal firewall after installation, which can allow remote attackers to bypass firewall rules intended to restrict access. The vulnerability is demonstrated by the product’s inst...
MagicISO <= 5.4(build239) .cue File Heap Overflow PoC
No description provided by source. !/usr/bin/env ruby Credits to n00b for finding this bug. Magic iso has a stacked based buffer over-flow when We pass an overly-long file name inside the .cue file We are able to control alot of the registers so Command execution is possible,But im still learning...
MagicISO 5.4 (build239) - .cue Heap Overflow (PoC)
MagicISO 5.4 build239 - .cue Heap Overflow PoC !/usr/bin/env ruby Credits to n00b for finding this bug. Magic iso has a stacked based buffer over-flow when We pass an overly-long file name inside the .cue file We are able to control alot of the registers so Command execution is possible,But im...
CVE-2007-2568
Multiple stack-based buffer overflows in VCDGear 3.55 allow user-assisted remote attackers to execute arbitrary code via a long 1 tag or 2 track type in a CUE file...
CVE-2007-2568
VCDGear 3.55 contains multiple stack-based buffer overflows in the CUE file parser, exploitable via a long (1) tag or (2) track type in a CUE file. This enables user‑assisted remote code execution. The provided documents do not include a remediation or patched version.
CVE-2007-2568
Multiple stack-based buffer overflows in VCDGear 3.55 allow user-assisted remote attackers to execute arbitrary code via a long 1 tag or 2 track type in a CUE file...
CVE-2007-2062
Stack-based buffer overflow in VCDGear 3.55 and 3.56 BETA allows user-assisted remote attackers to execute arbitrary code via a long FILE argument in a CUE file...
Stack overflow
Stack-based buffer overflow in VCDGear 3.55 and 3.56 BETA allows user-assisted remote attackers to execute arbitrary code via a long FILE argument in a CUE file...
CVE-2007-2062
Stack-based buffer overflow in VCDGear 3.55 and 3.56 BETA allows user-assisted remote attackers to execute arbitrary code via a long FILE argument in a CUE file...
VCDGear畸形CUE文件处理栈缓冲区溢出漏洞
VCDGear是制作MPEG4的工具，用于将VCD影片DAT文件转换为MPEG文件。 VCDGear在处理畸形格式的CUE文档时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞通过诱使用户打开恶意文件控制用户用户机器。 如果用户使用VCDGear加载了恶意的CUE文件的话，就可能触发栈缓冲区溢出，导致在用户系统上执行任意指令。 VCDGear v3.56 build 050213 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.vcdgear.com/...
VCDGear 3.56 Build 050213 - 'FILE' Local Code Execution
/ 0day Discovered by: InTeL Auther: InTeL Attack Vector: SEH overwrite Type: Local Tested on Win2k SP4 English Software: VCDGear v3.56 build 050213 Website: www.vcdgear.com Description: "VCDGear is a program designed to allow a user to extract MPEG streams from CD images, convert VCD files to MPE...
Adobe Version Cue 1.0/1.0.1 (-lib) Local Root Exploit (OSX)
No description provided by source. / Adobe Version Cue VCNativeOSX: local root exploit. dyld by: vade79/v9 [email protected] fakehalo/realhalo Adobe Version Cue's VCNative program allows un-privileged local users to load arbitrary libraries"bundles" while running setuid root. this is done via the...
Adobe Version Cue 1.0/1.0.1 Local Root Exploit (OSX)
No description provided by source. !/usr/bin/perl Adobe Version Cue VCNativeOSX: local root exploit. by: vade79/v9 [email protected] fakehalo/realhalo Adobe Version Cue's VCNative program writes data to a log file in the current working directory while running as setuid root. the logfile is formated...
Mac OS X Adobe Version Cue Local Root Exploit
No description provided by source. Proof of concept: haven: fintler$ cd haven: fintler$ id uid=502fintler gid=500fintler groups=500fintler haven: fintler$ echo "cp /bin/sh /Users/$USER;chmod 4755 /Users/$USER/sh;chown root /Users/$USER/sh" productname.sh haven: fintler$ chmod 0755 ./productname.s...
CVE-2006-2166
CVE-2006-2166 affects Cisco Unity Express (CUE) 2.2(2) and earlier when running on any CUE AIM or NM. The HTTP management interface contains an unspecified vulnerability that allows remote authenticated attackers to reset the password for any user with an expired password. The connected documents...