php imagecreatefrom* functions of the png-vulnerability warning-the black bar safety net

0x00 introduction This article mainly analyzes the php using the GD library imagecreatefrompng function to rebuild the png image may lead to local file inclusion vulnerability. When the system is the existence of the file contains the points, can contain a picture file; in addition the system the...

Google Chrome Blink Denial of Service Vulnerability (CNVD-2016-01503)

Blink is the United States Google Google Inc. and Norway Opens Opera Software company jointly developed a set of browser layout engine rendering engine. A security vulnerability exists in the WebKit/Source/core/layout/LayoutBlock.cpp file in Blink, used in versions of Google Chrome prior to...

OpenSSL 'ASN1_item_ex_d2i' Function Denial of Service Vulnerability

OpenSSL is an open source implementation of SSL used to enable strong encryption of network communications and is now widely used in a variety of web applications. A denial of service vulnerability exists in the 'ASN1itemexd2i' function of OpenSSL 'crypto/asn1/tasndec.c'. Due to the program faili...

kernel security and bug fix update

2.6.32-504.3.3 - x86 traps: stop using IST for SS Petr Matousek 1172810 1172811 CVE-2014-9322 2.6.32-504.3.2 - md dm-thin: fix pooliohints to avoid looking at maxhwsectors Mike Snitzer 1161420 1161421 1142773 1145230 2.6.32-504.3.1 - s390 zcrypt: toleration of new crypto adapter hardware Hendrik...

Design/Logic Flaw

The ZIP file parser in AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, Quick Heal aka Cat QuickHeal 11.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900,...

VLC Media Player '.RM' File BOF Vulnerability (Windows)

The host is installed with VLC Media Player and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodvlcmediaplayerrmbofvulnwin.nasl 8174 2017-12-19 12:23:25Z cfischer $ VLC Media Player '.RM' File BOF Vulnerability Windows Authors: Madhuri D Copyright: Copyright c 201...

CVE-2008-3135

Soldner Secret Wars 33724 and earlier allows remote attackers to cause a denial of service CPU consumption via a packet with a large numeric value in a 0x80 data block...

Code injection

Soldner Secret Wars 33724 and earlier allows remote attackers to cause a denial of service CPU consumption via a packet with a large numeric value in a 0x80 data block...

eSignal 7.6 STREAMQUOTE Remote Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl eSignal v7.6 remote exploit c VizibleSoft == http://viziblesoft.com/insect 25-mAR-2004 use IO::Socket; sub usage die"\nUsage: perl $0 host port\n"; print "\r\neSignal v7.6 remote exploit, c VizibleSoft.com\r\n"; my $ip = $ARGV0 || usage; my $port ...

CVE-2005-3483

Buffer overflow in GO-Global for Windows 3.1.0.3270 and earlier allows remote attackers to execute arbitrary code via a data block that is longer than the specified data block size...

Multiple vulnerabilities in Yager 5.24

Luigi Auriemma Application: Yager http://www.yager-game.de Versions: = 5.24 Platforms: Windows Bugs: A nickname buffer-overflow B data block buffer-overflow C freeze caused by incomplete data block D various crashes caused by corrupted data Exploitation: remote, versus server and clients Date: 14...

Endless loops in the http-server and pna-proxy modules of Jana server 2.4.4

Luigi Auriemma Application: Jana server 2 http://www.janaserver.de Versions: = 2.4.4 Platforms: Windows Bug: endless loops in the http-server and pna-proxy modules Exploitation: remote Date: 30 November 2004 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1...

CVE-2004-0321

CVE-2004-0321 affects Team Factor 1.25 and earlier. A remote attacker can crash the service by sending a packet where the data block size is a negative number, causing Team Factor to read unallocated memory and trigger a denial of service. The available descriptions consistently state this issue ...