CVE-2012-2940

MediaChance Real-DRAW PRO 5.2.4 is affected. The CVE-2012-2940 entry describes a denial of service (application crash) triggered by processing crafted image files in multiple formats (PNG, WMF, PSD, TGA, TTF, BMP, TIFF, PCX) remotely. The connected documents corroborate the same description acros...

CVE-2012-2940

MediaChance Real-DRAW PRO 5.2.4 allows remote attackers to cause a denial of service application crash via a crafted 1 PNG, 2 WMF, 3 PSD, 4 TGA, 5 TTF, 6 BMP, 7 TIFF, or 8 PCX file...

Real-DRAW PRO 5.2.4 Import File Crash

Exploit for windows platform in category dos / poc Real-DRAW PRO 5.2.4 Import File Crash =================================================================================== Exploit Title:Real-DRAW PRO 5.2.4 Malicious PNG File Denial of service Vendor : http://www.mediachance.com/ Author: Ahmed...

Real-DRAW PRO 5.2.4 - Import File Crash

Real-DRAW PRO 5.2.4 Import File Crash =================================================================================== Exploit Title:Real-DRAW PRO 5.2.4 Malicious PNG File Denial of service Vendor : http://www.mediachance.com/ Author: Ahmed Elhady Mohamed Email : [email protected]...

Real-DRAW PRO 5.2.4 - Import File Crash

Real-DRAW PRO 5.2.4 - Import File Crash Real-DRAW PRO 5.2.4 Import File Crash =================================================================================== Exploit Title:Real-DRAW PRO 5.2.4 Malicious PNG File Denial of service Vendor : http://www.mediachance.com/ Author: Ahmed Elhady Mohame...

Real-DRAW PRO 5.2.4 Denial Of Service

Real-DRAW PRO 5.2.4 Import File Crash =================================================================================== Exploit Title:Real-DRAW PRO 5.2.4 Malicious PNG File Denial of service Vendor : http://www.mediachance.com/ Author: Ahmed Elhady Mohamed Email : [email protected]...

Mozilla: WebGL.drawElements may read illegal video memory due to FindMaxUshortElement error (MFSA 2012-26)

The WebGLBuffer::FindMaxUshortElement function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 calls the FindMaxElementInSubArray function with incorrect template arguments, which allow...

Deceptive In-App Ads Hit Users of Draw Something

I really like the new app by OMGPOP called Draw Something. I play this game with my friends possibly a little too much. Draw Something has attracted more than 50 million downloads, and was just acquired by Zynga for $200 million dollars. It was surprising the other day when I noticed an...

openSUSE Security Update : OpenOffice_org-draw (openSUSE-SU-2010:0732-1)

Specially crafted ppt files could cause a heap based buffer overflow in OpenOfficeorg Impress. Attackers could exploit that to crash OpenOfficeorg or potentially even execute arbitrary code CVE-2010-2935, CVE-2010-2936. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

openSUSE Security Update : OpenOffice_org-draw (openSUSE-SU-2010:0732-1)

Specially crafted ppt files could cause a heap based buffer overflow in OpenOfficeorg Impress. Attackers could exploit that to crash OpenOfficeorg or potentially even execute arbitrary code CVE-2010-2935, CVE-2010-2936. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

CVE-2010-1723

Directory traversal vulnerability in the iNetLanka Contact Us Draw Root Map comdrawroot component 1.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

Directory traversal

Directory traversal vulnerability in the iNetLanka Contact Us Draw Root Map comdrawroot component 1.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

CVE-2010-1723

Joomla! Component iNetLanka Contact Us Draw Root Map (com_drawroot) version 1.1 is affected by a Local File Inclusion (directory traversal) vulnerability. The issue arises from passing a .. sequence in the controller parameter to index.php, enabling remote attackers to read arbitrary server files...

CVE-2010-1723

Directory traversal vulnerability in the iNetLanka Contact Us Draw Root Map comdrawroot component 1.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

Joomla Contact Us Draw Root Map 1.1 Local File Inclusion

============================================================================================================== o Joomla Component Contact Us Draw Root Map Local File Inclusion Vulnerability Software : comdrawroot version 1.1 Vendor : http://joomlacomponent.inetlanka.com/ Author : AntiSecurity NoG...

Joomla Component com_drawroot Local File Inclusion Vulnerability

Exploit for php platform in category web applications ================================================================ Joomla Component comdrawroot Local File Inclusion Vulnerability ================================================================...

Joomla! Component iNetLanka Contact Us Draw Root Map 1.1 - Local File Inclusion

Joomla! Component iNetLanka Contact Us Draw Root Map 1.1 - Local File Inclusion ============================================================================================================== o Joomla Component Contact Us Draw Root Map Local File Inclusion Vulnerability Software : comdrawroot...

Joomla! Component iNetLanka Contact Us Draw Root Map 1.1 - Local File Inclusion

============================================================================================================== o Joomla Component Contact Us Draw Root Map Local File Inclusion Vulnerability Software : comdrawroot version 1.1 Vendor : http://joomlacomponent.inetlanka.com/ Author : AntiSecurity NoG...

Authentication flaw

Open Source Security Information Management OSSIM before 2.1.2 allows remote attackers to bypass authentication, and read graphs or infrastructure information, via a direct request to 1 graphs/alarmsevents.php or 2 host/drawtree.php...

Sports Clubs Web Panel 0.0.1 - Remote Game Delete

!/usr/bin/perl -W Sports Clubs Web Panel 0.0.1 Remote Game Delete Exploit File affected: include/draw-delete.php id Vuln Code: 06: $did = $GET'id'; 08: mysqlquery"DELETE FROM draw WHERE did='$did'"; by ka0x D.O.M Labs - Security Researchers - www.domlabs.org - ka0x@domlabs:/codes$ ./sportspanel.p...