eEye Retina WiFi Scanner '.rws'文件缓冲区溢出漏洞

Bugraq ID: 35624 eEye Retina WiFi Scanner是一款eEye公司开发的无线检测工具。 eEye Retina WiFi Scanner不正确解析'.rws'文件，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 构建包含超长"RWS010"条目的".rws"文件，诱使用户打开，可导致在.data段触发缓冲区溢出，可能导致以应用程序权限执行任意指令。 eEye Digital Security Retina WiFi Scanner 1.0.8 68 目前没有解决方案提供： http://www.eeye.com/ !/usr/bin/python...

eEye Retina WiFi Security Scanner 1.0 (.rws Parsing) Buffer Overflow PoC

No description provided by source. !/usr/bin/python Title: Retina WiFi Security Scanner 1.0 .rws parsing Buffer Overflow Vulnerability Summary: Retina WiFi Scanner is a tool to be used to detect IEEE 802.11 WiFi based devices. Vendor: eEye Digital Security Inc. Product Web Page:...

eEye Retina WiFi Security Scanner 1.0 - .rws Parsing Buffer Overflow (PoC)

eEye Retina WiFi Security Scanner 1.0 - .rws Parsing Buffer Overflow PoC !/usr/bin/python Title: Retina WiFi Security Scanner 1.0 .rws parsing Buffer Overflow Vulnerability Summary: Retina WiFi Scanner is a tool to be used to detect IEEE 802.11 WiFi based devices. Vendor: eEye Digital Security In...

eEye Retina WiFi Security Scanner 1.0 (.rws Parsing) Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ======================================================================== eEye Retina WiFi Security Scanner 1.0 .rws Parsing Buffer Overflow PoC ======================================================================== !/usr/bin/python Title: Retin...

eEye Retina WiFi Security Scanner 1.0 - '.rws Parsing' Buffer Overflow (PoC)

!/usr/bin/python Title: Retina WiFi Security Scanner 1.0 .rws parsing Buffer Overflow Vulnerability Summary: Retina WiFi Scanner is a tool to be used to detect IEEE 802.11 WiFi based devices. Vendor: eEye Digital Security Inc. Product Web Page: http://www.eeye.com/ Current Version: 1.0.8.68 Notiz...

eEye Retina WiFi Security Scanner 1.0 (.rws Parsing) Buffer Overflow PoC

Summary Retina WiFi Scanner is a tool to be used to detect IEEE 802.11 WiFi based devices. Note: The tool is implemented as part of the eEye's Retina Network Security Scanner package. Description A vulnerability has been identified in eEye Retina WiFi Scanner, which could be exploited by attacker...

Microsoft Vista and Server 2008 vulnerable to memory corruption via saved search

Overview Microsoft Windows Vista and Server 2008 contain a memory corruption vulnerability when saving a specially crafted search file. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description In Windows Vista and Server 2008,...

MS Internet Explorer .ANI Remote Stack Overflow (0.2)

No description provided by source. !-- Changed location of InternetExploiter3.2.ani to point to sploits directory /str0ke -- HTML!-- ,sSSSs, Ss, Internet Exploiter 3 v0.2 SS" YS' 'Ss. .ANI stackoverflow PoC exploit iS' ,SS" Copyright C 2003, 2004 by Berend-Jan Wever. YS, .ss ,sY"...

CA-ArcServe

CA ArcServe is prone to a remote buffer overflow because it fails to perform adequate boundary-checks on user-supplied data. Successfully exploiting will allow an attacker to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a...

MS Windows JPEG GDI+ Overflow Download Shellcode Exploit (MS04-028)

No description provided by source. / =============================================================== Windows JPEG GDI+ Overflow Download Shellcoded Exploit MS04-028 Coded By ATmaCA Credit to eEye Digital Security,K-OTik Security,FoToZ,pathetic. E-Mail:[email protected] Web:www.prohack.net...

creative-overflow.txt

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ CacheFolder property is vulnerable to stack-based buffer overflow after 260 bytes, @ 512 bytes overwrites SEH and allows code execution reliably. Original Advisory @ http://www.kb.cert.org/vuls/id/501843 and Vulnerability...

Creative Software AutoUpdate Engine ActiveX Stack Overflow Exploit

No description provided by source. html !-- !!!NOT PRIVATE PLEASE DISTRIBUTE!!! Zer0Day Creative Software AutoUpdate Engine ActiveX Stack-Overflow CacheFolder Exploit by BitKrush BitKrush +A.T.+ G.M.A.I.L.D.0.T.C.0.M. +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ CacheFolder...

EEYE: BitDefender Online Scanner 8 Double Decode Heap Overflow

BitDefender Online Scanner 8 Double Decode Heap Overflow Release Date: November 20, 2007 Date Reported: October 24, 2007 Severity: High Remote Code Execution Vendor: BitDefender / SOFTWIN - http://www.bitdefender.com Systems Affected: BitDefender Online Scan Users Overview: eEye Digital Security...

EEYE: Windows Metafile AttemptWrite Heap Overflow

Windows Metafile AttemptWrite Heap Overflow Release Date: August 14, 2007 Date Reported: March 27, 2007 Severity: High Code Execution Systems Affected: Windows 2000 SP4 Windows XP SP2 Windows Server 2003 SP1 Overview: eEye Digital Security has discovered a heap overflow vulnerability in the way t...

EEYE: VGX.DLL Compressed Content Heap Overflow Vulnerability

VGX.DLL Compressed Content Heap Overflow Vulnerability Release Date: August 14, 2007 Date Reported: October 24, 2006 Severity: High Code Execution Systems Affected: Internet Explorer 6 SP1 - Windows 2000 SP4 Internet Explorer 6 SP1 - Windows XP SP1 Internet Explorer 6 SP2 - Windows XP SP2 Interne...

EEYE: Sun Java WebStart JNLP Stack Buffer Overflow Vulnerability

Sun Java WebStart JNLP Stack Buffer Overflow Vulnerability Release Date: July 5, 2007 Date Reported: Jan 19, 2007 Severity: High Remote Code Execution Vendor: Sun Microsystems Systems Affected: Java Runtime Environment 6 Update 1, and earlier Java Runtime Environment 5 Update 11, and earlier...

EEYE: Yahoo Webcam ActiveX Controls Multiple Buffer Overflows

Yahoo Webcam ActiveX Controls Multiple Buffer Overflows Release Date: June 8, 2007 Date Reported: June 5, 2007 Severity: High Remote Code Execution Vendor: Yahoo!, Inc. Systems Affected: Yahoo Messenger 8 for Windows Overview: eEye Digital Security has discovered two critical vulnerabilities in...

Yahoo! Messenger Webcam 8.1 (Ywcupl.dll) Download / Execute Exploit

No description provided by source. / Compile in LCC-win32 Free! Download and exec any file you like! Have Fun! / include stdio.h include string.h include stdlib.h char file = "Clickhere.html"; FILE fp = NULL; unsigned char sc =...

EEYE: Windows Vista CSRSS Dangling Process Pointer Privilege Escalation

Windows Vista CSRSS Dangling Process Pointer Privilege Escalation Release Date: April 10, 2007 Date Reported: January 19, 2007 Severity: Medium Local Privilege Escalation to SYSTEM Vendor: Microsoft Systems Affected: Windows Vista Overview: eEye Digital Security has discovered a local privilege...

Microsoft Windows Kernel vulnerable to privilege escalation

Overview The Microsoft Windows Kernel contains a privilege escalation vulnerability that may allow a local attacker to take control of the system. Description The Microsoft Windows Kernel fails to properly set permissions when mapping to a memory segment. By running a specially crafted applicatio...