2314 matches found
CVE-2006-0488
The VDM Virtual DOS Machine emulation environment for MS-DOS applications in Windows 2000, Windows XP SP2, and Windows Server 2003 allows local users to read the first megabyte of memory and possibly obtain sensitive information, as demonstrated by dumper.asm...
CVE-2006-0488
The VDM Virtual DOS Machine emulation environment for MS-DOS applications in Windows 2000, Windows XP SP2, and Windows Server 2003 allows local users to read the first megabyte of memory and possibly obtain sensitive information, as demonstrated by dumper.asm...
CVE-2006-0488
The CVE-2006-0488 entry concerns the VDM (Virtual DOS Machine) emulation environment in Windows 2000, Windows XP SP2, and Windows Server 2003. The issue allows local users to read the first megabyte of memory, potentially exposing sensitive information, as demonstrated by dumper.asm. This describ...
windowsMem.txt
Desc : Windows Dos emulation allows dumping of first 1 Mo of RAM with no particular privilege. Tested under : Win 2000, XP SP2, 2003 Code : ;---------------- dumper.asm ----------------------------------------- ; Dump first 1 Mo of memory under any MS product ; 1 Mo is the maximum quantity of...
Windows mem leakage
Desc : Windows Dos emulation allows dumping of first 1 Mo of RAM with no particular privilege. Tested under : Win 2000, XP SP2, 2003 Code : ;---------------- dumper.asm ----------------------------------------- ; Dump first 1 Mo of memory under any MS product ; 1 Mo is the maximum quantity of...
linux/x86 anti-debug trick INT 3h trap + execve /bin/sh 39 bytes
linux/x86 anti-debug trick INT 3h trap + execve /bin/sh 39 bytes. Shellcode exploit for linx86 platform / linux/x86 anti-debug trick INT 3h trap + execve"/bin/sh", "/bin/sh", NULL, NULL - 39 bytes The idea behind a shellcode w/ an anti-debugging trick embedded in it, is if for any reason the IDS...
Ubuntu 4.10 : linux-source-2.6.8.1 vulnerabilities (USN-30-1)
CAN-2004-0883, CAN-2004-0949 : During an audit of the smb file system implementation within Linux, several vulnerabilities were discovered ranging from out of bounds read accesses to kernel level buffer overflows. To exploit any of these vulnerabilities, an attacker needs control over the answers...
Wine: Windows Metafile SETABORTPROC vulnerability
Background Wine is a free implementation of Windows APIs for Unix-like systems. Description H D Moore discovered that Wine implements the insecure-by-design SETABORTPROC GDI Escape function for Windows Metafile WMF files. Impact An attacker could entice a user to open a specially crafted Windows...
GLSA-200512-16 : OpenMotif, AMD64 x86 emulation X libraries: Buffer overflows in libUil library
The remote host is affected by the vulnerability described in GLSA-200512-16 OpenMotif, AMD64 x86 emulation X libraries: Buffer overflows in libUil library xfocus discovered two potential buffer overflows in the libUil library, in the diagissuediagnostic and opensourcefile functions. Impact :...
OpenMotif, AMD64 x86 emulation X libraries: Buffer overflows in libUil library
Background OpenMotif provides a free version of the Motif toolkit for open source applications. The OpenMotif libraries are included in the AMD64 x86 emulation X libraries, which emulate the x86 32-bit architecture on the AMD64 64-bit architecture. Description xfocus discovered two potential buff...
CVE-2005-4079
CVE-2005-4079 affects phpMyAdmin 2.7.0 rc1 via register_globals emulation: an attacker can modify import_blacklist in grab_globals.php to overwrite other variables, potentially leading to remote code execution or file inclusion in vulnerable setups. Several advisories note this as part of multipl...
phpmyadmin -- register_globals emulation "import_blacklist" manipulation
Secunia reports: Stefan Esser has reported a vulnerability in phpMyAdmin, which can be exploited by malicious people to conduct cross-site scripting attacks, disclose sensitive information, and compromise a vulnerable system. The vulnerability is caused due to an error in the registerglobals...
phpSysInfo -- "register_globals" emulation layer overwrite vulnerability
A Secunia Advisory reports: Christopher Kunz has reported a vulnerability in phpSysInfo, which can be exploited by malicious people to manipulate certain information. The vulnerability is caused due to an error in the "registerglobals" emulation layer where certain arrays used by the system can b...
DEBIAN-CVE-2005-3300
The registerglobals emulation layer in grabglobals.php for phpMyAdmin before 2.6.4-pl3 does not perform safety checks on values in the FILES array for uploaded files, which allows remote attackers to include arbitrary files by using direct requests to library scripts that do not use...
AMD64 x86 emulation base libraries: Buffer overflow
Background The x86 emulation base libraries for AMD64 emulate the x86 32-bit architecture on the AMD64 64-bit architecture. Description Earlier versions of emul-linux-x86-baselibs contain a vulnerable version of zlib, which may lead to a buffer overflow. Impact By creating a specially crafted...
CVE-2005-0969
Heap-based buffer overflow in the syscall emulation functionality in Mac OS X before 10.3.9 allows local users to cause a denial of service kernel panic and possibly execute arbitrary code via crafted parameters...
CVE-2005-0868
AS/400 Telnet 5250 terminal emulation clients, as implemented by 1 IBM client access, 2 Bosanova, 3 PowerTerm, 4 Mochasoft, and possibly other emulations, allows malicious AS/400 servers to execute arbitrary commands via a STRPCO Start PC Organizer command followed by STRPCCMD Start PC command, a...
CVE-2005-0868
CVE-2005-0868 affects AS/400 Telnet 5250 terminal emulation clients, including IBM client access, Bosanova, PowerTerm, Mochasoft (and possibly others). The root issue allows a malicious AS/400 server to execute arbitrary commands by sending a STRPCO (Start PC Organizer) command followed by STRPCC...
CVE-2004-1144
Summary: CVE-2004-1144: A local privilege escalation in the Linux 2.4 AMD64 32‑bit emulation code was identified (Petr Vandrovec). The issue affects the AMD64 path in the 2.4 kernel, allowing a local attacker to gain privileges. Affected context (from connected sources): Red Hat and SUSE advisori...
