35 matches found
Stack overflow
Stack-based buffer overflow in NewsGator FeedDemon 2.7 and earlier allows user-assisted remote attackers to execute arbitrary code via a long text attribute in an outline element in a .opml file...
CVE-2009-0546
Stack-based buffer overflow in NewsGator FeedDemon 2.7 and earlier allows user-assisted remote attackers to execute arbitrary code via a long text attribute in an outline element in a .opml file...
CVE-2009-0546
The CVE describes a stack-based buffer overflow in NewsGator FeedDemon 2.7 and earlier triggered when importing a specially crafted OPML file. The underlying flaw is in parsing a long text attribute within an outline element, allowing a user‑assisted remote attacker to execute arbitrary code. Pub...
FeedDemon <=2.7 OPML Outline Tag Buffer Overflow Exploit
No description provided by source...
FeedDemon 2. OPML Overflow
!/usr/local/bin/perl ----------------------------------------------------------------------------- FeedDemon version 2.7.0.0 Buffer overFlow Reference: http://security.bkis.vn/?p=329 http://www.securityfocus.com/bid/33630/info http://secunia.com/advisories/33718/ Tested in Windows XP Sp2 English...
feedDemon 2.7 - OPML Outline Tag Buffer Overflow
feedDemon 2.7 - OPML Outline Tag Buffer Overflow !/usr/local/bin/perl ----------------------------------------------------------------------------- FeedDemon version 2.7.0.0 Buffer overFlow Reference: http://security.bkis.vn/?p=329 https://www.securityfocus.com/bid/33630/info...
FeedDemon <=2.7 OPML Outline Tag Buffer Overflow Exploit
Exploit for unknown platform in category local exploits ======================================================== FeedDemon outline text="'; my $overflow = "\x90" x 8006; Shellcode by Metasploit my $devil= "\x31\xC9\x83\xE9\xDE\xD9\xEE\xD9\x74\x24\xF4\x5B\x81\x73\x13\xEC"...
feedDemon 2.7 - OPML Outline Tag Buffer Overflow
!/usr/local/bin/perl ----------------------------------------------------------------------------- FeedDemon version 2.7.0.0 Buffer overFlow Reference: http://security.bkis.vn/?p=329 https://www.securityfocus.com/bid/33630/info http://secunia.com/advisories/33718/ Tested in Windows XP Sp2 English...
FeedDemon (ver<=2.7) Buffer Overflow Vulnerability
The vulnerability was found in the processing of OPML Outline Processor Markup Language file, which is an XML format for outlines used by RSS reader to store and manage RSS feeds. With OPML, users can easily share their RSS feed lists with others or export these lists to use in other RSS feed...
[SVRT-02-09] FeedDemon (ver<=2.7) Buffer Overflow Vulnerability
Title : FeedDemon Buffer OverFlow Vulnerability 1. General Information FeedDemon is known as the most popular Windows RSS Reader which allows users to view and manage easily RSS feeds from their desktop. In January 2009, SVRT-BKIS detected a buffer overflow vulnerability in this software. Taking...
FeedDemon buffer overflow
Buffer overflow on OPML files parsing...
FeedDemon < 2.0.0.25 Atom Feed Active Script Code Execution
According to the Windows registry, the version of FeedDemon, an RSS reader for Windows, installed on the remote host is affected by a flaw due to improper sanitization of RSS feeds of Active Script code. An attacker can exploit this issue to inject arbitrary script into the affected application,...
CVE-2006-4710
Multiple cross-site scripting XSS vulnerabilities in NewsGator FeedDemon before 2.0.0.25 allow remote attackers to inject arbitrary web script or HTML via an Atom 1.0 feed, as demonstrated by certain test cases of the James M. Snell Atom 1.0 feed reader test suite...
CVE-2006-4710
CVE-2006-4710 affects NewsGator FeedDemon prior to 2.0.0.25. The vulnerability is a set of XSS flaws exploited via an Atom 1.0 feed, enabling an attacker to inject arbitrary script/HTML. The issue is demonstrated in test suites and is tied to improper handling of Atom feeds. Impact is the executi...
CVE-2006-4710
Multiple cross-site scripting XSS vulnerabilities in NewsGator FeedDemon before 2.0.0.25 allow remote attackers to inject arbitrary web script or HTML via an Atom 1.0 feed, as demonstrated by certain test cases of the James M. Snell Atom 1.0 feed reader test suite...