GOM Player 2.3.10.5266 - .fpx Denial of Service

GOM Player 2.3.10.5266 - .fpx Denial of Service Exploit Title: GOM Player 2.3.10.5266 - Remote heap corruption .fpx Date: 2017-02-15 Exploit Author: Peter Baris Exploit link: http://www.saptech-erp.com.au/resources/PoC.zip Software Link: http://player.gomlab.com/download.gom?language=eng CVE:...

Apple QuickTime < 7.7.79.80.95 - FPX File Parsing Memory Corruption 2

Exploit for multiple platform in category dos / poc Application: Apple Quicktime Platforms: Windows, OSX Versions: before version 7.7.79.80.95 Author: Francis Provencher of COSIG Website: http://www.protekresearchlab.com/ Twitter: @COSIG @protekresearch CVE-2016-1768 1 Introduction 2 Report...

Apple QuickTime < 7.7.79.80.95 - FPX File Parsing Memory Corruption 1

Exploit for multiple platform in category dos / poc Application: Apple Quicktime Platforms: Windows, OSX Versions: before version 7.7.79.80.95 Author: Francis Provencher of COSIG Website: http://www.protekresearchlab.com/ Twitter: @COSIG @protekresearch CVE-2016-1767 1 Introduction 2 Report...

Apple QuickTime < 7.7.79.80.95 - '.FPX' Parsing Memory Corruption (2)

Application: Apple Quicktime Platforms: Windows, OSX Versions: before version 7.7.79.80.95 Author: Francis Provencher of COSIG Website: http://www.protekresearchlab.com/ Twitter: @COSIG @protekresearch CVE-2016-1768 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1...

Apple QuickTime 7.7.79.80.95 - .FPX Parsing Memory Corruption (2)

Apple QuickTime 7.7.79.80.95 - .FPX Parsing Memory Corruption 2 Application: Apple Quicktime Platforms: Windows, OSX Versions: before version 7.7.79.80.95 Author: Francis Provencher of COSIG Website: http://www.protekresearchlab.com/ Twitter: @COSIG @protekresearch CVE-2016-1768 1 Introduction 2...

Oracle Outside-In FPX File Parsing Heap Overflow

No description provided by source. Application: Oracle Outside-In FPX File Parsing Heap Overflow Version: he vulnerabilities are reported in versions 8.3.5 and 8.3.7. Exploitation: Remote code execution Secunia Number: SA49936 PRL: 2012-26 Author: Francis Provencher Protek Research Lab's Website:...

IrfanView FlashPix PlugIn Double-Free Vulnerability

No description provided by source. Application: IrfanView FlashPix PlugIn Double-Free Vulnerability Platforms: Windows Exploitation: Remote code execution Secunia Number: SA47322 PRL: 2011-11 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter:...

IrfanView FlashPix PlugIn Decompression Heap Overflow

No description provided by source. Application: IrfanView FlashPix PlugIn Decompression Heap Overflow Platforms: Windows Secunia Number: SA48772 PRL: 2012-08 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2...

XnView FlashPix Image Processing Heap Overflow

No description provided by source. Application: XnView FlashPix Image Processing Heap Overflow Platforms: Windows Secunia: SA47388 PRL: 2012-06 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Report Timeline 3...

Apple Mac OS X Multiple Vulnerabilities - 02 (Jan 2014)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apple QuickTime Multiple Vulnerabilities (Jun 2013) - Windows

QuickTime Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:quicktime";...

CVE-2013-0988

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted FPX file...

Buffer overflow

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted FPX file...

CVE-2013-0988

CVE-2013-0988 is a QuickTime FPX parsing vulnerability: a buffer overflow in handling FPX files could allow remote code execution (or application crash). The vulnerability is exploitable via a crafted FPX file, with attack vector over a network and no authentication, and is reflected in a high-se...

CVE-2013-0988

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted FPX file...

CVE-2012-0025

Double free vulnerability in the FreeAllMemory function in jpeg/dectile.c in libfpx before 1.3.1-1, as used in the FlashPix PlugIn 4.2.2.0 for IrfanView, allows remote attackers to cause a denial of service crash via a crafted FPX image...

Double free

Double free vulnerability in the FreeAllMemory function in jpeg/dectile.c in libfpx before 1.3.1-1, as used in the FlashPix PlugIn 4.2.2.0 for IrfanView, allows remote attackers to cause a denial of service crash via a crafted FPX image...

CVE-2012-0025

The CVE-2012-0025 entry describes a double-free vulnerability in libfpx’s Free_All_Memory function (jpeg/dectile.c) used by FlashPix PlugIn 4.2.2.0 with IrfanView. A crafted FPX image could cause a remote DoS (crash). Affected: libfpx prior to 1.3.1-1; remediation per the Gentoo GLSA advises upgr...

Oracle Outside-In - .FPX File Parsing Heap Overflow

Oracle Outside-In - .FPX File Parsing Heap Overflow Application: Oracle Outside-In FPX File Parsing Heap Overflow Version: he vulnerabilities are reported in versions 8.3.5 and 8.3.7. Exploitation: Remote code execution Secunia Number: SA49936 PRL: 2012-26 Author: Francis Provencher Protek Resear...

Oracle Outside-In - '.FPX' File Parsing Heap Overflow

Application: Oracle Outside-In FPX File Parsing Heap Overflow Version: he vulnerabilities are reported in versions 8.3.5 and 8.3.7. Exploitation: Remote code execution Secunia Number: SA49936 PRL: 2012-26 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/...