68 matches found
CVE-2006-7157
Buffer overflow in Google Earth v4.0.2091 beta allows remote user-assisted attackers to cause a denial of service crash via a KML or KMZ file with a long href element...
CVE-2006-7157
CVE-2006-7157 affects Google Earth v4.0.2091 (beta). The vulnerability is a buffer/heap overflow in the KML/KMZ processing (href in KML/KMZ files) that can cause a crash and, per OpenVAS/Nessus entries, potentially allow arbitrary code execution. Exploitation target is the Google Earth KML engine...
CVE-2006-7157
Buffer overflow in Google Earth v4.0.2091 beta allows remote user-assisted attackers to cause a denial of service crash via a KML or KMZ file with a long href element...
KLA10178 DoS vulnerability in Google Earth
A buffer overflow was found in Google Earth. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed file. Original advisories - Related products Google-Earth CVE list CVE-2006-7157 high Solution Update to...
kml-kmz.txt
/////////////////////////////////////////////// // Google Earth kml & kmz files buffer overflow // by JAAScois http://www.jaascois.com // Test on: Google Earth v4.0.2091beta Sep 14 2006 /////////////////////////////////////////////// include include char xmlHdr="\n\nBy: JAAScois.com"; char...
Google Earth buffer overflow
Buffer overflow on .kml and .kmz files...
google-earth -- heap overflow in the KML engine
JAAScois reports: While processing KML/KMZ data Google Earth fails to verify its size prior to copying it into a fixed-sized buffer. This can be exploited as a buffer-overflow vulnerability to cause the application to crash and/or to execute arbitrary code...
Google Earth 4.0.2091 (Beta) - '.KML'/'.KMZ' Buffer Overflow
// source: https://www.securityfocus.com/bid/20464/info Google Earth is prone to a buffer-overflow vulnerability because the application to properly verify the size of user-supplied data before copying it into an insufficiently sized process buffer. This issue allows remote attackers to execute...