openSUSE Security Update : kernel (kernel-111)

The openSUSE 11.0 kernel was updated to 2.6.25.11. It fixes following security problems: CVE-2008-2812: Various tty / serial devices did not check functionpointers for NULL before calling them, leading to potential crashes or code execution. The devices affected are usually only accessible by the...

Oracle 11.1 - Database Network Foundation Heap Memory Corruption

Oracle 11.1 - Database Network Foundation Heap Memory Corruption source: https://www.securityfocus.com/bid/35677/info Oracle Database is prone to a remote heap memory-corruption vulnerability in Network Foundation. The vulnerability can be exploited over the 'Oracle Net' protocol. An attacker...

Oracle 11.1 - Database Network Foundation Heap Memory Corruption

source: https://www.securityfocus.com/bid/35677/info Oracle Database is prone to a remote heap memory-corruption vulnerability in Network Foundation. The vulnerability can be exploited over the 'Oracle Net' protocol. An attacker doesn't require privileges to exploit this vulnerability. Successful...

CVE-2009-1861

Multiple heap-based buffer overflows in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PDF file...

CVE-2009-1861

Multiple heap-based buffer overflows in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PDF file...

Adobe Reader contains multiple vulnerabilities in the processing of JPX data

Overview Adobe Reader and Acrobat contain multiple vulnerabilities that may allow an attacker to execute arbitrary code. Description Adobe Acrobat Reader is software designed to view Portable Document Format PDF files. Adobe also distributes the Adobe Acrobat Plug-In to allow users to view PDF...

CVE-2009-0893

Multiple heap-based buffer overflows in xvidcore/src/decoder.c in the xvidcore library in Xvid before 1.2.2, as used by Windows Media Player and other applications, allow remote attackers to execute arbitrary code by providing a crafted macroblock aka MBlock number in a video stream in a crafted...

CVE-2009-0893

Multiple heap-based buffer overflows in xvidcore/src/decoder.c in the xvidcore library in Xvid before 1.2.2, as used by Windows Media Player and other applications, allow remote attackers to execute arbitrary code by providing a crafted macroblock aka MBlock number in a video stream in a crafted...

Irssi 0.8.13 - 'WALLOPS' Message Off-by-One Heap Memory Corruption

source: https://www.securityfocus.com/bid/35399/info Irssi is prone to an off-by-one, heap-based, memory-corruption vulnerability because it fails to properly bounds-check user-supplied data before copying it into a memory buffer. Attackers can exploit this issue to crash the vulnerable client,...

Design/Logic Flaw

Use-after-free vulnerability in DirectShow in Microsoft DirectX 8.1 and 9.0 allows remote attackers to execute arbitrary code via an MJPEG file or video stream with a malformed Huffman table, which triggers an exception that frees heap memory that is later accessed, aka "MJPEG Decompression...

CVE-2009-0084

Use-after-free vulnerability in DirectShow in Microsoft DirectX 8.1 and 9.0 allows remote attackers to execute arbitrary code via an MJPEG file or video stream with a malformed Huffman table, which triggers an exception that frees heap memory that is later accessed, aka "MJPEG Decompression...

CVE-2009-0084

Use-after-free vulnerability in DirectShow in Microsoft DirectX 8.1 and 9.0 allows remote attackers to execute arbitrary code via an MJPEG file or video stream with a malformed Huffman table, which triggers an exception that frees heap memory that is later accessed, aka "MJPEG Decompression...

Mandriva Update for php MDVSA-2008:126 (php)

Check for the Version of php OpenVAS Vulnerability Test Mandriva Update for php MDVSA-2008:126 php Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Mandriva Update for php MDKSA-2007:048 (php)

Check for the Version of php OpenVAS Vulnerability Test Mandriva Update for php MDKSA-2007:048 php Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Mandriva Update for php MDVSA-2008:126 (php)

Check for the Version of php OpenVAS Vulnerability Test Mandriva Update for php MDVSA-2008:126 php Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Autodesk IDrop ActiveX Control Heap Memory Corruption

This module exploits a heap-based memory corruption vulnerability in Autodesk IDrop ActiveX control IDrop.ocx version 17.1.51.160. An attacker can execute arbitrary code by triggering a heap use after free condition using the Src, Background, PackageXml properties. Module Options msf use...

Ubuntu Update for file vulnerability USN-439-2

Ubuntu Update for Linux kernel vulnerabilities USN-439-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN4392.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for file vulnerability USN-439-2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for file vulnerability USN-439-1

Ubuntu Update for Linux kernel vulnerabilities USN-439-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4391.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for file vulnerability USN-439-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Easy Web Password 1.2 Local Heap Memory Consumption PoC

No description provided by source. !/usr/bin/env ruby Easy Web Password V1.2 Local Heap Memory Consumption Proof of concept http://www.efssoft.com/ewpsetup.exe Register EAX 00000000 ECX 04A43C58 EDX 41414141 EDX overwrited EBX 00000001 ESP 0012A4E0 EBP 0012F140 ESI 0012A720 EDI 2FDE5000 EIP...

Easy Web Password 1.2 Local Heap Memory Consumption PoC

Exploit for unknown platform in category dos / poc ======================================================= Easy Web Password 1.2 Local Heap Memory Consumption PoC ======================================================= !/usr/bin/env ruby Easy Web Password V1.2 Local Heap Memory Consumption Proof ...