CVE-2010-0306

The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing SMP, does not use the Current Privilege Level CPL and I/O Privilege Level IOPL to restrict instruction execution, which allows guest OS users to cause a denial of service guest OS crash or gain privileges on the...

Microsoft PowerPoint OEPlaceholderAtom placementId memory corruption

Added: 02/12/2010 CVE: CVE-2010-0031 BID: 38103 OSVDB: 62237 Background Microsoft PowerPoint is presentation software included in the Microsoft Office desktop suite. Problem A memory corruption vulnerability allows command execution when a user opens a PowerPoint file containing an...

Microsoft PowerPoint OEPlaceholderAtom placementId memory corruption

Added: 02/12/2010 CVE: CVE-2010-0031 BID: 38103 OSVDB: 62237 Background Microsoft PowerPoint is presentation software included in the Microsoft Office desktop suite. Problem A memory corruption vulnerability allows command execution when a user opens a PowerPoint file containing an...

CVE-2010-0298

The x86 emulator in KVM 83 does not use the Current Privilege Level CPL and I/O Privilege Level IOPL in determining the memory access available to CPL3 code, which allows guest OS users to cause a denial of service guest OS crash or gain privileges on the guest OS by leveraging access to a 1 IO...

kvm: emulator privilege escalation IOPL/CPL level check

The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing SMP, does not use the Current Privilege Level CPL and I/O Privilege Level IOPL to restrict instruction execution, which allows guest OS users to cause a denial of service guest OS crash or gain privileges on the...

kvm: emulator privilege escalation

The x86 emulator in KVM 83 does not use the Current Privilege Level CPL and I/O Privilege Level IOPL in determining the memory access available to CPL3 code, which allows guest OS users to cause a denial of service guest OS crash or gain privileges on the guest OS by leveraging access to a 1 IO...

kvm: emulator privilege escalation IOPL/CPL level check

The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing SMP, does not use the Current Privilege Level CPL and I/O Privilege Level IOPL to restrict instruction execution, which allows guest OS users to cause a denial of service guest OS crash or gain privileges on the...

kvm: emulator privilege escalation

The x86 emulator in KVM 83 does not use the Current Privilege Level CPL and I/O Privilege Level IOPL in determining the memory access available to CPL3 code, which allows guest OS users to cause a denial of service guest OS crash or gain privileges on the guest OS by leveraging access to a 1 IO...

kvm: cat /dev/port in guest cause the host hang

The pitioportread function in the Programmable Interval Timer PIT emulation in i8254.c in KVM 83 does not properly use the pitstate data structure, which allows guest OS users to cause a denial of service host OS crash or hang by attempting to read the /dev/port file...

Oracle 10g - Multiple Privilege Escalation Vulnerabilities

Oracle 10g - Multiple Privilege Escalation Vulnerabilities source: https://www.securityfocus.com/bid/38115/info Oracle Database is prone to multiple remote privilege-escalation issues because it fails to properly restrict access to certain packages. The attacker can exploit these issues to escala...

{PRL} Xerox Workcenter 4150 Remote Buffer Overflow

Application: Xerox Workcenter 4150 Remote Buffer Overflow Platforms: Xerox Workcenter 4150 Discover Date: 2009-12-21 Author: Francis Provencher Protek Research Lab's Blog: http://www.Protekresearchlab.com 1 Introduction 2 Report Timeline 3 Technical details 4 The Code ================= 1...

Xerox Workcenter 4150 - Remote Buffer Overflow (PoC)

Xerox Workcenter 4150 - Remote Buffer Overflow PoC Application: Xerox Workcenter 4150 Remote Buffer Overflow Platforms: Xerox Workcenter 4150 Discover Date: 2009-12-21 Author: Francis Provencher Protek Research Lab's Blog: http://www.Protekresearchlab.com 1 Introduction 2 Report Timeline 3...

P2GChinchilla HTTP Server 1.1.1 - Denial of Service

!/usr/bin/perl File Name :P2GChinchillaTM HTTP Server Vuln : Remote Denial Of Service Exploit Auther : Zer0 Thunder Msn : [email protected] ==------ Exploit Title: P2GChinchillaTM HTTP Server 1.1.1 Remote Denial Of Service Exploit Date: 22/01/2010 Author: Zer0 Thunder Version: v 1.1....

kernel: megaraid_sas permissions in sysfs

The pollmodeio file for the megaraidsas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying this file...

TurboFTP Server 1.00.712 Remote DoS

No description provided by source. Exploit Title : TurboFTP Server 1.00.712 Remote DoS Date : 30 december 2009 Author : corelanc0d3r corelanc0d3ratgmaildotcom Bug found by : corelanc0d3r corelanc0d3ratgmaildotcom Software Link : http://www.tbsoftinc.com/download/tbftpsrv.exe Version : 1.00.712...

TurboFTP Server 1.00.712 Denial Of Service

Exploit Title : TurboFTP Server 1.00.712 Remote DoS Date : 30 december 2009 Author : corelanc0d3r corelanc0d3ratgmaildotcom Bug found by : corelanc0d3r corelanc0d3ratgmaildotcom Software Link : http://www.tbsoftinc.com/download/tbftpsrv.exe Version : 1.00.712 Issue fixed in: 1.00.720 OS : Windows...

TurboFTP Server 1.00.712 Remote DoS

Exploit for unknown platform in category dos / poc =================================== TurboFTP Server 1.00.712 Remote DoS =================================== Exploit Title : TurboFTP Server 1.00.712 Remote DoS Date : 30 december 2009 Author : corelanc0d3r Software Link :...

Novell Netware CIFS And AFP Remote Memory Consumption DoS

No description provided by source. !/usr/bin/perl Novell Netware CIFS And AFP Remote Memory Consumption DoS Platform: Novell Netware 6.5 SP8 Found by Francis Provencher for Protek Research Lab's http://protekresearch.blogspot.com/ PRL Novell Netware CIFS.nlm Remote Memory Consumption Denial of...

Novell Netware - CIFS and AFP Remote Memory Consumption Denial of Service

Novell Netware - CIFS and AFP Remote Memory Consumption Denial of Service !/usr/bin/perl Novell Netware CIFS And AFP Remote Memory Consumption DoS Platform: Novell Netware 6.5 SP8 Found by Francis Provencher for Protek Research Lab's http://protekresearch.blogspot.com/ PRL Novell Netware CIFS.nlm...

Novell Netware CIFS And AFP Remote Memory Consumption DoS

Exploit for unknown platform in category dos / poc ========================================================= Novell Netware CIFS And AFP Remote Memory Consumption DoS ========================================================= !/usr/bin/perl Novell Netware CIFS And AFP Remote Memory Consumption DoS...