[Full-disclosure] iDefense Security Advisory 01.15.08: Apple QuickTime Macintosh Resource Processing Heap Corruption Vulnerability

iDefense Security Advisory 01.15.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 15, 2008 I. BACKGROUND Quicktime is Apple's media player product, and is used to render video and other media. For more information visit the vendor's web site at the following URL...

Cisco VPN Client - IPSec Driver Local kernel system pool Corruption (PoC)

Cisco VPN Client - IPSec Driver Local kernel system pool Corruption PoC / cpndrv-dos.c Copyright c 2008 by Cisco Systems VPN Client IPSec Driver local kernel system pool corruption POC by mu-b - Sat 11 Jan 2008 - Tested on: CVPNDRVA.sys 5.0.02.0090 specifying an input buffer size less-than...

urlevasion.txt

I dont know if its new but i code it during a PentTest and i would like to share it with you. It is based on code developed By sinhack research labs: http://sinhack.net/URLFilteringEvasion/sakeru.tx Description: "Fortinet's URL blocking functionality can be bypassed by specially-crafted HTTP...

Tikiwiki 1.9.8.3 tiki-special_chars.php XSS Vulnerability

H - Security Labs Tikiwiki v1.9.8.3 Security Advisory ID : HSEC20072212 General Information -------------------------- Name : Tikiwiki 1.9.8.3 Vendor HomePage :http://tikiwiki.org Platforms : PHP && MySQL Vulnerability Type : Input Validation Error Timeline ------------------------- 17 December...

Microsoft DirectX SAMI parsing buffer overflow

Overview Microsoft DirectX is vulnerable to a stack-based buffer overflow. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft DirectX is a feature of the Microsoft Windows operating system used for streaming...

Apple Mac OSX xnu 1228.0 - super_blob Local kernel Denial of Service (PoC)

Apple Mac OSX xnu 1228.0 - superblob Local kernel Denial of Service PoC / xnu-superblob-dos.c Copyright c 2007 by Apple MACOS X xnu include include include include include include include define MAXPATHLEN 128 / change this value if no panic / define CSLOTSDIFF 0x69696969 define CSSLOTCODEDIRECTO...

Falt4 CMS RC4 10.9.2007 Multiple Remote Vulnerabilities

No description provided by source. H - Security Labs Falt4 CMS RC4 10.9.2007 Security Report /Advisory ID : HSEC20071012 General Information -------------------------- Name : Falt4Extreme CMS RC4 10.9.2007 Vendor HomePage :http://sourceforge.net/projects/falt4/ Platforms : PHP && MySQL...

Falt4 CMS rc4 10.9.2007 - Multiple Vulnerabilities

H - Security Labs Falt4 CMS RC4 10.9.2007 Security Report /Advisory ID : HSEC20071012 General Information -------------------------- Name : Falt4Extreme CMS RC4 10.9.2007 Vendor HomePage :http://sourceforge.net/projects/falt4/ Platforms : PHP && MySQL Vulnerability Type : Input Validation Errors...

falt4cms-multi.txt

H - Security Labs Falt4 CMS RC4 10.9.2007 Security Report /Advisory ID : HSEC20071012 General Information -------------------------- Name : Falt4Extreme CMS RC4 10.9.2007 Vendor HomePage :http://sourceforge.net/projects/falt4/ Platforms : PHP && MySQL Vulnerability Type : Input Validation Errors...

[Full-disclosure] Avast! AntiVirus TAR Processing Remote Heap Corruption

Avast! AntiVirus TAR Processing Remote Heap Corruption Sowhat of Nevis Labs http://www.nevisnetworks.com http://secway.org/advisory/AD20071206.txt BID: 26702 Vendor: ALWIL Software Affected: Avast! Home/Professional 4.7.1098 This vulnerability has been confirmed on Avast! Professional 4.7.1043...

Apple Mac OS X 10.5.0 (leopard) vpnd Remote Denial of Service PoC

No description provided by source. / vpnd-leopard-lb-dos.c Copyright c 2007 by [email protected] Apple MACOS X 10.5.0 leopard vpnd remote DoS POC by mu-b - Fri 9 Nov 2007 - Tested on: Apple MACOS X 10.5.0 leopard vpnd Program received signal EXCARITHMETIC, Arithmetic exception...

Apple Mac OS X xnu <= 1228.0 Local Kernel Denial of Service PoC

No description provided by source. / xnu-macho-dos.c Copyright c 2007 by [email protected] Apple MACOS X xnu = 1228.0 local kernel DoS POC by mu-b - Thu 15 Nov 2007 - Tested on: Apple MACOS X 10.4 xnu-792.22.51/RELEASEI386...

Apple Mac OSX 10.5.0 (Leopard) - vpnd Remote Denial of Service (PoC)

Apple Mac OSX 10.5.0 Leopard - vpnd Remote Denial of Service PoC / vpnd-leopard-lb-dos.c Copyright c 2007 by Apple MACOS X 10.5.0 leopard vpnd remote DoS POC by mu-b - Fri 9 Nov 2007 - Tested on: Apple MACOS X 10.5.0 leopard vpnd Program received signal EXCARITHMETIC, Arithmetic exception...

Apple Mac OSX 10.5.0 (Leopard) - vpnd Remote Denial of Service (PoC)

/ vpnd-leopard-lb-dos.c Copyright c 2007 by Apple MACOS X 10.5.0 leopard vpnd remote DoS POC by mu-b - Fri 9 Nov 2007 - Tested on: Apple MACOS X 10.5.0 leopard vpnd Program received signal EXCARITHMETIC, Arithmetic exception. 0x00004828 in acceptconnections - Private Source Code -DO NOT DISTRIBUT...

mytvx-root.txt

Version 1.0 October 1996 CERTR Coordination Center Product Vulnerability Reporting Form CONTACT INFORMATION ======================================================================== ======= Name : David Wharton E-mail : [email protected] Phone / fax : Affiliation and address: Information...

eggblog-xss.txt

H - Security Labs Eggblog v3.1.0 Security Advisory ID : HSEC20071111 General Information -------------------------- Name : EggBlog v.3.1.0 Vendor HomePage :http://sourceforge.net/projects/eggblog/ Platforms : PHP && MySQL Vulnerability Type : Input Validation Error Timeline...

Eggblog v3.1.0 XSS Vulnerability

H - Security Labs Eggblog v3.1.0 Security Advisory ID : HSEC20071111 General Information -------------------------- Name : EggBlog v.3.1.0 Vendor HomePage :http://sourceforge.net/projects/eggblog/ Platforms : PHP && MySQL Vulnerability Type : Input Validation Error Timeline...

Ubuntu 5.10 / 6.06 LTS / 6.10 : freetype, libxfont, xorg, xorg-server vulnerabilities (USN-448-1)

Sean Larsson of iDefense Labs discovered that the MISC-XC extension of Xorg did not correctly verify the size of allocated memory. An authenticated user could send a specially crafted X11 request and execute arbitrary code with root privileges. CVE-2007-1003 Greg MacManus of iDefense Labs...

eXtremail <= 2.1.1 memmove() Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl extremail-v3.pl Copyright c 2006 by [email protected] eXtremail =2.1.1 remote root POC x86-lnx by mu-b - Fri Oct 06 2006 Tested on: eXtremail 2.1.1 lnx eXtremail 2.1.0 lnx - Private Source Code -DO NOT DISTRIBUTE -...

eXtremail 2.1.1 - 'memmove()' Remote Denial of Service

!/usr/bin/perl extremail-v3.pl Copyright c 2006 by eXtremail 1,50 $maxlen = intrand50 + 1; 0, $maxlen 0.75 - 0, $maxlen 0x75 - 1 $pad1len = intrand$maxlen 0.75; 0, $maxlen - $pad1len/2 - 1, $maxlen - $pad1len/2 $pad2len = intrand$maxlen - $pad1len/length"%s" + 1; $pad3len = $maxlen - $pad1len -...