cpio large filesize buffer overflow

Buffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when creating a cpio archive, allows local users to cause a denial of service crash and possibly execute arbitrary code via a file whose size is represented by more than 8 digits...

Researchers Find Flaw in RSA Authentication

University of Michigan scientists have found they could foil RSA authentication by varying the voltage supply to the holder of the “private key,” which would be the consumer’s device in the case of copy protection and the retailer or bank in the case of Internet communication. It is highly unlike...

Novell GroupWise Messenger HTTP POST Request Invalid Memory Access (CVE-2006-4511)

Novell GroupWise Messenger is a corporate instant messaging solution targeted towards medium to large enterprise organizations. It facilitates secure communications and policy-based management through Novell's eDirectory product suite. The product is based on a client-server model where messaging...

Microsoft Windows Large Image Resize DoS

While rendering a normal image with excessively large resizing parameters in an HTML page, numerous applications could cause a infinite loop in the FrameBuffer display driver of Windows and eventually crash the system, leading to a Denial of Service condition. When a malicious document is receive...

DEBIAN-CVE-2009-4274

Stack-based buffer overflow in converter/ppm/xpmtoppm.c in netpbm before 10.47.07 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via an XPM image file that contains a crafted header field associated with a large color index val...

Microsoft SMB NTLM Authentication Lack of Entropy (MS10-012; CVE-2010-0231)

The SMB Protocol is a network file sharing protocol that is implemented in Microsoft Windows. An elevation of privilege vulnerability has been reported in the way that Microsoft Server Message Block SMB Protocol software handles authentication attempts. The vulnerability is due to a lack of...

Opera Denial Of Service

!/usr/bin/perl Title : Opera 10.10 Remote Code Execution DoS Exploit Tested : Windows xp sp2 Description : Opera Web Browser is vulnerable DoS within its javascript tags alert This issue can be exploited by using a large value in a alert tags to create an out-of-bounds memory access This have in...

linux/x86 if(read(fd buf 512)<=2) _exit(1) else buf()

No description provided by source. / h3ll-core.c by Charles Stevenson [email protected] I made this as a chunk you can paste in to make modular remote exploits. I use it as a first stage payload when I desire to follow up with a real large payload of goodness. This actually is a bit larger than...

kernel: e1000 issue reported at 26c3

drivers/net/e1000/e1000main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large packet with a craft...

Google Chrome 4.0.249.30 - Denial of Service (PoC)

!/usr/bin/perl google chrome 4.0.249.30 DoS PoC Author: Anonymous Info: In ordinary cases browser would redirect to "http://www.google.com" but in this case browser will report error for something that should be possible and is possible on other browsers. I would like to thank Jeremy Brown who ma...

Design/Logic Flaw

inc/functionstime.php in MyBB aka MyBulletinBoard 1.4.10, and possibly earlier versions, allows remote attackers to cause a denial of service CPU consumption via a crafted request with a large year value, which triggers a long loop, as reachable through member.php and possibly other vectors...

Security Best Practice: Blocking BitTorrent

BitTorrent is a peer to peer file sharing protocol used for distributing large amounts of data. It is one of the most common protocols for transferring large files. The use of BitTorrent may circumvent the organizational security policy...

Integer overflow

Integer overflow in libtheora in Xiph.Org Theora before 1.1, as used in Mozilla Firefox 3.5 before 3.5.6 and SeaMonkey before 2.0.1, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a video with large dimensions...

CVE-2009-3389

Integer overflow in libtheora in Xiph.Org Theora before 1.1, as used in Mozilla Firefox 3.5 before 3.5.6 and SeaMonkey before 2.0.1, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a video with large dimensions...

flash-plugin: multiple code execution flaws (APSB09-19) (CVE-2009-3794, CVE-2009-3796, CVE-2009-3797, CVE-2009-3798, CVE-2009-3799, CVE-2009-3800)

Integer overflow in the Verifier::parseExceptionHandlers function in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary code via an SWF file with a large exceptioncount value that triggers memory corruption, related to "generation of...

OpenJDK ImageI/O JPEG heap overflow (6874643)

Integer overflow in the JPEGImageReader implementation in the ImageI/O component in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.224 allows remote attackers to execute arbitrary code via large subsample dimensions in a JPEG file...

qpid: large messaages cause crash when using digest-md5 and security layer

qpid-cpp 1.0 crashes when a large message is sent and the Digest-MD5 mechanism with a security layer is in use...

PHP ""multipart/form-data"" Denial of Service Exploit (Python)

No description provided by source. !/usr/bin/python -- coding: utf-8 -- Author: Eren Turkay eren .-. pardus.org.tr, 2009/11/20 http://www.pardus.org.tr/eng/ Credits: Bogdan Calin from Acunetix Description: Exploit to cause denial of service on any host that runs PHP via temporary file exhaustion...

Mozilla Firefox 'GIF' File DoS Vulnerability (Nov 2009) - Linux

Mozilla Firefox is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-3978

The nsGIFDecoder2::GifWrite function in decoders/gif/nsGIFDecoder2.cpp in libpr0n in Mozilla Firefox before 3.5.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an animated GIF file with a large image size, a different vulnerability than...