PT-2011-2835

Name of the Vulnerable Software and Affected Versions Hex-Rays IDA Pro versions 5.7 through 6.0 Description The issue is related to a buffer overflow in the Mach-O input file loader, which can be exploited by user-assisted remote attackers using a crafted Mach-O file. This could lead to a denial ...

PT-2011-2839

Name of the Vulnerable Software and Affected Versions Hex-Rays IDA Pro versions 5.7 through 6.0 Description The issue is related to an unspecified vulnerability in the Mach-O input file loader, which allows user-assisted remote attackers to cause a denial of service. This can result in an...

PT-2011-2840

Name of the Vulnerable Software and Affected Versions Hex-Rays IDA Pro versions 5.7 through 6.0 Description The issue concerns an unspecified vulnerability in the PEF input file loader. Details about the impact and attack vectors of this issue are not provided. Recommendations For Hex-Rays IDA Pr...

CVE-2011-1053: Undefined Security Weakness

Unspecified vulnerability in the Mach-O input file loader in Hex-Rays IDA Pro 5.7 and 6.0 allows user-assisted remote attackers to cause a denial of service out-of-memory exception and inability to analyze code via a crafted Mach-O file...

CVE-2011-1049: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Mach-O input file loader in Hex-Rays IDA Pro 5.7 and 6.0 allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted Macho-O file...

CVE-2011-1054: Undefined Security Weakness

Unspecified vulnerability in the PEF input file loader in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors...

Oracle Java Webstart Trusted JNLP Extension Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle's Java Runtime Environment. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

IDA Pro Mach-O Loader Buffer Overflow

The version of IDA Pro, an interactive disassembler, installed on the remote host is either 5.7 or 6.0 and includes a version of the Mach-O loader that is affected by a buffer overflow vulnerability. By tricking a user into opening a specially crafted Mac OS X Mach-O file using the affected loade...

IcedTea jnlp security manager bypass

The JNLP SecurityManager in IcedTea IcedTea.so 1.7 before 1.7.7, 1.8 before 1.8.4, and 1.9 before 1.9.4 for Java OpenJDK returns from the checkPermission method instead of throwing an exception in certain circumstances, which might allow context-dependent attackers to bypass the intended security...

3.0.3): Arbitrary Java code execution via an HTTP request containing a specially-crafted .jar file

SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote attackers to execute arbitrary code via an HTTP request containing class.classLoader.URLs0=jar: followed by a URL of a crafted .jar file...

Digital Forensics Framework v0.9.0 latest version download !

"DFF Digital Forensics Framework is a simple but powerful tool with a flexible module system which will help you in your digital forensics works, including file recovery due to error or crash, evidence research and analysis, etc. DFF provides a robust architecture and some handy modules." This is...

DSA-2122-2 glibc - privilege escalation

Bulletin has no description...

CentOS 5 : glibc (CESA-2010:0793)

Updated glibc packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

DEBIAN-CVE-2010-4159

Untrusted search path vulnerability in metadata/loader.c in Mono 2.8 and earlier allows local users to gain privileges via a Trojan horse shared library in the current working directory...

CVE-2010-4159

Untrusted search path vulnerability in metadata/loader.c in Mono 2.8 and earlier allows local users to gain privileges via a Trojan horse shared library in the current working directory...

Important: Red Hat Security Advisory: glibc security and bug fix update

Updated glibc packages that fix two security issues and two bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

linux/ARM - Loader Port 0x1337 Shellcode

Exploit for linux/x86 platform in category shellcode ======================================== linux/ARM - Loader Port 0x1337 Shellcode ======================================== / Title: arm-loader Brief: Bind port 0x1337 on any local interface, listen for a connection receive a payload, and pass...

ARM Loader Port 0x1337

ARM Loader Port 0x1337. Shellcode exploit for arm platform / Title: arm-loader Brief: Bind port 0x1337 on any local interface, listen for a connection receive a payload, and pass execution to it Author: Daniel Godas-Lopez / / socdes = socketAFINET, SOCKSTREAM, IPPROTOTCP; / mov %r0, $2 / AFINET /...

[SECURITY] [DSA 2122-1] New glibc packages fix local privilege escalation

------------------------------------------------------------------------ Debian Security Advisory DSA-2122-1 [email protected] http://www.debian.org/security/ Florian Weimer October 22, 2010 http://www.debian.org/security/faq -...

Important: Red Hat Security Advisory: glibc security update

Updated glibc packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...