7654 matches found
TFTP Server AT-TFTP Server v 1.9 Buffer Overflow Vulnerability (Long filename)
TFTP Server AT-TFTP Server v 1.9 Buffer Overflow Vulnerability Long filename ------------------------------------------------------------------ SUMMARY: AT-TFTP Server is a Freeware TFTP server for Windows 9x/NT/XP. http://www.alliedtelesyn.co.uk/en-gb/support/downloads/tools.asp It provides an...
NetGear WG311v1无线驱动超长SSID堆溢出漏洞
WG311是一款54M的无线PCI网卡。 WG311v1无线驱动在处理超长的SSID时存在堆溢出漏洞，远程攻击者可以通过发送特制报文来触发这个漏洞，可能导致拒绝服务或执行任意指令。 问题存在于WG311ND5.SYS驱动中，在Windows系统上重现，但Linux及FreeBSD也可能受类似漏洞的影响。 Netgear WG311ND5.SYS 2.3.1.10 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.netgear.com/ require 'msf/core' module Msf class...
Windows Media Player <= 10.00.00.4036 Long Playlist DoS
Binary data 3817.prm...
NetGear MA521无线驱动超长Rates溢出漏洞
NetGear MA521是一款802.11b无线PC网卡。 NetGear MA521的驱动程序在处理畸形帧时存在漏洞，远程攻击可能利用此漏洞在用户机器上执行任意指令。 如果在积极扫描模式下接收到了畸形帧（信标或探测响应）的话，MA521的MA521nd5.SYS驱动就会试图写入攻击者所控制的内存位置。远程攻击者可以通过发送有无效rates信息单元的报文来触发缓冲区溢出，导致执行任意代码。 Netgear MA521 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.netgear.com/ require...
Apple Safari JavaScript超长正则表达式匹配串远程代码执行漏洞
Apple Safari是苹果家族操作系统所使用的WEB浏览器。 Apple Safari在处理超长的正则表达式匹配串时存在漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 如果Safari用户受骗访问了包含有恶意JavaScript的站点的话，就可能触发正则表达式处理过程中的漏洞，导致浏览器崩溃或执行任意指令。 Apple Safari 2.0.4 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.apple.com script var reg = /./; var z = 'Z'; while z.leng...
CVE-2006-4691
Stack-based buffer overflow in the NetpManageIPCConnect function in the Workstation service wkssvc.dll in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to execute arbitrary code via NetrJoinDomain2 RPC messages with a long hostname...
Broadcom Wireless Driver Probe Response SSID Overflow Exploit (meta)
No description provided by source. require 'msf/core' module Msf class Exploits::Windows::Driver::BroadcomWiFiSSID Msf::Exploit::Remote include Exploit::Lorcon include Exploit::KernelMode def initializeinfo = superupdateinfoinfo, 'Name' = 'Broadcom Wireless Driver Probe Response SSID Overflow',...
Broadcom Wireless Driver - Probe Response SSID Overflow (Metasploit)
Broadcom Wireless Driver - Probe Response SSID Overflow Metasploit $Id: broadcomwifissid.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more...
Broadcom Wireless Driver Probe Response SSID Overflow Expl (meta)
Exploit for unknown platform in category remote exploits ==================================================================== Broadcom Wireless Driver Probe Response SSID Overflow Exploit meta ==================================================================== require 'msf/core' module Msf class...
CVE-2006-5864
Stack-based buffer overflow in the psgettext function in ps.c for GNU gv 3.6.2, and possibly earlier versions, allows user-assisted attackers to execute arbitrary code via a PostScript PS file with certain headers that contain long comments, as demonstrated using the 1 DocumentMedia, 2...
CVE-2006-5864
Stack-based buffer overflow in the psgettext function in ps.c for GNU gv 3.6.2, and possibly earlier versions, allows user-assisted attackers to execute arbitrary code via a PostScript PS file with certain headers that contain long comments, as demonstrated using the 1 DocumentMedia, 2...
CVE-2006-5850
Stack-based buffer overflow in Essentia Web Server 2.15 for Windows allows remote attackers to execute arbitrary code via a long URI, as demonstrated by a GET or HEAD request. NOTE: some of these details are obtained from third party information...
CVE-2006-5783
Firefox 1.5.0.7 on Kubuntu Linux allows remote attackers to cause a denial of service crash via a long URL in an A tag. NOTE: this issue has been disputed by several vendors, who could not reproduce the report. In addition, the scope of the impact - system freeze - suggests an issue that is not...
CVE-2006-5783
Firefox 1.5.0.7 on Kubuntu Linux allows remote attackers to cause a denial of service crash via a long URL in an A tag. NOTE: this issue has been disputed by several vendors, who could not reproduce the report. In addition, the scope of the impact - system freeze - suggests an issue that is not...
CVE-2006-5783
Firefox 1.5.0.7 on Kubuntu Linux allows remote attackers to cause a denial of service crash via a long URL in an A tag. NOTE: this issue has been disputed by several vendors, who could not reproduce the report. In addition, the scope of the impact - system freeze - suggests an issue that is not...
PT-2006-6462 · Mozilla · Firefox
Name of the Vulnerable Software and Affected Versions: Firefox version 1.5.0.7 Description: A potential issue allows remote attackers to cause a denial of service, resulting in a crash, via a long URL in an A tag. However, this issue has been disputed by several vendors who could not reproduce th...
CVE-2006-5395
Buffer overflow in Microsoft Class Package Export Tool aka clspack.exe allows context-dependent attackers to execute arbitrary code via a long string. NOTE: the provenance of this information is unknown; the details are obtained from third party information...
CVE-2006-5395
Buffer overflow in Microsoft Class Package Export Tool aka clspack.exe allows context-dependent attackers to execute arbitrary code via a long string. NOTE: the provenance of this information is unknown; the details are obtained from third party information...