685 matches found
BomberClone 0.11 - Multiple Vulnerabilities
// source: https://www.securityfocus.com/bid/19255/info Bomberclone is prone to remote information-disclosure and denial-of-service vulnerabilities because it fails to properly sanitize user-supplied input. These issues allow remote attackers to access sensitive information and to crash the...
Open Cubic Player <= 2.6.0pre6 / 0.1.10_rc5 Multiple BOF Exploit
Exploit for unknown platform in category local exploits ================================================================ Open Cubic Player include include include define VER "0.1" define POCNAME "proof-of-concept" void fwbofFILE fd, int len, int chr; void fwi08FILE fd, int num; void fwi16FILE fd,...
BomberClone 0.11 - Multiple Vulnerabilities
BomberClone 0.11 - Multiple Vulnerabilities // source: https://www.securityfocus.com/bid/19255/info Bomberclone is prone to remote information-disclosure and denial-of-service vulnerabilities because it fails to properly sanitize user-supplied input. These issues allow remote attackers to access...
Open Cubic Player 2.6.0pre60.1.10_rc5 - Multiple Local Buffer Overflows
Open Cubic Player 2.6.0pre60.1.10rc5 - Multiple Local Buffer Overflows / by Luigi Auriemma / include include include include define VER "0.1" define POCNAME "proof-of-concept" void fwbofFILE fd, int len, int chr; void fwi08FILE fd, int num; void fwi16FILE fd, int num; void fwi32FILE fd, int num;...
Open Cubic Player <= 2.6.0pre6 / 0.1.10_rc5 Multiple BOF Exploit
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h include stdint.h define VER "0.1" define POCNAME "proof-of-concept" void fwbofFILE fd, int len, int chr; void fwi08FILE fd, int num; void fwi16FILE fd, int num; void fwi32FILE fd, int num;...
libmikmod <= 3.2.2 (GT2 loader) Local Heap Overflow PoC
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h include stdint.h define VER "0.1" define cpyx,y strncpyx, y, sizeofx; void fwi08FILE fd, int num; void fwi16FILE fd, int num; void fwi32FILE fd, int num; void fwstrFILE fd, uint8t str; void...
libmikmod 3.2.2 - GT2 Loader Local Heap Overflow (PoC)
libmikmod 3.2.2 - GT2 Loader Local Heap Overflow PoC / by Luigi Auriemma / include include include include define VER "0.1" define cpyx,y strncpyx, y, sizeofx; void fwi08FILE fd, int num; void fwi16FILE fd, int num; void fwi32FILE fd, int num; void fwstrFILE fd, uint8t str; void fwmemFILE fd,...
libmikmod <= 3.2.2 (GT2 loader) Local Heap Overflow PoC
Exploit for multiple platform in category dos / poc ======================================================= libmikmod include include include define VER "0.1" define cpyx,y strncpyx, y, sizeofx; void fwi08FILE fd, int num; void fwi16FILE fd, int num; void fwi32FILE fd, int num; void fwstrFILE fd,...
Heap overflow in the GT2 loader of libmikmod 3.2.2
Luigi Auriemma Application: libmikmod http://mikmod.raphnet.net http://sourceforge.net/projects/mikmod/ Versions: = 3.2.2 and current CVS versions 2.x.x and all the others in which the GT2 file format isn't implemented are not vulnerable Platforms: Windows, POSIX, Mac Bug: heap overflow in GT2's...
libmikmod 3.2.2 - GT2 Loader Local Heap Overflow (PoC)
/ by Luigi Auriemma / include include include include define VER "0.1" define cpyx,y strncpyx, y, sizeofx; void fwi08FILE fd, int num; void fwi16FILE fd, int num; void fwi32FILE fd, int num; void fwstrFILE fd, uint8t str; void fwmemFILE fd, uint8t data, int size; void stderrvoid; pragma pack1...
Two crash vulnerabilities in Freeciv 2.1.0-beta1 (SVN 15 Jul 2006)
Luigi Auriemma Application: Freeciv http://www.freeciv.org Versions: = 2.1.0-beta1 and SVN = 15 Jul 2006 Platforms: Windows, nix, BSD, MacOS and more Bugs: A memcpy crash in generichandleplayerattributechunk B invalid memory access in handleunitorders Exploitation: remote, versus server Date: 23...
DSA-1123 libdumb - buffer overflow
Bulletin has no description...
Buffer-overflow in the XM loader of Cheese Tracker 0.9.9
Luigi Auriemma Application: Cheese Tracker http://reduz.com.ar/cheesetracker/ http://sourceforge.net/projects/cheesetronic Versions: = 0.9.9 and current CVS Platforms: nix and others Bug: buffer-overflow in LoaderXM::loadinstrumentinternal Exploitation: local Date: 23 Jul 2006 Author: Luigi...
Cheese Tracker 0.9.9 - Local Buffer Overflow
Cheese Tracker 0.9.9 - Local Buffer Overflow / by Luigi Auriemma / include include include include define VER "0.1" define CPOS 243 // reader.getfilepos-pcpos define JUNKSZ 500 + CPOS // Uint8 junkbuster500 define OVERFLOW 740 // overflow define BOFSZNUM JUNKSZ + OVERFLOW define BOFSZ JUNKSZ +...
Cheese Tracker 0.9.9 - Local Buffer Overflow
/ by Luigi Auriemma / include include include include define VER "0.1" define CPOS 243 // reader.getfilepos-pcpos define JUNKSZ 500 + CPOS // Uint8 junkbuster500 define OVERFLOW 740 // overflow define BOFSZNUM JUNKSZ + OVERFLOW define BOFSZ JUNKSZ + OVERFLOW - CPOS define myzerox memsetx, 0,...
freeciv -- Denial of Service Vulnerabilities
Secunia reports: Luigi Auriemma has reported a vulnerability in Freeciv, which can be exploited by malicious people to cause a DoS Denial of Service. An error in the "generichandleplayerattributechunk" function in common/packets.c can be exploited to crash the service via a specially crafted...
Dumb <= 0.9.3 (it_read_envelope) Remote Heap Overflow PoC
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h include stdint.h define VER "0.1" define BOF 255 // 25 BOF 256 define INSTRSZ 371 define POCNAME "proof-of-concept" void fwi08FILE fd, int num; void fwi16FILE fd, int num; void fwi32FILE fd,...
Dumb <= 0.9.3 (it_read_envelope) Remote Heap Overflow PoC
Exploit for unknown platform in category dos / poc ========================================================= Dumb include include include define VER "0.1" define BOF 255 // 25 BOF 256 define INSTRSZ 371 define POCNAME "proof-of-concept" void fwi08FILE fd, int num; void fwi16FILE fd, int num; void...
Dumb 0.9.3 - 'it_read_envelope' Remote Heap Overflow (PoC)
/ by Luigi Auriemma / include include include include define VER "0.1" define BOF 255 // 25 BOF 256 define INSTRSZ 371 define POCNAME "proof-of-concept" void fwi08FILE fd, int num; void fwi16FILE fd, int num; void fwi32FILE fd, int num; void fwb08FILE fd, int num; void fwb16FILE fd, int num; void...
Format string bug in Sparklet 0.9.4try3
Luigi Auriemma Application: Sparklet http://sparklet.sourceforge.net Versions: = 0.9.4try3 Platforms: Windows, nix, BSD and more Bug: format string in client's display Exploitation: remote, versus clients Date: 06 Jul 2006 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1...