Symantec Encryption Desktop Memory Access Violations

SUMMARY Symantecs Encryption Desktop is susceptible to memory access violations when attempting to parse specific malformed certificate files. This could result in a possible application crash if a malicious individual could entice an authorized user to successfully click on a malformed file...

Opera Use-After-Free Proof Of Concept

Bug Details Name: Opera – Use After Free - Crash PoC Vendor Website: www.opera.com Initial Notification Date: October 4th , 2011 Affected Software: Opera v11.51 and previous versions Researcher: Roberto Suggi Liverani Description The PoC Proof of Concept provided below causes a crash in the lates...

VideoLAN VLC Media Player 1.1.9 - XSPF Playlist Local File Integer Overflow

TITLE VLC Media Player XSPF Local File Integer overflow in XSPF playlist parser AFFECTED VERSIONS VLC media player 1.1.9 down to 0.8.5 VENDOR VideoLAN Organisation CLASS Denial of Service DoS RESOURCES http://www.videolan.org/security/sa1104.html PRODUCT DESCRIPTION VLC is a free and open source...

AVIPreview 0.26 Alpha - Denial of Service

done by BraniX www.hackers.org.pl found: 2011.03.15 published: 2011.03.15 tested on: Windows XP SP3 Home Edition App: AVIPreview 0.26 Alpha App Url: http://www.divx-digest.com/software/avipreviewaj.html AVIPreview.exe MD5: 399ab43edd26c655d0876dc5ddcaa3a7 DoS is caused by Access Violation...

MDaemon SMTP and IMAP Command Buffer Overflow (CVE-2004-1546)

MDaemon is a Windows-based email server that provides full mail server functionality. MDaemon supports the SMTP, IMAP and POP3 protocols. A vulnerability exists in the way the MDaemon mail server processes certain SMTP and IMAP commands. A stack buffer overflow occurs when an overly long argument...

Microsoft WordPerfect 5.x Converter Buffer Overflow (CVE-2004-0573)

The Microsoft Office text editing tools support a number of foreign file formats for compatibility with third party software. The foreign file format support is based on import and export converters. When a text editor needs to read a foreign format file, a converter transforms the file to an...

libpng Transparency Chunk Length Buffer Overflow (CVE-2004-0597)

The Portable Network Graphics PNG specification defines a datastream and an associated file format that provides a lossless, portable, image compression. libpng is a open source implementation of the PNG specification. A vulnerability exists in the way libpng handles the transparency chunk of a P...

Microsoft DirectPlay Denial of Service (CVE-2004-0202)

DirectPlay is a network protocol component of the DirectX game library. It provides networking functionality for developers who wish to develop networked applications, generally multi-player games. There exists a denial of service vulnerability in the IDirectPlay4 application programming interfac...

Microsoft Windows LoadImage API Function Integer Overflow (CVE-2004-1049)

In terms of Microsoft Windows technology, a resource is binary data that can be added to the executable file of a Windows-based application. Graphical images such as icons, cursors and bitmaps are example of standard resources. Windows-based applications support loading and rendering of graphical...

OpenSSL Multiple Vulnerabilities (Windows)

This host is installed with OpenSSL and is prone to Multiple Vulnerabilities. OpenVAS Vulnerability Test $Id: gbopensslmultvulnwin.nasl 8193 2017-12-20 10:46:55Z cfischer $ OpenSSL Multiple Vulnerabilities Windows Authors: Sujit Ghosal Copyright: Copyright c 2009 Greenbone Networks GmbH,...

OpenSSL Multiple Vulnerabilities (Mar 2009) - Windows

OpenSSL is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openssl:openssl"; ifdescription...

Safari 3.2.1 Denial Of Service

original article = http://lostmon.blogspot.com/2009/01/safari-for-windows-321-remote-http-uri.html A "malformed" http domain name , can cause that safari turn in a infinite loop wen try to resolve this domain, and it can cause at memory level a access violation wen try to write a secction that...

Microsoft Organization Chart Remote Code Execution Vulnerability

The host has Microsoft Organization Chart, which is prone to a remote code execution vulnerability. OpenVAS Vulnerability Test $Id: secpodmsorgchartremotecodeexevuln900120.nasl 7293 2017-09-27 08:49:48Z cfischer $ Description: Microsoft Organization Chart Remote Code Execution Vulnerability...

Microsoft Organization Chart RCE Vulnerability

The host has Microsoft Organization Chart, which is prone to a remote code execution vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Microsoft Organization Chart 2 - Remote Code Execution

source: https://www.securityfocus.com/bid/31059/info Microsoft Organization Chart is prone to a remote code-execution vulnerability because of a memory-access violation. Remote attackers can exploit this issue by enticing victims into opening a maliciously crafted Organization Chart document...

Microsoft Office Web Component Memory Access Violation Denial of Service Vulnera

Microsoft Office Web组件一款基与Web的数据透视表控件。 Microsoft Office Web包含的ActiveX控件存在设计错误，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 构建恶意的EWB页，诱使用户访问，可导致对应用程序进行拒绝服务攻击。 Microsoft Office Web Components 2003 0 + Microsoft BizTalk Server 2002 Developer Edition + Microsoft BizTalk Server 2002 Enterprise Edition + Microsoft Commer...

[Full-disclosure] WebEx GPCContainer Memory Access Violation

There is a memory access violation in the InitParam and SetParam functions. PoC as follows: --------------------- !-- Written by e.b. -- html head script language="JavaScript" DEFER function Check var obj = new ActiveXObject"GpcContainer.GpcContainer.1"; obj.InitOaram"A"; /script /head body...

WebEx GPCContainer - Memory Access Violation Multiple Denial of Service Vulnerabilities

WebEx GPCContainer - Memory Access Violation Multiple Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/26430/info WebEx is prone to multiple remote denial-of-service vulnerabilities. Attackers can exploit these issues to crash applications that use the ActiveX control,...

WebEx GPCContainer - Memory Access Violation Multiple Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/26430/info WebEx is prone to multiple remote denial-of-service vulnerabilities. Attackers can exploit these issues to crash applications that use the ActiveX control, denying service to legitimate users. function Check var obj = new...

Microsoft Forms 2.0 - ActiveX Control 2.0 Memory Access Violation Denial of Service

Microsoft Forms 2.0 - ActiveX Control 2.0 Memory Access Violation Denial of Service source: https://www.securityfocus.com/bid/26414/info Microsoft Forms 2.0 ActiveX Control is prone to multiple memory-access violation denial-of-service vulnerabilities. Attackers can exploit these issues to crash...