NCH Software Express Burn Plus 4.68 - '.EBP' Project File Buffer Overflow

!/usr/local/bin/perl NCH Software Express Burn Plus 4.68 EBP Project File Handling Buffer Overflow PoC Vendor: NCH Software Product web page: http://www.nchsoftware.com Affected version: 4.68 Summary: Express Burn is a program that allows you to create and copy many kinds of disc media, including...

NCH Software Express Burn Plus 4.68 Buffer Overflow

NCH Software Express Burn Plus version 4.68 suffers from an EBP project file handling buffer overflow vulnerability. !/usr/local/bin/perl NCH Software Express Burn Plus 4.68 EBP Project File Handling Buffer Overflow PoC Vendor: NCH Software Product web page: http://www.nchsoftware.com Affected...

NCH Software Express Burn Plus 4.68缓冲区溢出漏洞

NCH Software是适用于Windows和Mac OS X的音频，视频，听写，商业和计算机实用软件的厂商。 该漏洞是由于项目文件处理时的边界错误引起的，当用户打开例如特制的.EBP文件时，导致一个unicode缓冲区溢出。成功利用此漏洞可能允许执行任意代码。 0 NCH Software Express Burn Plus 4.68 目前厂商暂无提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.nchsoftware.com/ use Cwd; use LWP::Simple; print "\n...

NCH Software Express Burn Plus 4.68 Buffer Overflow

!/usr/local/bin/perl NCH Software Express Burn Plus 4.68 EBP Project File Handling Buffer Overflow PoC Vendor: NCH Software Product web page: http://www.nchsoftware.com Affected version: 4.68 Summary: Express Burn is a program that allows you to create and copy many kinds of disc media, including...

NCH Software Express Burn Plus 4.68 EBP Project File Handling Buffer Overflow PoC

Summary Express Burn is a program that allows you to create and copy many kinds of disc media, including Audio audio CDs / .mp3 CDs, Video DVDs, and Data CDs / DVDs / Blu-ray. Description The vulnerability is caused due to a boundary error in the processing of a project file, which can be exploit...

Express Burn Plus 4.58 Buffer Overflow

!/usr/bin/perl Express Burn Plus v4.58 EBP Project File Handling Buffer Overflow PoC Vendor: NCH Software Product web page: http://www.nchsoftware.com Affected version: 4.58 Summary: Express Burn is a program that allows you to create and copy many kinds of disc media, including Audio audio CDs /...

Express Burn Plus v4.58 EBP Project File Handling Buffer Overflow PoC

Summary Express Burn is a program that allows you to create and copy many kinds of disc media, including Audio audio CDs / .mp3 CDs, Video DVDs, and Data CDs / DVDs / Blu-ray. Description The vulnerability is caused due to a boundary error in the processing of a project file, which can be exploit...

Express Burn Plus v4.58 EBP Project File Handling Buffer Overflow PoC

Exploit for windows platform in category dos / poc !/usr/bin/perl Express Burn Plus v4.58 EBP Project File Handling Buffer Overflow PoC Vendor: NCH Software Product web page: http://www.nchsoftware.com Affected version: 4.58 Summary: Express Burn is a program that allows you to create and copy ma...

Express Burn Plus 4.58 - EBP Project File Handling Buffer Overflow (PoC)

!/usr/bin/perl Express Burn Plus v4.58 EBP Project File Handling Buffer Overflow PoC Vendor: NCH Software Product web page: http://www.nchsoftware.com Affected version: 4.58 Summary: Express Burn is a program that allows you to create and copy many kinds of disc media, including Audio audio CDs /...

NCH Software Office Intercom SIP Invite Remote Denial of Service Vulnerability

NCH Software Office Intercom is prone to a remote denial-of-service vulnerability because it fails to properly handle specially crafted SIP INVITE requests. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

NCH Officeintercom <= v5.20 Remote Denial of Service

Exploit for windows platform in category dos / poc ==================================================== NCH Officeintercom = v5.20 Remote Denial of Service ==================================================== !/usr/bin/python Exploit Title: NCH Officeintercom = v5.20 Remote Denial of Service...

NCH Officeintercom 5.20 - Remote Denial of Service

!/usr/bin/python Exploit Title: NCH Officeintercom = v5.20 Remote Denial of Service Vulnerability Date: 11/24/2010 Author: xsploited security URL: http://www.x-sploited.com/ Contact: xsploitedsecurity at x-sploited.com Software Link: http://www.nch.com.au/oi/oisetup.exe Version: = v5.20 Tested on...

NCH Officeintercom 5.20 Denial Of Service

!/usr/bin/python Exploit Title: NCH Officeintercom = v5.20 Remote Denial of Service Vulnerability Date: 11/24/2010 Author: xsploited security URL: http://www.x-sploited.com/ Contact: xsploitedsecurity at x-sploited.com Software Link: http://www.nch.com.au/oi/oisetup.exe Version: = v5.20 Tested on...

NCH Officeintercom 5.20 - Remote Denial of Service

NCH Officeintercom 5.20 - Remote Denial of Service !/usr/bin/python Exploit Title: NCH Officeintercom = v5.20 Remote Denial of Service Vulnerability Date: 11/24/2010 Author: xsploited security URL: http://www.x-sploited.com/ Contact: xsploitedsecurity at x-sploited.com Software Link:...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in NCH Software Axon Virtual PBX 2.10 and 2.11 allow remote attackers to inject arbitrary web script or HTML via the 1 onok or 2 oncancel parameter to the logon program. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2009-4038

CVE-2009-4038 affects Axon Virtual PBX (NCH Software) versions 2.10 and 2.11. The vulnerability is a multiple cross-site scripting (XSS) flaw in the /logon page where the attacker can supply unsanitized values via the parameters onok or oncancel , allowing remote injection of arbitrary HTML/JavaS...

CVE-2009-4038

Multiple cross-site scripting XSS vulnerabilities in NCH Software Axon Virtual PBX 2.10 and 2.11 allow remote attackers to inject arbitrary web script or HTML via the 1 onok or 2 oncancel parameter to the logon program. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2008-2894

Directory traversal vulnerability in the FTP client in NCH Software Classic FTP 1.02 for Windows allows remote FTP servers to create or overwrite arbitrary files via a .. dot dot in a response to a LIST command, a related issue to CVE-2002-1345...

Directory traversal

Directory traversal vulnerability in the FTP client in NCH Software Classic FTP 1.02 for Windows allows remote FTP servers to create or overwrite arbitrary files via a .. dot dot in a response to a LIST command, a related issue to CVE-2002-1345...

CVE-2008-2894

CVE-2008-2894 affects NCH Software Classic FTP 1.02 for Windows. The vulnerability is a directory traversal in the FTP client that lets remote FTP servers cause creation or overwriting of arbitrary files via a .. sequence in a response to a LIST command. The issue originates from how the LIST res...