Nero Elevation of Privilege Vulnerability

Nero is a suite of CD burning software that offers burning, copying, editing, ripping and converting features. A security vulnerability exists in Nero version 7.10.1.0. The vulnerability can be exploited to invoke malicious code with elevated privileges via a malicious Nero.exe file in the...

Directory traversal

Nero 7.10.1.0 has an unquoted BINARYPATHNAME for NBService, exploitable via a Trojan horse Nero.exe file in the %PROGRAMFILESx86%\Nero directory...

CVE-2017-15383

Nero 7.10.1.0 has an unquoted BINARYPATHNAME for NBService, exploitable via a Trojan horse Nero.exe file in the %PROGRAMFILESx86%\Nero directory...

CVE-2017-15383

Nero 7.10.1.0 has an unquoted BINARYPATHNAME for NBService, exploitable via a Trojan horse Nero.exe file in the %PROGRAMFILESx86%\Nero directory...

CVE-2017-15383

Nero 7.10.1.0 has an unquoted BINARYPATHNAME for NBService, exploitable via a Trojan horse Nero.exe file in the %PROGRAMFILESx86%\Nero directory...

CVE-2017-15383

CVE-2017-15383 affects Nero 7.10.1.0. It describes an unquoted BINARY_PATH_NAME for NBService, exploitable via a Trojan horse Nero.exe placed in %PROGRAMFILES(x86)%\Nero. The result is a local privilege escalation vulnerability (as described in multiple sources) where an attacker with access to p...

Nero 7.10.1.0 Privilege Escalation Vulnerability

Exploit for windows platform in category local exploits Exploit Title: Nero 7 Unquoted Service Path Elevation Of Privilege Disclosure Date: 09/11/2016 Exploit Author: Boumediene KADDOUR a.k.a Sh311c0d3r http://www.realistic-security.org Version: Nero version 7.10.1.0 Tested on: Windows 7 integral...

Nero 7.10.1.0 Privilege Escalation

Exploit Title: Nero 7 Unquoted Service Path Elevation Of Privilege Disclosure Date: 09/11/2016 Exploit Author: Boumediene KADDOUR a.k.a Sh311c0d3r http://www.realistic-security.org Version: Nero version 7.10.1.0 Tested on: Windows 7 integral edition FR CVE : N/A Vulnerability Details:...

Nero Express 7.9.6.4 - Local Heap PoC

No description provided by source. !/user/bin/perl Exploit Title: Nero Express7 Local Heap Poc Date: 2010/01/01 Author: D3V!L FUCKER Version: Nero Express7 Ver.7.9.6.4 Tested on: windows vista sp0 After Setup Open Nero StartSmart Essentials = Favorites = Open Projects = explit.nir Code : $headr=...

Nero MediaHome 4.5.8.0 - Denial of Service Vulnerability

No description provided by source...

Nero Burning ROM 9.4.13.2 - (iso compilation) Local Buffer Invasion PoC

No description provided by source. !/usr/bin/perl Title: Nero Burning ROM 9 iso compilation Local Buffer Invasion Proof Of Concept Product web page: http://www.nero.com Version tested: 9.4.13.2 OS platform used: Microsoft Windows XP Professional SP3 English Registers pick'a'chu:...

NERO Media Player <= 1.4.0.35b M3U File Buffer Overflow PoC

No description provided by source. NERO Media Player = 1.4.0.35b Remote Buffer Overflow .M3U This exception may be expected and handled. eax=03e90f40 ebx=41414141 ecx=009d01c8 edx=009d015c esi=03e90f38 edi=41414141 eip=7c92b3fb esp=0010bff8 ebp=0010c214 iopl=0 nv up ei pl nz ac pe nc cs=001b...

CVE-2012-5876

Multiple off-by-one errors in NMMediaServerService.dll in Nero MediaHome 4.5.8.0 and earlier allow remote attackers to cause a denial of service crash via a long string in the 1 request line or 2 HTTP Referer header to TCP port 54444, which triggers a heap-based buffer overflow...

CVE-2012-5877

Nero MediaHome 4.5.8.0 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and crash via an HTTP header without a name...

Null pointer dereference

Nero MediaHome 4.5.8.0 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and crash via an HTTP header without a name...

Heap overflow

Multiple off-by-one errors in NMMediaServerService.dll in Nero MediaHome 4.5.8.0 and earlier allow remote attackers to cause a denial of service crash via a long string in the 1 request line or 2 HTTP Referer header to TCP port 54444, which triggers a heap-based buffer overflow...

CVE-2012-5877

CVE-2012-5877 concerns Nero MediaHome Server (Product: Nero MediaHome, vulnerable through NMMediaServer.dll) with versions up to 4.5.8.0. The available documents describe a denial-of-service via malformed HTTP handling, notably a NULL pointer dereference triggered by ill-formed HTTP headers (e.g....

CVE-2012-5876

Nero MediaHome 4.x (NMMediaServer.dll) is affected by CVE-2012-5876 and related CVE-2012-5877, a set of remote DoS flaws caused by multiple off-by-one/length handling errors in the server. The vulnerabilities allow an attacker to crash the Nero MediaHome server by sending specially crafted reques...

CVE-2012-5876

Multiple off-by-one errors in NMMediaServerService.dll in Nero MediaHome 4.5.8.0 and earlier allow remote attackers to cause a denial of service crash via a long string in the 1 request line or 2 HTTP Referer header to TCP port 54444, which triggers a heap-based buffer overflow...

CVE-2012-5877

Nero MediaHome 4.5.8.0 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and crash via an HTTP header without a name...