Nero Elevation of Privilege Vulnerability

Nero is a suite of CD burning software that offers burning, copying, editing, ripping and converting features. A security vulnerability exists in Nero version 7.10.1.0. The vulnerability can be exploited to invoke malicious code with elevated privileges via a malicious Nero.exe file in the...

Directory traversal

Nero 7.10.1.0 has an unquoted BINARYPATHNAME for NBService, exploitable via a Trojan horse Nero.exe file in the %PROGRAMFILESx86%\Nero directory...

CVE-2017-15383

Nero 7.10.1.0 has an unquoted BINARYPATHNAME for NBService, exploitable via a Trojan horse Nero.exe file in the %PROGRAMFILESx86%\Nero directory...

CVE-2017-15383

Nero 7.10.1.0 has an unquoted BINARYPATHNAME for NBService, exploitable via a Trojan horse Nero.exe file in the %PROGRAMFILESx86%\Nero directory...

CVE-2017-15383

CVE-2017-15383 affects Nero 7.10.1.0. It describes an unquoted BINARY_PATH_NAME for NBService, exploitable via a Trojan horse Nero.exe placed in %PROGRAMFILES(x86)%\Nero. The result is a local privilege escalation vulnerability (as described in multiple sources) where an attacker with access to p...

CVE-2017-15383

Nero 7.10.1.0 has an unquoted BINARYPATHNAME for NBService, exploitable via a Trojan horse Nero.exe file in the %PROGRAMFILESx86%\Nero directory...

Nero 7.10.1.0 Privilege Escalation Vulnerability

Exploit for windows platform in category local exploits Exploit Title: Nero 7 Unquoted Service Path Elevation Of Privilege Disclosure Date: 09/11/2016 Exploit Author: Boumediene KADDOUR a.k.a Sh311c0d3r http://www.realistic-security.org Version: Nero version 7.10.1.0 Tested on: Windows 7 integral...

Nero 7.10.1.0 Privilege Escalation

Exploit Title: Nero 7 Unquoted Service Path Elevation Of Privilege Disclosure Date: 09/11/2016 Exploit Author: Boumediene KADDOUR a.k.a Sh311c0d3r http://www.realistic-security.org Version: Nero version 7.10.1.0 Tested on: Windows 7 integral edition FR CVE : N/A Vulnerability Details:...

Nero MediaHome 4.5.8.0 - Denial of Service Vulnerability

No description provided by source...

Nero Burning ROM 9.4.13.2 - (iso compilation) Local Buffer Invasion PoC

No description provided by source. !/usr/bin/perl Title: Nero Burning ROM 9 iso compilation Local Buffer Invasion Proof Of Concept Product web page: http://www.nero.com Version tested: 9.4.13.2 OS platform used: Microsoft Windows XP Professional SP3 English Registers pick'a'chu:...

Nero Express 7.9.6.4 - Local Heap PoC

No description provided by source. !/user/bin/perl Exploit Title: Nero Express7 Local Heap Poc Date: 2010/01/01 Author: D3V!L FUCKER Version: Nero Express7 Ver.7.9.6.4 Tested on: windows vista sp0 After Setup Open Nero StartSmart Essentials = Favorites = Open Projects = explit.nir Code : $headr=...

NERO Media Player <= 1.4.0.35b M3U File Buffer Overflow PoC

No description provided by source. NERO Media Player = 1.4.0.35b Remote Buffer Overflow .M3U This exception may be expected and handled. eax=03e90f40 ebx=41414141 ecx=009d01c8 edx=009d015c esi=03e90f38 edi=41414141 eip=7c92b3fb esp=0010bff8 ebp=0010c214 iopl=0 nv up ei pl nz ac pe nc cs=001b...

CVE-2012-5876

Multiple off-by-one errors in NMMediaServerService.dll in Nero MediaHome 4.5.8.0 and earlier allow remote attackers to cause a denial of service crash via a long string in the 1 request line or 2 HTTP Referer header to TCP port 54444, which triggers a heap-based buffer overflow...

CVE-2012-5877

Nero MediaHome 4.5.8.0 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and crash via an HTTP header without a name...

Null pointer dereference

Nero MediaHome 4.5.8.0 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and crash via an HTTP header without a name...

Heap overflow

Multiple off-by-one errors in NMMediaServerService.dll in Nero MediaHome 4.5.8.0 and earlier allow remote attackers to cause a denial of service crash via a long string in the 1 request line or 2 HTTP Referer header to TCP port 54444, which triggers a heap-based buffer overflow...

CVE-2012-5877

CVE-2012-5877 concerns Nero MediaHome Server (Product: Nero MediaHome, vulnerable through NMMediaServer.dll) with versions up to 4.5.8.0. The available documents describe a denial-of-service via malformed HTTP handling, notably a NULL pointer dereference triggered by ill-formed HTTP headers (e.g....

CVE-2012-5876

Nero MediaHome 4.x (NMMediaServer.dll) is affected by CVE-2012-5876 and related CVE-2012-5877, a set of remote DoS flaws caused by multiple off-by-one/length handling errors in the server. The vulnerabilities allow an attacker to crash the Nero MediaHome server by sending specially crafted reques...

CVE-2012-5877

Nero MediaHome 4.5.8.0 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and crash via an HTTP header without a name...

CVE-2012-5876

Multiple off-by-one errors in NMMediaServerService.dll in Nero MediaHome 4.5.8.0 and earlier allow remote attackers to cause a denial of service crash via a long string in the 1 request line or 2 HTTP Referer header to TCP port 54444, which triggers a heap-based buffer overflow...