203 matches found
refinery
Binary Refinery docs tests codecov pypi High Octane Triage Analysis || || || || || | / / / \ || ==||=====|| | / |/ \ /==| / \ ===| '======|| | \ | | \ | \ /| | || || /||/ / | | | || =========''====/=========/ /==||=====||======' \ / / The Binary Refinery™ is a collection of Python scripts...
subparse
subparse Subparse, is a modular framework developed by Josh Strochein, Aaron Baker, and Odin Bernstein. The framework is designed to parse and index malware files and present the information found during the parsing in a searchable web-viewer. The framework is modular, making use of a core parsin...
CVE-2017-0199-Fix
CVE-2017-0199 수정 .hta 파일의 기본 핸들러를 변경하여 CVE-2017-0199의 코드 실행 기능을 제거합니다. OLE2COM 개체를 통해 호출되는 파일의 기본 핸들러는 로컬 시스템의 기본 애플리케이션과 별도로 저장되며 레지스트리를 통해서만 변경할 수 있습니다. 기본 익스플로잇 논리 이는 이 익스플로잇의 한 가지 실제 예시이며, 제가 이해한 대로 설명합니다. 모든 사례가 이 패턴을 따르는 것은 아니며, 제 평가가 정확하지 않을 수 있습니다. 그러나 다음 섹션에서 제시하는 수정은 제가 테스트한 상황에서는 실제로...
CVE-2026-91752
GNU libextractor before 1.15 contains a stack-based buffer overflow vulnerability in the processstaroffice function that sizes a variable-length stack array from attacker-controlled OLE2 stream data. Attackers can craft malicious StarOffice documents that allocate up to 4 MB on the stack, causing...
UBUNTU-CVE-2026-91752
GNU libextractor before 1.15 contains a stack-based buffer overflow vulnerability in the processstaroffice function that sizes a variable-length stack array from attacker-controlled OLE2 stream data. Attackers can craft malicious StarOffice documents that allocate up to 4 MB on the stack, causing...
CVE-2026-91752
GNU libextractor before 1.15 contains a stack-based buffer overflow vulnerability in the processstaroffice function that sizes a variable-length stack array from attacker-controlled OLE2 stream data. Attackers can craft malicious StarOffice documents that allocate up to 4 MB on the stack, causing...
CVE-2026-91752 GNU libextractor before 1.15 Stack Overflow via OLE2
GNU libextractor before 1.15 contains a stack-based buffer overflow vulnerability in the processstaroffice function that sizes a variable-length stack array from attacker-controlled OLE2 stream data. Attackers can craft malicious StarOffice documents that allocate up to 4 MB on the stack, causing...
CVE-2026-91752 GNU libextractor before 1.15 Stack Overflow via OLE2
GNU libextractor before 1.15 contains a stack-based buffer overflow vulnerability in the processstaroffice function that sizes a variable-length stack array from attacker-controlled OLE2 stream data. Attackers can craft malicious StarOffice documents that allocate up to 4 MB on the stack, causing...
CVE-2026-91752
GNU libextractor before 1.15 contains a stack-based buffer overflow in the process_star_office function, where a variable-length stack array is sized from attacker-controlled OLE2 stream data. A crafted StarOffice document can force up to 4 MB of stack allocation, triggering a stack overflow that...
EUVD-2026-78234
GNU libextractor before 1.15 contains a stack-based buffer overflow vulnerability in the processstaroffice function that sizes a variable-length stack array from attacker-controlled OLE2 stream data. Attackers can craft malicious StarOffice documents that allocate up to 4 MB on the stack, causing...
CVE-2026-91752
GNU libextractor before 1.15 contains a stack-based buffer overflow vulnerability in the processstaroffice function that sizes a variable-length stack array from attacker-controlled OLE2 stream data. Attackers can craft malicious StarOffice documents that allocate up to 4 MB on the stack, causing...
PT-2026-91773
Name of the Vulnerable Software and Affected Versions GNU libextractor versions prior to 1.15 Description A stack-based buffer overflow occurs in the process star office function. The issue arises when the function determines the size of a variable-length stack array using attacker-controlled OLE...
CVE-2026-91752: Memory Allocation with Excessive Size Value
GNU libextractor before 1.15 contains a stack-based buffer overflow vulnerability in the processstaroffice function that sizes a variable-length stack array from attacker-controlled OLE2 stream data. Attackers can craft malicious StarOffice documents that allocate up to 4 MB on the stack, causing...
Linux Distros Unpatched Vulnerability : CVE-2026-91752
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU libextractor before 1.15 contains a stack-based buffer overflow vulnerability in the processstaroffice function that sizes a variable-length stack array fro...
CLEANSTART-2026-WX01708 vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device
Multiple security vulnerabilities affect the clamav package. A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. See references for individual vulnerability details...
CLEANSTART-2026-TC95380 vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device
Multiple security vulnerabilities affect the clamav package. A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. See references for individual vulnerability details...
CLEANSTART-2026-NJ87139 vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device
Multiple security vulnerabilities affect the clamav package. A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. See references for individual vulnerability details...
EUVD-2007-2642
Malware in sbrugna...