519 matches found
Jinais IRC Server 0.1.8 - NULL Pointer PoC
Exploit for multiple platform in category dos / poc ========================================== Jinais IRC Server 0.1.8 - NULL Pointer PoC ========================================== / Jinais IRC Server 0.1.8 - NULL Pointer PoC This PoC will disconnect the affected target IRC server using a NULL...
mozilla -- multiple vulnerabilities
Mozilla Project reports: MFSA 2010-07 Fixes for potentially exploitable crashes ported to the legacy branch MFSA 2010-06 Scriptable plugin execution in SeaMonkey mail MFSA 2009-68 NTLM reflection vulnerability MFSA 2009-62 Download filename spoofing with RTL override MFSA 2009-59 Heap buffer...
Apache mod_isapi Dangling Pointer Vulnerability - Security Advisory - SOS-10-002
Apache modisapi Dangling Pointer Vulnerability - Security Advisory - SOS-10-002 Release Date. 5-Mar-2010 Last Update. - Vendor Notification Date. 9-Feb-2010 Product. Apache HTTP Server Platform. Microsoft Windows Affected versions. 2.2.14 verified and possibly others. Severity Rating. High Impact...
Design/Logic Flaw
Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site, related to an "invalid pointer vulnerability," a different issue than CVE-2009-3464. NOTE: some of these details are obtained from third party information...
CVE-2009-3465
Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site, related to an "invalid pointer vulnerability," a different issue than CVE-2009-3464. NOTE: some of these details are obtained from third party information...
Microsoft Windows TCP/IP时间戳远程代码执行漏洞(MS09-048)
BUGTRAQ ID: 36265 CVECAN ID: CVE-2009-1925 Microsoft Windows是微软发布的非常流行的操作系统。 由于TCP/IP栈没有正确地清除状态信息,导致Windows TCP/IP栈中存在远程代码执行漏洞。这会导致TCP/IP栈引用包含有其他信息的字段为函数指针。匿名攻击者可以通过向在网络上监听服务的计算机发送特制的TCP/IP报文来利用这个漏洞,成功利用这个漏洞的攻击者可以完全控制受影响的系统;攻击者之后可以安装程序、查看、更改或删除数据,或创建拥有完全用户权限的新账号。 Microsoft Windows Vista SP2...
mozilla firefox -- multiple vulnerabilities
Mozilla Foundation reports: MFSA 2009-51 Chrome privilege escalation with FeedWriter MFSA 2009-50 Location bar spoofing via tall line-height Unicode characters MFSA 2009-49 TreeColumns dangling pointer vulnerability MFSA 2009-48 Insufficient warning for PKCS11 module installation and removal MFSA...
Immunity Canvas: SMB2_NEGOTIATE_REMOTE
Name| smb2negotiateremote ---|--- CVE| CVE-2009-3103 Exploit Pack| CANVAS Description| SMB2 Negotiate Pointer Dereference Vulnerability Notes| CVE Name: CVE-2009-3103 VENDOR: Microsoft MSADV: MS09-050 VersionsAffected: Repeatability: One shot References: http://blog.48bits.com/?p=510,...
CVE-2009-1865
Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service application crash or possibly execute arbitrary code via unspecified vectors, related to a "null pointer vulnerability."...
CVE-2009-1721
The decompression implementation in the Imf::hufUncompress function in OpenEXR 1.2.2 and 1.6.1 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via vectors that trigger a free of an uninitialized pointer...
flash-plugin: multiple code execution flaws (APSB09-10)
Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service application crash or possibly execute arbitrary code via unspecified vectors, related to a "null pointer vulnerability."...
Mandriva Update for xorg-x11 MDKSA-2007:079 (xorg-x11)
Check for the Version of xorg-x11 OpenVAS Vulnerability Test Mandriva Update for xorg-x11 MDKSA-2007:079 xorg-x11 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Mandriva Update for krb5 MDKSA-2007:174 (krb5)
Check for the Version of krb5 OpenVAS Vulnerability Test Mandriva Update for krb5 MDKSA-2007:174 krb5 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
RedHat Update for cups RHSA-2008:1029-01
Check for the Version of cups OpenVAS Vulnerability Test RedHat Update for cups RHSA-2008:1029-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...
NULL pointer in the HTTP/XML-RPC service of Crysis 1.21
Luigi Auriemma Application: Crysis http://www.ea.com/crysis/home.jsp Versions: = 1.21 1.1.1.6156 showed as gamever Platforms: Windows Bug: NULL pointer in the HTTP/XML-RPC service Exploitation: remote, versus server Date: 16 Jun 2008 Author: Luigi Auriemma e-mail: [email protected] web:...
Flash Player vulnerabilities of the new use of the method-vulnerability warning-the black bar safety net
Source: Phantom maillist Two days before the recommended Mark Dowd's Paper “Exploiting Flash Reliably” Learn a little, very good very powerful. For later Flash Player exploits has opened up a new new road. Simple to say, from Flash9 to start, to achieve an ActionScript Virtual Machine AVM, the...
CA BrightStor Backup 11.5.2.0 - 'caloggderd.exe' Denial of Service
!/usr/bin/python Computer Associates CA Brightstor Backup caloggderd.exe DoS camt70.dll Previously Unknown There is an issue in camt70.dll when caloggerd is processing a hostname for a login operation. When processing the string, if a null is passed in as an argument, it will be loaded into ESI a...
Apple Darwin Streaming Server NULL pointer DoS
Null pointer reference in DESCRIBE command...
CVE-1999-0909
Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the "Spoofed Route Pointer" vulnerability...