Apple QuickDraw InternalUnpackBits远程内存破坏漏洞

QuickDraw是Apple操作系统中所捆绑的图形处理工具。 QuickDraw在解析带有畸形ARGB记录的PICT图形时存在内存破坏漏洞，远程攻击者可能利用此漏洞对用户机器执行拒绝服务攻击。 如果用户受骗打开了恶意图形文件的话，就会触发这个漏洞，破坏传送给GetSrcBits32ARGB函数的指针，导致拒绝服务。 Apple Mac OS X 10.4.8 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.apple.com http://security-protocols.com/poc/sp-x43.pct...

Apple Mac OSX 10.4.8 - QuickDraw GetSrcBits32ARGB Remote Memory Corruption

source: https://www.securityfocus.com/bid/22207/info Mac OS X QuickDraw is prone to a remote memory-corruption vulnerability because the software fails to properly handle malformed PICT image files. Successfully exploiting this issue allows remote attackers to corrupt memory and crash the affecte...

CVE-2006-6309

Multiple array index errors in IBM Tivoli Storage Manager TSM before 5.2.9 and 5.3.x before 5.3.4 allow remote attackers to read arbitrary memory locations and cause a denial of service crash via a large index value in unspecified messages, a different issue than CVE-2006-5855...

Oracle Internet Directory 10.1.2.0.2 - 'oidldapd' Remote Memory Corruption

source: https://www.securityfocus.com/bid/37833/info Oracle Internet Directory is prone to a remote memory-corruption vulnerability. Exploits may allow attackers to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will likely result in denial-of-service...

Oracle Internet Directory 10.1.2.0.2 - oidldapd Remote Memory Corruption

Oracle Internet Directory 10.1.2.0.2 - oidldapd Remote Memory Corruption source: https://www.securityfocus.com/bid/37833/info Oracle Internet Directory is prone to a remote memory-corruption vulnerability. Exploits may allow attackers to execute arbitrary code in the context of the vulnerable...

Apple Airport 802.11 Probe Response Kernel Memory Corruption PoC

No description provided by source. A proof-of-concept exploit has been added to the Metasploit Framework 3.0 source tree: msf use auxiliary/dos/wireless/daringphucball require 'msf/core' module Msf class Auxiliary::Dos::Wireless::DaringPhucball Msf::Auxiliary include Exploit::Lorcon def...

Apple Airport - 802.11 Probe Response Kernel Memory Corruption (PoC) (Metasploit)

A proof-of-concept exploit has been added to the Metasploit Framework 3.0 source tree: msf use auxiliary/dos/wireless/daringphucball require 'msf/core' module Msf class Auxiliary::Dos::Wireless::DaringPhucball 'Apple Airport 802.11 Probe Response Kernel Memory Corruption', 'Description' = %q The...

Mozilla Firefox 1.0.x - JavaScript Handler Race Condition Memory Corruption

source: https://www.securityfocus.com/bid/19488/info Mozilla Firefox is prone to a remote memory-corruption vulnerability. This issue is due to a race condition that may result in double-free or other memory-corruption issues. Attackers may likely exploit this issue to execute arbitrary machine...

Mozilla Firefox 1.0.x - JavaScript Handler Race Condition Memory Corruption

Mozilla Firefox 1.0.x - JavaScript Handler Race Condition Memory Corruption source: https://www.securityfocus.com/bid/19488/info Mozilla Firefox is prone to a remote memory-corruption vulnerability. This issue is due to a race condition that may result in double-free or other memory-corruption...

security flaw

The checkconnection function in sqlparse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to read portions of memory via a username without a trailing null byte, which causes a buffer over-read...

Microsoft Internet Explorer DBCS Remote Memory Corruption Vulnerability

Microsoft Internet Explorer DBCS Remote Memory Corruption Vulnerability By Sowhat of Nevis Labs Date: 2006.04.11 http://www.nevisnetworks.com http://secway.org/advisory/AD20060411.txt http://www.microsoft.com/technet/security/bulletin/MS06-013.mspx CVE: CVE-2006-1189 Vendor Microsoft Inc. Product...

[Full-disclosure] Microsoft Internet Explorer DBCS Remote Memory Corruption Vulnerability

Microsoft Internet Explorer DBCS Remote Memory Corruption Vulnerability By Sowhat of Nevis Labs Date: 2006.04.11 http://www.nevisnetworks.com http://secway.org/advisory/AD20060411.txt http://www.microsoft.com/technet/security/bulletin/MS06-013.mspx CVE: CVE-2006-1189 Vendor Microsoft Inc. Product...

MS Windows MSDTC Service Remote Memory Modification PoC (MS05-051)

Exploit for unknown platform in category dos / poc ================================================================== MS Windows MSDTC Service Remote Memory Modification PoC MS05-051 ================================================================== / \ MSDTC remote PoC exploit / by Darkeagle \ /...

Microsoft Windows - MSDTC Service Remote Memory Modification (PoC) (MS05-051)

Microsoft Windows - MSDTC Service Remote Memory Modification PoC MS05-051 / \ MSDTC remote PoC exploit / by Darkeagle \ / \ Unl0ck Research Team / \ / Greetingz: all UKT boys, 0x557 guys, Sowhat, GHC/RST guys \ / Exploit tested on: Windows 2000 Professional Russian Service Pack 4 \ /...

MS Windows MSDTC Service Remote Memory Modification PoC (MS05-051)

No description provided by source. / \ MSDTC remote PoC exploit / by Darkeagle \ / \ Unl0ck Research Team / \ / Greetingz: all UKT boys, 0x557 guys, Sowhat, GHC/RST guys \ / Exploit tested on: Windows 2000 Professional Russian Service Pack 4 \ / http://exploiterz.org || http://55k7.org \ /...

[Full-disclosure] Advisory: Apple QuickTime PICT Remote Memory Overwrite

Apple QuickTime PICT Remote Memory Overwrite by Piotr Bania [email protected] http://pb.specialised.info All rights reserved. CVE-ID: CVE-2005-2756 Original location: http://pb.specialised.info/all/adv/quicktime-pict-adv.txt Severity: Critical - remote code execution. Software affected:...

security flaw

Format string vulnerability in the protoitemsettext function in Ethereal 0.9.4 through 0.10.11, as used in multiple dissectors, allows remote attackers to write to arbitrary memory locations and gain privileges via a crafted AFP packet...

PHP 4.x/5.0.1 - PHP_Variables Remote Memory Disclosure

source: https://www.securityfocus.com/bid/11334/info A vulnerability is reported to present itself in the array parsing functions of the 'phpvariables.c' PHP source file. The vulnerability occurs when a PHP script is being used to print URI parameters or data, that are supplied by a third party,...

Mozilla Thunderbird < 2.0.0.22 Multiple Vulnerabilities

Binary data 5001.prm...

EZPhotoShare 1.01.1 - Memory Corruption

EZPhotoShare 1.01.1 - Memory Corruption source: https://www.securityfocus.com/bid/9150/info eZphotoshare has been reported prone to multiple remote memory corruption vulnerabilities. The issues present themselves in the routines employed by eZphotoshare to handle network based communications. It...