GhostScript PostScript File Stack Overflow Exploit

No description provided by source. Check Point Software Technologies - Vulnerability Discovery Team VDT Rodrigo Rubira Branco - rbranco noSPAM checkpoint.com GhostScript Stack Overflow bsd/x86/shellbindtcp - 214 bytes http://www.metasploit.com Encoder: x86/alphaupper AppendExit=false,...

Apple Directory Services Memory Corruption

No description provided by source. Apple Directory Services Memory Corruption CVE-2010-1840 INTRODUCTION chfn, chpass and chsh dos not properly parse authname switch -u, which causes the applications to crash when parsing a long string. Those binaries are setuid root by default. This problem was...

Apple Quicktime Memory Corruption (CVE-2012-0671)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Qualys Vulnerability & Malware Research Labs VMRL http://www.qualys.com http://www.dissect.pe Memory corruption when Apple Quicktime parsers .pct file CVE-2012-0671 INTRODUCTION Apple Quicktime does not properly parse .pct media files, which causes a...

Adobe Shockwave Player Remote Code Execution (CVE-2012-2030)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Qualys Vulnerability & Malware Research Labs VMRL http://www.dissect.pe Memory corruption when Adobe Shockwave Player parses .dir media file CVE-2012-2030 INTRODUCTION Adobe Shockwave Player is the Adobe plugin to many different browsers to view...

Vendor Calendar Manager Remote Code Execution

Exploit for multiple platform in category remote exploits / Rodrigo Rubira Branco BSDaemon - http://www.kernelhacking.com/rodrigo http://www.risesecurity.org / include include include include include define CMSDPROG 100068 define CMSDVERS 4 define CMSDINSERT 6 define CMSDUNKN 10 struct cmsend cha...

Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-4089

Dear List, I'm writing on behalf of the Check Point Vulnerability Discovery Team to publish the following vulnerability. Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Memory corruption when Adobe Shockwave Player parses .dir media file...

Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-4087

Dear List, I'm writing on behalf of the Check Point Vulnerability Discovery Team to publish the following vulnerability. Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Memory corruption when Adobe Shockwave Player parses .dir media file mma...

Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-4086

Dear List, I'm writing on behalf of the Check Point Vulnerability Discovery Team to publish the following vulnerability. Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Memory corruption when Adobe Shockwave Player parses .dir media file...

Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-2869

I'm writing on behalf of the Check Point Vulnerability Discovery Team to publish the following vulnerability. Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Memory corruption when Adobe Shockwave Player parses .dir media file CVE-2010-2869...

Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-2882

I'm writing on behalf of the Check Point Vulnerability Discovery Team to publish the following vulnerability. Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Memory corruption when Adobe Shockwave Player parses .dir media file CVE-2010-2882...

Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-2881

I'm writing on behalf of the Check Point Vulnerability Discovery Team to publish the following vulnerability. Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Memory corruption when Adobe Shockwave Player parses .dir media file CVE-2010-2881...

Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-2864

I'm writing on behalf of the Check Point Vulnerability Discovery Team to publish the following vulnerability. Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Memory corruption when Adobe Shockwave Player parses .dir media file CVE-2010-2864...

rpc.ttdbserverd x86 Proof Of Concept Exploit

Check Point Software Technologies - Vulnerability Discovery Team VDT Rodrigo Rubira Branco - RPC TTDB .rec parser Heap Overflow thrjmptable does not exist on Solaris 10 u8 See the SPARC version of this exploit to see how to specify other addresses to be overwritten use POSIX; use IO::Socket; use...

rpc.ttdbserverd SPARC Proof Of Concept Exploit

Check Point Software Technologies - Vulnerability Discovery Team VDT Rodrigo Rubira Branco - RPC TTDB .rec parser Heap Overflow thrjmptable does not exist on Solaris 10 u8 so use the -a option to specify the address of the saved window or other structures to overwrite use POSIX; use IO::Socket; u...

rpc.pcnfsd - Remote Format String

rpc.pcnfsd - Remote Format String / Check Point Software Technologies - Vulnerability Discovery Team VDT Rodrigo Rubira Branco - rpc.pcnfsd syslog format string vulnerability / include include include include include define PCNFSDPROG 150001 define PCNFSDVERS 1 define PCNFSDPRINIT 2 define...

Ghostscript - .PostScript File Stack Overflow

Ghostscript - .PostScript File Stack Overflow Check Point Software Technologies - Vulnerability Discovery Team VDT Rodrigo Rubira Branco - GhostScript Stack Overflow bsd/x86/shellbindtcp - 214 bytes http://www.metasploit.com Encoder: x86/alphaupper AppendExit=false, PrependSetresuid=false,...

Ghostscript - '.PostScript' File Stack Overflow

Check Point Software Technologies - Vulnerability Discovery Team VDT Rodrigo Rubira Branco - GhostScript Stack Overflow bsd/x86/shellbindtcp - 214 bytes http://www.metasploit.com Encoder: x86/alphaupper AppendExit=false, PrependSetresuid=false, PrependSetuid=false, LPORT=4444, RHOST=,...

IBM AIX rpc.cmsd Stack Buffer Overflow Vulnerability

No description provided by source. / Rodrigo Rubira Branco BSDaemon - rodrigo noSPAM risesecurity . org http://www.kernelhacking.com/rodrigo http://www.risesecurity.org / include stdlib.h include stdio.h include string.h include unistd.h include rpc/rpc.h define CMSDPROG 100068 define CMSDVERS 4...

iDefense Security Advisory 10.07.09: IBM AIX rpc.cmsd Stack Buffer Overflow Vulnerability

iDefense Security Advisory 10.07.09 http://labs.idefense.com/intelligence/vulnerabilities/ Oct 07, 2009 I. BACKGROUND IBM's AIX is a Unix operating system based on System V, which runs on the PowerPC PPC architecture. For more information, visit the product web site at the following URL...

FreeBSD-SA-06:25.kmem

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:25.kmem Security Advisory The FreeBSD Project Topic: Kernel memory disclosure in firewire4 Category: core Module: sysdev Announced: 2006-12-06 Credits: Rodrigo...