Secunia Research: Network Instruments Observer SNMP OID Processing Denial of Service

====================================================================== Secunia Research 07/06/2012 - Network Instruments Observer - - SNMP OID Processing Denial of Service Vulnerability - ====================================================================== Table of Contents Affected...

GIMP Script-Fu Server Buffer Overflow

Added: 06/11/2012 CVE: CVE-2012-2763 BID: 53741 OSVDB: 82429 Background The GNU Image Manipulation Program GIMP is free software for tasks such as photo retouching, image composition, and image authoring. Problem The vulnerability is due improper boundary checking within the Script-Fu server...

autocorr, broffice.org, openoffice.org security update

CentOS Errata and Security Advisory CESA-2012:0705 Updated openoffice.org packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring...

IrfanView 4.33 - Format PlugIn '.TTF' File Parsing Stack Overflow

Application: IrfanView 4.33 Format PlugIn TTF File Parsing Stack Based Overflow Plateform: Windows Exploitation: Remote code execution Secunia Number: SA49319 PRL: 2012-11 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1...

IrfanView 4.33 - Format PlugIn ECW Decompression Heap Overflow

IrfanView 4.33 - Format PlugIn ECW Decompression Heap Overflow Application: IrfanView 4.33 Format PlugIn ECW Decompression Heap Overflow Plateform: Windows Exploitation: Remote code execution Secunia Number: SA49204 PRL: 2012-10 Author: Francis Provencher Protek Research Lab's Website:...

IrfanView 4.33 - Format PlugIn ECW Decompression Heap Overflow

Application: IrfanView 4.33 Format PlugIn ECW Decompression Heap Overflow Plateform: Windows Exploitation: Remote code execution Secunia Number: SA49204 PRL: 2012-10 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction...

RabidHamster R4 Log Entry sprintf() Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "RabidHamster R4 L...

FreeBSD : sympa -- Multiple Security Bypass Vulnerabilities (78c39232-a345-11e1-9d81-d0df9acfd7e5)

Secunia team reports : Multiple vulnerabilities have been reported in Sympa, which can be exploited by malicious people to bypass certain security restrictions. The vulnerabilities are caused due to the application allowing access to archive functions without checking credentials. This can be...

CVE-2012-1149 OpenOffice.org integer overflow error in vclmi.dll module when allocating memory for an embedded image object

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 CVE-2012-1149 OpenOffice.org integer overflow error in vclmi.dll module when allocating memory for an embedded image object Reference: http://www.openoffice.org/security/cves/CVE-2012-1149.html Severity: Important Vendor: The Apache Software...

PHP CGI Query String Parameters Command Execution

Added: 05/15/2012 CVE: CVE-2012-1823 BID: 53388 OSVDB: 81633 Background PHP is a widely used general-purpose scripting language that is especially suited for Web development. Problem When configured as a CGI script aka php-cgi, PHP does not properly handle query string parameters which are passed...

Andromeda Streaming MP3 Server <= 1.9.3.6 XSS Vulnerability - Active Check

Andromeda Streaming MP3 Server is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

DecisionTools SharpGrid Active-X Code Execution

Application: DecisionTools SharpGrid ActiveX Control Code Execution Vulnerability Platforms: Windows Secunia: SA48571 Date: 2012-05-09 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Report Timeline 3 Technical...

DecisionTools SharpGrid - ActiveX Control Remote Code Execution

DecisionTools SharpGrid - ActiveX Control Remote Code Execution Application: DecisionTools SharpGrid ActiveX Control Code Execution Vulnerability Platforms: Windows Secunia: SA48571 Date: 2012-05-09 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitte...

DecisionTools SharpGrid ActiveX Control RCE

Exploit for windows platform in category dos / poc Application: DecisionTools SharpGrid ActiveX Control Code Execution Vulnerability Platforms: Windows Secunia: SA48571 Date: 2012-05-09 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter:...

DecisionTools SharpGrid - ActiveX Control Remote Code Execution

Application: DecisionTools SharpGrid ActiveX Control Code Execution Vulnerability Platforms: Windows Secunia: SA48571 Date: 2012-05-09 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Report Timeline 3 Technical...

Google Chrome Multiple Denial of Service Vulnerabilities - May 12 (Mac OS X)

The host is installed with Google Chrome and is prone to multiple denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultdosvulnmay12macosx.nasl 5940 2017-04-12 09:02:05Z teissa $ Google Chrome Multiple Denial of Service Vulnerabilities - May 12 Mac OS X Authors:...

Wireshark ZigBee ZCL Dissector Denial of Service Vulnerability (Mac OS X)

This host is installed with Wireshark and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbwiresharkzigbeezcldissectordosvulnmacosx.nasl 5958 2017-04-17 09:02:19Z teissa $ Wireshark ZigBee ZCL Dissector Denial of Service Vulnerability Mac OS X Authors: Rachana Shetty...

Csound getnum() getnum Function Multiple Buffer Overflows

The version of Csound installed on the remote Windows host is less than 5.16.6. As such, it is reportedly affected by multiple stack- based buffer overflows present in the getnum function located in util/hetimain.c and util/pvimport.c By tricking a user into opening a specially crafted file, an...

Mozilla Products Multiple Vulnerabilities - May12 (Windows)

This host is installed with Mozilla firefox/thunderbird/seamonkey and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsmultvulnmay12win.nasl 6444 2017-06-27 11:24:02Z santu $ Mozilla Products Multiple Vulnerabilities - May12 Windows Authors: Rachana Shetty...

Wireshark DECT Buffer Overflow Vulnerability - Mac OS X

Wireshark is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark";...