Adobe Flash - Shape Rendering Crash

Adobe Flash - Shape Rendering Crash Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=721 The attached fuzz case causes a crash in shape rendering. Proof of Concept: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/39608.zip...

Adobe Flash - Shape Rendering Crash

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=721 The attached fuzz case causes a crash in shape rendering. Proof of Concept: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/39608.zip...

joomla 插件Shape 5 MP3 Player v2.0 helper.php 参数fileurl 本地文件包含漏洞

No description provided by source...

Joomla Shape 5 MP3 Player 2.0 Local File Disclosure

. | | / | | \ \ | | \ / | |\ / / /\ \ / \ | Y / ^ / / || / / / / /\ /\ \ \ \ | / \ / / \ | \ \ / // / \ / / / / Joomla = Shape 5 MP3 Player 2.0 Local File Disclosure Exploit My + Author : KnocKout Contact : [email protected] Skype : [email protected] HomePage : http://milw00rm.com...

Joomla Shape 5 MP3 Player 2.0 Local File Disclosure Exploit

Joomla Shape 5 MP3 Player version 2.0 suffers from a local file disclosure vulnerability. Joomla = Shape 5 MP3 Player 2.0 Local File Disclosure Exploit My + Author : KnocKout Contact : email protected Skype : email protected HomePage : http://h4x0resec.blogspot.com Greetz : b3mb4m, ZoRLu, KedAns-...

Joomla Shape 5 MP3 Player 2.0 Plugin 任意文件读取漏洞

No description provided by source...

iconsetc.com XSS vulnerability

Vulnerable URL: http://iconsetc.com/?shape=...

CVE-2014-5581: Undefined Security Weakness

The mirror photo shape aka com.baiwang.styleinstamirror application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Shape Web Solutions CMS SQL Injection Vulnerability

No description provided by source. Shape Web Solutions CMS SQL Injection Vulnerability Exploit Title: Shape Web Solutions CMS SQL Injection Vulnerability Author: Ashiyane Digital Security Team Date: 03-18-2011 Vendor or Software Link: http://www.shapeweb.com.br/ Version: All version Category::...

openSUSE Security Update : libreoffice (openSUSE-SU-2012:0428-1)

updated to libreoffice-3.4.5.5 SUSE 3.4.5-rc3 : - extras - add SUSE color palette fate312645 - filters - crash when loading embedded elements bnc693238 - crash when importing an empty paragraph rh667082 - writer - do not use an invalidated iterator fdo46337 - updated to libreoffice-3.4.5.4 SUSE...

Microsoft Office Drawing Shape Group Properties Buffer Overflow (MS10-003) - Ver2 (CVE-2010-0243)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been reported in the way Microsoft Office handles specially crafted Excel files. The vulnerability is due to a memory corruption error in Microsoft Office when loading malformed Excel records. A remote...

(0Day) (Mobile Pwn2Own) Polaris Viewer DOCX VML Shape Tag Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable Polaris Viewer. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The specific flaw exists within the parsing of a DOCX file. A tag associated with a VML shap...

CVE-2013-1335

Microsoft Word 2003 SP3 and Word Viewer allow remote attackers to execute arbitrary code via crafted shape data in a Word document, aka "Word Shape Corruption Vulnerability."...

Memory corruption

Microsoft Word 2003 SP3 and Word Viewer allow remote attackers to execute arbitrary code via crafted shape data in a Word document, aka "Word Shape Corruption Vulnerability."...

CVE-2013-1335

Microsoft Word 2003 SP3 and Word Viewer allow remote attackers to execute arbitrary code via crafted shape data in a Word document, aka "Word Shape Corruption Vulnerability."...

CVE-2013-1335

CVE-2013-1335 affects Microsoft Word 2003 SP3 and Word Viewer, where parsing of crafted shape data in Word documents can lead to remote code execution. The root cause is a memory-corruption/shape-data handling issue used to execute arbitrary code when a user opens a malicious Word file. Impact is...

CVE-2013-1335: Improper Control of Generation of Code

Microsoft Word 2003 SP3 and Word Viewer allow remote attackers to execute arbitrary code via crafted shape data in a Word document, aka "Word Shape Corruption Vulnerability."...

Internet Explorer VML Objects Use After Free (MS13-037; CVE-2013-2551)

A buffer overflow vulnerability exists in Internet Explorer while accessing a dynamic array of attributes of a VML shape object. The vulnerability may lead to memory corruption in such a way that will allow code execution in the context of the current user...

Outer Ear Authentication

The insides of our ears are a mysterious place for most of us. It turns out, however, that there’s more going on in there than we expected. In a study presented at the IEEE Fourth International Conference on Biometrics in September of 2010, researchers used a shape-finding algorithm to determine ...

ZDI-11-346 : Microsoft Office 2007 Office Art Shape Record Hierarchy Parsing Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-11-346 : Microsoft Office 2007 Office Art Shape Record Hierarchy Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-346 December 13, 2011 - -- CVE ID: CVE-2011-3413 - -- CVSS: 7.5,...