HTMLDOC html文件处理栈溢出漏洞

BUGTRAQ ID: 35727 HTMLDOC是用于将HTML文件和网页转换为适合在线查看和打印的索引HTML、PostScript和PDF文件的工具。 HTMLDOC的htmldoc/util.cxx文件中的sscanf和setpagesize函数存在栈溢出漏洞。如果用户受骗打开了包含有特制MEDIA SIZE标注的HTML文档的话，就可以触发这个溢出，导致执行任意指令。 Easy Software Products HTMLDOC 1.8.27 厂商补丁： Easy Software Products ----------------------...

Soritong MP3 Player 1.0 - 'SKIN' Local Stack Overflow (SEH)

-------------------- SkuLL-HacKeR ----------------- !/usr/bin/perl + Bug : Soritong MP3 Player 1.0 SKIN Local Stack Overflow Exploit SEH win32exec - EXITFUNC=seh CMD=calc Size=343 Encoder=PexAlphaNum http://metasploit.com my $shellcode =...

Streaming Audio Player 0.9 (skin) Local Stack Overflow (SEH)

No description provided by source. +°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°. SkuLL-HacKeR +°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°.+°. !/usr/bin/perl + Streaming Audio Player 0.9 skin Local Stack Overflow SEH...

win32/xp sp2 (En) cmd.exe 23 bytes

No description provided by source. / win32/xp sp2 En cmd.exe 23 bytes Author : Mountassif Moad A.K.A : Stack Description : It's a 23 Byte Shellcode which Execute Cmd.exe Tested Under Windows Xp SP2 En get the following if we disassemle this code compiled with olly debugger 00402000 8BEC MOV EBP,E...

htmldoc 1.8.27.1 (.html) Universal Stack Overflow Exploit

No description provided by source. !/usr/bin/perl htmldoc 1.8.27.1 .html Universal Stack Overflow Exploit http://en.securitylab.ru/poc/extra/382563.php Bufferoverflow POC By ksa04 j-7athotmaildotcom From Kingdom of Saudi Arabia...

htmldoc 1.8.27.1 - .html Universal Stack Overflow

htmldoc 1.8.27.1 - .html Universal Stack Overflow !/usr/bin/perl htmldoc 1.8.27.1 .html Universal Stack Overflow Exploit http://en.securitylab.ru/poc/extra/382563.php Bufferoverflow POC By ksa04 j-7athotmaildotcom From Kingdom of Saudi Arabia...

win32/xp sp2 En cmd.exe 23 bytes

win32/xp sp2 En cmd.exe 23 bytes. Shellcode exploit for win32 platform / win32/xp sp2 En cmd.exe 23 bytes Author : Mountassif Moad A.K.A : Stack Description : It's a 23 Byte Shellcode which Execute Cmd.exe Tested Under Windows Xp SP2 En get the following if we disassemle this code compiled with...

win32/xp sp2 (En) cmd.exe 23 bytes

Exploit for win32 platform in category shellcode ================================== win32/xp sp2 En cmd.exe 23 bytes ================================== / win32/xp sp2 En cmd.exe 23 bytes Author : Mountassif Moad A.K.A : Stack Description : It's a 23 Byte Shellcode which Execute Cmd.exe Tested Und...

Firefox 3.5 Heap Spray

!/usr/bin/env python FireFox 3.5 Heap Spray Exploit Originally discovered by: Simon Berry-Bryne Pythonized by: David Kennedy ReL1K @ SecureState from BaseHTTPServer import HTTPServer from BaseHTTPServer import BaseHTTPRequestHandler import sys class myRequestHandlerBaseHTTPRequestHandler: def...

Microsoft Office Web Components (OWC) Spreadsheet - ActiveX Buffer Overflow (PoC)

var shellcode = unescape"evil code"; var array = new Array; var ls = 0x81000-shellcode.length2; var bigblock = unescape"%u0b0c%u0b0C"; whilebigblock.length milw0rm.com 2009-07-16...

Hamster Audio Player 0.3a - Universal Buffer Overflow (SEH)

Hamster Audio Player 0.3a - Universal Buffer Overflow SEH !/usr/bin/perl + Bug : Hamster Audio Player 0.3a Universal BOF Exploit SEH + Author : ThE g0bL!N + Greetz to all my friends + Tested on: Windows XP Pro SP2 Fr + Big thnx: His0k4 win32exec - EXITFUNC=seh CMD=calc Size=343 Encoder=PexAlphaNu...

AudioPLUS 2.00.215 (.m3u .lst) Universal SEH Overwrite Exploit

Exploit for unknown platform in category local exploits ============================================================== AudioPLUS 2.00.215 .m3u .lst Universal SEH Overwrite Exploit ============================================================== !/usr/bin/perl AudioPLUS 2.00.215 .m3u .lst Universal...

AudioPLUS 2.00.215 - .m3u .lst Universal Overwrite (SEH)

AudioPLUS 2.00.215 - .m3u .lst Universal Overwrite SEH !/usr/bin/perl AudioPLUS 2.00.215 .m3u .lst Universal Seh Overwrite Exploit first exploiter hack4love http://www.milw0rm.com/exploits/9064 and this the universal for .lst .m3u extention Big Thnx to his0ka my best freind :d Stack print...

Live For Speed 2 Version Z .Mpr Local buffer Overflow Exploit

Exploit for unknown platform in category local exploits ============================================================= Live For Speed 2 Version Z .Mpr Local buffer Overflow Exploit ============================================================= / Live For Speed 2 Version Z .Mpr Local buffer Overflow...

Live For Speed 2 Buffer Overflow

/ Live For Speed 2 Version Z .Mpr Local buffer Overflow Exploit !! X version .mpr header specifications can be found at http://www.lfs.net/?page=MPR Version :Patch Z and all previous versions. Vendor :http://www.lfs.net/ Release date: July 14th 2009 Patch for this vulnerability can be found here...

Icarus 2.0 - .ICP Local Stack Overflow

Icarus 2.0 - .ICP Local Stack Overflow !/usr/bin/perl +------------------------------/HEADER/----------------------------------------------+ Icarus 2.0 Local Stack-based Buffer overflow Exploit By : 0x80-H4x²0r Contact : hashteckatGmaildotcom From : Morocco PoC by : ThE g0bL!N...

Icarus 2.0 (.ICP File) Local Stack Overflow Exploit

No description provided by source. !/usr/bin/perl +------------------------------/HEADER/----------------------------------------------+ Icarus 2.0 Local Stack-based Buffer overflow Exploit By : 0x80-H4x²0r Contact : hashteckatGmaildotcom From : Morocco PoC by : ThE g0bL!N...

Live For Speed 2 Version Z (.mpr ) Buffer Overflow Exploit (SEH)

No description provided by source. !/usr/bin/python | || | / \ | | | | | | | | | - | | | / / | | |||| || // / |\ || Bug : Live For Speed 2 Version Z .mpr Buffer Overflow Exploit SEH Tested on : Xp sp3 ENVB Original exploit : http://www.milw0rm.com/exploits/9142 Seh Exploit : His0k4 Greetings :...

Mp3-Nator 2.0 (ListData.dat) Universal Buffer Overflow Exploit (SEH)

No description provided by source. !/usr/bin/perl + Bug : Mp3-Nator 2.0 ListData.dat Universal Buffer Overflow Exploit SEH + Author : ThE g0bL!N Greetz to all my friends Download:http://files.brothersoft.com/mp3audio/players/mp3nator.zip Tested on: Windows XP Pro SP2 Fr Ismail: Hadi Wallah Ghir 3...

Icarus 2.0 (.ICP File) Local Stack Overflow Exploit

Exploit for unknown platform in category local exploits =================================================== Icarus 2.0 .ICP File Local Stack Overflow Exploit =================================================== !/usr/bin/perl...