Linux Kernel CAP_SYS_ADMIN to root Exploit

No description provided by source. / Linux Kernel CAPSYSADMIN to root exploit by Dan Rosenberg @djrbliss on twitter Usage: gcc -w caps-to-root.c -o caps-to-root sudo setcap capsysadmin+ep caps-to-root ./caps-to-root This exploit is NOT stable: It only works on 32-bit x86 machines It only works on...

Linux Kernel CAP_SYS_ADMIN to root Exploit

Exploit for linux platform in category local exploits / Linux Kernel CAPSYSADMIN to root exploit by Dan Rosenberg @djrbliss on twitter Usage: gcc -w caps-to-root.c -o caps-to-root sudo setcap capsysadmin+ep caps-to-root ./caps-to-root This exploit is NOT stable: It only works on 32-bit x86 machin...

CVE-2010-3802

Integer signedness error in Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted panorama atom in a QuickTime Virtual Reality QTVR movie file...

CVE-2010-3802: Undefined Security Weakness

Integer signedness error in Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted panorama atom in a QuickTime Virtual Reality QTVR movie file...

PT-2010-5088

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.6.9 Description The issue is related to an integer signedness error that can be triggered by a crafted panorama atom in a QuickTime Virtual Reality QTVR movie file. This can lead to memory corruption and...

Integer overflow

Integer signedness error in QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MPEG movie file...

CVE-2010-3792

CVE-2010-3792 is a QuickTime vulnerability in MPEG-encoded movie file handling. A signedness error in QuickTime’s MPEG parsing could allow either an application crash or arbitrary code execution when processing a crafted movie file. The issue affected Mac OS X and related QuickTime components pri...

CVE-2010-3792

Integer signedness error in QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MPEG movie file...

CVE-2010-3792: Undefined Security Weakness

Integer signedness error in QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MPEG movie file...

CVE-2010-4010: Undefined Security Weakness

Integer signedness error in Apple Type Services ATS in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code via a crafted embedded Compact Font Format CFF font in a document...

CVE-2010-3437

Integer signedness error in the pktfinddevfromminor function in drivers/block/pktcdvd.c in the Linux kernel before 2.6.36-rc6 allows local users to obtain sensitive information from kernel memory or cause a denial of service invalid pointer dereference and system crash via a crafted index value i...

CVE-2010-3437

Integer signedness error in the pktfinddevfromminor function in drivers/block/pktcdvd.c in the Linux kernel before 2.6.36-rc6 allows local users to obtain sensitive information from kernel memory or cause a denial of service invalid pointer dereference and system crash via a crafted index value i...

CVE-2010-3437

Integer signedness error in the pktfinddevfromminor function in drivers/block/pktcdvd.c in the Linux kernel before 2.6.36-rc6 allows local users to obtain sensitive information from kernel memory or cause a denial of service invalid pointer dereference and system crash via a crafted index value i...

CVE-2010-3437

Integer signedness error in the pktfinddevfromminor function in drivers/block/pktcdvd.c in the Linux kernel before 2.6.36-rc6 allows local users to obtain sensitive information from kernel memory or cause a denial of service invalid pointer dereference and system crash via a crafted index value i...

Adobe Shockwave Director tSAC Chunk Parsing Memory Corruption (CVE-2010-2866)

Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A remote code execution vulnerability has been identified in Adobe Shockwave Player. The vulnerability is d...

CVE-2010-3310: Undefined Security Weakness

Multiple integer signedness errors in net/rose/afrose.c in the Linux kernel before 2.6.36-rc5-next-20100923 allow local users to cause a denial of service heap memory corruption or possibly have unspecified other impact via a rosegetname function call, related to the rosebind and roseconnect...

PT-2010-4083

Name of the Vulnerable Software and Affected Versions NetBSD versions prior to 5.0.3 FreeBSD affected versions not specified Apple Mac OS X affected versions not specified Description The issue is related to multiple integer signedness errors in the netsmb module in the kernel. These errors can b...

CVE-2010-2866

Integer signedness error in the DIRAPI module in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a count value associated with an "undocumented structure" and the tSAC chunk in a Director movie...

Integer overflow

Integer signedness error in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a length value associated with the tSAC chunk in a Director movie...

CVE-2010-2866

Integer signedness error in the DIRAPI module in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a count value associated with an "undocumented structure" and the tSAC chunk in a Director movie...