Winamp 5.34 - '.mp4' Code Execution

/\ Winamp = 5.34 .MP4 File Code Execution Winamp MP4's plugin fails to handle exceptional conditions, which can lead to code execution. However exploitation is hard, firstly because of the return address. This code exploits a call eax, and it might be complicated to find a correct return address...

RealPlayer 10 - '.ra' Remote Denial of Service

!/usr/bin/python Real player 10 Gold .Ra file remote Dos. Credits to n00b for finding this bug This bug is a nasty memory leak with in Real player 10 gold please remember if your guna test it out save all your info you need first..Coz your probly guna have to reboot also remember all other...

IrfanView <= 4.00 .IFF File Buffer Overflow Exploit

No description provided by source. / IrfanView = 4.00 .IFF File Buffer Overflow &nbs...

Gimp v2.2.14 .RAS File SUNRAS Plugin Buffer Overflow

No description provided by source. /\ Gimp v2.2.14 .RAS File SUNRAS Plugin Buffer Overflow ...

Photoshop CS2/CS3 / Paint Shop Pro 11.20 .PNG File BoF Exploit

Exploit for unknown platform in category local exploits ============================================================== Photoshop CS2/CS3 / Paint Shop Pro 11.20 .PNG File BoF Exploit ============================================================== /\ Photoshop CS2/CS3, Paint Shop Pro 11.20 .PNG File...

IrfanView 4.00 - '.iff' Local Buffer Overflow

/ IrfanView / include "stdio.h" include "stdlib.h" / win32exec - EXITFUNC=process CMD=calc.exe Size=138 Encoder=PexFnstenvSub http://metasploit.com / unsigned char CalcShellcode = "\xfc\xe8\x44\x00\x00\x00\x8b\x45\x3c\x8b\x7c\x05\x78\x01\xef\x8b"...

Photoshop CS2/CS3 / Paint Shop Pro 11.20 - '.png' Local Buffer Overflow

/\ Photoshop CS2/CS3, Paint Shop Pro 11.20 .PNG File Buffer Overflow Like bitmap files, PNG files can do great things =D. In french: "buffer overflow a gogo!" The generated .PNG file will work for: -Photoshop CS2 -Photoshop CS3 -Photoshop Elements 5.0 -Corel Paint Shop Pro 11.20 This sploit runs...

IrfanView 4.00 - .iff Local Buffer Overflow

IrfanView 4.00 - .iff Local Buffer Overflow / IrfanView / include "stdio.h" include "stdlib.h" / win32exec - EXITFUNC=process CMD=calc.exe Size=138 Encoder=PexFnstenvSub http://metasploit.com / unsigned char CalcShellcode = "\xfc\xe8\x44\x00\x00\x00\x8b\x45\x3c\x8b\x7c\x05\x78\x01\xef\x8b"...

GIMP 2.2.14 - .ras SUNRAS Plugin Buffer Overflow

GIMP 2.2.14 - .ras SUNRAS Plugin Buffer Overflow /\ Gimp v2.2.14 .RAS File SUNRAS Plugin Buffer Overflow Gimp uses SUNRAS plugin to process .RAS file. But this module is vulnerable to a buffer overflow in setcolortable which leads to code execution. Vulnerable code, sunras.c:862 int ncols, j;...

FreshView 7.15 (.PSP File) Buffer Overflow Exploit

No description provided by source. / FreshView 7.15 .PSP File Buffer Overflow &nbs...

Gimp 2.2.14 .RAS File SUNRAS Plugin Buffer Overflow Exploit

Exploit for unknown platform in category local exploits =========================================================== Gimp 2.2.14 .RAS File SUNRAS Plugin Buffer Overflow Exploit =========================================================== /\ Gimp v2.2.14 .RAS File SUNRAS Plugin Buffer Overflow Gimp...

ABC-View Manager 1.42 (.PSP File) Buffer Overflow Exploit

No description provided by source. / ABC-View Manager 1.42 .PSP File Buffer Overflow &nbs...

GIMP 2.2.14 - '.ras' SUNRAS Plugin Buffer Overflow

/\ Gimp v2.2.14 .RAS File SUNRAS Plugin Buffer Overflow Gimp uses SUNRAS plugin to process .RAS file. But this module is vulnerable to a buffer overflow in setcolortable which leads to code execution. Vulnerable code, sunras.c:862 int ncols, j; guchar ColorMap2563; ncols = sunhdr-lrasmaplength / ...

ABC-View Manager 1.42 - .psp Local Buffer Overflow

ABC-View Manager 1.42 - .psp Local Buffer Overflow / ABC-View Manager 1.42 .PSP File Buffer Overflow ABC-View Manager is vulnerable to an unspecified buffer overflow when processing a crafted .TTF file. This exploit runs calc.exe or binds shell to port 4444. Tested against Win XP SP2 FR. Have Fun...

FreshView 7.15 (.PSP File) Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ================================================== FreshView 7.15 .PSP File Buffer Overflow Exploit ================================================== / FreshView 7.15 .PSP File Buffer Overflow FreshView is vulnerable to an unspecified buffe...

Novell GroupWise WebAccess base64_decode buffer overflow

Added: 04/25/2007 CVE: CVE-2007-2171 BID: 23556 OSVDB: 35018 Background Novell GroupWise includes a WebAccess service which allows users to access their e-mail using a web browser. Problem A buffer overflow in the base64decode function allows remote attackers to execute arbitrary commands by...

FreshView 7.15 - '.psp' Local Buffer Overflow

/ FreshView 7.15 .PSP File Buffer Overflow FreshView is vulnerable to an unspecified buffer overflow when processing a crafted .PSP file. This exploit runs calc.exe or binds shell to port 4444. Tested against Win XP SP2 FR. Have Fun! Coded and discovered by Marsu Note: Open that in XnView to see...

ABC-View Manager 1.42 - '.psp' Local Buffer Overflow

/ ABC-View Manager 1.42 .PSP File Buffer Overflow ABC-View Manager is vulnerable to an unspecified buffer overflow when processing a crafted .TTF file. This exploit runs calc.exe or binds shell to port 4444. Tested against Win XP SP2 FR. Have Fun! Coded and discovered by Marsu Note: Open that in...

Adobe Photoshop CS2 / CS3 Unspecified .BMP File Buffer Overflow Exploit

No description provided by source. /\ Adobe Photoshop CS2 / CS3 Unspecified .BMP File Buffer Overflow There is a buffer overflow in Adobe products that can be triggered while processing a malformed BMP, DIB or RLE file. This sploit runs calc.exe. Tested against Win XP SP2 FR. Have Fun! Coded and...

Adobe Photoshop CS2 CS3 - .bmp Local Buffer Overflow

Adobe Photoshop CS2 CS3 - .bmp Local Buffer Overflow /\ Adobe Photoshop CS2 / CS3 Unspecified .BMP File Buffer Overflow There is a buffer overflow in Adobe products that can be triggered while processing a malformed BMP, DIB or RLE file. This sploit runs calc.exe. Tested against Win XP SP2 FR. Ha...