D-Link HNAP Request Remote Buffer Overflow

This module exploits an anonymous remote code execution vulnerability on different D-Link devices. The vulnerability is due to a stack based buffer overflow while handling malicious HTTP POST requests addressed to the HNAP handler. This module has been successfully tested on D-Link DIR-505 in an...

Adobe Illustrator < 16.0.5 / 16.2.0 < 16.2.2 (APSB14-11)

The version of Adobe Illustrator installed on the remote Windows host is prior to 16.0.5, 16.2.2. It is, therefore, affected by a vulnerability as referenced in the APSB14-11 advisory. - Stack-based buffer overflow in Adobe Illustrator CS6 before 16.0.5 and 16.2.x before 16.2.2 allows remote...

Yokogawa CS3000 BKESimmgr.exe Buffer Overflow

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Yokogawa CS3000 BKESimmgr.exe Buffer Overflow', 'Description' = %q This module exploits an stack based buffer overflow on Yokogawa...

Debian DSA-2921-1 : xbuffy - security update

Michael Niedermayer discovered a vulnerability in xbuffy, an utility for displaying message count in mailbox and newsgroup accounts. By sending carefully crafted messages to a mail or news account monitored by xbuffy, an attacker can trigger a stack-based buffer overflow, leading to xbuffy crash ...

CVE-2014-0469

The CVE affects xbuffy (Debian patch) with a stack-based buffer overflow exposed via crafted email subjects, enabling remote code execution. Affected: xbuffy before 3.3.bl.3.dfsg-9 (Debian patch). Fix: upgrade to the Debian-fixed versions cited in DSA-2921 (e.g., 3.3.bl.3.dfsg-8+deb6u1, 3.3.bl.3....

Debian Security Advisory DSA 2921-1 (xbuffy - security update)

Michael Niedermayer discovered a vulnerability in xbuffy, an utility for displaying message count in mailbox and newsgroup accounts. By sending carefully crafted messages to a mail or news account monitored by xbuffy, an attacker can trigger a stack-based buffer overflow, leading to xbuffy crash ...

DSA-2921-1 xbuffy - security update

Bulletin has no description...

Updated nagios packages fix CVE-2014-1878

Updated nagios packages fix security vulnerability: Stack-based buffer overflow in the cmdsubmitf function in cgi/cmd.c in Nagios Core, possibly 4.0.3rc1 and earlier, and Icinga before 1.8.6, 1.9 before 1.9.5, and 1.10 before 1.10.3 allows remote attackers to cause a denial of service segmentatio...

Fedora 19 : jbigkit-2.0-9.fc19 (2014-4960)

This update fixes a stack-based buffer overflow flaw. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Advantech WebAccess Vulnerabilities

OVERVIEW NCCIC/ICS-CERT received a report from the Zero Day Initiative ZDI concerning vulnerabilities affecting the Advantech WebAccess application. These vulnerabilities were reported to ZDI by security researchers Dave Weinstein, Tom Gallagher, John Leitch, and others. Advantech has produced an...

CVE-2013-4290

OpenJPEG is affected by CVE-2013-4290. A stack-based buffer overflow in the OpenJPEG codebase (lib/openjp3d/opj_jp3d_compress.c, bin/jp3d/convert.c, and lib/openjp3d/event.c) can be triggered remotely via unspecified vectors prior to version 1.5.2, potentially leading to arbitrary code execution ...

KLA10020 DoS vulnerability in Winamp

A stack-based buffer overflow was found in Winamp. By exploiting this vulnerability malicious users can cause denial of service and possibly execute arbitrary code. This vulnerability can be exploited from the network at a point related to Skin packages via a specially designed package. Original...

Fedora 20 : jbigkit-2.0-10.fc20 (2014-4948)

This update fixes a stack-based buffer overflow flaw. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Updated jbigkit packages fix CVE-2013-6369

Updated jbigkit packages fix security vulnerability: Florian Weimer found a stack-based buffer overflow flaw in the libjbig library part of jbigkit. A specially-crafted image file read by libjbig could be used to cause a program linked to libjbig to crash or, potentially, to execute arbitrary cod...

CVE-2014-0770

By providing an overly long string to the UserName parameter, an attacker may be able to overflow the static stack buffer. The attacker may then execute code on the target device remotely...

CVE-2014-0767

An attacker may exploit this vulnerability by passing an overly long value from the AccessCode argument to the control. This will overflow the static stack buffer. The attacker may then execute code on the target device remotely...

CVE-2014-0787

Stack-based buffer overflow in WellinTech KingSCADA before 3.1.2.13 allows remote attackers to execute arbitrary code via a crafted packet...

CVE-2014-0787

WellinTech KingSCADA CVE-2014-0787 is a stack-based buffer overflow vulnerability affecting KingSCADA before 3.1.2.13. A crafted packet to the AlarmServer service (AEserver.exe) on TCP port 12401 can trigger a stack overflow via an improper size handling in packet parsing, allowing remote code ex...

CVE-2014-0764

Advantech WebAccess is affected by CVE-2014-0764 due to a stack-based buffer overflow in the NodeName parameter parsing of the webvact.ocx ActiveX control. The advisory material from Core Security (CORE-2014-0005) and related sources indicate the vulnerability could allow remote code execution wh...

CVE-2014-0767 Advantech WebAccess Stack-based Buffer Overflow

An attacker may exploit this vulnerability by passing an overly long value from the AccessCode argument to the control. This will overflow the static stack buffer. The attacker may then execute code on the target device remotely...