AVID Media Composer Phonetic Indexer - Remote Stack Buffer Overflow (Metasploit)

AVID Media Composer Phonetic Indexer - Remote Stack Buffer Overflow Metasploit Name :AVID Media Composer Phonetic Indexer Remote Stack Buffer Overflow Vendor Website : http://www.avid.com Date Released : November 29, 2011 Affected Software : AVID Media Composer = 5.5.3 Researcher Researcher : Nic...

GOM Player 2.1.33.5071 Stack Buffer Overflow

Exploit Title: GOM Player Crafted ASX File Unicode Stack Buffer Overflow and Arbitrary Code Execution. Version: 2.1.33.5071 Date: 30-11-2011 Author: Debasish Mandal Email : [email protected] Software Link: http://www.gomlab.com/eng/GMPdownload.html Category:: Local Tested on: Windows XP SP2...

GOM Player 2.1.33.5071 - '.asx' File Unicode Stack Buffer Overflow

Exploit Title: GOM Player Crafted ASX File Unicode Stack Buffer Overflow and Arbitrary Code Execution. Version: 2.1.33.5071 Date: 30-11-2011 Author: Debasish Mandal & Peter Van Eeckhoutte corelanc0d3r Email : [email protected] Software Link: http://www.gomlab.com/eng/GMPdownload.html Category...

Novell Netware "XNFS.NLM"组件"xdrDecodeString()"远程缓冲区溢出漏洞

BUGTRAQ ID: 50804 CVE ID: CVE-2011-4191 Novell Netware是一款商业性质的网络操作系统。 Novell Netware在处理某些NFS请求时，XNFS.NLM中的"xdrDecodeString"函数在实现上存在错误，可被恶意用户通过发送特制的数据报造成栈缓冲区溢出，执行任意代码，控制受影响系统。 Novell Netware 6.5.0 SP8 厂商补丁： Novell ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://support.novell.com/security-alerts...

Linux Kernel hardlink工具多个远程栈缓冲区溢出漏洞

BUGTRAQ ID: 50805 CVE ID: CVE-2011-3630 Linux是自由电脑操作系统内核。 Linux Kernel的hardlink工具在深度嵌套目录的树中运行时存在多个栈缓冲区溢出漏洞，远程攻击者可利用这些漏洞通过诱使用户处理恶意构造的目录树时在受影响应用中执行任意代码，造成拒绝服务。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kernel.org/...

Free MP3 CD Ripper 1.1 (WAV File) Stack Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Free MP3 CD Rippe...

ZDI-11-329 : InduSoft WebStudio CEServer Operation 0x15 Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-11-329 : InduSoft WebStudio CEServer Operation 0x15 Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-329 November 16, 2011 - -- CVE ID: CVE-2011-4052 - -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C - -- Affected...

Aviosoft Digital TV Player Professional 1.0 Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Aviosoft Digital ...

Mini-Stream RM-MP3 Converter v3.1.2.1 (PLS File) Stack Buffer Overflow

Exploit for windows platform in category local exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Aviosoft Digital TV Player Professional 1.x - Local Stack Buffer Overflow

Exploit Title: Aviosoft Digital TV Player Professional 1.x Stack Buffer Overflow Author: modpr0be Software Download: http://www.aviosoft.com/download.php?product=dtvplayerpro Date: 08/11/2011 Tested on: Windows XP SP3, Windows 7 SP1 Thanks: corelanc0d3r, cyb3r.anbu, otoy, sickness, 5m7x,...

Aviosoft Digital TV Player Professional 1.x Stack Buffer Overflow

Exploit for windows platform in category local exploits Exploit Title: Aviosoft Digital TV Player Professional 1.x Stack Buffer Overflow Author: modpr0be Software Download: http://www.aviosoft.com/download.php?product=dtvplayerpro Date: 08/11/2011 Tested on: Windows XP SP3, Windows 7 SP1 Thanks:...

Mini-Stream 3.0.1.1 Buffer Overflow

This module exploits a stack buffer overflow in Mini-Stream 3.0.1.1 By creating a specially crafted pls file, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

Mini-Stream 3.0.1.1 Buffer Overflow Exploit

Exploit for windows platform in category local exploits $Id: ministream.rb 14155 2011-11-04 08:20:43Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...

Oracle DataDirect ODBC Drivers - HOST Attribute 'arsqls24.dll' Stack Buffer Overflow (PoC)

g 208.152c: Access violation - code c0000005 first chance First chance exceptions are reported before any exception handling. This exception may be expected and handled...

Opera Browser 11.52 Buffer Overflow

Title: ====== Opera Browser v11.52 - Stack Buffer Overflow Vulnerability Date: ===== 2011-10-28 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=275 http://packetstormsecurity.org/files/106020/opera1152-overflow.txt VL-ID: ===== 299 Introduction: ============= Opera is a...

Opera Browser v11.52 - Stack Buffer Overflow Vulnerability

Document Title: =============== Opera Browser v11.52 - Stack Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=299 CNNVD-201110-708 http://www.cnnvd.org.cn/vulnerability/show/cvid/2011100708 Release Date: =============...

Adobe Reader图形数据缓冲区分配整数溢出远程代码执行漏洞

BUGTRAQ ID: 49580 CVE ID: CVE-2011-2438 Adobe Reader也被称为Acrobat Reader是美国Adobe公司开发的一款优秀的PDF文档阅读软件。Acrobat是1993年推出针对企业、技术人员和创意专业人士的系列产品，使智能文档的传送和协作更为灵活、可靠和安全。 Adobe Acrobat和Reader在实现上存在远程栈缓冲区溢出漏洞，远程攻击者可利用此漏洞以当前用户权限执行任意代码。 Adobe图形解析库中存在漏洞，当Reader解析畸形.bmp图形的位段编码图形数据时，会在计算图形数据时出现整数溢出。 Adobe Acrobat 9...

Novell iPrint Client nipplib.dll GetDriverSettings Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell iPrint Client. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within the nipplib.dll...

Cytel Studio 9.0 (CY3 File) Stack Buffer Overflow

This module exploits a stack based buffer overflow found in Cytel Studio 'Cytel Studio 9.0 CY3 File Stack Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow found in Cytel Studio MSFLICENSE, 'Author' = 'Luigi Auriemma', Initial Discovery/PoC 'James Fitts '...

Cytel Studio 9.0 (CY3 File) Stack Buffer Overflow

$Id: cytelstudiocy3.rb 14041 2011-10-24 01:39:11Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...