Lucene search
K

8439 matches found

0day.today
0day.today
added 2009/11/28 12:0 a.m.33 views

MuPDF pdf_shade4.c Multiple Stack-Based Buffer Overflows

Exploit for unknown platform in category local exploits ======================================================== MuPDF pdfshade4.c Multiple Stack-Based Buffer Overflows ======================================================== Title: MuPDF pdfshade4.c Multiple Stack-Based Buffer Overflows CVE-ID:...

6.8AI score
Exploits0
Packet Storm
Packet Storm
added 2009/11/26 12:0 a.m.20 views

AOL Radio AmpX ActiveX Control ConvertFile() Buffer Overflow

require 'msf/core' class Metasploit3 'AOL Radio AmpX ActiveX Control ConvertFile Buffer Overflow', 'Description' = %q This module exploits a stack-based buffer overflow in AOL IWinAmpActiveX class AmpX.dll version 2.4.0.6 installed via AOL Radio website. By setting an overly long value to...

0.8AI score
Exploits0
Packet Storm
Packet Storm
added 2009/11/26 12:0 a.m.49 views

Mercury/32 <= v4.01b PH Server Module Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Mercury/32 %...

7.5CVSS0.7AI score0.8155EPSS
Exploits8
Packet Storm
Packet Storm
added 2009/11/26 12:0 a.m.32 views

CA BrightStor ARCserve Backup AddColumn() ActiveX Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'CA BrightStor...

9.3CVSS0.4AI score0.76279EPSS
Exploits5
Packet Storm
Packet Storm
added 2009/11/26 12:0 a.m.40 views

Oracle 9i XDB FTP PASS Overflow (win32)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Oracle 9i XD...

2.1CVSS0.4AI score0.85761EPSS
Exploits26
NVD
NVD
added 2009/11/20 11:30 a.m.10 views

CVE-2009-4006

Stack-based buffer overflow in the TEA decoding algorithm in RhinoSoft Serv-U FTP server 7.0.0.1, 9.0.0.5, and other versions before 9.1.0.0 allows remote attackers to execute arbitrary code via a long hexadecimal string...

10CVSS8AI score0.7787EPSS
Exploits2References10
Saint
Saint
added 2009/11/20 12:0 a.m.34 views

IBM Tivoli Storage Manager Client CAD Service Buffer Overflow

Added: 11/20/2009 CVE: CVE-2009-3853 OSVDB: 59632 Background IBM Tivoli Storage Manager TSM provides centralized management for automated backup and restoration operations. It runs a Client Acceptor Daemon CAD on port 1582/TCP. Problem The vulnerability is caused by an input validation error in t...

9.3CVSS6.6AI score0.7393EPSS
Exploits8
Metasploit
Metasploit
added 2009/11/17 10:29 p.m.17 views

HTTPDX h_handlepeer() Function Buffer Overflow

This module exploits a stack-based buffer overflow vulnerability in HTTPDX HTTP server 1.4. The vulnerability is caused due to a boundary error within the "hhandlepeer" function in http.cpp. By sending an overly long HTTP request, an attacker can overrun a buffer and execute arbitrary code. This...

10CVSS10AI score0.78944EPSS
Exploits3
Cvelist
Cvelist
added 2009/11/06 3:0 p.m.19 views

CVE-2009-2685

Stack-based buffer overflow in the login form in the management web server in HP Power Manager allows remote attackers to execute arbitrary code via the Login variable...

6.9AI score0.85432EPSS
Exploits9References8
CVE
CVE
added 2009/11/06 3:0 p.m.96 views

CVE-2009-2685

HP Power Manager 4.x is affected by CVE-2009-2685 due to a stack-based buffer overflow in the login form of the management web server. The issue arises from insufficient bounds checking on the Login parameter, allowing remote attackers to execute arbitrary code (typically as SYSTEM) via a crafted...

10CVSS6.9AI score0.85432EPSS
Exploits9References8Affected Software1
Saint
Saint
added 2009/11/06 12:0 a.m.56 views

HP Power Manager Remote Code Execution

Added: 11/06/2009 CVE: CVE-2009-2685 BID: 36933 OSVDB: 59684 Background HP Power Manager is a web-based application that enables administrators to manage an HP UPS from a browser-based management console. Problem A stack-based buffer overflow in the HP Power Manager management web server allows...

10CVSS7AI score0.85432EPSS
Exploits9
UbuntuCve
UbuntuCve
added 2009/11/05 4:30 p.m.40 views

CVE-2009-3867

Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.127, and SDK and JRE 1.4.x before 1.4.224 allows remote attackers to execute arbitrary code via a long file: URL in a...

9.3CVSS6.4AI score0.89141EPSS
Exploits11References3
NVD
NVD
added 2009/11/05 4:30 p.m.34 views

CVE-2009-3869

Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit AWT in Java Runtime Environment JRE in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.127, and SDK and JRE 1.4.x before 1.4.224 allows remote...

9.3CVSS7.7AI score0.78477EPSS
Exploits9References27
Cvelist
Cvelist
added 2009/11/05 4:0 p.m.36 views

CVE-2009-3869

Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit AWT in Java Runtime Environment JRE in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.127, and SDK and JRE 1.4.x before 1.4.224 allows remote...

7.7AI score0.78477EPSS
Exploits9References27
CVE
CVE
added 2009/11/05 4:0 p.m.109 views

CVE-2009-3867

CVE-2009-3867 is a stack-based buffer overflow in Sun Java SE: HsbParser.getSoundBank that can allow remote code execution via a long file: URL argument. Affected are Sun JDK/JRE 5.0 before Update 22, JDK/JRE 6 before Update 17, SDK/JRE 1.3.x before 1.3.1_27, and SDK/JRE 1.4.x before 1.4.2_24. Ex...

9.3CVSS7.7AI score0.89141EPSS
Exploits11References25Affected Software2
CVE
CVE
added 2009/11/05 4:0 p.m.128 views

CVE-2009-3869

CVE-2009-3869 : A stack-based buffer overflow in the Abstract Window Toolkit (AWT) setDiffICM function of the Java Runtime Environment allows remote code execution. Affected products include Sun/Oracle Java SE/JDK/JRE 5.0 before Update 22, JDK/JRE 6 before Update 17, SDK/JRE 1.3.x before 1.3.1_27...

9.3CVSS7.8AI score0.78477EPSS
Exploits9References27Affected Software2
seebug.org
seebug.org
added 2009/11/05 12:0 a.m.35 views

IBM Tivoli Storage Manager CAD Service Buffer Overflow

No description provided by source. ====================================================================== Secunia Research 04/11/2009 - IBM Tivoli Storage Manager CAD Service Buffer Overflow - ====================================================================== Table of Contents Affected...

6.6AI score
Exploits9
OpenVAS
OpenVAS
added 2009/11/05 12:0 a.m.19 views

Eureka Email Stack-Based Buffer Overflow Vulnerability

This host is installed with Eureka Email and is prone to stack-based buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbeurekaemailbofvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ Eureka Email Stack-Based Buffer Overflow Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2009...

9.3CVSS0.7AI score0.75174EPSS
Exploits8References4
NVD
NVD
added 2009/11/04 3:30 p.m.14 views

CVE-2009-3853

Stack-based buffer overflow in the client acceptor daemon CAD scheduler in the client in IBM Tivoli Storage Manager TSM 5.3 before 5.3.6.7, 5.4 before 5.4.3, 5.5 before 5.5.2.2, and 6.1 before 6.1.0.2, and TSM Express 5.3.3.0 through 5.3.6.6, allows remote attackers to execute arbitrary code via...

9.3CVSS7.7AI score0.7393EPSS
Exploits8References7
Cvelist
Cvelist
added 2009/10/27 4:0 p.m.18 views

CVE-2009-3811

Stack-based buffer overflow in Music Tag Editor 1.61 build 212 allows remote attackers to execute arbitrary code via an MP3 file with a long ID3 tag. NOTE: some of these details are obtained from third party information...

8.1AI score0.23155EPSS
Exploits2References5
Rows per page
Query Builder