224 matches found
CentOS 3 / 4 : gnupg (CESA-2006:0754)
Updated GnuPG packages that fix two security issues are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. GnuPG is a utility for encrypting data and creating digital signatures. Tavis Ormandy discovered a stack overwrite flaw in t...
Re: [Full-disclosure] ZDI-06-040: WinZip FileView ActiveX Control Unsafe Method Exposure Vulnerability
7245 correctly resolves this issue; standard stack overflow in WZFILEVIEW.FilePattern snatching EIP; PoC below; HTML HEAD TITLE/TITLE /HEAD BODY SCRIPT LANGUAGE="VBScript" !-- Sub WZFILEVIEWOnAfterItemAddItem WZFILEVIEW.FilePattern = "SMASHTHESTACKHERE" end sub -- /SCRIPT OBJECT ID="WZFILEVIEW"...
MS03-049 Microsoft Workstation Service NetAddAlternateComputerName Overflow
This module exploits a stack buffer overflow in the NetApi32 NetAddAlternateComputerName function using the Workstation service in Windows XP. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule...
