xpdf/poppler: integer overflow in ObjectStream::ObjectStream (oCERT-2009-016)

Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based...

MS Internet Explorer 6 - 8 Content-Encoding Memory Corruption

No description provided by source. MSIE Content-Encoding: deflate memory corruption vulnerability a.k.a. MSRC 8769, MS09-054, CVE-2009-1547, “Data Stream Header Corruption Vulnerability” Microsoft fixed a bug in Internet Explorer’s “Content-Encoding:deflate” implementation. Here are two...

MSIE Content-Encoding: Deflate Memory Corruption

MSIE Content-Encoding: deflate memory corruption vulnerability a.k.a. MSRC 8769, MS09-054, CVE-2009-1547, “Data Stream Header Corruption Vulnerability” Microsoft fixed a bug in Internet Explorer’s “Content-Encoding:deflate” implementation. Here are two HTTP replies that trigger the bug:...

Microsoft Internet Explorer 567 - Memory Corruption (MS09-054)

Microsoft Internet Explorer 567 - Memory Corruption MS09-054 MSIE Content-Encoding: deflate memory corruption vulnerability a.k.a. MSRC 8769, MS09-054, CVE-2009-1547, “Data Stream Header Corruption Vulnerability” Microsoft fixed a bug in Internet Explorer’s “Content-Encoding:deflate”...

Microsoft Internet Explorer 5 6 7 memory corruption PoC

No description provided by source. MSIE Content-Encoding: deflate memory corruption vulnerability a.k.a. MSRC 8769, MS09-054, CVE-2009-1547, “Data Stream Header Corruption Vulnerability” Microsoft fixed a bug in Internet Explorer’s “Content-Encoding:deflate” implementation. Here are two HTTP...

Microsoft Internet Explorer 5 6 7 memory corruption PoC

No description provided by source. MSIE Content-Encoding: deflate memory corruption vulnerability a.k.a. MSRC 8769, MS09-054, CVE-2009-1547, “Data Stream Header Corruption Vulnerability” Microsoft fixed a bug in Internet Explorer’s “Content-Encoding:deflate” implementation. Here are two HTTP...

Memory corruption

Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via a crafted data stream header that triggers memory corruption, aka "Data Stream Header Corruption Vulnerability."...

CVE-2009-1547

Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via a crafted data stream header that triggers memory corruption, aka "Data Stream Header Corruption Vulnerability."...

CVE-2009-1547

Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via a crafted data stream header that triggers memory corruption, aka "Data Stream Header Corruption Vulnerability."...

CVE-2009-1547

CVE-2009-1547 concerns Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7. The issue is a remote code execution vulnerability triggered by a crafted data-stream header causing memory corruption in the browser. Technical details across connected docs show that this affects legacy IE versions an...

Internet Explorer Data Stream Header Corruption (MS09-054; CVE-2009-1547)

Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability exists in the way Internet Explorer processes data stream headers. The vulnerability occurs when Internet Explorer processes a specially crafted data stream header, it may corrupt system...

Stream 0day principles+practice-vulnerability warning-the black bar safety net

-gxm &ãƒÿ Kiba メ Kaka B. S. T&EEST First of all as I am, gxm, very pleased with Kaka in the 2 Number 3 of the morning 2am more common study of the flow of data in this subject. Thanks Kaka selfless dedication. Technology sharing. Only allow this stream to fully play his strength. A principle Firs...

SuSE9 Security Update : gpg (YOU Patch Number 11464)

When printing a text stream with a GPG signature it was possible for an attacker to create a stream with 'unsigned text, signed text' where both unsigned and signed text would be shown without distinction which one was signed and which part wasn't. This is tracked by the Mitre CVE ID CVE-2007-126...

CVE-2009-2805

Integer overflow in CoreGraphics in Apple Mac OS X 10.4.11 and 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted JBIG2 stream in a PDF file, leading to a heap-based buffer overflow...

Integer overflow

Integer overflow in CoreGraphics in Apple Mac OS X 10.4.11 and 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted JBIG2 stream in a PDF file, leading to a heap-based buffer overflow...

Firefox 3.5.3 3.0.14 browser engine crashes

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.3, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary co...

How to make your own injection tool to hack websites-vulnerability warning-the black bar safety net

Usually we encounter injection vulnerability class of website most of the people are NBSI Or al D kind of injection tools. But some of the sites of the injection point is very difficult to construct, or that the injection of the statement special. If by hand to the injection while time-consuming...

Stream 0day-vulnerability warning-the black bar safety net

gxm Inscription: First of all as I am, gxm, very pleased with Kaka in the 2 Number 3 of the morning 2am more common study of the flow of data in this subject. Thanks Kaka selfless dedication. Technology sharing. Only allow this stream to fully play his strength. A principle First said, the NTFS...

perl DoS

Crash on processing zlib stream via Compress::Raw::Zlib and bzip2 stream in Compress-Raw-Bzip2...

PT-2009-4348 · Perl · Compress-Raw-Bzip2

Name of the Vulnerable Software and Affected Versions: Compress-Raw-Bzip2 module versions prior to 2.018 Description: The issue is related to an off-by-one error in the bzinflate function in Bzip2.xs, which can be exploited by context-dependent attackers to cause a denial of service, resulting in...