ALLPlayer 5.6.2 SEH Buffer Overflow

!/usr/bin/perl Exploit Title: ALLPlayer 5.6.2 .m3u - SEH Buffer Overflow Unicode Date: 10-22-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: ALLPlayer 5.6.2 Software Link: http://www.allplayer.org/download/allplayer Version: 5.6.2 Tested On: Windows XP SP3 Credit to...

ALLPlayer 5.6.2 - '.m3u' File Local Buffer Overflow (SEH Unicode)

!/usr/bin/perl Exploit Title: ALLPlayer 5.6.2 .m3u - SEH Buffer Overflow Unicode Date: 10-22-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: ALLPlayer 5.6.2 Software Link: http://www.allplayer.org/download/allplayer Version: 5.6.2 Tested On: Windows XP SP3 Credit to...

Use-after-free vulnerability in multiple products that use International Components for Unicode (ICU)

Overview Multiple products that use International Components for Unicode ICU contain a use-after-free vulnerability. International Components for Unicode ICU is a library for handling Unicode strings. A C version, ICU4C and a Java version, ICU4J are available. Multiple products that use ICU4C...

Multiple products that use International Components for Unicode (ICU) vulnerable to denial-of-service (DoS)

Overview Multiple products that use International Components for Unicode ICU contain a denial-of-service DoS vulnerability. International Components for Unicode ICU is a library for handling Unicode strings. A C version, ICU4C and a Java version ICU4J are available. Multiple products that use ICU...

JVN#70739377: Multiple products that use International Components for Unicode (ICU) vulnerable to denial-of-service (DoS)

International Components for Unicode ICU is a library for handling Unicode strings. A C version, ICU4C and a Java version ICU4J are available. Multiple products that use ICU4C contain a denial-of-service vulnerability due to a race condition. ICU released ICU4C version 50.1.1 that addresses this...

JVN#85336306: Use-after-free vulnerability in multiple products that use International Components for Unicode (ICU)

International Components for Unicode ICU is a library for handling Unicode strings. A C version, ICU4C and a Java version, ICU4J are available. Multiple products that use ICU4C contain a use-after-free vulnerability. ICU released ICU4C version 52.1 that addresses this vulnerability on October 9,...

Debian DSA-2786-1 : icu - several vulnerabilities

The Google Chrome Security Team discovered two issues a race condition and a use-after-free issue in the International Components for Unicode ICU library. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Securit...

Debian DSA-2785-1 : chromium-browser - several vulnerabilities

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2013-2906 Atte Kettunen of OUSPG discovered race conditions in Web Audio. - CVE-2013-2907 Boris Zbarsky discovered an out-of-bounds read in window.prototype. - CVE-2013-2908 Chamal de Silva discovered an address bar...

Debian Security Advisory DSA 2786-1 (icu - several vulnerabilities)

The Google Chrome Security Team discovered two issues a race condition and a use-after-free issue in the International Components for Unicode ICU library. OpenVAS Vulnerability Test $Id: deb2786.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2786-1 using nvtgen 1.0...

[SECURITY] [DSA 2785-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2785-1 [email protected] http://www.debian.org/security/ Michael Gilbert October 26, 2013 http://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-2786-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-5178

LaunchServices in Apple Mac OS X before 10.9 does not properly restrict Unicode characters in filenames, which allows context-dependent attackers to spoof file extensions via a crafted character sequence...

Design/Logic Flaw

LaunchServices in Apple Mac OS X before 10.9 does not properly restrict Unicode characters in filenames, which allows context-dependent attackers to spoof file extensions via a crafted character sequence...

CVE-2013-5178

LaunchServices in Apple Mac OS X before 10.9 does not properly restrict Unicode characters in filenames, which allows context-dependent attackers to spoof file extensions via a crafted character sequence...

CVE-2013-5178

CVE-2013-5178 : In Apple Mac OS X prior to 10.9, LaunchServices does not properly restrict Unicode characters in filenames, allowing context-dependent attackers to spoof file extensions via crafted character sequences. The underlying issue is the handling/filtering of Unicode characters in displa...

PT-2013-5423

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.9 Description The issue allows context-dependent attackers to spoof file extensions via a crafted character sequence due to improper restriction of Unicode characters in filenames by LaunchServices...

CVE-2013-5178: Undefined Security Weakness

LaunchServices in Apple Mac OS X before 10.9 does not properly restrict Unicode characters in filenames, which allows context-dependent attackers to spoof file extensions via a crafted character sequence...

ICU: Layout Engine font processing errors (JDK 2D, 8001031)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to 2D. NOTE: the previous...

ALLPlayer 5.6.2 - .m3u Local Buffer Overflow (PoC)

ALLPlayer 5.6.2 - .m3u Local Buffer Overflow PoC Title: ALLPlayer Local Buffer Overflow PoC UNICODE Vendor: http://www.allplayer.org/download/allplayer Date found: 09.10.2013 Date published: 09.10.2013 Platform: windows 7 German Bug: Buffer Overflow UNICODE ---------------------------- 1VERSIONS...

ALLPlayer 5.6.2 - '.m3u' Local Buffer Overflow (PoC)

Title: ALLPlayer Local Buffer Overflow PoC UNICODE Vendor: http://www.allplayer.org/download/allplayer Date found: 09.10.2013 Date published: 09.10.2013 Platform: windows 7 German Bug: Buffer Overflow UNICODE ---------------------------- 1VERSIONS AFFECTED ---- ALLPlayer 5.6.2 2Proof of Concept...