CVE-2007-4404

ircu 2.10.12.01 allows remote attackers to 1 cause a denial of service flood wallops by joining two channels with certain long names that differ in the final character, which triggers a protocol violation and 2 cause a denial of service daemon crash via a "J 0:channel" message on a channel withou...

CVE-2007-4404

ircu 2.10.12.01 allows remote attackers to 1 cause a denial of service flood wallops by joining two channels with certain long names that differ in the final character, which triggers a protocol violation and 2 cause a denial of service daemon crash via a "J 0:channel" message on a channel withou...

EEYE: Windows Metafile AttemptWrite Heap Overflow

Windows Metafile AttemptWrite Heap Overflow Release Date: August 14, 2007 Date Reported: March 27, 2007 Severity: High Code Execution Systems Affected: Windows 2000 SP4 Windows XP SP2 Windows Server 2003 SP1 Overview: eEye Digital Security has discovered a heap overflow vulnerability in the way t...

PHP php_gd2.dll imagepsloadfont Local Buffer Overflow PoC

No description provided by source. ?php / PHP imagepsloadfont Buffer Overflow Vulnerability Discovered Coded by: r0ut3r writ3r at gmail.com Vulnerable dll: phpgd2.dll - Tested on WinXP SP0, PHP/5.2.3, Apache 2.2.4 The argument given was A 9999 Access violation when reading 41414151...

PHP 5.2.3 - 'PHP_gd2.dll' imagepsloadfont Local Buffer Overflow (PoC)

milw0rm.com 2007-07-26...

Immunity Canvas: WINPCAP

Name| winpcap ---|--- CVE| CVE-2007-3681 Exploit Pack| CANVAS Description| winpcap Notes| CVE Name: CVE-2007-3681 VENDOR: WinPcap.org URL: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=550 Notes: This exploit will auto-target based on reading a kernel file on Windows 2000 o...

Apple WebCore XMLHttpRequest fails to properly serialize headers into an HTTP request

Overview Apple WebCore fails to properly serialize headers into an HTTP request, which can cause a cross-domain security violation. Description Apple WebCore is one of the components of the WebKit web browser engine that is used by Safari, Dashboard, Mail, and other applications. WebCore provides...

MoviePlay 4.76 .lst File Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ====================================================== MoviePlay 4.76 .lst File Local Buffer Overflow Exploit ====================================================== !/usr/bin/env ruby MoviePlay 4.76 .lst file Local buffer over-flow. Credit t...

MoviePlay 4.76 - '.lst' Local Buffer Overflow

!/usr/bin/env ruby MoviePlay 4.76 .lst file Local buffer over-flow. Credit to n00b for writing poc code..Pmsl Tested on :Win xp sp2 eng. Vendor web site: Netfarer.com MoviePlay 4.76 Buffer-over flow reported : Jan 02 2007 12:00AM Credit goes to Parvez Anwar for finding the bug. MoviePlay is prone...

Acoustica MP3 CD Burner 4.32 Local Buffer Overflow PoC

No description provided by source. / Credit's to n00b for finding this bug and poc.. Acoustica MP3 CD Burner 4.32 local buffer-overflow poc code. Date : May 31'st 2007 Tested:On win xp sp 2. Acoustica Is prone to a buffer-overflow when parasing a .asx playlist file If you can entice some one to...

BarCodeWiz ActiveX Control 2.0 (BarcodeWiz.dll) Remote BoF PoC

No description provided by source. span style="font: 14pt Courier New;"p align="center"b2007/05/09/b/p/span pre codespan style="font: 10pt Courier New;"span class="general1-symbol"--------------------------------------------------------------------------------...

iDefense Security Advisory 05.08.07: Microsoft Exchange Server 2000 IMAP Literal Processing DoS Vulnerability

Microsoft Exchange Server 2000 IMAP Literal Processing DoS Vulnerability iDefense Security Advisory 05.08.07 http://labs.idefense.com/intelligence/vulnerabilities/ May 08, 2007 I. BACKGROUND Microsoft Exchange Server 2000 is a messaging product developed by Microsoft, part of the Windows Server...

iDefense Security Advisory 04.03.07: Microsoft Windows WMF Triggerable Kernel Design Error DoS Vulnerability

Microsoft Windows WMF Triggerable Kernel Design Error DoS Vulnerability iDefense Security Advisory 04.03.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 03, 2007 I. BACKGROUND The Microsoft Windows kernel controls which processes are allowed to run and is responsible for accessing...

CVE-2007-1583: Undefined Security Weakness

The mbparsestr function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 sets the internal registerglobals flag and does not disable it in certain cases when a script terminates, which allows remote attackers to invoke available PHP scripts with registerglobals functionality that is not...

Microsoft Windows - DCE-RPC svcctl ChangeServiceConfig2A() Memory Corruption

Microsoft Windows - DCE-RPC svcctl ChangeServiceConfig2A Memory Corruption !/usr/bin/python MS Windows DCE-RPC svcctl ChangeServiceConfig2A 0day Memory Corruption PoC Exploit Bug discovered by Krystian Kloskowski h07 Tested on Windows 2000 SP4 Polish all patches Requires.. - Impacket :...

Remote DOS BrightStor ARCserve Backup for Laptops & Desktops

======= Summary ======= Today: 31 January 2007 Reference: NGS00402 Discover: Mark Litchfield Name: Remote DOS BrightStor ARCserve Backup for Laptops & Desktops r11.1 Vendor: Computer Associates Systems Affected: BrightStor ARCserve Backup for Laptops & Desktops r11.1 Risk: High Status: Published...

eiq-dos.txt

Title: ------------------- EIQ Networks Network Security Analyzer DoS Vulnerability Vendor Notified: ------------------- Now? Background Info: ------------------- EIQ Networks Product Site: http://www.eiqnetworks.com/products/NetworkSecurityAnalyzer.shtml Description: ------------------- Remote...

WMF CreateBrushIndirect vulnerability (DoS)

The following WMF exploit appeared on milw0rm today: http://www.milw0rm.com/exploits/3111 The vulnerability is a result of the WMF parser passing a value from the file as a pointer argument to the CreateBrushIndirect function. The function dereferences the pointer and dies with an access violatio...

eIQnetworks Network Security Analyzer Null Pointer Dereference Exploit

No description provided by source. !c:\python\python.exe uncomment whichever function youd like. theyll all crash in a similar way. Any of the following "function names" will cause the service to throw an access violation while dereferencing the return value from a call to FindIndex ...

eIQnetworks Network Security Analyzer - Null Pointer Dereference

!c:\python\python.exe uncomment whichever function youd like. theyll all crash in a similar way. Any of the following "function names" will cause the service to throw an access violation while dereferencing the return value from a call to FindIndex...