MP3-Nator - Local Buffer Overflow (SEH) (DEP Bypass)

Exploit Title: Exploit Buffer Overflow MP3-Nator SEH - DEP BYPASS Date: 18-11-2010 Author: Muhamad Fadzil Ramli - mind1355atgmaildotcom Credit/Bug Found By: C4SS!0 G0M3S Software Link: http://www.brothersoft.com/d.php?softid=16524&url=http://files.brothersoft.com/mp3audio/players/mp3nator.zip...

Free CD To MP3 Converter 3.1 Buffer Overflow

Exploit Title: Free CD to MP3 Converter 3.1 Buffer Overflow Exploit SEH Date: 10/18/10 Credit/Bug found by: C4SS!0 G0M3S Software Link: http://www.eusing.com/Download/cdtomp3freeware.exe Version: 3.1 Tested on: Windows XP SP3 EN VMWARE FUSION - Version 3.1.1 CVE: N/A ! /usr/bin/env ruby filename ...

Free CD to MP3 Converter v3.1 Buffer Overflow Exploit (SEH)

Exploit for windows platform in category local exploits =========================================================== Free CD to MP3 Converter v3.1 Buffer Overflow Exploit SEH =========================================================== Exploit Title: Free CD to MP3 Converter 3.1 Buffer Overflow...

Free CD to MP3 Converter 3.1 - Local Buffer Overflow (SEH)

Exploit Title: Free CD to MP3 Converter 3.1 Buffer Overflow Exploit SEH Date: 10/18/10 Credit/Bug found by: C4SS!0 G0M3S Software Link: http://www.eusing.com/Download/cdtomp3freeware.exe Version: 3.1 Tested on: Windows XP SP3 EN VMWARE FUSION - Version 3.1.1 CVE: N/A ! /usr/bin/env ruby filename ...

Minishare 1.5.5 Buffer Overflow Vulnerability (SEH)

Exploit for windows platform in category local exploits =================================================== Minishare 1.5.5 Buffer Overflow Vulnerability SEH =================================================== Exploit Title: Minishare 1.5.5 Buffer Overflow Vulnerability SEH Date: 11/03/2010 Autho...

Acoustica Audio Converter Pro 1.1 Heap Overflow (.mp3.wav.ogg.wma)

Exploit for windows platform in category local exploits ================================================================================= Acoustica Audio Converter Pro 1.1 build 25 Heap Overflow .mp3.wav.ogg.wma PoC =================================================================================...

Chalk Creek Media Player 1.0.7 .mp3 and .wma Denial of Service

Exploit for windows platform in category dos / poc ============================================================== Chalk Creek Media Player 1.0.7 .mp3 and .wma Denial of Service ============================================================== Exploit Title: Chalk Creek Media Player 1.0.7 .mp3 and .w...

Chalk Creek Media Player 1.0.7 Denial Of Service

Exploit Title: Chalk Creek Media Player 1.0.7 .mp3 and .wma DOS Date: September 16 2010 Author: Carlos Mario Penagos Hollmann Software Link: http://download.cnet.com/3001-21394-10526196.html?spi=a1e3adfe2f3af811074a43111c901f6c Version: 1.0.7 Tested on: Windows xp sp3 running on VMware Fusion 3.1...

Acoustica MP3 Audio Mixer 2.471 SEH Overwrite

Exploit Title: Acoustica MP3 Audio Mixer 2.471 Extended M3U directives SEH Date: September 8 2010 Author: Carlos Hollmann Software Link: http://www.acoustica.com/downloading.asp?p=1 Version: 2.471 Tested on: Windows xp sp3 running on VMware Fusion 3.1 and VirtualBox 3.2.8 CVE : / / / | | / / / | ...

Acoustica MP3 Audio Mixer 2.471 Extended M3U directives SEH

Exploit for windows platform in category local exploits =========================================================== Acoustica MP3 Audio Mixer 2.471 Extended M3U directives SEH =========================================================== Exploit Title: Acoustica MP3 Audio Mixer 2.471 Extended M3U...

Acoustica MP3 Audio Mixer 2.471 - Extended .M3U Directives (SEH)

Exploit Title: Acoustica MP3 Audio Mixer 2.471 Extended M3U directives SEH Date: September 8 2010 Author: Carlos Hollmann Software Link: http://www.acoustica.com/downloading.asp?p=1 Version: 2.471 Tested on: Windows xp sp3 running on VMware Fusion 3.1 and VirtualBox 3.2.8 CVE : / / / | | / / / | ...

CVE-2010-1141

CVE-2010-1141 affects VMware Tools and related VMware host components (Workstation, Player, ACE, Server, Fusion, ESXi/ESX). The flaw is improper access/loading of libraries, enabling a user-assisted remote attacker to trigger arbitrary code execution by convincing a Windows guest OS user to click...

CVE-2010-1139

Format string vulnerability in vmrun in VMware VIX API 1.6.x, VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build 246459, and VMware Server 2.x on Linux, and VMware Fusion 2.x before 2.0.7 build 246742, allows local users to gain privileges via format string...

CVE-2010-1141: Undefined Security Weakness

VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x before 2.0.2 build 203138; VMware Fusion 2.x before 2.0.6 build 246742; VMware ESXi 3.5 and 4.0; and VMware ESX 2.5.5,...

CVE-2010-1138: Exposure of Sensitive Information to an Unauthorized Actor

The virtual networking stack in VMware Workstation 7.0 before 7.0.1 build 227600, VMware Workstation 6.5.x before 6.5.4 build 246459 on Windows, VMware Player 3.0 before 3.0.1 build 227600, VMware Player 2.5.x before 2.5.4 build 246459 on Windows, VMware ACE 2.6 before 2.6.1 build 227600 and 2.5....

CVE-2010-1142: Undefined Security Weakness

VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x before 2.0.2 build 203138; VMware Fusion 2.x before 2.0.6 build 246742; VMware ESXi 3.5 and 4.0; and VMware ESX 2.5.5,...

CVE-2010-1139: Use of Externally-Controlled Format String

Format string vulnerability in vmrun in VMware VIX API 1.6.x, VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build 246459, and VMware Server 2.x on Linux, and VMware Fusion 2.x before 2.0.7 build 246742, allows local users to gain privileges via format string...

CVE-2009-2267: Undefined Security Weakness

VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, VMware ACE 2.5.x before 2.5.3 build 185404, VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138, VMware Fusion 2.x before 2.0.6 build 196839, VMware ESXi 3.5 and 4.0, and...

PT-2009-4703

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 6.5.x through 6.5.3 build 185404 VMware Player versions 2.5.x through 2.5.3 build 185404 VMware ACE versions 2.5.x through 2.5.3 build 185404 VMware Server versions 1.x through 1.0.10 build 203137 VMware Server...

Invalid #PF Exception Code in VMware can result in Guest Privilege Escalation

No description provided by source. Invalid PF Exception Code in VMware can result in Guest Privilege Escalation ----------------------------------------------------------------------------- In protected mode, cpl is usually equal to the two least significant bits of the cs register. However, ther...