freshview-overflow.txt

/ FreshView 7.15 .PSP File Buffer Overflow FreshView is vulnerable to an unspecified buffer overflow when processing a crafted .PSP file. This exploit runs calc.exe or binds shell to port 4444. Tested against Win XP SP2 FR. Have Fun! Coded and discovered by Marsu Note: Open that in XnView to see...

xampp-rgod.txt

Connect$POST'host', $POST'user', $POST'password', $POST'database'; echo "DBServer: $POSTdbserver"; $result = $db-Execute"SELECT FROM $POSTtable"; ... mssqlconnect function is vulnerable to buffer overflow and the host argument is totally unchecked. Also this shows a vulnerabilty in ADODB library...

CVE-2007-1959

Unspecified vulnerability in the processcmdent function in command.cpp in TinyMUX before 2.4 has unknown impact and attack vectors, related to lack of the "'other half' of buffer overflow protection."...

KLA10252 ACE vulnerability in multiple software

A buffer overflow was found in multiple products, exploiting NCTAudioFile2.AudioFile. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed call. Original advisories - Related products...

USN-390-2: evince vulnerability

USN-390-1 fixed a vulnerability in evince. The original fix did not fully solve the problem, allowing for a denial of service in certain situations. Original advisory details: A buffer overflow was discovered in the PostScript processor included in evince. By tricking a user into opening a...

VUPlayer 2.44 - '.m3u' UNC Name Buffer Overflow

/ . \ \ \ \ | | / | | | | \ / / /\ \ / \ | \ / / / / 30\11\06 / || / / mm. dM8 YMMMb. dMM8 YMMMMb dMMM' YMMMb dMMMP There are doors I have yet to open YMMM MMM' windows I have yet to look through "MbdMP Going forward may not be the answer .dMMMMMM.P dMM MMMMMM maybe I should go back...

CVE-2006-4810

Buffer overflow in the readline function in util/texindex.c, as used by the 1 texi2dvi and 2 texindex commands, in texinfo 4.8 and earlier allows local users to execute arbitrary code via a crafted Texinfo file...

Xmame <= 0.102 (-pb/-lang/-rec) Local Buffer Overflow Exploit

No description provided by source. / xmame-expl.c by sj [email protected] On 20th of Jan it came to my attention that Xmame suffered from several buffer overflow problems. Thinking this issue was resolved, I installed Xmame on my Ubuntu laptop, from the Ubuntu repositories which installed a vulnerable...

CVE-2005-3524

Buffer overflow in the SSL-ready version of linux-ftpd linux-ftpd-ssl 0.17 allows remote attackers to execute arbitrary code by creating a long directory name, then executing the XPWD command...

FlatFrag <= 0.3 Buffer Overflow / Denial of Service Exploit

Exploit for unknown platform in category dos / poc =========================================================== FlatFrag include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include...

Prozilla 1.3.7.4 - 'ftpsearch' Results Handling Buffer Overflow

include include include define OVERFLOW 1"; buf = mallocOVERFLOW; for i = 0; buf + i "; buf = reallocbuf, SLEDSIZ + sizeofshellcode; memsetbuf, 0x90, SLEDSIZ; memcpybuf + SLEDSIZ, shellcode, sizeofshellcode; fwritebuf, SLEDSIZ + sizeofshellcode, 1, exploit; freebuf; fprintfstderr, " %s created.\n...

Apache 1.3.x - HTDigest Realm Command Line Argument Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/13537/info A buffer overflow vulnerability exists in the htdigest utility included with Apache. The vulnerability is due to improper bounds checking when copying user-supplied realm data into local buffers. By supplying an overly long realm value to th...

CVE-2005-1194

Stack-based buffer overflow in the ieeeputascii function for nasm 0.98 and earlier allows attackers to execute arbitrary code via a crafted asm file, a different vulnerability than CVE-2004-1287...

CVE-2005-1194

Stack-based buffer overflow in the ieeeputascii function for nasm 0.98 and earlier allows attackers to execute arbitrary code via a crafted asm file, a different vulnerability than CVE-2004-1287...

libexif -- buffer overflow vulnerability

Sylvain Defresne reports that libexif is vulnerable to a buffer overflow vulnerability due to insufficient input checking. This could lead crash of applications using libexif...

CURL-CVE-2005-0490 Authentication Buffer Overflows

Due to bad usage of the base64 decode function to a stack-based buffer without checking the data length, it was possible for a malicious HTTP server to overflow the client during NTLM negotiation and for an FTP server to overflow the client during krb4 negotiation. The announcement of this flaw w...

HP-UX PHCO_22767 : HPSBUX0103-146 Sec. Vulnerability in crontab(1) (rev.1)

s700800 11.00 cumulative crontab/at/cron patch : crontab1 contains a buffer overflow. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO22767. The text itself is copyright C Hewlett-Packard Development Compan...

wpa_supplicant: Buffer overflow vulnerability

Background wpasupplicant is a WPA Supplicant with support for WPA and WPA2 IEEE 802.11i / RSN. Description wpasupplicant contains a possible buffer overflow due to the lacking validation of received EAPOL-Key frames. Impact An attacker could cause the crash of wpasupplicant using a specially...

PostgreSQL: Buffer overflows in PL/PgSQL parser

Background PostgreSQL is a SQL compliant, open source object-relational database management system. Description PostgreSQL is vulnerable to several buffer overflows in the PL/PgSQL parser. Impact A remote attacker could send a malicious query resulting in the execution of arbitrary code with the...

GLSA-200501-07 : xine-lib: Multiple overflows

The remote host is affected by the vulnerability described in GLSA-200501-07 xine-lib: Multiple overflows Ariel Berkman discovered that xine-lib reads specific input data into an array without checking the input size in demuxaiff.c, making it vulnerable to a buffer overflow CAN-2004-1300 . iDefen...