540 matches found
Winamp <= 5.34 .MP4 File Code Execution Exploit
Exploit for unknown platform in category local exploits =============================================== Winamp = 5.34 .MP4 File Code Execution Exploit =============================================== /\ Winamp = 5.34 .MP4 File Code Execution Winamp MP4's plugin fails to handle exceptional...
Winamp 5.34 - .mp4 Code Execution
Winamp 5.34 - .mp4 Code Execution /\ Winamp = 5.34 .MP4 File Code Execution Winamp MP4's plugin fails to handle exceptional conditions, which can lead to code execution. However exploitation is hard, firstly because of the return address. This code exploits a call eax, and it might be complicated...
RealPlayer 10 - '.ra' Remote Denial of Service
!/usr/bin/python Real player 10 Gold .Ra file remote Dos. Credits to n00b for finding this bug This bug is a nasty memory leak with in Real player 10 gold please remember if your guna test it out save all your info you need first..Coz your probly guna have to reboot also remember all other...
IrfanView <= 4.00 .IFF File Buffer Overflow Exploit
No description provided by source. / IrfanView = 4.00 .IFF File Buffer Overflow &nbs...
Photoshop CS2CS3 Paint Shop Pro 11.20 - .png Local Buffer Overflow
Photoshop CS2CS3 Paint Shop Pro 11.20 - .png Local Buffer Overflow /\ Photoshop CS2/CS3, Paint Shop Pro 11.20 .PNG File Buffer Overflow Like bitmap files, PNG files can do great things =D. In french: "buffer overflow a gogo!" The generated .PNG file will work for: -Photoshop CS2 -Photoshop CS3...
IrfanView 4.00 - .iff Local Buffer Overflow
IrfanView 4.00 - .iff Local Buffer Overflow / IrfanView / include "stdio.h" include "stdlib.h" / win32exec - EXITFUNC=process CMD=calc.exe Size=138 Encoder=PexFnstenvSub http://metasploit.com / unsigned char CalcShellcode = "\xfc\xe8\x44\x00\x00\x00\x8b\x45\x3c\x8b\x7c\x05\x78\x01\xef\x8b"...
Photoshop CS2/CS3 / Paint Shop Pro 11.20 .PNG File BoF Exploit
Exploit for unknown platform in category local exploits ============================================================== Photoshop CS2/CS3 / Paint Shop Pro 11.20 .PNG File BoF Exploit ============================================================== /\ Photoshop CS2/CS3, Paint Shop Pro 11.20 .PNG File...
Gimp v2.2.14 .RAS File SUNRAS Plugin Buffer Overflow
No description provided by source. /\ Gimp v2.2.14 .RAS File SUNRAS Plugin Buffer Overflow ...
IrfanView 4.00 - '.iff' Local Buffer Overflow
/ IrfanView / include "stdio.h" include "stdlib.h" / win32exec - EXITFUNC=process CMD=calc.exe Size=138 Encoder=PexFnstenvSub http://metasploit.com / unsigned char CalcShellcode = "\xfc\xe8\x44\x00\x00\x00\x8b\x45\x3c\x8b\x7c\x05\x78\x01\xef\x8b"...
Photoshop CS2/CS3 / Paint Shop Pro 11.20 - '.png' Local Buffer Overflow
/\ Photoshop CS2/CS3, Paint Shop Pro 11.20 .PNG File Buffer Overflow Like bitmap files, PNG files can do great things =D. In french: "buffer overflow a gogo!" The generated .PNG file will work for: -Photoshop CS2 -Photoshop CS3 -Photoshop Elements 5.0 -Corel Paint Shop Pro 11.20 This sploit runs...
GIMP 2.2.14 - .ras SUNRAS Plugin Buffer Overflow
GIMP 2.2.14 - .ras SUNRAS Plugin Buffer Overflow /\ Gimp v2.2.14 .RAS File SUNRAS Plugin Buffer Overflow Gimp uses SUNRAS plugin to process .RAS file. But this module is vulnerable to a buffer overflow in setcolortable which leads to code execution. Vulnerable code, sunras.c:862 int ncols, j;...
Gimp 2.2.14 .RAS File SUNRAS Plugin Buffer Overflow Exploit
Exploit for unknown platform in category local exploits =========================================================== Gimp 2.2.14 .RAS File SUNRAS Plugin Buffer Overflow Exploit =========================================================== /\ Gimp v2.2.14 .RAS File SUNRAS Plugin Buffer Overflow Gimp...
GIMP 2.2.14 - '.ras' SUNRAS Plugin Buffer Overflow
/\ Gimp v2.2.14 .RAS File SUNRAS Plugin Buffer Overflow Gimp uses SUNRAS plugin to process .RAS file. But this module is vulnerable to a buffer overflow in setcolortable which leads to code execution. Vulnerable code, sunras.c:862 int ncols, j; guchar ColorMap2563; ncols = sunhdr-lrasmaplength / ...
FreshView 7.15 (.PSP File) Buffer Overflow Exploit
No description provided by source. / FreshView 7.15 .PSP File Buffer Overflow &nbs...
ABC-View Manager 1.42 (.PSP File) Buffer Overflow Exploit
No description provided by source. / ABC-View Manager 1.42 .PSP File Buffer Overflow &nbs...
ABC-View Manager 1.42 (.PSP File) Buffer Overflow Exploit
Exploit for unknown platform in category local exploits ========================================================= ABC-View Manager 1.42 .PSP File Buffer Overflow Exploit ========================================================= / ABC-View Manager 1.42 .PSP File Buffer Overflow ABC-View Manager is...
FreshView 7.15 (.PSP File) Buffer Overflow Exploit
Exploit for unknown platform in category local exploits ================================================== FreshView 7.15 .PSP File Buffer Overflow Exploit ================================================== / FreshView 7.15 .PSP File Buffer Overflow FreshView is vulnerable to an unspecified buffe...
FreshView 7.15 - .psp Local Buffer Overflow
FreshView 7.15 - .psp Local Buffer Overflow / FreshView 7.15 .PSP File Buffer Overflow FreshView is vulnerable to an unspecified buffer overflow when processing a crafted .PSP file. This exploit runs calc.exe or binds shell to port 4444. Tested against Win XP SP2 FR. Have Fun! Coded and discovere...
ABC-View Manager 1.42 - .psp Local Buffer Overflow
ABC-View Manager 1.42 - .psp Local Buffer Overflow / ABC-View Manager 1.42 .PSP File Buffer Overflow ABC-View Manager is vulnerable to an unspecified buffer overflow when processing a crafted .TTF file. This exploit runs calc.exe or binds shell to port 4444. Tested against Win XP SP2 FR. Have Fun...
ABC-View Manager 1.42 - '.psp' Local Buffer Overflow
/ ABC-View Manager 1.42 .PSP File Buffer Overflow ABC-View Manager is vulnerable to an unspecified buffer overflow when processing a crafted .TTF file. This exploit runs calc.exe or binds shell to port 4444. Tested against Win XP SP2 FR. Have Fun! Coded and discovered by Marsu Note: Open that in...