Buffer Overflow Vulnerability in Winlpd

Pablo Isola has discovered a vulnerability in Winlpd, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused due to a boundary error when handling received requests. This can be exploited to cause a stack-based buffer overflow by passing an overl...

Winlpd buffer overflow

Buffer overflow on LPR TCP/515 request handling...

CVE-2006-3670

Stack-based buffer overflow in Winlpd 1.26 allows remote attackers to execute arbitrary code via a long string in a request to TCP port 515...

CVE-2006-3670

Winlpd 1.26 is affected by a stack-based buffer overflow that allows remote code execution via a long string in a request to TCP port 515. The vulnerability affects the Winlpd component described in CVE-2006-3670; the underlying cause is a stack-based overflow when processing long input. The prov...

CVE-2006-3670

Stack-based buffer overflow in Winlpd 1.26 allows remote attackers to execute arbitrary code via a long string in a request to TCP port 515...

Winlpd 1.2 Build 1076 - Remote Buffer Overflow

!/usr/bin/perl A proof of concept Remote Buffer Overflow Exploit App Vulnerable: Winlpd 1.2 Build 1076 - rabox.com Possibe some problems with WinXP if exploit doesn't work correctly, try another number in var 'loop'. Buffer size 524 bytes. Author: Pablo Isola - [email protected] Neuquen ...

Winlpd 1.2 Build 1076 Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ==================================================== Winlpd 1.2 Build 1076 Remote Buffer Overflow Exploit ==================================================== !/usr/bin/perl A proof of concept Remote Buffer Overflow Exploit App Vulnerable:...

Winlpd 1.2 Build 1076 Remote Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl A proof of concept Remote Buffer Overflow Exploit App Vulnerable: Winlpd 1.2 Build 1076 - rabox.com Possibe some problems with WinXP if exploit doesn't work correctly, try another number in var 'loop'. Buffer size 524 bytes. Author: Pablo Isola -...