CVE-2013-2153

The XML digital signature functionality xsec/dsig/DSIGReference.cpp in Apache Santuario XML Security for C++ aka xml-security-c before 1.7.1 allows context-dependent attackers to reuse signatures and spoof arbitrary content via crafted Reference elements in the Signature, aka "XML Signature Bypas...

CVE-2013-2154: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the XML Signature Reference functionality xsec/dsig/DSIGReference.cpp in Apache Santuario XML Security for C++ aka xml-security-c before 1.7.1 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via malformed...

CVE-2013-2153: Undefined Security Weakness

The XML digital signature functionality xsec/dsig/DSIGReference.cpp in Apache Santuario XML Security for C++ aka xml-security-c before 1.7.1 allows context-dependent attackers to reuse signatures and spoof arbitrary content via crafted Reference elements in the Signature, aka "XML Signature Bypas...

PT-2013-3565

Name of the Vulnerable Software and Affected Versions Apache Santuario XML Security for C++ versions prior to 1.7.1 Description The issue is related to a stack-based buffer overflow in the XML Signature Reference functionality, specifically in the xsec/dsig/DSIGReference.cpp file. This allows...

PT-2013-3564

Name of the Vulnerable Software and Affected Versions Apache Santuario XML Security for C++ versions prior to 1.7.1 Description The issue concerns the XML digital signature functionality in the xsec/dsig/DSIGReference.cpp component, allowing context-dependent attackers to reuse signatures and spo...

Microsoft Windows PNG文件畸形IHDR结构处理拒绝服务漏洞

Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows在处理畸形的PNG文件时存在拒绝服务漏洞，可能导致资源管理器耗尽大量的CPU资源。 当PNG图形文件的IHDR结构中的Width和Height字段被设置为恶意的值时，Windows在处理其时会消耗大量CPU资源。 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows 2000 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

MS Internet Explorer (VML) Remote Buffer Overflow Exploit

No description provided by source. / ----------------------------------------------------------------------- vml.c - Internet Explorer VML Buffer Overflow Download Exec Exploit !!! 0day !!! Public Version !!! Copyright C 2006 XSec All Rights Reserved. Author : nop : nopxsec.org :...

MS Internet Explorer (VML) Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ========================================================= MS Internet Explorer VML Remote Buffer Overflow Exploit ========================================================= /...

Microsoft Internet Explorer - VML Remote Buffer Overflow

Microsoft Internet Explorer - VML Remote Buffer Overflow / ----------------------------------------------------------------------- vml.c - Internet Explorer VML Buffer Overflow Download Exec Exploit !!! 0day !!! Public Version !!! Copyright C 2006 XSec All Rights Reserved. Author : nop :...

Microsoft Internet Explorer - 'VML' Remote Buffer Overflow

/ ----------------------------------------------------------------------- vml.c - Internet Explorer VML Buffer Overflow Download Exec Exploit !!! 0day !!! Public Version !!! Copyright C 2006 XSec All Rights Reserved. Author : nop : nopxsec.org : http://www.xsec.org : Tested : Windows 2000 Server ...

Microsoft Internet Explorer - COM Object Remote Heap Overflow

Microsoft Internet Explorer - COM Object Remote Heap Overflow / ----------------------------------------------------------------------- daxctle2.c - Internet Explorer COM Object Heap Overflow Download Exec Exploit !!! 0day !!! Public Version !!! Copyright C 2006 XSec All Rights Reserved. Author :...

Microsoft Internet Explorer - COM Object Remote Heap Overflow

/ ----------------------------------------------------------------------- daxctle2.c - Internet Explorer COM Object Heap Overflow Download Exec Exploit !!! 0day !!! Public Version !!! Copyright C 2006 XSec All Rights Reserved. Author : nop : nopxsec.org : http://www.xsec.org : Tested : Windows 20...

XSec-06-05.txt

Advisory ID: XSec-06-05 Advisory Name: VMware 5.5.1 for Windows arbitrary partition table delete issue. Release Date: 08/16/2006 Tested on: VMware 5.5.1 build-19175 on Windows Server 2000/2003 Affected version: VMware 5.5.1 Author: nop http://www.xsec.org Overview: On running windows system, you...

VMware 5.5.1 COM Object Arbitrary Partition Table Delete Exploit

No description provided by source. !-- XSec-06-05: VMware 5.5.1 for Windows arbitrary partition table delete issue. Advisory ID: XSec-06-05 Advisory Name: VMware 5.5.1 for Windows arbitrary partition table delete issue. Release Date: 08/16/2006 Tested on: VMware 5.5.1 build-19175 on Windows Serve...

VMware 5.5.1 - COM Object Arbitrary Partition Table Delete

VMware 5.5.1 - COM Object Arbitrary Partition Table Delete http://www.xsec.org Overview: On running windows system, you can't delete, format and change system dirver. \ VMware register a COM Object use for Virtual Disk, but it's very danger. \ I don't know how to name this issue. If you allow...