ZDI-08-043: Sun Java Web Start vm args Stack Buffer Overflow

ZDI-08-043: Sun Java Web Start vm args Stack Buffer Overflow http://www.zerodayinitiative.com/advisories/ZDI-08-043 July 17, 2008 -- Affected Vendors: Sun Microsystems -- Affected Products: Sun Microsystems Java Runtime -- TippingPointTM IPS Customer Protection: TippingPoint IPS customers have be...

Remote code execution by overflowing CSS reference counter — Mozilla

An anonymous researcher, via TippingPoint's Zero Day Initiative program, reported a vulnerability in Mozilla's internal CSSValue array data structure. The vulnerability was caused by an insufficiently sized variable being used as a reference counter for CSS objects. By creating a very large numbe...

ZDI-08-041: Novell eDirectory dhost Integer Overflow Code Execution Vulnerability

ZDI-08-041: Novell eDirectory dhost Integer Overflow Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-041 July 10, 2008 -- Affected Vendors: Novell -- Affected Products: Novell eDirectory -- TippingPointTM IPS Customer Protection: TippingPoint IPS customers have bee...

ZDI-08-039: Microsoft Internet Explorer DOM Ojbect substringData() Heap Overflow Vulnerability

ZDI-08-039: Microsoft Internet Explorer DOM Ojbect substringData Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-039 June 10, 2008 -- CVE ID: CVE-2008-1442 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Internet Explorer -- TippingPointTM IPS Custome...

ZDI-08-033: Motorola RAZR JPG Processing Stack Overflow Vulnerability

ZDI-08-033: Motorola RAZR JPG Processing Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-033 May 27, 2008 -- Affected Vendors: Motorola -- Affected Products: Motorola RAZR -- Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary cod...

CA ARCserve Backup xdr_rwsstring buffer overflow

Added: 05/27/2008 CVE: CVE-2008-2242 BID: 29283 OSVDB: 45368 Background CA ARCserve Backup formerly BrightStor ARCserve Backup is a backup and recovery solution. It runs several services which use the SUN Remote Procedure Call SUN-RPC protocol. SUN-RPC messages are defined using the External Data...

ZDI-08-030: Trillian Multiple Protocol XML Parsing Memory Corruption Vulnerability

ZDI-08-030: Trillian Multiple Protocol XML Parsing Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-030 May 21, 2008 -- Affected Vendors: Cerulean Studios -- Affected Products: Cerulean Studios Trillian -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

ZDI-08-022: Apple Safari WebKit PCRE Handling Integer Overflow Vulnerability

ZDI-08-022: Apple Safari WebKit PCRE Handling Integer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-022 April 16, 2008 -- CVE ID: CVE-2008-1026 -- Affected Vendors: Apple -- Affected Products: Apple Safari -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

ZDI-08-020: Microsoft GDI WMF Parsing Heap Overflow Vulnerability

ZDI-08-020: Microsoft GDI WMF Parsing Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-020 -- CVE ID: CVE-2008-1083 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Windows XP SP2 Microsoft Windows 2003 SP1 Microsoft Windows Vista -- Vulnerability...

ZDI-08-017: Apple QuickTime Kodak Encoding Heap Overflow Vulnerability

ZDI-08-017: Apple QuickTime Kodak Encoding Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-017 April 3, 2008 -- CVE ID: CVE-2008-1020 -- Affected Vendors: Apple -- Affected Products: Apple Quicktime 7.4.1 -- Vulnerability Details: This vulnerability allows attackers...

ZDI-08-009: Java Web Start tempbuff Stack Buffer Overflow

ZDI-08-009: Java Web Start tempbuff Stack Buffer Overflow http://www.zerodayinitiative.com/advisories/ZDI-08-009 March 12, 2008 -- CVE ID: CVE-2008-1188 -- Affected Vendors: Sun Microsystems -- Affected Products: Sun Microsystems Java Runtime -- TippingPointTM IPS Customer Protection: TippingPoin...

appleiphoto-dos.txt

A little zero-day exploit in memory of Dude VanWinkle. Apple iPhoto v4.0.3 DPAP Digital Photo Access Protocol Server Denial of Service Exploit. Other versions may be vulnerable too; the current version should not be vulnerable. The server process catches the exception, exits cleanly, but does not...

[Full-disclosure] Apple iPhoto v4.0.3 DPAP Server Denial of Service Exploit

A little zero-day exploit in memory of Dude VanWinkle. Apple iPhoto v4.0.3 DPAP Digital Photo Access Protocol Server Denial of Service Exploit. Other versions may be vulnerable too; the current version should not be vulnerable. The server process catches the exception, exits cleanly, but does not...

Immunity Canvas: NWSPOOL_C

Name| nwspoolc ---|--- CVE| CVE-2008-0639 Exploit Pack| CANVAS Description| Novell Netware Client for Windows Notes| CVE Name: CVE-2008-0639 VENDOR: Novell Notes: Use the setthreadtoken module to revert back to LocalSystem once the exploitation is successful Platforms Tested: References:...

ZDI-08-006: Microsoft Internet Explorer SVG animateMotion.by Code Execution Vulnerability

ZDI-08-006: Microsoft Internet Explorer SVG animateMotion.by Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-006.html February 12, 2008 -- CVE ID: CVE-2008-077 -- Affected Vendor: Microsoft -- Affected Products: Internet Explorer 6 Internet Explorer 7 --...

ZDI-08-004: Adobe AcrobatReader Javascript for PDF Integer Overflow Vulnerability

ZDI-08-004: Adobe Acrobat Javascript for PDF Integer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-004.html February 11, 2008 -- Affected Vendor: Adobe -- Affected Products: Reader 8.1.1 and earlier versions Acrobat 8.1.1 and earlier versions -- TippingPointTM IPS...

ZDI-08-003: Symantec Backup Exec Remote File Upload Vulnerability

ZDI-08-003: Symantec Backup Exec Remote File Upload Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-003.html February 6, 2008 -- CVE ID: CVE-2008-0457 -- Affected Vendor: Symantec -- Affected Products: Backup Exec System Recovery Manager 7.0 Backup Exec System Recovery Manager...

ZDI-08-002: Citrix Presentation Server IMA Service Heap Overflow Vulnerability

ZDI-08-002: Citrix Presentation Server IMA Service Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-002.html January 17, 2008 -- Affected Vendor: Citrix -- Affected Products: Metaframe Presentation Server 3.0 Presentation Server 4.0, 4.5 Access Essentials 1.0, 1.5, 2...

ZDI-07-079: Hewlett-Packard HP-UX swagentd Buffer Overflow Vulnerability

ZDI-07-079: Hewlett-Packard HP-UX swagentd Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-079.html December 17, 2007 -- CVE ID: CVE-2007-6195 -- Affected Vendor: Hewlett-Packard -- Affected Products: HP-UX 11.11 -- TippingPointTM IPS Customer Protection:...

ZDI-07-077: Trend Micro ServerProtect StRpcSrv.dll Insecure Method Exposure Vulnerability

ZDI-07-077: Trend Micro ServerProtect StRpcSrv.dll Insecure Method Exposure Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-077.html December 17, 2007 -- CVE ID: -- Affected Vendor: Trend Micro -- Affected Products: ServerProtect v5.58 -- TippingPointTM IPS Customer Protection:...