< Back to JetLib.com

arbitrary-code

« Expand/Collapse

627 items tagged "arbitrary code"

Skip to page: 1 2 3

May 21, 2012
17:25
Ubuntu Security Notice USN-1447-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1447-1 - Juri Aedla discovered that libxml2 contained an off by one error in its XPointer functionality. If a user or application linked against libxml2 were tricked into opening a specially crafted XML file, an attacker could cause the application to crash or possibly execute arbitrary code with the privileges of the user invoking the program.
Tags: juri arbitrary-code security-notice

17:25
Ubuntu Security Notice USN-1447-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1447-1 - Juri Aedla discovered that libxml2 contained an off by one error in its XPointer functionality. If a user or application linked against libxml2 were tricked into opening a specially crafted XML file, an attacker could cause the application to crash or possibly execute arbitrary code with the privileges of the user invoking the program.
Tags: ubuntu notice security juri-aedla juri arbitrary-code security-notice

17:25
Ubuntu Security Notice USN-1447-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1447-1 - Juri Aedla discovered that libxml2 contained an off by one error in its XPointer functionality. If a user or application linked against libxml2 were tricked into opening a specially crafted XML file, an attacker could cause the application to crash or possibly execute arbitrary code with the privileges of the user invoking the program.
Tags: ubuntu notice security juri-aedla juri arbitrary-code security-notice

May 02, 2012
8:55
Ubuntu Security Notice USN-1436-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1436-1 - Matthew Hall discovered that Libtasn1 incorrectly handled certain large values. An attacker could exploit this with a specially crafted ASN.1 structure and cause a denial of service, or possibly execute arbitrary code.
Tags: ubuntu notice security matthew-hall denial-of-service arbitrary-code

8:55
Ubuntu Security Notice USN-1436-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1436-1 - Matthew Hall discovered that Libtasn1 incorrectly handled certain large values. An attacker could exploit this with a specially crafted ASN.1 structure and cause a denial of service, or possibly execute arbitrary code.
Tags: ubuntu notice security matthew-hall denial-of-service arbitrary-code

April 24, 2012
19:07
Ubuntu Security Notice USN-1428-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1428-1 - It was discovered that the fix for CVE-2012-2110 was incomplete for OpenSSL 0.9.8. A remote attacker could trigger this flaw in services that used SSL to cause a denial of service or possibly execute arbitrary code with application privileges. Ubuntu 11.10 was not affected by this issue. The original upstream fix for CVE-2012-2110 would cause BUF_MEM_grow_clean() to sometimes return the wrong error condition. This update fixes the problem. Various other issues were also addressed.
Tags: ubuntu notice security denial-of-service error-condition arbitrary-code

19:07
Ubuntu Security Notice USN-1428-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1428-1 - It was discovered that the fix for CVE-2012-2110 was incomplete for OpenSSL 0.9.8. A remote attacker could trigger this flaw in services that used SSL to cause a denial of service or possibly execute arbitrary code with application privileges. Ubuntu 11.10 was not affected by this issue. The original upstream fix for CVE-2012-2110 would cause BUF_MEM_grow_clean() to sometimes return the wrong error condition. This update fixes the problem. Various other issues were also addressed.
Tags: ubuntu notice security denial-of-service error-condition arbitrary-code

19:07
Ubuntu Security Notice USN-1428-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1428-1 - It was discovered that the fix for CVE-2012-2110 was incomplete for OpenSSL 0.9.8. A remote attacker could trigger this flaw in services that used SSL to cause a denial of service or possibly execute arbitrary code with application privileges. Ubuntu 11.10 was not affected by this issue. The original upstream fix for CVE-2012-2110 would cause BUF_MEM_grow_clean() to sometimes return the wrong error condition. This update fixes the problem. Various other issues were also addressed.
Tags: ubuntu notice security denial-of-service error-condition arbitrary-code

April 16, 2012
16:57
Apache OFBiz 10.04 Code Execution
» ‎ Packet Storm Security Recent Files

Apache OFBiz versions 10.04 and later allow remote attackers to execute arbitrary code.
Tags: ofbiz code apache code-execution arbitrary-code

16:57
Apache OFBiz 10.04 Code Execution
» ‎ Packet Storm Security Misc. Files

Apache OFBiz versions 10.04 and later allow remote attackers to execute arbitrary code.
Tags: ofbiz code apache code-execution arbitrary-code

April 13, 2012
12:37
Ubuntu Security Notice USN-1423-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1423-1 - Brian Gorenc discovered that Samba incorrectly calculated array bounds when handling remote procedure calls (RPC) over the network. A remote, unauthenticated attacker could exploit this to execute arbitrary code as the root user.
Tags: ubuntu notice security brian-gorenc array-bounds root-user arbitrary-code

12:37
Ubuntu Security Notice USN-1423-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1423-1 - Brian Gorenc discovered that Samba incorrectly calculated array bounds when handling remote procedure calls (RPC) over the network. A remote, unauthenticated attacker could exploit this to execute arbitrary code as the root user.
Tags: ubuntu notice security brian-gorenc array-bounds root-user arbitrary-code

12:37
Ubuntu Security Notice USN-1423-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1423-1 - Brian Gorenc discovered that Samba incorrectly calculated array bounds when handling remote procedure calls (RPC) over the network. A remote, unauthenticated attacker could exploit this to execute arbitrary code as the root user.
Tags: ubuntu notice security brian-gorenc array-bounds root-user arbitrary-code

April 09, 2012
21:31
Zero Day Initiative Advisory 12-059
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 12-059 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists in the parsing of Ogg Vorbis media files. By crafting a stream with specific values , it is possible to cause a decoding loop that copies memory to write controlled data beyond the end of a fixed size buffer. An attacker can leverage this behavior to gain remote code execution under the context of the current process.
Tags: day zero initiative code-execution zero-day arbitrary-code

21:31
Zero Day Initiative Advisory 12-059
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 12-059 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists in the parsing of Ogg Vorbis media files. By crafting a stream with specific values , it is possible to cause a decoding loop that copies memory to write controlled data beyond the end of a fixed size buffer. An attacker can leverage this behavior to gain remote code execution under the context of the current process.
Tags: day zero initiative code-execution zero-day arbitrary-code

21:31
Zero Day Initiative Advisory 12-059
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 12-059 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists in the parsing of Ogg Vorbis media files. By crafting a stream with specific values , it is possible to cause a decoding loop that copies memory to write controlled data beyond the end of a fixed size buffer. An attacker can leverage this behavior to gain remote code execution under the context of the current process.
Tags: day zero initiative code-execution zero-day arbitrary-code

20:39
Zero Day Initiative Advisory 12-055
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 12-055 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of WebKit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within the WebCore component as used by WebKit. Specifically within the handling of element properties. When importing a node having a nonattribute property such as an attached event, an object is improperly freed and accessed. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the browser.
Tags: day zero vulnerability element-properties zero-day arbitrary-code

20:39
Zero Day Initiative Advisory 12-055
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 12-055 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of WebKit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within the WebCore component as used by WebKit. Specifically within the handling of element properties. When importing a node having a nonattribute property such as an attached event, an object is improperly freed and accessed. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the browser.
Tags: day zero vulnerability element-properties zero-day arbitrary-code

20:39
Zero Day Initiative Advisory 12-055
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 12-055 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of WebKit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within the WebCore component as used by WebKit. Specifically within the handling of element properties. When importing a node having a nonattribute property such as an attached event, an object is improperly freed and accessed. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the browser.
Tags: day zero vulnerability element-properties zero-day arbitrary-code

April 03, 2012
17:25
NetOp Remote Control Client 9.5 Buffer Overflow
» ‎ Packet Storm Security Exploits

This Metasploit module exploits a stack-based buffer overflow in NetOp Remote Control 9.5. When opening a .dws file containing a specially crafted string longer then 520 characters will allow an attacker to execute arbitrary code.
Tags: control netop remote based-buffer-overflow arbitrary-code attacker

March 08, 2012
19:45
Ubuntu Security Notice USN-1395-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1395-1 - Markus Vervier discovered that PyPAM incorrectly handled passwords containing NULL bytes. An attacker could exploit this to cause applications using PyPAM to crash, or possibly execute arbitrary code.
Tags: ubuntu notice security markus-vervier arbitrary-code security-notice attacker

19:45
Ubuntu Security Notice USN-1395-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1395-1 - Markus Vervier discovered that PyPAM incorrectly handled passwords containing NULL bytes. An attacker could exploit this to cause applications using PyPAM to crash, or possibly execute arbitrary code.
Tags: ubuntu notice security markus-vervier arbitrary-code security-notice attacker

19:45
Ubuntu Security Notice USN-1395-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1395-1 - Markus Vervier discovered that PyPAM incorrectly handled passwords containing NULL bytes. An attacker could exploit this to cause applications using PyPAM to crash, or possibly execute arbitrary code.
Tags: ubuntu notice security markus-vervier arbitrary-code security-notice attacker

March 07, 2012
8:40
Ubuntu Security Notice USN-1391-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1391-1 - A flaw was discovered in the XFS filesystem. If a local user mounts a specially crafted XFS image it could potential execute arbitrary code on the system.
Tags: ubuntu notice security arbitrary-code security-notice usn

8:40
Ubuntu Security Notice USN-1391-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1391-1 - A flaw was discovered in the XFS filesystem. If a local user mounts a specially crafted XFS image it could potential execute arbitrary code on the system.
Tags: ubuntu notice security arbitrary-code security-notice usn

8:40
Ubuntu Security Notice USN-1391-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1391-1 - A flaw was discovered in the XFS filesystem. If a local user mounts a specially crafted XFS image it could potential execute arbitrary code on the system.
Tags: ubuntu notice security arbitrary-code security-notice usn

February 24, 2012
14:59
Ubuntu Security Notice USN-1374-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1374-1 - Andy Davis discovered that Samba incorrectly handled certain AndX offsets. A remote attacker could send a specially crafted request to the server and cause a denial of service, or possibly execute arbitrary code.
Tags: ubuntu notice security andy-davis denial-of-service arbitrary-code

14:59
Ubuntu Security Notice USN-1374-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1374-1 - Andy Davis discovered that Samba incorrectly handled certain AndX offsets. A remote attacker could send a specially crafted request to the server and cause a denial of service, or possibly execute arbitrary code.
Tags: ubuntu notice security andy-davis denial-of-service arbitrary-code

14:59
Ubuntu Security Notice USN-1374-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1374-1 - Andy Davis discovered that Samba incorrectly handled certain AndX offsets. A remote attacker could send a specially crafted request to the server and cause a denial of service, or possibly execute arbitrary code.
Tags: ubuntu notice security andy-davis denial-of-service arbitrary-code

February 22, 2012
20:44
Ubuntu Security Notice USN-1371-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1371-1 - It was discovered that cvs incorrectly handled certain responses from proxy servers. If a user were tricked into connecting to a malicious proxy server, a remote attacker could cause cvs to crash, or possibly execute arbitrary code.
Tags: ubuntu notice security proxy-servers arbitrary-code security-notice
February 20, 2012
18:43
Ubuntu Security Notice USN-1370-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1370-1 - It was discovered that libvorbis did not correctly handle certain malformed ogg files. If a user were tricked into opening a specially crafted ogg file with an application that uses libvorbis, an attacker could cause a denial of service or possibly execute arbitrary code with the user's privileges.
Tags: ubuntu notice security denial-of-service ogg-files arbitrary-code

18:43
Ubuntu Security Notice USN-1370-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1370-1 - It was discovered that libvorbis did not correctly handle certain malformed ogg files. If a user were tricked into opening a specially crafted ogg file with an application that uses libvorbis, an attacker could cause a denial of service or possibly execute arbitrary code with the user's privileges.
Tags: ubuntu notice security denial-of-service ogg-files arbitrary-code

18:43
Ubuntu Security Notice USN-1370-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1370-1 - It was discovered that libvorbis did not correctly handle certain malformed ogg files. If a user were tricked into opening a specially crafted ogg file with an application that uses libvorbis, an attacker could cause a denial of service or possibly execute arbitrary code with the user's privileges.
Tags: ubuntu notice security denial-of-service ogg-files arbitrary-code

February 08, 2012
14:42
Zero Day Initiative Advisory 12-030
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 12-030 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Rational Rhapsody. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within BB FlashBack Recorder.dll. Uninitialized pointers may be passed as arguments to TestCompatibilityRecordMode() which allows a remote attacker to reliably corrupt controlled memory regions. This behavior can be exploited to remotely execute arbitrary code in the context of the user running the browser.
Tags: day zero initiative memory-regions zero-day arbitrary-code

14:42
Zero Day Initiative Advisory 12-030
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 12-030 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Rational Rhapsody. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within BB FlashBack Recorder.dll. Uninitialized pointers may be passed as arguments to TestCompatibilityRecordMode() which allows a remote attacker to reliably corrupt controlled memory regions. This behavior can be exploited to remotely execute arbitrary code in the context of the user running the browser.
Tags: memory-regions zero-day arbitrary-code

14:42
Zero Day Initiative Advisory 12-030
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 12-030 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Rational Rhapsody. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within BB FlashBack Recorder.dll. Uninitialized pointers may be passed as arguments to TestCompatibilityRecordMode() which allows a remote attacker to reliably corrupt controlled memory regions. This behavior can be exploited to remotely execute arbitrary code in the context of the user running the browser.
Tags: day zero initiative memory-regions zero-day arbitrary-code

14:28
Zero Day Initiative Advisory 12-029
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 12-029 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Rational Rhapsody. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within BB FlashBack Recorder.dll. Uninitialized pointers may be passed as arguments to InsertMarker() which in turn can allow an attacker to corrupt memory in a controlled fashion. This behavior can be exploited to remotely execute arbitrary code in the context of the user running the browser.
Tags: day zero initiative zero-day arbitrary-code target

14:28
Zero Day Initiative Advisory 12-029
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 12-029 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Rational Rhapsody. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within BB FlashBack Recorder.dll. Uninitialized pointers may be passed as arguments to InsertMarker() which in turn can allow an attacker to corrupt memory in a controlled fashion. This behavior can be exploited to remotely execute arbitrary code in the context of the user running the browser.
Tags: day zero initiative zero-day arbitrary-code target

14:28
Zero Day Initiative Advisory 12-029
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 12-029 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Rational Rhapsody. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within BB FlashBack Recorder.dll. Uninitialized pointers may be passed as arguments to InsertMarker() which in turn can allow an attacker to corrupt memory in a controlled fashion. This behavior can be exploited to remotely execute arbitrary code in the context of the user running the browser.
Tags: day zero initiative zero-day arbitrary-code target

February 06, 2012
16:12
Red Hat Security Advisory 2012-0100-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0100-01 - Multiple format string flaws were found in Condor. An authenticated Condor service user could use these flaws to prevent other jobs from being scheduled and executed, crash the condor_schedd daemon, or, possibly, execute arbitrary code with the privileges of the "condor" user.
Tags: hat condor red red-hat-security security-advisory arbitrary-code

16:12
Red Hat Security Advisory 2012-0100-01
» ‎ Packet Storm Security Recent Files

Red Hat Security Advisory 2012-0100-01 - Multiple format string flaws were found in Condor. An authenticated Condor service user could use these flaws to prevent other jobs from being scheduled and executed, crash the condor_schedd daemon, or, possibly, execute arbitrary code with the privileges of the "condor" user.
Tags: hat condor red red-hat-security security-advisory arbitrary-code

16:12
Red Hat Security Advisory 2012-0100-01
» ‎ Packet Storm Security Misc. Files

Red Hat Security Advisory 2012-0100-01 - Multiple format string flaws were found in Condor. An authenticated Condor service user could use these flaws to prevent other jobs from being scheduled and executed, crash the condor_schedd daemon, or, possibly, execute arbitrary code with the privileges of the "condor" user.
Tags: hat condor red red-hat-security security-advisory arbitrary-code

February 02, 2012
16:31
RealNetworks RealPlayer RV10 Sample Height Parsing Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks Real Player.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code vulnerability realnetworks code-execution safer-use arbitrary-code
16:31
RealNetworks RealPlayer IVR MLTI Chunk Length Parsing Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks Real Player.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code vulnerability realnetworks code-execution safer-use arbitrary-code
16:31
RealNetworks RealPlayer RV30 Uninitialized Index Value Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks Real Player.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code vulnerability realnetworks code-execution safer-use arbitrary-code
16:25
RealNetworks RealPlayer Invalid Codec Name Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks Real Player.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code vulnerability realnetworks code-execution safer-use arbitrary-code

February 01, 2012
17:22
Ubuntu Security Notice USN-1354-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1354-1 - It was discovered that usbmuxd did not correctly perform bounds checking when processing the SerialNumber field of USB devices. An attacker with physical access could use this to crash usbmuxd or potentially execute arbitrary code as the 'usbmux' user.
Tags: ubuntu notice security arbitrary-code security-notice usb-devices

17:22
Ubuntu Security Notice USN-1354-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1354-1 - It was discovered that usbmuxd did not correctly perform bounds checking when processing the SerialNumber field of USB devices. An attacker with physical access could use this to crash usbmuxd or potentially execute arbitrary code as the 'usbmux' user.
Tags: ubuntu notice security arbitrary-code security-notice usb-devices

17:22
Ubuntu Security Notice USN-1354-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1354-1 - It was discovered that usbmuxd did not correctly perform bounds checking when processing the SerialNumber field of USB devices. An attacker with physical access could use this to crash usbmuxd or potentially execute arbitrary code as the 'usbmux' user.
Tags: ubuntu notice security arbitrary-code security-notice usb-devices

January 31, 2012
16:29
RealNetworks RealPlayer genr Sample Size Parsing Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code realplayer realnetworks code-execution safer-use arbitrary-code
16:24
RealNetworks RealPlayer Malformed AAC File Parsing Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks Realplayer.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code realplayer realnetworks code-execution safer-use arbitrary-code
15:34
HP Data Protector LogBackupLocationStatus SQL Injection Vulnerabilty
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector Notebook Extension.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: protector logbackuplocationstatus data data-protector safer-use arbitrary-code
15:34
InduSoft WebStudio Unauthenticated Operations Code Execution Vulnerabilityy
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Indusoft WebStudio.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code webstudio indusoft code-execution safer-use arbitrary-code
15:34
InduSoft WebStudio CEServer Operation 0x15 Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Indusoft WebStudio.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code webstudio indusoft code-execution safer-use arbitrary-code
15:29
ProFTPD Response Pool Use-After-Free Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the ProFTPd server.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: use code proftpd code-execution safer-use arbitrary-code

7:55
EdrawSoft Office Viewer Component ActiveX 5.6 Buffer Overflow
» ‎ Packet Storm Security Exploits

EdrawSoft Office Viewer Component ActiveX version 5.6.5781 suffers from a buffer overflow vulnerability when parsing large amount of bytes to the FtpUploadFile member in FtpUploadFile() function, resulting memory corruption overwriting several registers including the SEH. An attacker can gain access to the system of the affected node and execute arbitrary code.
Tags: office viewer edrawsoft buffer-overflow-vulnerability memory-corruption arbitrary-code

7:55
EdrawSoft Office Viewer Component ActiveX 5.6 Buffer Overflow
» ‎ Packet Storm Security Recent Files

EdrawSoft Office Viewer Component ActiveX version 5.6.5781 suffers from a buffer overflow vulnerability when parsing large amount of bytes to the FtpUploadFile member in FtpUploadFile() function, resulting memory corruption overwriting several registers including the SEH. An attacker can gain access to the system of the affected node and execute arbitrary code.
Tags: office viewer edrawsoft buffer-overflow-vulnerability memory-corruption arbitrary-code

7:55
EdrawSoft Office Viewer Component ActiveX 5.6 Buffer Overflow
» ‎ Packet Storm Security Misc. Files

EdrawSoft Office Viewer Component ActiveX version 5.6.5781 suffers from a buffer overflow vulnerability when parsing large amount of bytes to the FtpUploadFile member in FtpUploadFile() function, resulting memory corruption overwriting several registers including the SEH. An attacker can gain access to the system of the affected node and execute arbitrary code.
Tags: office viewer edrawsoft buffer-overflow-vulnerability memory-corruption arbitrary-code

January 30, 2012
20:29
vBSEO 3.6.0 PHP Code Injection
» ‎ Packet Storm Security Exploits

This Metasploit module exploits a vulnerability in the 'proc_deutf()' function defined in /includes/functions_vbseocp_abstract.php in vBSEO versions 3.6.0 and below. User input passed through 'char_repl' POST parameter is not properly sanitized before being used in a call to preg_replace() function which uses the 'e' modifier. This can be exploited to inject and execute arbitrary code leveraging the PHP's complex curly syntax.
Tags: code vbseo php arbitrary-code vulnerability syntax

20:29
vBSEO 3.6.0 PHP Code Injection
» ‎ Packet Storm Security Recent Files

This Metasploit module exploits a vulnerability in the 'proc_deutf()' function defined in /includes/functions_vbseocp_abstract.php in vBSEO versions 3.6.0 and below. User input passed through 'char_repl' POST parameter is not properly sanitized before being used in a call to preg_replace() function which uses the 'e' modifier. This can be exploited to inject and execute arbitrary code leveraging the PHP's complex curly syntax.
Tags: code vbseo php arbitrary-code vulnerability syntax

20:29
vBSEO 3.6.0 PHP Code Injection
» ‎ Packet Storm Security Misc. Files

This Metasploit module exploits a vulnerability in the 'proc_deutf()' function defined in /includes/functions_vbseocp_abstract.php in vBSEO versions 3.6.0 and below. User input passed through 'char_repl' POST parameter is not properly sanitized before being used in a call to preg_replace() function which uses the 'e' modifier. This can be exploited to inject and execute arbitrary code leveraging the PHP's complex curly syntax.
Tags: code vbseo php arbitrary-code vulnerability syntax

January 27, 2012
3:11
vBSEO 3.6.0 proc_deutf() Remote PHP Code Injection
» ‎ Packet Storm Security Exploits

This Metasploit module exploits a vulnerability in the 'proc_deutf()' function defined in /includes/functions_vbseocp_abstract.php. User input passed through 'char_repl' POST parameter isn't properly sanitized before being used in a call to preg_replace() function which uses the 'e' modifier. This can be exploited to inject and execute arbitrary code leveraging the PHP's complex curly syntax.
Tags: proc php deutf arbitrary-code php-code vulnerability

3:11
vBSEO 3.6.0 proc_deutf() Remote PHP Code Injection
» ‎ Packet Storm Security Recent Files

This Metasploit module exploits a vulnerability in the 'proc_deutf()' function defined in /includes/functions_vbseocp_abstract.php. User input passed through 'char_repl' POST parameter isn't properly sanitized before being used in a call to preg_replace() function which uses the 'e' modifier. This can be exploited to inject and execute arbitrary code leveraging the PHP's complex curly syntax.
Tags: proc php deutf arbitrary-code php-code vulnerability

3:11
vBSEO 3.6.0 proc_deutf() Remote PHP Code Injection
» ‎ Packet Storm Security Misc. Files

This Metasploit module exploits a vulnerability in the 'proc_deutf()' function defined in /includes/functions_vbseocp_abstract.php. User input passed through 'char_repl' POST parameter isn't properly sanitized before being used in a call to preg_replace() function which uses the 'e' modifier. This can be exploited to inject and execute arbitrary code leveraging the PHP's complex curly syntax.
Tags: proc php deutf arbitrary-code php-code vulnerability

January 26, 2012
17:14
HP Data Protector Notebook Extension RequestCopy SQL Injection Vulnerabilty
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector Notebook Extension.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: notebook protector data data-protector safer-use arbitrary-code
17:14
HP Data Protector Notebook Extension LogClientInstallation SQL Injection Vulnerabilty
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector Notebook Extension.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: notebook protector data data-protector safer-use arbitrary-code
17:09
HP Data Protector Notebook Extension GetPolicies SQL Injection Vulnerabilty
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector Notebook Extension.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: notebook protector data data-protector safer-use arbitrary-code

7:35
Ubuntu Security Notice USN-1348-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1348-1 - It was discovered that ICU did not properly handle invalid locale data during Unicode conversion. If an application using ICU processed crafted data, an attacker could cause it to crash or potentially execute arbitrary code with the privileges of the user invoking the program.
Tags: ubuntu notice security locale-data arbitrary-code security-notice

7:35
Ubuntu Security Notice USN-1348-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1348-1 - It was discovered that ICU did not properly handle invalid locale data during Unicode conversion. If an application using ICU processed crafted data, an attacker could cause it to crash or potentially execute arbitrary code with the privileges of the user invoking the program.
Tags: ubuntu notice security locale-data arbitrary-code security-notice

January 25, 2012
13:22
Ubuntu Security Notice USN-1347-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1347-1 - It was discovered that Evince did not properly parse AFM font files when processing DVI files. If a user were tricked into opening a specially crafted DVI file, an attacker could cause Evince to crash or potentially execute arbitrary code with the privileges of the user invoking the program. In the default installation, attackers would be isolated by the Evince AppArmor profile. Various other issues were also addressed.
Tags: ubuntu evince security dvi-files font-files arbitrary-code

13:22
Ubuntu Security Notice USN-1347-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1347-1 - It was discovered that Evince did not properly parse AFM font files when processing DVI files. If a user were tricked into opening a specially crafted DVI file, an attacker could cause Evince to crash or potentially execute arbitrary code with the privileges of the user invoking the program. In the default installation, attackers would be isolated by the Evince AppArmor profile. Various other issues were also addressed.
Tags: ubuntu evince security dvi-files font-files arbitrary-code

13:22
Ubuntu Security Notice USN-1347-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1347-1 - It was discovered that Evince did not properly parse AFM font files when processing DVI files. If a user were tricked into opening a specially crafted DVI file, an attacker could cause Evince to crash or potentially execute arbitrary code with the privileges of the user invoking the program. In the default installation, attackers would be isolated by the Evince AppArmor profile. Various other issues were also addressed.
Tags: ubuntu evince security dvi-files font-files arbitrary-code

January 24, 2012
16:59
HP Data Protector Notebook Extension LogClientHealth SQL Injection Vulnerabilty
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector Notebook Extension.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: data-protector safer-use arbitrary-code
16:54
HP Data Protector Notebook Extension LogCopyOperation SQL Injection Vulnerabilty
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector Notebook Extension.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: notebook protector data data-protector safer-use arbitrary-code
16:54
HP Data Protector Notebook Extension FinishedCopy SQL Injection Vulnerabilty
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector Notebook Extension.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: notebook protector data data-protector safer-use arbitrary-code

January 19, 2012
15:51
Ubuntu Security Notice USN-1334-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1334-1 - It was discovered that libxml2 contained an off by one error. If a user or application linked against libxml2 were tricked into opening a specially crafted XML file, an attacker could cause the application to crash or possibly execute arbitrary code with the privileges of the user invoking the program. It was discovered that libxml2 is vulnerable to double-free conditions when parsing certain XML documents. This could allow a remote attacker to cause a denial of service. Various other issues were also addressed.
Tags: ubuntu security libxml denial-of-service arbitrary-code security-notice

15:51
Ubuntu Security Notice USN-1334-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1334-1 - It was discovered that libxml2 contained an off by one error. If a user or application linked against libxml2 were tricked into opening a specially crafted XML file, an attacker could cause the application to crash or possibly execute arbitrary code with the privileges of the user invoking the program. It was discovered that libxml2 is vulnerable to double-free conditions when parsing certain XML documents. This could allow a remote attacker to cause a denial of service. Various other issues were also addressed.
Tags: ubuntu security libxml denial-of-service arbitrary-code security-notice

15:51
Ubuntu Security Notice USN-1334-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1334-1 - It was discovered that libxml2 contained an off by one error. If a user or application linked against libxml2 were tricked into opening a specially crafted XML file, an attacker could cause the application to crash or possibly execute arbitrary code with the privileges of the user invoking the program. It was discovered that libxml2 is vulnerable to double-free conditions when parsing certain XML documents. This could allow a remote attacker to cause a denial of service. Various other issues were also addressed.
Tags: ubuntu security libxml denial-of-service arbitrary-code security-notice

15:49
Ubuntu Security Notice USN-1335-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1335-1 - Jon Larimer discovered that t1lib did not properly parse AFM fonts. If a user were tricked into using a specially crafted font file, a remote attacker could cause t1lib to crash or possibly execute arbitrary code with user privileges. Jonathan Brossard discovered that t1lib did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause t1lib to crash. Various other issues were also addressed.
Tags: user font lib jonathan-brossard jon-larimer font-files brossard arbitrary-code

15:49
Ubuntu Security Notice USN-1335-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1335-1 - Jon Larimer discovered that t1lib did not properly parse AFM fonts. If a user were tricked into using a specially crafted font file, a remote attacker could cause t1lib to crash or possibly execute arbitrary code with user privileges. Jonathan Brossard discovered that t1lib did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause t1lib to crash. Various other issues were also addressed.
Tags: user font lib jonathan-brossard jon-larimer font-files brossard arbitrary-code

15:49
Ubuntu Security Notice USN-1335-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1335-1 - Jon Larimer discovered that t1lib did not properly parse AFM fonts. If a user were tricked into using a specially crafted font file, a remote attacker could cause t1lib to crash or possibly execute arbitrary code with user privileges. Jonathan Brossard discovered that t1lib did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause t1lib to crash. Various other issues were also addressed.
Tags: user font lib jonathan-brossard jon-larimer font-files brossard arbitrary-code

January 17, 2012
16:54
Ubuntu Security Notice USN-1333-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1333-1 - Steve Manzuik discovered that Libav incorrectly handled certain malformed Matroska files. If a user were tricked into opening a crafted Matroska file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. This issue only affected Ubuntu 11.04. Phillip Langlois discovered that Libav incorrectly handled certain malformed QDM2 streams. If a user were tricked into opening a crafted QDM2 stream file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. Various other issues were also addressed.
Tags: user ubuntu security phillip-langlois steve-manzuik application-crash denial-of-service arbitrary-code

16:54
Ubuntu Security Notice USN-1333-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1333-1 - Steve Manzuik discovered that Libav incorrectly handled certain malformed Matroska files. If a user were tricked into opening a crafted Matroska file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. This issue only affected Ubuntu 11.04. Phillip Langlois discovered that Libav incorrectly handled certain malformed QDM2 streams. If a user were tricked into opening a crafted QDM2 stream file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. Various other issues were also addressed.
Tags: user ubuntu security phillip-langlois steve-manzuik application-crash denial-of-service arbitrary-code

16:54
Ubuntu Security Notice USN-1333-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1333-1 - Steve Manzuik discovered that Libav incorrectly handled certain malformed Matroska files. If a user were tricked into opening a crafted Matroska file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. This issue only affected Ubuntu 11.04. Phillip Langlois discovered that Libav incorrectly handled certain malformed QDM2 streams. If a user were tricked into opening a crafted QDM2 stream file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. Various other issues were also addressed.
Tags: user ubuntu security phillip-langlois steve-manzuik application-crash denial-of-service arbitrary-code

January 12, 2012
16:24
Symantec IM Manager ProcessAction Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec IM Manager.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code symantec manager code-execution safer-use arbitrary-code

January 05, 2012
16:12
Ubuntu Security Notice USN-1320-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1320-1 - Steve Manzuik discovered that FFmpeg incorrectly handled certain malformed Matroska files. If a user were tricked into opening a crafted Matroska file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. Phillip Langlois discovered that FFmpeg incorrectly handled certain malformed QDM2 streams. If a user were tricked into opening a crafted QDM2 stream file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. Various other issues were also addressed.
Tags: user ubuntu security phillip-langlois steve-manzuik application-crash denial-of-service arbitrary-code

16:12
Ubuntu Security Notice USN-1320-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1320-1 - Steve Manzuik discovered that FFmpeg incorrectly handled certain malformed Matroska files. If a user were tricked into opening a crafted Matroska file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. Phillip Langlois discovered that FFmpeg incorrectly handled certain malformed QDM2 streams. If a user were tricked into opening a crafted QDM2 stream file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. Various other issues were also addressed.
Tags: user ubuntu security phillip-langlois steve-manzuik application-crash denial-of-service arbitrary-code

16:12
Ubuntu Security Notice USN-1320-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1320-1 - Steve Manzuik discovered that FFmpeg incorrectly handled certain malformed Matroska files. If a user were tricked into opening a crafted Matroska file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. Phillip Langlois discovered that FFmpeg incorrectly handled certain malformed QDM2 streams. If a user were tricked into opening a crafted QDM2 stream file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. Various other issues were also addressed.
Tags: user ubuntu security phillip-langlois steve-manzuik application-crash denial-of-service arbitrary-code

January 02, 2012
19:09
Novell Cloud Manager Insufficient Framework User Validation Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Cloud Manager.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: novell manager cloud safer-use arbitrary-code attackers

December 29, 2011
9:00
Bugtraq: [security bulletin] HPSBPI02732 SSRT100435 rev.1 - HP Managed Printing Administration, Remote Execution of Arbitrary Code and Other Vulnerabilities
» ‎ SecurityFocus Vulnerabilities

[security bulletin] HPSBPI02732 SSRT100435 rev.1 - HP Managed Printing Administration, Remote Execution of Arbitrary Code and Other Vulnerabilities
Tags: security hpsbpi bulletin security-bulletin arbitrary-code bugtraq

December 28, 2011
16:09
Adobe Reader Compound Glyph Index Sign Extension dCode Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: vulnerability reader adobe safer-use adobe-reader arbitrary-code

December 21, 2011
13:58
Ubuntu Security Notice USN-1316-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1316-1 - Jonathan Brossard discovered that t1lib did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause t1lib to crash or possibly execute arbitrary code with user privileges.
Tags: ubuntu notice security jonathan-brossard font-files brossard arbitrary-code

13:58
Ubuntu Security Notice USN-1316-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1316-1 - Jonathan Brossard discovered that t1lib did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause t1lib to crash or possibly execute arbitrary code with user privileges.
Tags: ubuntu notice security jonathan-brossard font-files brossard arbitrary-code

13:58
Ubuntu Security Notice USN-1316-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1316-1 - Jonathan Brossard discovered that t1lib did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause t1lib to crash or possibly execute arbitrary code with user privileges.
Tags: ubuntu notice security jonathan-brossard font-files brossard arbitrary-code

December 20, 2011
11:38
Ubuntu Security Notice USN-1315-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1315-1 - Jonathan Foote discovered that JasPer incorrectly handled certain malformed JPEG-2000 image files. If a user were tricked into opening a specially crafted JPEG-2000 image file, a remote attacker could cause JasPer to crash or possibly execute arbitrary code with user privileges.
Tags: ubuntu notice security jonathan-foote arbitrary-code security-notice

11:38
Ubuntu Security Notice USN-1315-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1315-1 - Jonathan Foote discovered that JasPer incorrectly handled certain malformed JPEG-2000 image files. If a user were tricked into opening a specially crafted JPEG-2000 image file, a remote attacker could cause JasPer to crash or possibly execute arbitrary code with user privileges.
Tags: ubuntu notice security jonathan-foote arbitrary-code security-notice

11:38
Ubuntu Security Notice USN-1315-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1315-1 - Jonathan Foote discovered that JasPer incorrectly handled certain malformed JPEG-2000 image files. If a user were tricked into opening a specially crafted JPEG-2000 image file, a remote attacker could cause JasPer to crash or possibly execute arbitrary code with user privileges.
Tags: ubuntu notice security jonathan-foote arbitrary-code security-notice

December 19, 2011
15:34
Oracle Secure Backup validate_login Command Injection Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Secure Backup.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: secure code oracle code-execution safer-use arbitrary-code
15:34
HP Easy Printer Care XMLSimpleAccessor Class ActiveX Control Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Easy Printer Care.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: care easy printer code-execution safer-use arbitrary-code

December 14, 2011
16:59
Ubuntu Security Notice USN-1308-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1308-1 - vladz discovered that executables compressed by bzexe insecurely create temporary files when they are ran. A local attacker could exploit this issue to execute arbitrary code as the user running a compressed executable.
Tags: ubuntu notice security arbitrary-code security-notice temporary-files

16:59
Ubuntu Security Notice USN-1308-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1308-1 - vladz discovered that executables compressed by bzexe insecurely create temporary files when they are ran. A local attacker could exploit this issue to execute arbitrary code as the user running a compressed executable.
Tags: ubuntu notice security arbitrary-code security-notice temporary-files

16:59
Ubuntu Security Notice USN-1308-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1308-1 - vladz discovered that executables compressed by bzexe insecurely create temporary files when they are ran. A local attacker could exploit this issue to execute arbitrary code as the user running a compressed executable.
Tags: ubuntu notice security arbitrary-code security-notice temporary-files

December 12, 2011
10:29
Novell File Reporter Engine RECORD Tag Parsing Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell File Reporter Engine.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: novell code file reporter-engine code-execution safer-use arbitrary-code
10:24
Citrix EdgeSight Launcher Service Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Citrix EdgeSight.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code citrix edgesight code-execution safer-use arbitrary-code
10:24
RealNetworks Realplayer QCP Parsing Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code realnetworks realplayer code-execution safer-use arbitrary-code
December 09, 2011
11:34
Mozilla Firefox SVGPointList.appendItem Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mozilla Firefox.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code mozilla firefox code-execution safer-use arbitrary-code
11:34
RealNetworks Realplayer MP3 ID3 tags Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks Realplayer.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code realnetworks realplayer code-execution safer-use arbitrary-code
December 06, 2011
17:44
Mozilla Firefox SVGPathSegList.replaceItem Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mozilla Firefox.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code mozilla firefox code-execution safer-use arbitrary-code
17:44
RealNetworks RealPlayer Cross-Zone HTML Scripting Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code realplayer realnetworks code-execution safer-use arbitrary-code
17:39
RealNetworks RealPlayer SWF DefineFont Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code realplayer realnetworks code-execution safer-use arbitrary-code
December 05, 2011
12:19
Mozilla Firefox SVGTextElement.getCharNumAtPosition Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mozilla Firefox.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code mozilla firefox code-execution safer-use arbitrary-code

November 28, 2011
16:20
Zero Day Initiative Advisory 11-338
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 11-338 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks Real Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the application parses a header defined within a .ivr file. When parsing this header the application will explicitly trust a 16-bit value denoting an size and use it for performing an allocation. The code then uses a different value in the file to populate the buffer. Due to the difference in values used for allocation and the copy, this can be used to overwrite data outside the bounds of the buffer which can lead to code execution under the context of the application.
Tags: zero file application zero-day arbitrary-code target

16:20
Zero Day Initiative Advisory 11-338
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 11-338 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks Real Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the application parses a header defined within a .ivr file. When parsing this header the application will explicitly trust a 16-bit value denoting an size and use it for performing an allocation. The code then uses a different value in the file to populate the buffer. Due to the difference in values used for allocation and the copy, this can be used to overwrite data outside the bounds of the buffer which can lead to code execution under the context of the application.
Tags: zero file application zero-day arbitrary-code target

16:20
Zero Day Initiative Advisory 11-338
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 11-338 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks Real Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the application parses a header defined within a .ivr file. When parsing this header the application will explicitly trust a 16-bit value denoting an size and use it for performing an allocation. The code then uses a different value in the file to populate the buffer. Due to the difference in values used for allocation and the copy, this can be used to overwrite data outside the bounds of the buffer which can lead to code execution under the context of the application.
Tags: zero file application zero-day arbitrary-code target

November 21, 2011
7:59
QQPLAYER PICT PnSize Buffer Overflow
» ‎ Packet Storm Security Exploits

This Metasploit module exploits a vulnerability in QQPLAYER Player 3.2. When opening a .mov file containing a specially crafted PnSize value, an attacker may be able to execute arbitrary code.
Tags: pict pnsize qqplayer buffer-overflow mov-file arbitrary-code

7:59
QQPLAYER PICT PnSize Buffer Overflow
» ‎ Packet Storm Security Recent Files

This Metasploit module exploits a vulnerability in QQPLAYER Player 3.2. When opening a .mov file containing a specially crafted PnSize value, an attacker may be able to execute arbitrary code.
Tags: pict pnsize qqplayer buffer-overflow mov-file arbitrary-code

7:59
QQPLAYER PICT PnSize Buffer Overflow
» ‎ Packet Storm Security Misc. Files

This Metasploit module exploits a vulnerability in QQPLAYER Player 3.2. When opening a .mov file containing a specially crafted PnSize value, an attacker may be able to execute arbitrary code.
Tags: pict pnsize qqplayer buffer-overflow mov-file arbitrary-code

November 18, 2011
8:44
Ubuntu Security Notice USN-1267-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1267-1 - It was discovered that FreeType did not correctly handle certain malformed Type 1 font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash or possibly execute arbitrary code with user privileges. It was discovered that FreeType did not correctly handle certain malformed CID-keyed PostScript font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash or possibly execute arbitrary code with user privileges. Various other issues were also addressed.
Tags: user font freetype cid-keyed-postscript postscript-font font-files arbitrary-code

8:44
Ubuntu Security Notice USN-1267-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1267-1 - It was discovered that FreeType did not correctly handle certain malformed Type 1 font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash or possibly execute arbitrary code with user privileges. It was discovered that FreeType did not correctly handle certain malformed CID-keyed PostScript font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash or possibly execute arbitrary code with user privileges. Various other issues were also addressed.
Tags: user font freetype cid-keyed-postscript postscript-font font-files arbitrary-code

8:44
Ubuntu Security Notice USN-1267-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1267-1 - It was discovered that FreeType did not correctly handle certain malformed Type 1 font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash or possibly execute arbitrary code with user privileges. It was discovered that FreeType did not correctly handle certain malformed CID-keyed PostScript font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash or possibly execute arbitrary code with user privileges. Various other issues were also addressed.
Tags: postscript-font font-files arbitrary-code

November 17, 2011
7:48
DVR Remote ActiveX Control DVRobot Library Loading
» ‎ Packet Storm Security Advisories

Secunia Research has discovered a vulnerability in DVR Remote ActiveX Control version 2.1.0.39, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused by the ActiveX control during instantiation automatically downloading and loading DVRobot.dll from the "manifest" folder of the web server invoking the ActiveX control. Successful exploitation allows execution of arbitrary code via a specially crafted web page and hosted DVRobot.dll file.
Tags: control activex dvrobot s-system activex-control arbitrary-code

7:48
DVR Remote ActiveX Control DVRobot Library Loading
» ‎ Packet Storm Security Recent Files

Secunia Research has discovered a vulnerability in DVR Remote ActiveX Control version 2.1.0.39, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused by the ActiveX control during instantiation automatically downloading and loading DVRobot.dll from the "manifest" folder of the web server invoking the ActiveX control. Successful exploitation allows execution of arbitrary code via a specially crafted web page and hosted DVRobot.dll file.
Tags: control activex dvrobot s-system activex-control arbitrary-code

7:48
DVR Remote ActiveX Control DVRobot Library Loading
» ‎ Packet Storm Security Misc. Files

Secunia Research has discovered a vulnerability in DVR Remote ActiveX Control version 2.1.0.39, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused by the ActiveX control during instantiation automatically downloading and loading DVRobot.dll from the "manifest" folder of the web server invoking the ActiveX control. Successful exploitation allows execution of arbitrary code via a specially crafted web page and hosted DVRobot.dll file.
Tags: control activex dvrobot s-system activex-control arbitrary-code

November 16, 2011
18:26
Zero Day Initiative Advisory 11-329
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 11-329 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Indusoft WebStudio. Authentication is not required to exploit this vulnerability. The flaw exists within the CEServer component which is used as a runtime dependency for applications deployed using Indusoft WebStudio. When handling the Remove File operation (0x15) the process blindly copies user supplied data to a fixed-length buffer on the stack. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the browser.
Tags: day zero vulnerability zero-day arbitrary-code attackers

18:26
Zero Day Initiative Advisory 11-329
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 11-329 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Indusoft WebStudio. Authentication is not required to exploit this vulnerability. The flaw exists within the CEServer component which is used as a runtime dependency for applications deployed using Indusoft WebStudio. When handling the Remove File operation (0x15) the process blindly copies user supplied data to a fixed-length buffer on the stack. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the browser.
Tags: day zero vulnerability zero-day arbitrary-code attackers

18:26
Zero Day Initiative Advisory 11-329
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 11-329 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Indusoft WebStudio. Authentication is not required to exploit this vulnerability. The flaw exists within the CEServer component which is used as a runtime dependency for applications deployed using Indusoft WebStudio. When handling the Remove File operation (0x15) the process blindly copies user supplied data to a fixed-length buffer on the stack. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the browser.
Tags: day zero vulnerability zero-day arbitrary-code attackers

November 09, 2011
8:25
Ubuntu Security Notice USN-1255-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1255-1 - Hossein Lotfi discovered that libmodplug did not correctly handle certain malformed media files. If a user or automated system were tricked into opening a crafted media file, an attacker could cause a denial of service or possibly execute arbitrary code with privileges of the user invoking the program. It was discovered that libmodplug did not correctly handle certain malformed media files. If a user or automated system were tricked into opening a crafted media file, an attacker could cause a denial of service or possibly execute arbitrary code with privileges of the user invoking the program. Various other issues were also addressed.
Tags: user ubuntu security denial-of-service automated-system arbitrary-code

8:25
Ubuntu Security Notice USN-1255-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1255-1 - Hossein Lotfi discovered that libmodplug did not correctly handle certain malformed media files. If a user or automated system were tricked into opening a crafted media file, an attacker could cause a denial of service or possibly execute arbitrary code with privileges of the user invoking the program. It was discovered that libmodplug did not correctly handle certain malformed media files. If a user or automated system were tricked into opening a crafted media file, an attacker could cause a denial of service or possibly execute arbitrary code with privileges of the user invoking the program. Various other issues were also addressed.
Tags: user ubuntu security denial-of-service automated-system arbitrary-code

8:25
Ubuntu Security Notice USN-1255-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1255-1 - Hossein Lotfi discovered that libmodplug did not correctly handle certain malformed media files. If a user or automated system were tricked into opening a crafted media file, an attacker could cause a denial of service or possibly execute arbitrary code with privileges of the user invoking the program. It was discovered that libmodplug did not correctly handle certain malformed media files. If a user or automated system were tricked into opening a crafted media file, an attacker could cause a denial of service or possibly execute arbitrary code with privileges of the user invoking the program. Various other issues were also addressed.
Tags: user ubuntu security denial-of-service automated-system arbitrary-code

November 02, 2011
7:54
Apache ap_pregsub Integer Overflow
» ‎ Packet Storm Security Advisories

An exploitable integer overflow in Apache allows a remote attacker to crash the process or perform execution of arbitrary code as the user running Apache. To exploit the vulnerability, a crafted .htaccess file has to be placed on the server.
Tags: integer overflow apache integer-overflow htaccess-file arbitrary-code

7:54
Apache ap_pregsub Integer Overflow
» ‎ Packet Storm Security Recent Files

An exploitable integer overflow in Apache allows a remote attacker to crash the process or perform execution of arbitrary code as the user running Apache. To exploit the vulnerability, a crafted .htaccess file has to be placed on the server.
Tags: integer overflow apache integer-overflow htaccess-file arbitrary-code

7:54
Apache ap_pregsub Integer Overflow
» ‎ Packet Storm Security Misc. Files

An exploitable integer overflow in Apache allows a remote attacker to crash the process or perform execution of arbitrary code as the user running Apache. To exploit the vulnerability, a crafted .htaccess file has to be placed on the server.
Tags: integer overflow apache integer-overflow htaccess-file arbitrary-code

October 27, 2011
7:41
phpScheduleIt PHP reserve.php start_date Parameter Arbitrary Code Injection
» ‎ Packet Storm Security Exploits

This Metasploit module exploits an arbitrary PHP code execution flaw in the phpScheduleIt software. This vulnerability is only exploitable when the magic_quotes_gpc PHP option is 'off'. Authentication is not required to exploit the bug. Version 1.2.10 and earlier of phpScheduleIt are affected.
Tags: code php phpscheduleit code-execution arbitrary-code php-code

7:41
phpScheduleIt PHP reserve.php start_date Parameter Arbitrary Code Injection
» ‎ Packet Storm Security Recent Files

This Metasploit module exploits an arbitrary PHP code execution flaw in the phpScheduleIt software. This vulnerability is only exploitable when the magic_quotes_gpc PHP option is 'off'. Authentication is not required to exploit the bug. Version 1.2.10 and earlier of phpScheduleIt are affected.
Tags: code php phpscheduleit code-execution arbitrary-code php-code

7:41
phpScheduleIt PHP reserve.php start_date Parameter Arbitrary Code Injection
» ‎ Packet Storm Security Misc. Files

This Metasploit module exploits an arbitrary PHP code execution flaw in the phpScheduleIt software. This vulnerability is only exploitable when the magic_quotes_gpc PHP option is 'off'. Authentication is not required to exploit the bug. Version 1.2.10 and earlier of phpScheduleIt are affected.
Tags: code-execution arbitrary-code php-code

October 24, 2011
11:06
Bugtraq: [ GLSA 201110-15 ] GnuPG: User-assisted execution of arbitrary code
» ‎ SecurityFocus Vulnerabilities

[ GLSA 201110-15 ] GnuPG: User-assisted execution of arbitrary code
Tags: glsa arbitrary-code gnupg

October 13, 2011
23:31
PcVue 10.0 Function Pointer Overwrite
» ‎ Packet Storm Security Exploits

This Metasploit module exploits a function pointer control within SVUIGrd.ocx of PcVue 10.0. By setting a dword value for the SaveObject() or LoadObject(), an attacker can overwrite a function pointer and execute arbitrary code.
Tags: pointer function pcvue pointer-control dword-value arbitrary-code
23:31
PcVue 10.0 Function Pointer Overwrite
» ‎ Packet Storm Security Exploits

This Metasploit module exploits a function pointer control within SVUIGrd.ocx of PcVue 10.0. By setting a dword value for the SaveObject() or LoadObject(), an attacker can overwrite a function pointer and execute arbitrary code.
Tags: pointer function pcvue pointer-control dword-value arbitrary-code

23:31
PcVue 10.0 Function Pointer Overwrite
» ‎ Packet Storm Security Misc. Files

This Metasploit module exploits a function pointer control within SVUIGrd.ocx of PcVue 10.0. By setting a dword value for the SaveObject() or LoadObject(), an attacker can overwrite a function pointer and execute arbitrary code.
Tags: pointer function pcvue pointer-control dword-value arbitrary-code

22:56
iDefense Security Advisory 10.12.11 - OfficeImport
» ‎ Packet Storm Security Advisories

iDefense Security Advisory 10.12.11 - Remote exploitation of a memory corruption vulnerability in Apple Inc.'s OfficeImport framework could allow an attacker to execute arbitrary code with the privileges of the current user. iOS versions prior to 5 are vulnerable.
Tags: advisory idefense security idefense-security-advisory memory-corruption arbitrary-code

22:56
iDefense Security Advisory 10.12.11 - OfficeImport
» ‎ Packet Storm Security Recent Files

iDefense Security Advisory 10.12.11 - Remote exploitation of a memory corruption vulnerability in Apple Inc.'s OfficeImport framework could allow an attacker to execute arbitrary code with the privileges of the current user. iOS versions prior to 5 are vulnerable.
Tags: advisory idefense security idefense-security-advisory memory-corruption arbitrary-code

22:56
iDefense Security Advisory 10.12.11 - OfficeImport
» ‎ Packet Storm Security Misc. Files

iDefense Security Advisory 10.12.11 - Remote exploitation of a memory corruption vulnerability in Apple Inc.'s OfficeImport framework could allow an attacker to execute arbitrary code with the privileges of the current user. iOS versions prior to 5 are vulnerable.
Tags: idefense officeimport security idefense-security-advisory memory-corruption arbitrary-code

October 09, 2011
9:42
Gentoo Linux Security Advisory 201110-01
» ‎ Packet Storm Security Advisories

Gentoo Linux Security Advisory 201110-1 - Multiple vulnerabilities were found in OpenSSL, allowing for the execution of arbitrary code and other attacks. Multiple vulnerabilities have been discovered in OpenSSL. Versions less than 1.0.0e are affected.
Tags: gentoo security linux gentoo-linux-security security-advisory arbitrary-code

9:42
Gentoo Linux Security Advisory 201110-01
» ‎ Packet Storm Security Recent Files

Gentoo Linux Security Advisory 201110-1 - Multiple vulnerabilities were found in OpenSSL, allowing for the execution of arbitrary code and other attacks. Multiple vulnerabilities have been discovered in OpenSSL. Versions less than 1.0.0e are affected.
Tags: gentoo-linux-security security-advisory arbitrary-code

9:42
Gentoo Linux Security Advisory 201110-01
» ‎ Packet Storm Security Misc. Files

Gentoo Linux Security Advisory 201110-1 - Multiple vulnerabilities were found in OpenSSL, allowing for the execution of arbitrary code and other attacks. Multiple vulnerabilities have been discovered in OpenSSL. Versions less than 1.0.0e are affected.
Tags: gentoo security linux gentoo-linux-security security-advisory arbitrary-code

October 05, 2011
18:54
Ubuntu Security Notice USN-1223-2
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1223-2 - USN-1223-1 fixed vulnerabilities in Puppet. A regression was found on Ubuntu 10.04 LTS that caused permission denied errors when managing SSH authorized_keys files with Puppet. This update fixes the problem. It was discovered that Puppet unsafely opened files when the k5login type is used to manage files. A local attacker could exploit this to overwrite arbitrary files which could be used to escalate privileges. Ricky Zhou discovered that Puppet did not drop privileges when creating SSH authorized_keys files. A local attacker could exploit this to overwrite arbitrary files as root. It was discovered that Puppet used a predictable filename when using the --edit resource. A local attacker could exploit this to edit arbitrary files or run arbitrary code as the user invoking the program, typically root. Various other issues were also addressed.
Tags: attacker ubuntu puppet ricky-zhou keys-files arbitrary-files arbitrary-code

18:54
Ubuntu Security Notice USN-1223-2
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1223-2 - USN-1223-1 fixed vulnerabilities in Puppet. A regression was found on Ubuntu 10.04 LTS that caused permission denied errors when managing SSH authorized_keys files with Puppet. This update fixes the problem. It was discovered that Puppet unsafely opened files when the k5login type is used to manage files. A local attacker could exploit this to overwrite arbitrary files which could be used to escalate privileges. Ricky Zhou discovered that Puppet did not drop privileges when creating SSH authorized_keys files. A local attacker could exploit this to overwrite arbitrary files as root. It was discovered that Puppet used a predictable filename when using the --edit resource. A local attacker could exploit this to edit arbitrary files or run arbitrary code as the user invoking the program, typically root. Various other issues were also addressed.
Tags: attacker ubuntu puppet ricky-zhou keys-files arbitrary-files arbitrary-code

18:54
Ubuntu Security Notice USN-1223-2
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1223-2 - USN-1223-1 fixed vulnerabilities in Puppet. A regression was found on Ubuntu 10.04 LTS that caused permission denied errors when managing SSH authorized_keys files with Puppet. This update fixes the problem. It was discovered that Puppet unsafely opened files when the k5login type is used to manage files. A local attacker could exploit this to overwrite arbitrary files which could be used to escalate privileges. Ricky Zhou discovered that Puppet did not drop privileges when creating SSH authorized_keys files. A local attacker could exploit this to overwrite arbitrary files as root. It was discovered that Puppet used a predictable filename when using the --edit resource. A local attacker could exploit this to edit arbitrary files or run arbitrary code as the user invoking the program, typically root. Various other issues were also addressed.
Tags: attacker ubuntu puppet ricky-zhou keys-files arbitrary-files arbitrary-code

September 30, 2011
11:18
Ubuntu Security Notice USN-1223-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1223-1 - It was discovered that Puppet unsafely opened files when the k5login type is used to manage files. A local attacker could exploit this to overwrite arbitrary files which could be used to escalate privileges. Ricky Zhou discovered that Puppet did not drop privileges when creating SSH authorized_keys files. A local attacker could exploit this to overwrite arbitrary files as root. It was discovered that Puppet used a predictable filename when using the --edit resource. A local attacker could exploit this to edit arbitrary files or run arbitrary code as the user invoking the program, typically root. Various other issues were also addressed.
Tags: attacker ubuntu puppet ricky-zhou arbitrary-files arbitrary-code security-notice

11:18
Ubuntu Security Notice USN-1223-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1223-1 - It was discovered that Puppet unsafely opened files when the k5login type is used to manage files. A local attacker could exploit this to overwrite arbitrary files which could be used to escalate privileges. Ricky Zhou discovered that Puppet did not drop privileges when creating SSH authorized_keys files. A local attacker could exploit this to overwrite arbitrary files as root. It was discovered that Puppet used a predictable filename when using the --edit resource. A local attacker could exploit this to edit arbitrary files or run arbitrary code as the user invoking the program, typically root. Various other issues were also addressed.
Tags: attacker ubuntu puppet ricky-zhou arbitrary-files arbitrary-code security-notice

11:18
Ubuntu Security Notice USN-1223-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1223-1 - It was discovered that Puppet unsafely opened files when the k5login type is used to manage files. A local attacker could exploit this to overwrite arbitrary files which could be used to escalate privileges. Ricky Zhou discovered that Puppet did not drop privileges when creating SSH authorized_keys files. A local attacker could exploit this to overwrite arbitrary files as root. It was discovered that Puppet used a predictable filename when using the --edit resource. A local attacker could exploit this to edit arbitrary files or run arbitrary code as the user invoking the program, typically root. Various other issues were also addressed.
Tags: attacker ubuntu puppet ricky-zhou arbitrary-files arbitrary-code security-notice

September 29, 2011
13:59
Novell iPrint nipplib.dll driver-version Code Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell iPrint Client.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: novell code iprint novell-iprint safer-use arbitrary-code
September 26, 2011
16:59
Adobe Shockwave AudioMixer Structure Parsing Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Shockwave.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code shockwave adobe code-execution safer-use arbitrary-code

September 22, 2011
8:56
Ubuntu Security Notice USN-1214-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1214-1 - Tomas Hoger discovered that GIMP incorrectly handled malformed LZW streams. If a user were tricked into opening a specially crafted GIF image file, an attacker could cause GIMP to crash, or possibly execute arbitrary code with the user's privileges.
Tags: ubuntu notice security tomas-hoger arbitrary-code security-notice attacker

8:56
Ubuntu Security Notice USN-1214-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1214-1 - Tomas Hoger discovered that GIMP incorrectly handled malformed LZW streams. If a user were tricked into opening a specially crafted GIF image file, an attacker could cause GIMP to crash, or possibly execute arbitrary code with the user's privileges.
Tags: ubuntu notice security tomas-hoger arbitrary-code security-notice attacker

8:56
Ubuntu Security Notice USN-1214-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1214-1 - Tomas Hoger discovered that GIMP incorrectly handled malformed LZW streams. If a user were tricked into opening a specially crafted GIF image file, an attacker could cause GIMP to crash, or possibly execute arbitrary code with the user's privileges.
Tags: ubuntu notice security tomas-hoger arbitrary-code security-notice attacker

September 17, 2011
12:10
ScadaTEC ScadaPhone 5.3.11.1230 Buffer Overflow
» ‎ Packet Storm Security Exploits

This Metasploit module exploits a stack-based buffer overflow vulnerability in version 5.3.11.1230 of scadaTEC's ScadaPhone. In order for the command to be executed, an attacker must convince someone to load a specially crafted project zip file with ScadaPhone. By doing so, an attacker can execute arbitrary code as the victim user.
Tags: buffer scadaphone scadatec buffer-overflow-vulnerability based-buffer-overflow arbitrary-code

12:10
ScadaTEC ScadaPhone 5.3.11.1230 Buffer Overflow
» ‎ Packet Storm Security Recent Files

This Metasploit module exploits a stack-based buffer overflow vulnerability in version 5.3.11.1230 of scadaTEC's ScadaPhone. In order for the command to be executed, an attacker must convince someone to load a specially crafted project zip file with ScadaPhone. By doing so, an attacker can execute arbitrary code as the victim user.
Tags: buffer scadaphone scadatec buffer-overflow-vulnerability based-buffer-overflow arbitrary-code

12:10
ScadaTEC ScadaPhone 5.3.11.1230 Buffer Overflow
» ‎ Packet Storm Security Misc. Files

This Metasploit module exploits a stack-based buffer overflow vulnerability in version 5.3.11.1230 of scadaTEC's ScadaPhone. In order for the command to be executed, an attacker must convince someone to load a specially crafted project zip file with ScadaPhone. By doing so, an attacker can execute arbitrary code as the victim user.
Tags: buffer scadaphone scadatec buffer-overflow-vulnerability based-buffer-overflow arbitrary-code

September 15, 2011
15:24
Adobe Shockwave KEY* Chunk Invalid Size Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Shockwave.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code shockwave adobe code-execution safer-use arbitrary-code

September 14, 2011
15:51
Ubuntu Security Notice USN-1207-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1207-1 - Tomas Hoger discovered that the CUPS image library incorrectly handled LZW streams. A remote attacker could use this flaw to cause a denial of service or possibly execute arbitrary code.
Tags: ubuntu notice security tomas-hoger denial-of-service arbitrary-code security-notice

15:51
Ubuntu Security Notice USN-1207-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1207-1 - Tomas Hoger discovered that the CUPS image library incorrectly handled LZW streams. A remote attacker could use this flaw to cause a denial of service or possibly execute arbitrary code.
Tags: ubuntu notice security tomas-hoger denial-of-service arbitrary-code security-notice

15:51
Ubuntu Security Notice USN-1207-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1207-1 - Tomas Hoger discovered that the CUPS image library incorrectly handled LZW streams. A remote attacker could use this flaw to cause a denial of service or possibly execute arbitrary code.
Tags: ubuntu notice security tomas-hoger denial-of-service arbitrary-code security-notice

14:56
iDefense Security Advisory 09.13.11 - Excel Integer Signedness
» ‎ Packet Storm Security Advisories

iDefense Security Advisory 09.13.11 - Remote exploitation of an integer signedness vulnerability in Microsoft Corp.'s Excel could allow an attacker to execute arbitrary code with the privileges of the current user. The vulnerability is an integer signedness issue that leads to an invalid array indexing vulnerability. It is triggered by a certain record with a negative 'iax' field.
Tags: integer idefense vulnerability idefense-security-advisory microsoft-corp arbitrary-code

14:56
iDefense Security Advisory 09.13.11 - Excel Integer Signedness
» ‎ Packet Storm Security Recent Files

iDefense Security Advisory 09.13.11 - Remote exploitation of an integer signedness vulnerability in Microsoft Corp.'s Excel could allow an attacker to execute arbitrary code with the privileges of the current user. The vulnerability is an integer signedness issue that leads to an invalid array indexing vulnerability. It is triggered by a certain record with a negative 'iax' field.
Tags: idefense-security-advisory microsoft-corp arbitrary-code

14:56
iDefense Security Advisory 09.13.11 - Excel Integer Signedness
» ‎ Packet Storm Security Misc. Files

iDefense Security Advisory 09.13.11 - Remote exploitation of an integer signedness vulnerability in Microsoft Corp.'s Excel could allow an attacker to execute arbitrary code with the privileges of the current user. The vulnerability is an integer signedness issue that leads to an invalid array indexing vulnerability. It is triggered by a certain record with a negative 'iax' field.
Tags: integer idefense vulnerability idefense-security-advisory microsoft-corp arbitrary-code

September 13, 2011
22:52
Red Hat Security Advisory 2011-1289-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2011-1289-01 - The librsvg2 packages provide an SVG library based on libart. A flaw was found in the way librsvg2 parsed certain SVG files. An attacker could create a specially-crafted SVG file that, when opened, would cause applications that use librsvg2 to crash or, potentially, execute arbitrary code.
Tags: red-hat-security security-advisory arbitrary-code

22:52
Red Hat Security Advisory 2011-1289-01
» ‎ Packet Storm Security Recent Files

Red Hat Security Advisory 2011-1289-01 - The librsvg2 packages provide an SVG library based on libart. A flaw was found in the way librsvg2 parsed certain SVG files. An attacker could create a specially-crafted SVG file that, when opened, would cause applications that use librsvg2 to crash or, potentially, execute arbitrary code.
Tags: librsvg red svg red-hat-security security-advisory arbitrary-code

22:52
Red Hat Security Advisory 2011-1289-01
» ‎ Packet Storm Security Misc. Files

Red Hat Security Advisory 2011-1289-01 - The librsvg2 packages provide an SVG library based on libart. A flaw was found in the way librsvg2 parsed certain SVG files. An attacker could create a specially-crafted SVG file that, when opened, would cause applications that use librsvg2 to crash or, potentially, execute arbitrary code.
Tags: librsvg red svg red-hat-security security-advisory arbitrary-code

September 02, 2011
15:01
Zero Day Initiative Advisory 11-278
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 11-278 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Cloud Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within how the application implements an RPC method. Due to incompletely initializing an object, the application will store a partially initialized session. This partially initialized session will allow one to make privileged RPC calls to the server. This can lead to code execution under the context of the service.
Tags: day zero initiative manager.-authentication zero-day arbitrary-code attackers

15:01
Zero Day Initiative Advisory 11-278
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 11-278 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Cloud Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within how the application implements an RPC method. Due to incompletely initializing an object, the application will store a partially initialized session. This partially initialized session will allow one to make privileged RPC calls to the server. This can lead to code execution under the context of the service.
Tags: day zero initiative manager.-authentication zero-day arbitrary-code attackers

15:01
Zero Day Initiative Advisory 11-278
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 11-278 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Cloud Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within how the application implements an RPC method. Due to incompletely initializing an object, the application will store a partially initialized session. This partially initialized session will allow one to make privileged RPC calls to the server. This can lead to code execution under the context of the service.
Tags: day zero initiative manager.-authentication zero-day arbitrary-code attackers

August 23, 2011
20:17
Zero Day Initiative Advisory 11-276
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 11-276 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within the sequenceParameterSetNALUnit component. When handling the num_ref_frames_in_pic_order_cnt_cycle value the size is not validated and the process blindly copies user supplied data from offset_for_ref_frame into a fixed-length buffer on the stack. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the browser.
Tags: day zero vulnerability adobe-flash-player zero-day arbitrary-code

20:17
Zero Day Initiative Advisory 11-276
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 11-276 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within the sequenceParameterSetNALUnit component. When handling the num_ref_frames_in_pic_order_cnt_cycle value the size is not validated and the process blindly copies user supplied data from offset_for_ref_frame into a fixed-length buffer on the stack. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the browser.
Tags: day zero vulnerability adobe-flash-player zero-day arbitrary-code

20:17
Zero Day Initiative Advisory 11-276
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 11-276 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within the sequenceParameterSetNALUnit component. When handling the num_ref_frames_in_pic_order_cnt_cycle value the size is not validated and the process blindly copies user supplied data from offset_for_ref_frame into a fixed-length buffer on the stack. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the browser.
Tags: day zero vulnerability adobe-flash-player zero-day arbitrary-code

20:15
Zero Day Initiative Advisory 11-273
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 11-273 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC AutoStart High Availability. Authentication is not required to exploit this vulnerability. The specific flaw exists within the packet error handling of the application. When building an error message to log an error, the application will use a user-supplied string from the packet as an argument to a function containing a format string. The result of this function is written to a statically sized buffer located on the stack. This will lead to code execution under the context of the service.
Tags: day zero error zero-day autostart arbitrary-code

20:15
Zero Day Initiative Advisory 11-273
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 11-273 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC AutoStart High Availability. Authentication is not required to exploit this vulnerability. The specific flaw exists within the packet error handling of the application. When building an error message to log an error, the application will use a user-supplied string from the packet as an argument to a function containing a format string. The result of this function is written to a statically sized buffer located on the stack. This will lead to code execution under the context of the service.
Tags: day zero error zero-day autostart arbitrary-code

20:15
Zero Day Initiative Advisory 11-273
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 11-273 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC AutoStart High Availability. Authentication is not required to exploit this vulnerability. The specific flaw exists within the packet error handling of the application. When building an error message to log an error, the application will use a user-supplied string from the packet as an argument to a function containing a format string. The result of this function is written to a statically sized buffer located on the stack. This will lead to code execution under the context of the service.
Tags: day zero error zero-day autostart arbitrary-code

August 22, 2011
18:59
Ubuntu Security Notice USN-1194-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1194-1 - It was discovered that the foomatic-rip Foomatic filter incorrectly handled command-line options. An attacker could use this flaw to cause Foomatic to execute arbitrary code as the "lp" user. In the default installation, attackers would be isolated by the CUPS AppArmor profile.
Tags: ubuntu notice security command-line-options arbitrary-code default-installation

18:59
Ubuntu Security Notice USN-1194-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1194-1 - It was discovered that the foomatic-rip Foomatic filter incorrectly handled command-line options. An attacker could use this flaw to cause Foomatic to execute arbitrary code as the "lp" user. In the default installation, attackers would be isolated by the CUPS AppArmor profile.
Tags: ubuntu notice security command-line-options arbitrary-code default-installation

18:59
Ubuntu Security Notice USN-1194-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1194-1 - It was discovered that the foomatic-rip Foomatic filter incorrectly handled command-line options. An attacker could use this flaw to cause Foomatic to execute arbitrary code as the "lp" user. In the default installation, attackers would be isolated by the CUPS AppArmor profile.
Tags: ubuntu notice security command-line-options arbitrary-code default-installation

August 18, 2011
0:42
Ubuntu Security Notice USN-1192-2
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1192-2 - USN-1192-1 fixed vulnerabilities in Firefox. This update provides an updated Mozvoikko for use with Firefox 6. Aral Yaman discovered a vulnerability in the WebGL engine. An attacker could potentially use this to crash Firefox or execute arbitrary code with the privileges of the user invoking Firefox. Vivekanand Bolajwar discovered a vulnerability in the JavaScript engine. An attacker could potentially use this to crash Firefox or execute arbitrary code with the privileges of the user invoking Firefox. Various other issues were also addressed.
Tags: ubuntu firefox security javascript-engine arbitrary-code yaman

0:42
Ubuntu Security Notice USN-1192-2
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1192-2 - USN-1192-1 fixed vulnerabilities in Firefox. This update provides an updated Mozvoikko for use with Firefox 6. Aral Yaman discovered a vulnerability in the WebGL engine. An attacker could potentially use this to crash Firefox or execute arbitrary code with the privileges of the user invoking Firefox. Vivekanand Bolajwar discovered a vulnerability in the JavaScript engine. An attacker could potentially use this to crash Firefox or execute arbitrary code with the privileges of the user invoking Firefox. Various other issues were also addressed.
Tags: ubuntu firefox security javascript-engine arbitrary-code yaman

0:42
Ubuntu Security Notice USN-1192-2
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1192-2 - USN-1192-1 fixed vulnerabilities in Firefox. This update provides an updated Mozvoikko for use with Firefox 6. Aral Yaman discovered a vulnerability in the WebGL engine. An attacker could potentially use this to crash Firefox or execute arbitrary code with the privileges of the user invoking Firefox. Vivekanand Bolajwar discovered a vulnerability in the JavaScript engine. An attacker could potentially use this to crash Firefox or execute arbitrary code with the privileges of the user invoking Firefox. Various other issues were also addressed.
Tags: javascript-engine arbitrary-code yaman

0:42
Ubuntu Security Notice USN-1192-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1192-1 - Aral Yaman discovered a vulnerability in the WebGL engine. An attacker could potentially use this to crash Firefox or execute arbitrary code with the privileges of the user invoking Firefox. Vivekanand Bolajwar discovered a vulnerability in the JavaScript engine. An attacker could potentially use this to crash Firefox or execute arbitrary code with the privileges of the user invoking Firefox. Bert Hubert and Theo Snelleman discovered a vulnerability in the Ogg reader. An attacker could potentially use this to crash Firefox or execute arbitrary code with the privileges of the user invoking Firefox. Various other issues were also addressed.
Tags: vulnerability attacker firefox bert-hubert theo-snelleman javascript-engine arbitrary-code

0:42
Ubuntu Security Notice USN-1192-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1192-1 - Aral Yaman discovered a vulnerability in the WebGL engine. An attacker could potentially use this to crash Firefox or execute arbitrary code with the privileges of the user invoking Firefox. Vivekanand Bolajwar discovered a vulnerability in the JavaScript engine. An attacker could potentially use this to crash Firefox or execute arbitrary code with the privileges of the user invoking Firefox. Bert Hubert and Theo Snelleman discovered a vulnerability in the Ogg reader. An attacker could potentially use this to crash Firefox or execute arbitrary code with the privileges of the user invoking Firefox. Various other issues were also addressed.
Tags: vulnerability attacker firefox bert-hubert theo-snelleman javascript-engine arbitrary-code

0:42
Ubuntu Security Notice USN-1192-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1192-1 - Aral Yaman discovered a vulnerability in the WebGL engine. An attacker could potentially use this to crash Firefox or execute arbitrary code with the privileges of the user invoking Firefox. Vivekanand Bolajwar discovered a vulnerability in the JavaScript engine. An attacker could potentially use this to crash Firefox or execute arbitrary code with the privileges of the user invoking Firefox. Bert Hubert and Theo Snelleman discovered a vulnerability in the Ogg reader. An attacker could potentially use this to crash Firefox or execute arbitrary code with the privileges of the user invoking Firefox. Various other issues were also addressed.
Tags: vulnerability attacker firefox bert-hubert theo-snelleman javascript-engine arbitrary-code

August 15, 2011
8:32
Ubuntu Security Notice USN-1191-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1191-1 - Tomas Hoger discovered that libXfont incorrectly handled certain malformed compressed fonts. An attacker could use a specially crafted font file to cause libXfont to crash, or possibly execute arbitrary code in order to gain privileges.
Tags: ubuntu notice security tomas-hoger arbitrary-code security-notice attacker

8:32
Ubuntu Security Notice USN-1191-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1191-1 - Tomas Hoger discovered that libXfont incorrectly handled certain malformed compressed fonts. An attacker could use a specially crafted font file to cause libXfont to crash, or possibly execute arbitrary code in order to gain privileges.
Tags: ubuntu notice security tomas-hoger arbitrary-code security-notice attacker

8:32
Ubuntu Security Notice USN-1191-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1191-1 - Tomas Hoger discovered that libXfont incorrectly handled certain malformed compressed fonts. An attacker could use a specially crafted font file to cause libXfont to crash, or possibly execute arbitrary code in order to gain privileges.
Tags: ubuntu notice security tomas-hoger arbitrary-code security-notice attacker

5:12
HP Security Bulletin HPSBMU02695 SSRT100480 2
» ‎ Packet Storm Security Advisories

HP Security Bulletin HPSBMU02695 SSRT100480 2 - Potential security vulnerabilities have been identified with HP OpenView Performance Insight. The vulnerabilities could be exploited remotely to execute arbitrary code by HTML injection, to gain unauthorized access, and for cross site scripting (XSS). Revision 2 of this advisory.
Tags: hpsbmu bulletin security security-vulnerabilities security-bulletin arbitrary-code
August 11, 2011
22:17
SUSE Security Announcement - Flash Player
» ‎ Packet Storm Security Advisories

SUSE Security Announcement - Flash-Player was updated to version 10.3.188.5 to fix various buffer and integer overflows. Earlier flash-player versions can be exploited to execute arbitrary code remotely with the privileges of the attacked user.
Tags: announcement player flash suse-security player-versions security-announcement arbitrary-code

22:17
SUSE Security Announcement - Flash Player
» ‎ Packet Storm Security Recent Files

SUSE Security Announcement - Flash-Player was updated to version 10.3.188.5 to fix various buffer and integer overflows. Earlier flash-player versions can be exploited to execute arbitrary code remotely with the privileges of the attacked user.
Tags: announcement player flash suse-security player-versions security-announcement arbitrary-code

22:17
SUSE Security Announcement - Flash Player
» ‎ Packet Storm Security Misc. Files

SUSE Security Announcement - Flash-Player was updated to version 10.3.188.5 to fix various buffer and integer overflows. Earlier flash-player versions can be exploited to execute arbitrary code remotely with the privileges of the attacked user.
Tags: announcement player flash suse-security player-versions security-announcement arbitrary-code

16:59
Adobe Shockwave Missing Lctx Chunk Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Shockwave.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code shockwave adobe code-execution safer-use arbitrary-code

August 10, 2011
13:00
Bugtraq: [security bulletin] HPSBGN02694 SSRT100586 rev.1 - HP webOS Contacts Application, Remote Execution of Arbitrary Code
» ‎ SecurityFocus Vulnerabilities

[security bulletin] HPSBGN02694 SSRT100586 rev.1 - HP webOS Contacts Application, Remote Execution of Arbitrary Code
Tags: security hpsbgn bulletin code-security security-bulletin arbitrary-code

August 09, 2011
21:34
HP Security Bulletin HPSBMU02695 SSRT100480
» ‎ Packet Storm Security Advisories

HP Security Bulletin HPSBMU02695 SSRT100480 - Potential security vulnerabilities have been identified with HP OpenView Performance Insight. The vulnerabilities could be exploited remotely to execute arbitrary code by HTML injection and to gain unauthorized access. Revision 1 of this advisory.
Tags: hpsbmu bulletin security security-vulnerabilities security-bulletin arbitrary-code

21:34
HP Security Bulletin HPSBMU02695 SSRT100480
» ‎ Packet Storm Security Recent Files

HP Security Bulletin HPSBMU02695 SSRT100480 - Potential security vulnerabilities have been identified with HP OpenView Performance Insight. The vulnerabilities could be exploited remotely to execute arbitrary code by HTML injection and to gain unauthorized access. Revision 1 of this advisory.
Tags: hpsbmu bulletin security security-vulnerabilities security-bulletin arbitrary-code

21:34
HP Security Bulletin HPSBMU02695 SSRT100480
» ‎ Packet Storm Security Misc. Files

HP Security Bulletin HPSBMU02695 SSRT100480 - Potential security vulnerabilities have been identified with HP OpenView Performance Insight. The vulnerabilities could be exploited remotely to execute arbitrary code by HTML injection and to gain unauthorized access. Revision 1 of this advisory.
Tags: hpsbmu bulletin security security-vulnerabilities security-bulletin arbitrary-code

21:20
ZipGenius 6.3.2.3000 (.zip) Buffer Overflow
» ‎ Packet Storm Security Exploits

This Metasploit module exploits a stack buffer overflow in ZipGenius version 6.3.2.3000. It creates a specially crafted .zip file that allows an attacker to execute arbitrary code.
Tags: buffer zip zipgenius stack-buffer buffer-overflow arbitrary-code

21:20
ZipGenius 6.3.2.3000 (.zip) Buffer Overflow
» ‎ Packet Storm Security Recent Files

This Metasploit module exploits a stack buffer overflow in ZipGenius version 6.3.2.3000. It creates a specially crafted .zip file that allows an attacker to execute arbitrary code.
Tags: buffer zip zipgenius stack-buffer buffer-overflow arbitrary-code

21:20
ZipGenius 6.3.2.3000 (.zip) Buffer Overflow
» ‎ Packet Storm Security Misc. Files

This Metasploit module exploits a stack buffer overflow in ZipGenius version 6.3.2.3000. It creates a specially crafted .zip file that allows an attacker to execute arbitrary code.
Tags: buffer zip zipgenius stack-buffer buffer-overflow arbitrary-code

August 08, 2011
19:04
McAfee SaaS myCIOScn.dll Code Execution
» ‎ Packet Storm Security Advisories

A vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of McAfee Security-as-a-Service. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaws exists within myCIOScn.dll. First, the MyCioScan.Scan.ReportFile parameter exposed via ActiveX can be set to any arbitrary filename including sensitive system files and directories. Secondly, the parameter to the MyCioScan.Scan.Start() method can be carefully crafted as to inject script constructs into the log file written at the end of the AV scan. The combination of these flaws can be leveraged by a remote attacker to execute arbitrary code under the context of the user running the browser.
Tags: code mcafee mycioscn code-execution sensitive-system arbitrary-code

19:04
McAfee SaaS myCIOScn.dll Code Execution
» ‎ Packet Storm Security Recent Files

A vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of McAfee Security-as-a-Service. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaws exists within myCIOScn.dll. First, the MyCioScan.Scan.ReportFile parameter exposed via ActiveX can be set to any arbitrary filename including sensitive system files and directories. Secondly, the parameter to the MyCioScan.Scan.Start() method can be carefully crafted as to inject script constructs into the log file written at the end of the AV scan. The combination of these flaws can be leveraged by a remote attacker to execute arbitrary code under the context of the user running the browser.
Tags: code mcafee mycioscn code-execution sensitive-system arbitrary-code

19:04
McAfee SaaS myCIOScn.dll Code Execution
» ‎ Packet Storm Security Misc. Files

A vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of McAfee Security-as-a-Service. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaws exists within myCIOScn.dll. First, the MyCioScan.Scan.ReportFile parameter exposed via ActiveX can be set to any arbitrary filename including sensitive system files and directories. Secondly, the parameter to the MyCioScan.Scan.Start() method can be carefully crafted as to inject script constructs into the log file written at the end of the AV scan. The combination of these flaws can be leveraged by a remote attacker to execute arbitrary code under the context of the user running the browser.
Tags: code mcafee mycioscn code-execution sensitive-system arbitrary-code

August 07, 2011
20:29
IBM solidDB solid.exe Authentication Bypass Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM solidDB.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code soliddb ibm code-execution safer-use arbitrary-code
20:29
Novell File Reporter Agent XML Parsing Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell File Reporter Agent.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: novell code file reporter-agent code-execution safer-use arbitrary-code

July 25, 2011
8:15
Ubuntu Security Notice USN-1173-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1173-1 - It was discovered that FreeType did not correctly handle certain malformed Type 1 font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash or possibly execute arbitrary code with user privileges.
Tags: ubuntu notice security font-files arbitrary-code security-notice

8:15
Ubuntu Security Notice USN-1173-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1173-1 - It was discovered that FreeType did not correctly handle certain malformed Type 1 font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash or possibly execute arbitrary code with user privileges.
Tags: ubuntu notice security font-files arbitrary-code security-notice

8:15
Ubuntu Security Notice USN-1173-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1173-1 - It was discovered that FreeType did not correctly handle certain malformed Type 1 font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash or possibly execute arbitrary code with user privileges.
Tags: ubuntu notice security font-files arbitrary-code security-notice

July 21, 2011
20:08
Ubuntu Security Notice USN-1172-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1172-1 - It was discovered that logrotate incorrectly handled the creation of new log files. Local users could possibly read log files if they were opened before permissions were in place. This issue only affected Ubuntu 8.04 LTS. It was discovered that logrotate incorrectly handled certain log file names when used with the shred option. Local attackers able to create log files with specially crafted filenames could use this issue to execute arbitrary code. This issue only affected Ubuntu 10.04 LTS, 10.10, and 11.04. Various other issues were also addressed.
Tags: ubuntu issue security arbitrary-code security-notice file-names

20:08
Ubuntu Security Notice USN-1172-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1172-1 - It was discovered that logrotate incorrectly handled the creation of new log files. Local users could possibly read log files if they were opened before permissions were in place. This issue only affected Ubuntu 8.04 LTS. It was discovered that logrotate incorrectly handled certain log file names when used with the shred option. Local attackers able to create log files with specially crafted filenames could use this issue to execute arbitrary code. This issue only affected Ubuntu 10.04 LTS, 10.10, and 11.04. Various other issues were also addressed.
Tags: ubuntu issue security arbitrary-code security-notice file-names

20:08
Ubuntu Security Notice USN-1172-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1172-1 - It was discovered that logrotate incorrectly handled the creation of new log files. Local users could possibly read log files if they were opened before permissions were in place. This issue only affected Ubuntu 8.04 LTS. It was discovered that logrotate incorrectly handled certain log file names when used with the shred option. Local attackers able to create log files with specially crafted filenames could use this issue to execute arbitrary code. This issue only affected Ubuntu 10.04 LTS, 10.10, and 11.04. Various other issues were also addressed.
Tags: ubuntu issue security arbitrary-code security-notice file-names

14:57
iDefense Security Advisory 07.20.11 - WebKit Use-After-Free
» ‎ Packet Storm Security Advisories

iDefense Security Advisory 07.20.11 - Remote exploitation of a use-after-free vulnerability in WebKit, as included with Apple Inc.'s Safari Web browser, could allow an attacker to execute arbitrary code with the privileges of the current user. Safari versions prior to 5.1 and 5.0.6 are vulnerable.
Tags: advisory idefense security idefense-security-advisory safari-web-browser arbitrary-code

14:57
iDefense Security Advisory 07.20.11 - WebKit Use-After-Free
» ‎ Packet Storm Security Recent Files

iDefense Security Advisory 07.20.11 - Remote exploitation of a use-after-free vulnerability in WebKit, as included with Apple Inc.'s Safari Web browser, could allow an attacker to execute arbitrary code with the privileges of the current user. Safari versions prior to 5.1 and 5.0.6 are vulnerable.
Tags: advisory idefense security idefense-security-advisory safari-web-browser arbitrary-code

14:57
iDefense Security Advisory 07.20.11 - WebKit Use-After-Free
» ‎ Packet Storm Security Misc. Files

iDefense Security Advisory 07.20.11 - Remote exploitation of a use-after-free vulnerability in WebKit, as included with Apple Inc.'s Safari Web browser, could allow an attacker to execute arbitrary code with the privileges of the current user. Safari versions prior to 5.1 and 5.0.6 are vulnerable.
Tags: advisory idefense security idefense-security-advisory safari-web-browser arbitrary-code

14:53
iDefense Security Advisory 07.20.11 - MathML Use-After-Free
» ‎ Packet Storm Security Advisories

iDefense Security Advisory 07.20.11 - Remote exploitation of a use-after-free vulnerability in WebKit, as included with multiple vendors' browsers, could allow an attacker to execute arbitrary code with the privileges of the current user. Safari versions prior to 5.1 and 5.0.6 are vulnerable.
Tags: advisory idefense security idefense-security-advisory arbitrary-code current-user

14:53
iDefense Security Advisory 07.20.11 - MathML Use-After-Free
» ‎ Packet Storm Security Recent Files

iDefense Security Advisory 07.20.11 - Remote exploitation of a use-after-free vulnerability in WebKit, as included with multiple vendors' browsers, could allow an attacker to execute arbitrary code with the privileges of the current user. Safari versions prior to 5.1 and 5.0.6 are vulnerable.
Tags: advisory idefense security idefense-security-advisory arbitrary-code current-user

14:53
iDefense Security Advisory 07.20.11 - MathML Use-After-Free
» ‎ Packet Storm Security Misc. Files

iDefense Security Advisory 07.20.11 - Remote exploitation of a use-after-free vulnerability in WebKit, as included with multiple vendors' browsers, could allow an attacker to execute arbitrary code with the privileges of the current user. Safari versions prior to 5.1 and 5.0.6 are vulnerable.
Tags: advisory idefense security idefense-security-advisory arbitrary-code current-user

July 12, 2011
17:58
Zero Day Initiative Advisory 11-235
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 11-235 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within En_Utility.dll. A module called from CASProcessor.exe running on TCP port 20801. A specially crafted packet with malformed BLOB encrypted data, is handled by HandleMcpRequest(), and contains instructions that will allow for an integer wrap, leading to a heap overflow. An attacker can leverage this vulnerability to execute arbitrary code under the context of the SYSTEM.
Tags: day zero vulnerability manager.-authentication micro-control zero-day arbitrary-code

17:58
Zero Day Initiative Advisory 11-235
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 11-235 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within En_Utility.dll. A module called from CASProcessor.exe running on TCP port 20801. A specially crafted packet with malformed BLOB encrypted data, is handled by HandleMcpRequest(), and contains instructions that will allow for an integer wrap, leading to a heap overflow. An attacker can leverage this vulnerability to execute arbitrary code under the context of the SYSTEM.
Tags: day zero vulnerability manager.-authentication micro-control zero-day arbitrary-code

17:58
Zero Day Initiative Advisory 11-235
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 11-235 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within En_Utility.dll. A module called from CASProcessor.exe running on TCP port 20801. A specially crafted packet with malformed BLOB encrypted data, is handled by HandleMcpRequest(), and contains instructions that will allow for an integer wrap, leading to a heap overflow. An attacker can leverage this vulnerability to execute arbitrary code under the context of the SYSTEM.
Tags: day zero vulnerability manager.-authentication micro-control zero-day arbitrary-code

July 06, 2011
14:29
HP Client Automation Enterprise Execution of Arbitrary Code Vulnerability
» ‎ SecuriTeam

A potential security problem has been identified with HP Client Automation Enterprise software running on Windows.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: client automation enterprise safer-use security-problem arbitrary-code

July 02, 2011
4:47
HP OmniInet.exe Opcode 27 Buffer Overflow
» ‎ Packet Storm Security Exploits

This Metasploit module exploits a buffer overflow in the Hewlett-Packard OmniInet NT Service. By sending a specially crafted opcode 27 packet, a remote attacker may be able to execute arbitrary code.
Tags: buffer opcode omniinet buffer-overflow arbitrary-code attacker

4:47
HP OmniInet.exe Opcode 27 Buffer Overflow
» ‎ Packet Storm Security Recent Files

This Metasploit module exploits a buffer overflow in the Hewlett-Packard OmniInet NT Service. By sending a specially crafted opcode 27 packet, a remote attacker may be able to execute arbitrary code.
Tags: buffer opcode omniinet buffer-overflow arbitrary-code attacker

4:47
HP OmniInet.exe Opcode 27 Buffer Overflow
» ‎ Packet Storm Security Misc. Files

This Metasploit module exploits a buffer overflow in the Hewlett-Packard OmniInet NT Service. By sending a specially crafted opcode 27 packet, a remote attacker may be able to execute arbitrary code.
Tags: buffer opcode omniinet buffer-overflow arbitrary-code attacker

June 27, 2011
16:10
Zero Day Initiative Advisory 11-226
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 11-226 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Citrix EdgeSight. Authentication is not required to exploit this vulnerability. The flaw exists within the LauncherService.exe component which listens by default on TCP port 18747. When handling a request the process trusts a user supplied field in the packet specifying the length of data to follow, the process then copies the user supplied data, without validation, into a fixed-length buffer on the heap. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: user zero vulnerability exe-component zero-day arbitrary-code

16:10
Zero Day Initiative Advisory 11-226
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 11-226 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Citrix EdgeSight. Authentication is not required to exploit this vulnerability. The flaw exists within the LauncherService.exe component which listens by default on TCP port 18747. When handling a request the process trusts a user supplied field in the packet specifying the length of data to follow, the process then copies the user supplied data, without validation, into a fixed-length buffer on the heap. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: user zero vulnerability exe-component zero-day arbitrary-code

16:10
Zero Day Initiative Advisory 11-226
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 11-226 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Citrix EdgeSight. Authentication is not required to exploit this vulnerability. The flaw exists within the LauncherService.exe component which listens by default on TCP port 18747. When handling a request the process trusts a user supplied field in the packet specifying the length of data to follow, the process then copies the user supplied data, without validation, into a fixed-length buffer on the heap. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: user zero vulnerability exe-component zero-day arbitrary-code

June 26, 2011
14:49
CA Total Defense Suite UnassignFunctionalUsers Stored Procedure SQL Injection Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of CA Total Defense Suite.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: total suite defense procedure-sql safer-use arbitrary-code
14:49
CA Total Defense Suite Heartbeat Web Service Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of CA Total Defense Endpoint.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: total defense service code-execution safer-use arbitrary-code

June 22, 2011
23:27
RealWin SCADA Server DATAC Login Buffer Overflow
» ‎ Packet Storm Security Exploits

This Metasploit module exploits a stack buffer overflow in DATAC Control International RealWin SCADA Server 2.1 (Build 6.0.10.10) or earlier. By sending a specially crafted On_FC_CONNECT_FCS_LOGIN packet containing a long username, an attacker may be able to execute arbitrary code.
Tags: server scada realwin stack-buffer buffer-overflow arbitrary-code

23:27
RealWin SCADA Server DATAC Login Buffer Overflow
» ‎ Packet Storm Security Recent Files

This Metasploit module exploits a stack buffer overflow in DATAC Control International RealWin SCADA Server 2.1 (Build 6.0.10.10) or earlier. By sending a specially crafted On_FC_CONNECT_FCS_LOGIN packet containing a long username, an attacker may be able to execute arbitrary code.
Tags: server scada realwin stack-buffer buffer-overflow arbitrary-code

23:27
RealWin SCADA Server DATAC Login Buffer Overflow
» ‎ Packet Storm Security Misc. Files

This Metasploit module exploits a stack buffer overflow in DATAC Control International RealWin SCADA Server 2.1 (Build 6.0.10.10) or earlier. By sending a specially crafted On_FC_CONNECT_FCS_LOGIN packet containing a long username, an attacker may be able to execute arbitrary code.
Tags: server scada realwin stack-buffer buffer-overflow arbitrary-code

23:22
Ubuntu Security Notice USN-1149-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1149-1 - Multiple memory vulnerabilities were discovered in the browser rendering engine. An attacker could use these to possibly execute arbitrary code with the privileges of the user invoking Firefox. Martin Barbella discovered that under certain conditions, viewing a XUL document while JavaScript was disabled caused deleted memory to be accessed. An attacker could potentially use this to crash Firefox or execute arbitrary code with the privileges of the user invoking Firefox. Various other issues were also addressed.
Tags: ubuntu firefox security martin-barbella barbella arbitrary-code security-notice

23:22
Ubuntu Security Notice USN-1149-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1149-1 - Multiple memory vulnerabilities were discovered in the browser rendering engine. An attacker could use these to possibly execute arbitrary code with the privileges of the user invoking Firefox. Martin Barbella discovered that under certain conditions, viewing a XUL document while JavaScript was disabled caused deleted memory to be accessed. An attacker could potentially use this to crash Firefox or execute arbitrary code with the privileges of the user invoking Firefox. Various other issues were also addressed.
Tags: ubuntu firefox security martin-barbella barbella arbitrary-code security-notice

23:22
Ubuntu Security Notice USN-1149-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1149-1 - Multiple memory vulnerabilities were discovered in the browser rendering engine. An attacker could use these to possibly execute arbitrary code with the privileges of the user invoking Firefox. Martin Barbella discovered that under certain conditions, viewing a XUL document while JavaScript was disabled caused deleted memory to be accessed. An attacker could potentially use this to crash Firefox or execute arbitrary code with the privileges of the user invoking Firefox. Various other issues were also addressed.
Tags: ubuntu firefox security martin-barbella barbella arbitrary-code security-notice

June 21, 2011
20:54
CA Total Defense Suite UnassignAdminRoles Stored Procedure SQL Injection Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of CA Total Defense Suite.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: total suite defense procedure-sql safer-use arbitrary-code
20:39
CA Total Defense Suite UNC Management Console DeleteFilter SQL Injection Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of CA Total Defense Suite Unified Network Control Management Console.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: total suite defense safer-use control-management arbitrary-code

12:50
Zero Day Initiative Advisory 11-223
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 11-223 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the code responsible for parsing SVG path segment objects. The function nsSVGPathSegList::ReplaceItem() does not account for deletion of the segment object list within a user defined DOMAttrModified EventListener. Code within nsSVGPathSegList::ReplaceItem() references the segment list without verifying that it was not deleted in the aforementioned callback. This can be abused to create a dangling reference which can be leveraged to execute arbitrary code within the context of the browser.
Tags: zero code segment zero-day arbitrary-code target

12:50
Zero Day Initiative Advisory 11-223
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 11-223 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the code responsible for parsing SVG path segment objects. The function nsSVGPathSegList::ReplaceItem() does not account for deletion of the segment object list within a user defined DOMAttrModified EventListener. Code within nsSVGPathSegList::ReplaceItem() references the segment list without verifying that it was not deleted in the aforementioned callback. This can be abused to create a dangling reference which can be leveraged to execute arbitrary code within the context of the browser.
Tags: zero code segment zero-day arbitrary-code target

12:50
Zero Day Initiative Advisory 11-223
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 11-223 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the code responsible for parsing SVG path segment objects. The function nsSVGPathSegList::ReplaceItem() does not account for deletion of the segment object list within a user defined DOMAttrModified EventListener. Code within nsSVGPathSegList::ReplaceItem() references the segment list without verifying that it was not deleted in the aforementioned callback. This can be abused to create a dangling reference which can be leveraged to execute arbitrary code within the context of the browser.
Tags: zero code segment zero-day arbitrary-code target

12:42
Ubuntu Security Notice USN-1156-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1156-1 - It was discovered that tgt incorrectly handled long iSCSI name strings, and invalid PDUs. A remote attacker could exploit this to cause tgt to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 10.10. Emmanuel Bouillon discovered that tgt incorrectly handled certain iSCSI logins. A remote attacker could exploit this to cause tgt to crash, resulting in a denial of service, or possibly execute arbitrary code. Various other issues were also addressed.
Tags: tgt ubuntu security emmanuel-bouillon denial-of-service arbitrary-code security-notice

12:42
Ubuntu Security Notice USN-1156-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1156-1 - It was discovered that tgt incorrectly handled long iSCSI name strings, and invalid PDUs. A remote attacker could exploit this to cause tgt to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 10.10. Emmanuel Bouillon discovered that tgt incorrectly handled certain iSCSI logins. A remote attacker could exploit this to cause tgt to crash, resulting in a denial of service, or possibly execute arbitrary code. Various other issues were also addressed.
Tags: tgt ubuntu security emmanuel-bouillon denial-of-service arbitrary-code security-notice

12:42
Ubuntu Security Notice USN-1156-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1156-1 - It was discovered that tgt incorrectly handled long iSCSI name strings, and invalid PDUs. A remote attacker could exploit this to cause tgt to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 10.10. Emmanuel Bouillon discovered that tgt incorrectly handled certain iSCSI logins. A remote attacker could exploit this to cause tgt to crash, resulting in a denial of service, or possibly execute arbitrary code. Various other issues were also addressed.
Tags: tgt ubuntu security emmanuel-bouillon denial-of-service arbitrary-code security-notice

12:42
Ubuntu Security Notice USN-1155-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1155-1 - It was discovered that NBD incorrectly handled certain long requests. A remote attacker could use this flaw to cause NBD to crash, resulting in a denial of service, or possibly execute arbitrary code.
Tags: ubuntu notice security denial-of-service arbitrary-code security-notice

12:42
Ubuntu Security Notice USN-1155-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1155-1 - It was discovered that NBD incorrectly handled certain long requests. A remote attacker could use this flaw to cause NBD to crash, resulting in a denial of service, or possibly execute arbitrary code.
Tags: ubuntu notice security denial-of-service arbitrary-code security-notice

12:42
Ubuntu Security Notice USN-1155-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1155-1 - It was discovered that NBD incorrectly handled certain long requests. A remote attacker could use this flaw to cause NBD to crash, resulting in a denial of service, or possibly execute arbitrary code.
Tags: ubuntu notice security denial-of-service arbitrary-code security-notice

June 20, 2011
14:04
CA Total Defense Suite UNC Management Console DeleteReportLayout SQL Injection Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of CA Total Defense Suite.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: total suite defense safer-use arbitrary-code attackers
14:04
CA Total Defense Suite NonAssignedUserList Stored Procedure SQL Injection Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of CA Total Defense Suite.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: total suite defense procedure-sql safer-use arbitrary-code

Skip to page: 1 2 3

jetlib.sec » Tags » arbitrary-code

Feeds

627 items tagged "arbitrary code"

Tags: juri arbitrary-code security-notice

Tags: ubuntu notice security juri-aedla juri arbitrary-code security-notice

Tags: ubuntu notice security juri-aedla juri arbitrary-code security-notice

Tags: ubuntu notice security matthew-hall denial-of-service arbitrary-code

Tags: ubuntu notice security matthew-hall denial-of-service arbitrary-code

Tags: ubuntu notice security denial-of-service error-condition arbitrary-code

Tags: ubuntu notice security denial-of-service error-condition arbitrary-code

Tags: ubuntu notice security denial-of-service error-condition arbitrary-code

Tags: ofbiz code apache code-execution arbitrary-code

Tags: ofbiz code apache code-execution arbitrary-code

Tags: ubuntu notice security brian-gorenc array-bounds root-user arbitrary-code

Tags: ubuntu notice security brian-gorenc array-bounds root-user arbitrary-code

Tags: ubuntu notice security brian-gorenc array-bounds root-user arbitrary-code

Tags: day zero initiative code-execution zero-day arbitrary-code

Tags: day zero initiative code-execution zero-day arbitrary-code

Tags: day zero initiative code-execution zero-day arbitrary-code

Tags: day zero vulnerability element-properties zero-day arbitrary-code

Tags: day zero vulnerability element-properties zero-day arbitrary-code

Tags: day zero vulnerability element-properties zero-day arbitrary-code

Tags: control netop remote based-buffer-overflow arbitrary-code attacker

Tags: ubuntu notice security markus-vervier arbitrary-code security-notice attacker

Tags: ubuntu notice security markus-vervier arbitrary-code security-notice attacker

Tags: ubuntu notice security markus-vervier arbitrary-code security-notice attacker

Tags: ubuntu notice security arbitrary-code security-notice usn

Tags: ubuntu notice security arbitrary-code security-notice usn

Tags: ubuntu notice security arbitrary-code security-notice usn

Tags: ubuntu notice security andy-davis denial-of-service arbitrary-code

Tags: ubuntu notice security andy-davis denial-of-service arbitrary-code

Tags: ubuntu notice security andy-davis denial-of-service arbitrary-code

Tags: ubuntu notice security proxy-servers arbitrary-code security-notice

Tags: ubuntu notice security denial-of-service ogg-files arbitrary-code

Tags: ubuntu notice security denial-of-service ogg-files arbitrary-code

Tags: ubuntu notice security denial-of-service ogg-files arbitrary-code

Tags: day zero initiative memory-regions zero-day arbitrary-code

Tags: memory-regions zero-day arbitrary-code

Tags: day zero initiative memory-regions zero-day arbitrary-code

Tags: day zero initiative zero-day arbitrary-code target

Tags: day zero initiative zero-day arbitrary-code target

Tags: day zero initiative zero-day arbitrary-code target

Tags: hat condor red red-hat-security security-advisory arbitrary-code

Tags: hat condor red red-hat-security security-advisory arbitrary-code

Tags: hat condor red red-hat-security security-advisory arbitrary-code

Tags: code vulnerability realnetworks code-execution safer-use arbitrary-code

Tags: code vulnerability realnetworks code-execution safer-use arbitrary-code

Tags: code vulnerability realnetworks code-execution safer-use arbitrary-code

Tags: code vulnerability realnetworks code-execution safer-use arbitrary-code

Tags: ubuntu notice security arbitrary-code security-notice usb-devices

Tags: ubuntu notice security arbitrary-code security-notice usb-devices

Tags: ubuntu notice security arbitrary-code security-notice usb-devices

Tags: code realplayer realnetworks code-execution safer-use arbitrary-code

Tags: code realplayer realnetworks code-execution safer-use arbitrary-code

Tags: protector logbackuplocationstatus data data-protector safer-use arbitrary-code

Tags: code webstudio indusoft code-execution safer-use arbitrary-code

Tags: code webstudio indusoft code-execution safer-use arbitrary-code

Tags: use code proftpd code-execution safer-use arbitrary-code

Tags: office viewer edrawsoft buffer-overflow-vulnerability memory-corruption arbitrary-code

Tags: office viewer edrawsoft buffer-overflow-vulnerability memory-corruption arbitrary-code

Tags: office viewer edrawsoft buffer-overflow-vulnerability memory-corruption arbitrary-code

Tags: code vbseo php arbitrary-code vulnerability syntax

Tags: code vbseo php arbitrary-code vulnerability syntax

Tags: code vbseo php arbitrary-code vulnerability syntax

Tags: proc php deutf arbitrary-code php-code vulnerability

Tags: proc php deutf arbitrary-code php-code vulnerability

Tags: proc php deutf arbitrary-code php-code vulnerability

Tags: notebook protector data data-protector safer-use arbitrary-code

Tags: notebook protector data data-protector safer-use arbitrary-code

Tags: notebook protector data data-protector safer-use arbitrary-code

Tags: ubuntu notice security locale-data arbitrary-code security-notice

Tags: ubuntu notice security locale-data arbitrary-code security-notice

Tags: ubuntu evince security dvi-files font-files arbitrary-code

Tags: ubuntu evince security dvi-files font-files arbitrary-code

Tags: ubuntu evince security dvi-files font-files arbitrary-code

Tags: data-protector safer-use arbitrary-code