jetlib.sec » Tags » ascii-string

Feeds

133340 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

7 items tagged "ascii string"

Related tags: vulnerability [+], url [+], orbit downloader [+], orbit [+], downloader [+], based buffer overflow [+], zero day [+], veritas [+], symantec [+], storage [+], lotus [+], email [+], buffer overflow [+], vxsvc [+], symantec veritas [+], code execution [+]

• February 23, 2012
• 22:11

  Orbit Downloader URL Unicode Conversion Overflow

   » ‎ Packet Storm Security Exploits
  This Metasploit module exploits a stack-based buffer overflow in Orbit Downloader. The vulnerability is due to Orbit converting an URL ascii string to unicode in a insecure way with MultiByteToWideChar. The vulnerability is exploited with a specially crafted metalink file that should be opened with Orbit through the "File->Add Metalink..." option.

  Tags:  url downloader orbit based-buffer-overflow ascii-string orbit-downloader  

• 22:11

  Orbit Downloader URL Unicode Conversion Overflow

   » ‎ Packet Storm Security Recent Files
  This Metasploit module exploits a stack-based buffer overflow in Orbit Downloader. The vulnerability is due to Orbit converting an URL ascii string to unicode in a insecure way with MultiByteToWideChar. The vulnerability is exploited with a specially crafted metalink file that should be opened with Orbit through the "File->Add Metalink..." option.

  Tags:  url downloader orbit based-buffer-overflow ascii-string orbit-downloader  

• 22:11

  Orbit Downloader URL Unicode Conversion Overflow

   » ‎ Packet Storm Security Misc. Files
  This Metasploit module exploits a stack-based buffer overflow in Orbit Downloader. The vulnerability is due to Orbit converting an URL ascii string to unicode in a insecure way with MultiByteToWideChar. The vulnerability is exploited with a specially crafted metalink file that should be opened with Orbit through the "File->Add Metalink..." option.

  Tags:  url downloader orbit based-buffer-overflow ascii-string orbit-downloader  

• December 14, 2011
• 12:14

  Symantec Veritas Storage Foundation vxsvc.exe ASCII String Execution Vulnerability

   » ‎ SecuriTeam
  The vxsvc.exe ASCII string unpacking code execution vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec Veritas Storage Foundation Administrator Service.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  symantec veritas storage symantec-veritas vxsvc ascii-string  

• August 17, 2011
• 10:00

  Bugtraq: ZDI-11-263: Symantec Veritas Storage Foundation vxsvc.exe ASCII String Unpacking Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  ZDI-11-263: Symantec Veritas Storage Foundation vxsvc.exe ASCII String Unpacking Remote Code Execution Vulnerability

  Tags:  symantec veritas storage ascii-string code-execution vulnerability  

• August 23, 2010
• 18:47

  ZDI-10-156.txt

   » ‎ Packet Storm Security Recent Files
  Zero Day Initiative Advisory 10-156 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Lotus Notes Email Client. User interaction is required to exploit this vulnerability in that the target must open a malicious email attachment. The specific flaw exists within the Lotus Notes file viewer utilizing the KeyView SDK to render a malformed Word document. The application will copy an arbitrarily sized ASCII string representing the font name into a constant sized buffer located on the stack. If large enough this will lead to a buffer overflow and can lead to code execution under the context of the application.

  Tags:  lotus vulnerability email ascii-string buffer-overflow zero-day  

• 18:47

  ZDI-10-156.txt

   » ‎ Packet Storm Security Advisories
  Zero Day Initiative Advisory 10-156 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Lotus Notes Email Client. User interaction is required to exploit this vulnerability in that the target must open a malicious email attachment. The specific flaw exists within the Lotus Notes file viewer utilizing the KeyView SDK to render a malformed Word document. The application will copy an arbitrarily sized ASCII string representing the font name into a constant sized buffer located on the stack. If large enough this will lead to a buffer overflow and can lead to code execution under the context of the application.

  Tags:  lotus vulnerability email ascii-string buffer-overflow zero-day