jetlib.sec » Tags » chunk

Feeds

133351 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

43 items tagged "chunk"

Related tags: vulnerability [+], memory corruption [+], shockwave [+], tabnapping [+], proof of concept [+], proof [+], player [+], pivot [+], objects [+], heap [+], concept [+], annotation [+], adobe shockwave player [+], adobe [+], shockwave user [+], shockwave director [+], realnetworks inc [+], overflow [+], hacks [+], fourcc value [+], code [+], chunk size [+], chunk data [+], arduino [+], png [+], libpng [+], weather station data [+], weather [+], txt [+], shield [+], secunia [+], research [+], realplayer [+], pdf [+], month [+], moaub [+], microcontrollers [+], matrix [+], led [+], johan [+], internet bridge [+], internet [+], buffer overflow [+], autonomy [+], asynchronous data [+], abysssec [+], integer overflow vulnerability [+], service vulnerability [+], denial of service [+], decompress [+]

• May 02, 2012
• 9:01

  LED matrix shield starts with a very loud snap

   » ‎ Hack a Day
  We see a lot of LED matrix projects. They’re fun, and you can learn a lot of basic lessons during the build. But this one is out of the ordinary. [Rtty21] built an oddly sized, and sound controlled matrix shield for his Arduino. That’s it right there, the shield is the large chunk of protoboard [...]

  Tags:  led shield matrix arduino chunk hacks  

• April 27, 2012
• 12:01

  Receiving asynchronous data bursts

   » ‎ Hack a Day
  [Johan's] been working on a chunk of code for about seven years and he thinks it’s ready to help you with your next project. He calls it D1 (The One) and it lets you receive asynchronous data without the need for a hardware USART. It’s capable of working with signals from an IR or RF [...]

  Tags:  asynchronous-data chunk johan microcontrollers  

• April 23, 2012
• 0:00

  Vuln: libpng 'png_decompress_chunk()' Remote Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libpng 'png_decompress_chunk()' Remote Integer Overflow Vulnerability

  Tags:  libpng png chunk integer-overflow-vulnerability decompress  

• April 13, 2012
• 15:12

  Quest InTrust Annotation Objects Uninitialized Pointer

   » ‎ Packet Storm Security Exploits
  This Metasploit module exploits an uninitialized variable vulnerability in the Annotation Objects ActiveX component. The activeX component loads into memory without opting into ALSR so this module exploits the vulnerability against windows Vista and Windows 7 targets. A large heap spray is required to fulfill the requirement that EAX points to part of the ROP chain in a heap chunk and the calculated call will hit the pivot in a separate heap chunk. This will take some time in the users browser.

  Tags:  annotation objects heap chunk pivot  

• 15:12

  Quest InTrust Annotation Objects Uninitialized Pointer

   » ‎ Packet Storm Security Recent Files
  This Metasploit module exploits an uninitialized variable vulnerability in the Annotation Objects ActiveX component. The activeX component loads into memory without opting into ALSR so this module exploits the vulnerability against windows Vista and Windows 7 targets. A large heap spray is required to fulfill the requirement that EAX points to part of the ROP chain in a heap chunk and the calculated call will hit the pivot in a separate heap chunk. This will take some time in the users browser.

  Tags:  annotation objects heap chunk pivot  

• 15:12

  Quest InTrust Annotation Objects Uninitialized Pointer

   » ‎ Packet Storm Security Misc. Files
  This Metasploit module exploits an uninitialized variable vulnerability in the Annotation Objects ActiveX component. The activeX component loads into memory without opting into ALSR so this module exploits the vulnerability against windows Vista and Windows 7 targets. A large heap spray is required to fulfill the requirement that EAX points to part of the ROP chain in a heap chunk and the calculated call will hit the pivot in a separate heap chunk. This will take some time in the users browser.

  Tags:  annotation objects heap chunk pivot  

• April 09, 2012
• 0:00

  Vuln: libpng 'png_decompress_chunk()' Remote Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libpng 'png_decompress_chunk()' Remote Integer Overflow Vulnerability

  Tags:  libpng png chunk integer-overflow-vulnerability decompress  

• April 02, 2012
• 0:00

  Vuln: libpng 'png_decompress_chunk()' Remote Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libpng 'png_decompress_chunk()' Remote Integer Overflow Vulnerability

  Tags:  libpng png chunk integer-overflow-vulnerability decompress  

• March 06, 2012
• 0:00

  Vuln: libpng 'png_decompress_chunk()' Remote Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libpng 'png_decompress_chunk()' Remote Integer Overflow Vulnerability

  Tags:  libpng png chunk integer-overflow-vulnerability decompress  

• March 02, 2012
• 0:00

  Vuln: libpng 'png_decompress_chunk()' Remote Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libpng 'png_decompress_chunk()' Remote Integer Overflow Vulnerability

  Tags:  libpng png chunk integer-overflow-vulnerability decompress  

• February 29, 2012
• 0:00

  Vuln: libpng 'png_decompress_chunk()' Remote Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libpng 'png_decompress_chunk()' Remote Integer Overflow Vulnerability

  Tags:  libpng png chunk integer-overflow-vulnerability decompress  

• February 23, 2012
• 0:00

  Vuln: libpng 'png_decompress_chunk()' Remote Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libpng 'png_decompress_chunk()' Remote Integer Overflow Vulnerability

  Tags:  libpng png chunk integer-overflow-vulnerability decompress  

• February 22, 2012
• 0:00

  Vuln: libpng 'png_decompress_chunk()' Remote Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libpng 'png_decompress_chunk()' Remote Integer Overflow Vulnerability

  Tags:  libpng png chunk integer-overflow-vulnerability decompress  

• February 21, 2012
• 0:00

  Vuln: libpng 'png_decompress_chunk()' Remote Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libpng 'png_decompress_chunk()' Remote Integer Overflow Vulnerability

  Tags:  libpng png chunk integer-overflow-vulnerability decompress  

• February 17, 2012
• 0:00

  Vuln: libpng 'png_decompress_chunk()' Remote Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libpng 'png_decompress_chunk()' Remote Integer Overflow Vulnerability

  Tags:  libpng png chunk integer-overflow-vulnerability decompress  

• February 16, 2012
• 0:00

  Vuln: libpng 'png_decompress_chunk()' Remote Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libpng 'png_decompress_chunk()' Remote Integer Overflow Vulnerability

  Tags:  libpng png chunk integer-overflow-vulnerability decompress  

• November 30, 2011
• 12:01

  Arduino weather-station to Internet bridge

   » ‎ Hack a Day
  Here’s a project that looks to eliminate the PC necessary for pushing weather station data to the Internet. When you think about it, getting data from your own weather sensing hardware to a site like Weather Underground doesn’t require very much processing at all. The largest chunk of the puzzle is a window to the [...]

  Tags:  internet weather arduino weather-station-data internet-bridge chunk hacks  

• October 11, 2011
• 0:00

  Vuln: Autonomy KeyView Filter QLST Chunk Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Autonomy KeyView Filter QLST Chunk Integer Overflow Vulnerability

  Tags:  integer-overflow-vulnerability autonomy chunk  

• June 09, 2011
• 10:32

  Tabnapping Phishing Proof Of Concept

   » ‎ Packet Storm Security Exploits
  This is proof of concept chunk of javascript code that demonstrates the tabnapping phishing vulnerability that works across multiple browsers.

  Tags:  tabnapping proof concept proof-of-concept chunk vulnerability  

• 10:32

  Tabnapping Phishing Proof Of Concept

   » ‎ Packet Storm Security Recent Files
  This is proof of concept chunk of javascript code that demonstrates the tabnapping phishing vulnerability that works across multiple browsers.

  Tags:  tabnapping proof concept proof-of-concept chunk vulnerability  

• 10:32

  Tabnapping Phishing Proof Of Concept

   » ‎ Packet Storm Security Misc. Files
  This is proof of concept chunk of javascript code that demonstrates the tabnapping phishing vulnerability that works across multiple browsers.

  Tags:  tabnapping proof concept proof-of-concept chunk vulnerability  

• March 18, 2011
• 0:00

  Vuln: Libpng 'png_decompress_chunk()' Function Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Libpng 'png_decompress_chunk()' Function Denial of Service Vulnerability

  Tags:  png chunk libpng  

• October 27, 2010
• 0:00

  Vuln: Adobe Shockwave Player rcsL Chunk EAX Register Memory Corruption Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Adobe Shockwave Player rcsL Chunk EAX Register Memory Corruption Vulnerability

  Tags:  shockwave player adobe adobe-shockwave-player memory-corruption chunk  

• October 25, 2010
• 0:00

  Vuln: Adobe Shockwave Player Director rcsL Chunk Remote Memory Corruption Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Adobe Shockwave Player Director rcsL Chunk Remote Memory Corruption Vulnerability

  Tags:  shockwave player adobe adobe-shockwave-player memory-corruption chunk  

• October 21, 2010
• 0:00

  Vuln: Adobe Shockwave Player rcsL Chunk EAX Register Memory Corruption Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Adobe Shockwave Player rcsL Chunk EAX Register Memory Corruption Vulnerability

  Tags:  shockwave player adobe adobe-shockwave-player memory-corruption chunk  

• October 18, 2010
• 8:00

  Bugtraq: Secunia Research: RealPlayer QCP Sample Chunk Parsing Buffer Overflow

   » ‎ SecurityFocus Vulnerabilities
  Secunia Research: RealPlayer QCP Sample Chunk Parsing Buffer Overflow

  Tags:  realplayer research secunia buffer-overflow chunk  

• September 24, 2010
• 0:00

  Vuln: Libpng 'png_decompress_chunk()' Function Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Libpng 'png_decompress_chunk()' Function Denial of Service Vulnerability

  Tags:  png chunk libpng service-vulnerability denial-of-service  

• September 22, 2010
• 19:00

  moaub-shockwave.txt

   » ‎ Packet Storm Security Exploits
  Month Of Abysssec Undisclosed Bugs - Adobe Shockwave Director suffers from a tSAC Chunk memory corruption vulnerability.

  Tags:  txt month abysssec shockwave-director memory-corruption chunk  

• 19:00

  moaub22-shockwave.pdf

   » ‎ Packet Storm Security Advisories
  Month Of Abysssec Undisclosed Bugs - Adobe Shockwave Director suffers from a tSAC Chunk memory corruption vulnerability.

  Tags:  moaub pdf shockwave shockwave-director memory-corruption chunk  

• August 25, 2010
• 23:39

  TPTI-10-15.txt

   » ‎ Packet Storm Security Recent Files
  This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Shockwave. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the DIRAPIX module responsible for parsing the RIFF-based Director file format. When handling the mmap chunk, the process trusts the chunk size immediately following the fourCC value. It is passed to Ordinal1111 exported by the IML32X module which is responsible for allocating a heap buffer for processing the rest of the chunk. If an incorrect size is provided, later memory copies can corrupt data beyond the allocated buffer. This can be abused to execute remote code under the context of the user running the web browser.

  Tags:  code vulnerability chunk shockwave-user fourcc-value chunk-size  

• 23:38

  TPTI-10-15.txt

   » ‎ Packet Storm Security Advisories
  This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Shockwave. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the DIRAPIX module responsible for parsing the RIFF-based Director file format. When handling the mmap chunk, the process trusts the chunk size immediately following the fourCC value. It is passed to Ordinal1111 exported by the IML32X module which is responsible for allocating a heap buffer for processing the rest of the chunk. If an incorrect size is provided, later memory copies can corrupt data beyond the allocated buffer. This can be abused to execute remote code under the context of the user running the web browser.

  Tags:  code vulnerability chunk shockwave-user fourcc-value chunk-size  

• August 18, 2010
• 0:00

  Vuln: Libpng 'png_decompress_chunk()' Function Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Libpng 'png_decompress_chunk()' Function Denial of Service Vulnerability

  Tags:  png chunk libpng service-vulnerability denial-of-service  

• July 21, 2010
• 0:00

  Vuln: Libpng 'png_decompress_chunk()' Function Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Libpng 'png_decompress_chunk()' Function Denial of Service Vulnerability

  Tags:  png chunk libpng service-vulnerability denial-of-service  

• July 15, 2010
• 0:00

  Vuln: Libpng 'png_decompress_chunk()' Function Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Libpng 'png_decompress_chunk()' Function Denial of Service Vulnerability

  Tags:  png chunk libpng service-vulnerability denial-of-service  

• July 05, 2010
• 0:00

  Vuln: Libpng 'png_decompress_chunk()' Function Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Libpng 'png_decompress_chunk()' Function Denial of Service Vulnerability

  Tags:  png chunk libpng service-vulnerability denial-of-service  

• May 10, 2010
• 0:00

  Vuln: Libpng 'png_decompress_chunk()' Function Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Libpng 'png_decompress_chunk()' Function Denial of Service Vulnerability

  Tags:  png chunk libpng service-vulnerability denial-of-service  

• April 12, 2010
• 0:00

  Vuln: Libpng 'png_decompress_chunk()' Function Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Libpng 'png_decompress_chunk()' Function Denial of Service Vulnerability

  Tags:  png chunk libpng service-vulnerability denial-of-service  

• March 26, 2010
• 0:00

  Vuln: Libpng 'png_decompress_chunk()' Function Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Libpng 'png_decompress_chunk()' Function Denial of Service Vulnerability

  Tags:  png chunk libpng service-vulnerability denial-of-service  

• March 23, 2010
• 0:00

  Vuln: Libpng 'png_decompress_chunk()' Function Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Libpng 'png_decompress_chunk()' Function Denial of Service Vulnerability

  Tags:  png chunk libpng service-vulnerability denial-of-service  

• March 22, 2010
• 0:00

  Vuln: Libpng 'png_decompress_chunk()' Function Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Libpng 'png_decompress_chunk()' Function Denial of Service Vulnerability

  Tags:  png chunk libpng service-vulnerability denial-of-service  

• March 15, 2010
• 0:00

  Vuln: Libpng 'png_decompress_chunk()' Function Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Libpng 'png_decompress_chunk()' Function Denial of Service Vulnerability

  Tags:  png chunk libpng service-vulnerability denial-of-service  

• February 01, 2010
• 19:00

  02.01.10-1.txt

   » ‎ Packet Storm Security Recent Files
  iDefense Security Advisory 02.01.10 - Remote exploitation of an integer overflow vulnerability in RealNetworks Inc.'s RealPlayer 11 could allow an attacker to execute arbitrary code with the privileges of the affected service. The vulnerability specifically exists in the handling of the 'chunked' Transfer-Encoding method. This method breaks the file the server is sending into 'chunks'. For each chunk, the server first sends the length of the chunk in hexadecimal, followed by the chunk data. This is repeated until there are no more chunks. The server then sends a chunk length of zero (0) indicating the end of the transfer. When processing these chunks, an integer overflow occurs, which results in a heap overflow. This leads to the execution of arbitrary code. iDefense has confirmed the existence of this vulnerability in RealPlayer version 11 on Windows. A nightly build of RealPlayer 10.1.0.3830 for Linux was also confirmed to be vulnerable. Previous versions do not appear be affected.

  Tags:  vulnerability overflow chunk integer-overflow-vulnerability chunk-data realnetworks-inc  

• 19:00

  02.01.10-1.txt

   » ‎ Packet Storm Security Advisories
  iDefense Security Advisory 02.01.10 - Remote exploitation of an integer overflow vulnerability in RealNetworks Inc.'s RealPlayer 11 could allow an attacker to execute arbitrary code with the privileges of the affected service. The vulnerability specifically exists in the handling of the 'chunked' Transfer-Encoding method. This method breaks the file the server is sending into 'chunks'. For each chunk, the server first sends the length of the chunk in hexadecimal, followed by the chunk data. This is repeated until there are no more chunks. The server then sends a chunk length of zero (0) indicating the end of the transfer. When processing these chunks, an integer overflow occurs, which results in a heap overflow. This leads to the execution of arbitrary code. iDefense has confirmed the existence of this vulnerability in RealPlayer version 11 on Windows. A nightly build of RealPlayer 10.1.0.3830 for Linux was also confirmed to be vulnerable. Previous versions do not appear be affected.

  Tags:  vulnerability overflow chunk integer-overflow-vulnerability chunk-data realnetworks-inc