jetlib.sec » Tags » heap

Feeds

133444 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

371 items tagged "heap"

Related tags: integer [+], denial of service [+], corruption [+], arbitrary code execution [+], winamp [+], usa [+], jasper [+], windows [+], reader [+], player [+], overflows [+], microsoft [+], kingview [+], integer overflow [+], heap corruption [+], zip file [+], winamp versions [+], novell [+], linux [+], idefense [+], exploits [+], buffer overflow vulnerability [+], overflow [+], xchat [+], vulnerability [+], reflection [+], qcp [+], libcgroup [+], attachmate [+], afm [+], zip [+], understanding [+], uipc [+], tiff image [+], scada [+], paper [+], ntp [+], javascript [+], handling [+], freebsd [+], font [+], firefox [+], feng shui [+], evince [+], david litchfield [+], code execution [+], clickunzip [+], apple mac os [+], alexander sotirov [+], adobe acrobat [+], acrobat [+], zipper [+], zipitfast [+], xnview [+], xendesktop [+], xenapp [+], vallen [+], usbmuxd [+], truetype [+], traversal [+], time zone name [+], tif [+], thundercode [+], system heap [+], system [+], strategic [+], stack overflows [+], socket [+], skinny channel [+], server [+], safer use [+], read [+], query [+], qcp file [+], pivot [+], php [+], photoshop [+], phar [+], personal edition [+], personal [+], oracle hyperion [+], oracle [+], objects [+], novell groupwise [+], net [+], movicon [+], microsoft windows server [+], microsoft reader [+], metaserver rt [+], metaserver [+], memory leak [+], memory copy [+], libzip [+], libusbmuxd [+], libtiff [+], kernel panic [+], java runtime environment [+], intuit [+], integer overflow vulnerability [+], information leak [+], image [+], hyperion [+], hmi [+], groupwise [+], gimp [+], gif [+], ghostscript [+], ftp [+], framework [+], frame size [+], extension [+], execution [+], exe version [+], eviews [+], dos [+], directory traversal vulnerability [+], directory [+], decoder [+], data frame [+], data execution prevention [+], cups [+], crash proof [+], corruption issues [+], code [+], citrix xml service [+], chunk [+], c heap [+], bytecode [+], avira [+], authors [+], apclient [+], antivir [+], annotation [+], alarmpoint [+], adobe photoshop [+], overflow vulnerability [+], x tiff image [+], whitepaper [+], weakness [+], tor unspecified [+], tim shelton tags [+], taichi [+], spray [+], shockwave [+], realnetworks [+], proxy [+], presto [+], powerhmi [+], portuguese [+], persistent data [+], pe explorer [+], pdf [+], pcx image [+], pcx [+], pagemanager [+], overflow error [+], nppftp [+], notepad [+], nginx [+], multiple products [+], mozilla firefox [+], memory allocator [+], memory allocation [+], linux kernel [+], kernel [+], justin ferguson tags [+], justin ferguson [+], ibm [+], heap allocations [+], hdtv [+], hat europe [+], granularity [+], getarena [+], genstat [+], f secure [+], explorer 1 [+], explorer [+], exploiting [+], exploitation techniques [+], exploitation methods [+], exploitation [+], expert [+], europe [+], driver [+], data structure [+], cvs [+], chaos communication congress [+], bugtraq [+], blazevideo [+], attack [+], asterisk [+], array [+], analyzer [+], aix operating system [+], aix [+], adobe shockwave player [+], activex [+], abcm [+], proof of concept [+], based buffer overflow [+], xls [+], x imageio [+], windows common control [+], wincc [+], winamp 5 [+], wellintech [+], webapps [+], web player [+], vlc [+], vista [+], unity [+], tor socks connection [+], tiff integer [+], temperature logger [+], temperature [+], stts [+], smashing [+], simatic [+], siemens simatic [+], siemens [+], resolver [+], regular expression [+], real networks [+], real [+], python [+], pyfribidi [+], psp image [+], psp [+], plugin [+], player versions [+], pcre [+], openoffice [+], notes [+], networks [+], ms windows [+], mozilla [+], midioutplaynextpolyevent [+], midi [+], media [+], marinescu [+], maradns [+], lotus [+], local [+], kvwebsvr [+], irfanview [+], inspircd [+], information store [+], imageio [+], historyserver [+], heap management [+], hash [+], hacks [+], getbandproctiff [+], fribidi [+], flv [+], flashpix [+], flash [+], expression [+], exploit [+], exe [+], excel [+], essentials [+], driver ast [+], dns [+], dlabel [+], day [+], damn [+], d web [+], compost pile [+], compost heap [+], compost [+], common control library [+], common [+], chemistry [+], calculator version [+], calculator [+], burning [+], buffer overflow [+], bsd [+], avs [+], atoms [+], ashampoo burning studio [+], ashampoo [+], apple safari [+], apple quicktime [+], apple mac os x [+], apple coregraphics [+], adrian marinescu [+], adobe flash player [+], activex control [+], buffer [+], memory [+], memory corruption [+], realplayer [+], poc [+], idefense security advisory [+], remote [+], multiple [+], black hat [+], heap memory [+], buffer overflow vulnerabilities [+], adobe [+], xterm, xpdf, word, windows movie maker, wav, vulnerability research, vmware products, vmware, video, vendor, vault, ubuntu, txt, triologic, tooltalk, tag, system versions, symbol dictionary, sybase, ssl certificate, ssl, split, solaris, slideshow, sip, shop, sfcb, sblim, rspmp, rsp, rle, repeat, rendering, record, realmedia, reader v3, rcs, quicktime pict, processing, powerpoint, point, pls, pict, pdf reader software, patent claims, paint shop, paint, owl, overflow errors, outlook, otsav, opiereadrec, opie, online, ogg, ofl, offset, office, ocx, norex, netstorage, mp3 player, movie, mov, mod, moaub, microsoft windows defender, microsoft security bulletin, microsoft producer, microsoft powerpoint, microsoft outlook, microsoft excel, microsoft corp, messenger, message, mdxtuple, mdxset, mbm, mandriva, maker, m3u file, m3u, live, lite, liquidxml, linkedslideatom, libhx, li guillaume lovet, legend, kernel stack, jbig, ingres database, ingres, ica, ibm db2, hosted, hextile, gnu, ftp client, fss, freetype, foxit, floating point conversion, flash slideshow maker, flare, file vault, file, fetchmail, engine position, engine, encoded, dos vulnerability, dll, dj legend, defender, database, data architect, daemon, cve, critical vulnerability, corel, converter, control, client, classic, citrix ica client, citrix ica, citrix, cinepak codec, cinepak, certificate, call, bugs microsoft, buffer overflows, bigant, ben hawkes, barnowl, barcode, audio converter, audio, argument, arbitrary code, aol, advantage, advanced, active x, acoustica

• May 24, 2012
• 0:00

  Vuln: OpenOffice Multiple Heap Based Buffer Overflow Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  OpenOffice Multiple Heap Based Buffer Overflow Vulnerabilities

  Tags:  multiple heap openoffice based-buffer-overflow buffer-overflow-vulnerabilities  

• May 19, 2012
• 6:11

  PE Explorer 1.99 R6 Heap Overflow

   » ‎ Packet Storm Security Advisories
  PE Explorer version 1.99 R56 suffers from a heap overflow vulnerability.

  Tags:  explorer overflow heap overflow-vulnerability pe-explorer explorer-1  

• 6:11

  PE Explorer 1.99 R6 Heap Overflow

   » ‎ Packet Storm Security Recent Files
  PE Explorer version 1.99 R56 suffers from a heap overflow vulnerability.

  Tags:  explorer overflow heap overflow-vulnerability pe-explorer explorer-1  

• May 09, 2012
• 15:22

  Adobe Photoshop TIF Buffer Overflow

   » ‎ Packet Storm Security Advisories
  Adobe Photoshop EXTENDED versions CS5 12.0 and CS5.1 12.1 suffer from a TIF parsing heap buffer overflow vulnerability.

  Tags:  photoshop tif adobe buffer-overflow-vulnerability adobe-photoshop heap  

• 15:22

  Adobe Photoshop TIF Buffer Overflow

   » ‎ Packet Storm Security Recent Files
  Adobe Photoshop EXTENDED versions CS5 12.0 and CS5.1 12.1 suffer from a TIF parsing heap buffer overflow vulnerability.

  Tags:  photoshop tif adobe buffer-overflow-vulnerability adobe-photoshop heap  

• 15:22

  Adobe Photoshop TIF Buffer Overflow

   » ‎ Packet Storm Security Misc. Files
  Adobe Photoshop EXTENDED versions CS5 12.0 and CS5.1 12.1 suffer from a TIF parsing heap buffer overflow vulnerability.

  Tags:  photoshop tif adobe buffer-overflow-vulnerability adobe-photoshop heap  

• May 07, 2012
• 0:00

  Vuln: Asterisk Skinny Channel Driver Heap-Based Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Asterisk Skinny Channel Driver Heap-Based Buffer Overflow Vulnerability

  Tags:  buffer asterisk driver skinny-channel buffer-overflow-vulnerability based-buffer-overflow heap  

• May 06, 2012
• 21:37

  [Video] Zero-sized heap allocations vulnerability analysis

   » ‎ SecDocs
  Authors: Julien Vanegue
  Tags: heap overflow heap
  Event: Chaos Communication Congress 27th (27C3) 2010
  Abstract: The dynamic memory allocator is a fundamental component of modern operating systems, and one of the most important sources of security vulnerabilities. In this presentation, we emphasize on a particular weakness of the heap management that has proven to be the root cause of many escalation of privilege bugs in the windows kernel and other critical remote vulnerabilities in user-land applications. The problem is not specific to any operating system and is present in both user-land and kernel-land allocators. The presentation is divided into three parts. First, we will reveal the exact nature of the weakness and provide a taxonomy of all tested operating systems (both in the Windows and UNIX world, most of them are exposed). We then present a custom static analyzer for this class of defects based on the HAVOC framework, a heap-aware verifier for C programs, developed in the RISE team at Microsoft Research. We have deployed the analyzer on multiple kernel components, some of them reaching one million lines of C code. The analyzer produces a reasonable amount of warnings without any complex configuration. Finally, we generalize our analysis technique by characterizing what happens when the size of heap chunks is in the neighbourhood of zero (e.g. near-zero allocations) and give another example of fixed remote bug. We emphasize that this weakness should not be considered as a new class of vulnerabilities (such as buffer overflow), but rather a new type of code defect in the same style as integer overflows, as many occurrences are legit and do not lead to a bug.

  Tags:  analyzer weakness heap chaos-communication-congress heap-allocations memory-allocator  

• 21:37

  [Audio] Zero-sized heap allocations vulnerability analysis

   » ‎ SecDocs
  Authors: Julien Vanegue
  Tags: heap overflow heap
  Event: Chaos Communication Congress 27th (27C3) 2010
  Abstract: The dynamic memory allocator is a fundamental component of modern operating systems, and one of the most important sources of security vulnerabilities. In this presentation, we emphasize on a particular weakness of the heap management that has proven to be the root cause of many escalation of privilege bugs in the windows kernel and other critical remote vulnerabilities in user-land applications. The problem is not specific to any operating system and is present in both user-land and kernel-land allocators. The presentation is divided into three parts. First, we will reveal the exact nature of the weakness and provide a taxonomy of all tested operating systems (both in the Windows and UNIX world, most of them are exposed). We then present a custom static analyzer for this class of defects based on the HAVOC framework, a heap-aware verifier for C programs, developed in the RISE team at Microsoft Research. We have deployed the analyzer on multiple kernel components, some of them reaching one million lines of C code. The analyzer produces a reasonable amount of warnings without any complex configuration. Finally, we generalize our analysis technique by characterizing what happens when the size of heap chunks is in the neighbourhood of zero (e.g. near-zero allocations) and give another example of fixed remote bug. We emphasize that this weakness should not be considered as a new class of vulnerabilities (such as buffer overflow), but rather a new type of code defect in the same style as integer overflows, as many occurrences are legit and do not lead to a bug.

  Tags:  analyzer weakness heap chaos-communication-congress heap-allocations memory-allocator  

• May 04, 2012
• 0:00

  Vuln: Asterisk Skinny Channel Driver Heap-Based Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Asterisk Skinny Channel Driver Heap-Based Buffer Overflow Vulnerability

  Tags:  buffer asterisk driver skinny-channel buffer-overflow-vulnerability based-buffer-overflow heap  

• April 23, 2012
• 14:00

  Bugtraq: AST-2012-005: Heap Buffer Overflow in Skinny Channel Driver

   » ‎ SecurityFocus Vulnerabilities
  AST-2012-005: Heap Buffer Overflow in Skinny Channel Driver

  Tags:  buffer heap overflow skinny-channel driver-ast buffer-overflow bugtraq  

• 13:42

  .NET Framework EncoderParameter Integer Overflow

   » ‎ Packet Storm Security Exploits
  An integer overflow vulnerability has been discovered in the EncoderParameter class of the .NET Framework. Exploiting this vulnerability results in an overflown integer that is used to allocate a buffer on the heap. After the incorrect allocation, one or more user-supplied buffers are copied in the new buffer, resulting in a corruption of the heap.

  Tags:  integer framework net integer-overflow-vulnerability heap corruption  

• 13:42

  .NET Framework EncoderParameter Integer Overflow

   » ‎ Packet Storm Security Recent Files
  An integer overflow vulnerability has been discovered in the EncoderParameter class of the .NET Framework. Exploiting this vulnerability results in an overflown integer that is used to allocate a buffer on the heap. After the incorrect allocation, one or more user-supplied buffers are copied in the new buffer, resulting in a corruption of the heap.

  Tags:  integer framework net integer-overflow-vulnerability heap corruption  

• 13:42

  .NET Framework EncoderParameter Integer Overflow

   » ‎ Packet Storm Security Misc. Files
  An integer overflow vulnerability has been discovered in the EncoderParameter class of the .NET Framework. Exploiting this vulnerability results in an overflown integer that is used to allocate a buffer on the heap. After the incorrect allocation, one or more user-supplied buffers are copied in the new buffer, resulting in a corruption of the heap.

  Tags:  integer framework net integer-overflow-vulnerability heap corruption  

• April 16, 2012
• 0:00

  Vuln: IrfanView FlashPix PlugIn CVE-2012-0278 Heap Based Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  IrfanView FlashPix PlugIn CVE-2012-0278 Heap Based Buffer Overflow Vulnerability

  Tags:  irfanview flashpix plugin buffer-overflow-vulnerability based-buffer-overflow heap  

• April 13, 2012
• 15:12

  Quest InTrust Annotation Objects Uninitialized Pointer

   » ‎ Packet Storm Security Exploits
  This Metasploit module exploits an uninitialized variable vulnerability in the Annotation Objects ActiveX component. The activeX component loads into memory without opting into ALSR so this module exploits the vulnerability against windows Vista and Windows 7 targets. A large heap spray is required to fulfill the requirement that EAX points to part of the ROP chain in a heap chunk and the calculated call will hit the pivot in a separate heap chunk. This will take some time in the users browser.

  Tags:  annotation objects heap chunk pivot  

• 15:12

  Quest InTrust Annotation Objects Uninitialized Pointer

   » ‎ Packet Storm Security Recent Files
  This Metasploit module exploits an uninitialized variable vulnerability in the Annotation Objects ActiveX component. The activeX component loads into memory without opting into ALSR so this module exploits the vulnerability against windows Vista and Windows 7 targets. A large heap spray is required to fulfill the requirement that EAX points to part of the ROP chain in a heap chunk and the calculated call will hit the pivot in a separate heap chunk. This will take some time in the users browser.

  Tags:  annotation objects heap chunk pivot  

• 15:12

  Quest InTrust Annotation Objects Uninitialized Pointer

   » ‎ Packet Storm Security Misc. Files
  This Metasploit module exploits an uninitialized variable vulnerability in the Annotation Objects ActiveX component. The activeX component loads into memory without opting into ALSR so this module exploits the vulnerability against windows Vista and Windows 7 targets. A large heap spray is required to fulfill the requirement that EAX points to part of the ROP chain in a heap chunk and the calculated call will hit the pivot in a separate heap chunk. This will take some time in the users browser.

  Tags:  annotation objects heap chunk pivot  

• April 10, 2012
• 0:00

  Vuln: InspIRCd Heap Memory Corruption Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  InspIRCd Heap Memory Corruption Vulnerability

  Tags:  inspircd heap memory heap-memory memory-corruption vulnerability  

• April 03, 2012
• 0:00

  Vuln: BlazeVideo HDTV Player PLF File Heap Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  BlazeVideo HDTV Player PLF File Heap Buffer Overflow Vulnerability

  Tags:  hdtv blazevideo player buffer-overflow-vulnerability heap  

• March 30, 2012
• 15:24

  Intuit Help System Heap Corruption / Memory Leak

   » ‎ Packet Storm Security Exploits
  Intuit Help System suffers from protocol URL heap corruption and memory leak vulnerabilities.

  Tags:  system heap intuit heap-corruption system-heap memory-leak  

• 15:24

  Intuit Help System Heap Corruption / Memory Leak

   » ‎ Packet Storm Security Recent Files
  Intuit Help System suffers from protocol URL heap corruption and memory leak vulnerabilities.

  Tags:  system heap intuit heap-corruption system-heap memory-leak  

• 15:24

  Intuit Help System Heap Corruption / Memory Leak

   » ‎ Packet Storm Security Misc. Files
  Intuit Help System suffers from protocol URL heap corruption and memory leak vulnerabilities.

  Tags:  system heap intuit heap-corruption system-heap memory-leak  

• March 28, 2012
• 0:00

  Vuln: nginx DNS Resolver Remote Heap Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  nginx DNS Resolver Remote Heap Buffer Overflow Vulnerability

  Tags:  resolver dns nginx buffer-overflow-vulnerability heap  

• March 27, 2012
• 19:38

  libzip 0.10 Heap Overflow / Information Leak

   » ‎ Packet Storm Security Advisories
  libzip versions 0.10 and below suffers from heap overflow and information leak vulnerabilities.

  Tags:  libzip heap overflow information-leak  

• 19:38

  libzip 0.10 Heap Overflow / Information Leak

   » ‎ Packet Storm Security Recent Files
  libzip versions 0.10 and below suffers from heap overflow and information leak vulnerabilities.

  Tags:  libzip heap overflow information-leak  

• 19:38

  libzip 0.10 Heap Overflow / Information Leak

   » ‎ Packet Storm Security Misc. Files
  libzip versions 0.10 and below suffers from heap overflow and information leak vulnerabilities.

  Tags:  libzip heap overflow information-leak  

• March 14, 2012
• 20:23

  Presto! PageManager 9.01 Overflow / File Download / Denial Of Service

   » ‎ Packet Storm Security Exploits
  Presto! PageManager versions 9.01 and below suffer from heap overflow, arbitrary file downloading, and denial of service vulnerabilities.

  Tags:  denial-of-service overflow heap  

• 20:23

  Presto! PageManager 9.01 Overflow / File Download / Denial Of Service

   » ‎ Packet Storm Security Recent Files
  Presto! PageManager versions 9.01 and below suffer from heap overflow, arbitrary file downloading, and denial of service vulnerabilities.

  Tags:  presto pagemanager overflow denial-of-service heap  

• 20:23

  Presto! PageManager 9.01 Overflow / File Download / Denial Of Service

   » ‎ Packet Storm Security Misc. Files
  Presto! PageManager versions 9.01 and below suffer from heap overflow, arbitrary file downloading, and denial of service vulnerabilities.

  Tags:  presto pagemanager overflow denial-of-service heap  

• March 06, 2012
• 0:00

  Vuln: usbmuxd 'libusbmuxd/libusbmuxd.c' Heap Based Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  usbmuxd 'libusbmuxd/libusbmuxd.c' Heap Based Buffer Overflow Vulnerability

  Tags:  heap usbmuxd libusbmuxd buffer-overflow-vulnerability based-buffer-overflow c-heap  

• March 05, 2012
• 0:00

  Vuln: CVS CVE-2012-0804 'proxy_connect()' Heap Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  CVS CVE-2012-0804 'proxy_connect()' Heap Buffer Overflow Vulnerability

  Tags:  cvs heap proxy buffer-overflow-vulnerability  

• 0:00

  Vuln: JasPer Multiple Remote Heap Buffer Overflow Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  JasPer Multiple Remote Heap Buffer Overflow Vulnerabilities

  Tags:  multiple heap remote buffer-overflow-vulnerabilities jasper  

• February 22, 2012
• 20:55

  Unity 3D Web Player 3.2.0.61061 Heap Corruption

   » ‎ Packet Storm Security Exploits
  Unity 3D Web Player versions 3.2.0.61061 and below suffer from a heap corruption vulnerability. Proof of concept code included.

  Tags:  corruption heap player unity d-web heap-corruption web-player player-versions  

• 20:46

  DAMN Hash Calculator 1.5.1 Heap Overflow

   » ‎ Packet Storm Security Exploits
  DAMN Hash Calculator version 1.5.1 local heap overflow proof of concept exploit.

  Tags:  damn calculator hash calculator-version proof-of-concept heap  

• 0:00

  Vuln: CVS CVE-2012-0804 'proxy_connect()' Heap Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  CVS CVE-2012-0804 'proxy_connect()' Heap Buffer Overflow Vulnerability

  Tags:  cvs heap proxy buffer-overflow-vulnerability  

• February 20, 2012
• 0:00

  Vuln: usbmuxd 'libusbmuxd/libusbmuxd.c' Heap Based Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  usbmuxd 'libusbmuxd/libusbmuxd.c' Heap Based Buffer Overflow Vulnerability

  Tags:  heap usbmuxd libusbmuxd buffer-overflow-vulnerability based-buffer-overflow c-heap  

• February 17, 2012
• 0:00

  Vuln: Evince AFM Font File Parser Heap Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Evince AFM Font File Parser Heap Buffer Overflow Vulnerability

  Tags:  evince font afm buffer-overflow-vulnerability heap  

• February 16, 2012
• 19:34

  XnView 1.98.5 Integer / Heap Overflows

   » ‎ Packet Storm Security Exploits
  XnView versions 1.98.5 and below suffer from an integer overflow and multiple heap overflows. Proof of concept code included.

  Tags:  integer xnview heap integer-overflow proof-of-concept  

• 19:34

  XnView 1.98.5 Integer / Heap Overflows

   » ‎ Packet Storm Security Recent Files
  XnView versions 1.98.5 and below suffer from an integer overflow and multiple heap overflows. Proof of concept code included.

  Tags:  integer xnview heap integer-overflow proof-of-concept  

• 19:34

  XnView 1.98.5 Integer / Heap Overflows

   » ‎ Packet Storm Security Misc. Files
  XnView versions 1.98.5 and below suffer from an integer overflow and multiple heap overflows. Proof of concept code included.

  Tags:  integer xnview heap integer-overflow proof-of-concept  

• 19:31

  R4 1.25 Overflows / Directory Traversal

   » ‎ Packet Storm Security Exploits
  R4 versions 1.25 and below suffer from stack overflows, a heap overflow, and a directory traversal vulnerability.

  Tags:  directory overflows traversal directory-traversal-vulnerability stack-overflows heap  

• 19:31

  R4 1.25 Overflows / Directory Traversal

   » ‎ Packet Storm Security Recent Files
  R4 versions 1.25 and below suffer from stack overflows, a heap overflow, and a directory traversal vulnerability.

  Tags:  directory overflows traversal directory-traversal-vulnerability stack-overflows heap  

• 19:31

  R4 1.25 Overflows / Directory Traversal

   » ‎ Packet Storm Security Misc. Files
  R4 versions 1.25 and below suffer from stack overflows, a heap overflow, and a directory traversal vulnerability.

  Tags:  directory overflows traversal directory-traversal-vulnerability stack-overflows heap  

• 0:00

  Vuln: Evince AFM Font File Parser Heap Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Evince AFM Font File Parser Heap Buffer Overflow Vulnerability

  Tags:  evince font afm buffer-overflow-vulnerability heap  

• February 15, 2012
• 8:04

  Bugtraq: [CAL-2011-0071]Adobe Shockwave Player Parsing cupt atom heap overflow

   » ‎ SecurityFocus Vulnerabilities
  [CAL-2011-0071]Adobe Shockwave Player Parsing cupt atom heap overflow

  Tags:  shockwave player adobe adobe-shockwave-player bugtraq heap  

• 0:00

  Vuln: Adobe Shockwave Player CVE-2012-0758 DIR File Handling Remote Heap Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Adobe Shockwave Player CVE-2012-0758 DIR File Handling Remote Heap Overflow Vulnerability

  Tags:  shockwave player adobe adobe-shockwave-player overflow-vulnerability heap  

• February 07, 2012
• 0:00

  Vuln: Ghostscript TrueType Bytecode Interpreter Heap-Based Memory Corruption Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Ghostscript TrueType Bytecode Interpreter Heap-Based Memory Corruption Vulnerability

  Tags:  ghostscript truetype bytecode memory-corruption heap  

• February 03, 2012
• 0:00

  Vuln: Ghostscript TrueType Bytecode Interpreter Heap-Based Memory Corruption Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Ghostscript TrueType Bytecode Interpreter Heap-Based Memory Corruption Vulnerability

  Tags:  ghostscript truetype bytecode memory-corruption heap  

• February 01, 2012
• 0:00

  Vuln: usbmuxd 'libusbmuxd/libusbmuxd.c' Heap Based Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  usbmuxd 'libusbmuxd/libusbmuxd.c' Heap Based Buffer Overflow Vulnerability

  Tags:  heap usbmuxd libusbmuxd buffer-overflow-vulnerability based-buffer-overflow c-heap  

• January 28, 2012
• 14:00

  [remote exploits] - MS12-004 midiOutPlayNextPolyEvent Heap Overflow

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [remote exploits] - MS12-004 midiOutPlayNextPolyEvent Heap Overflow

  Tags:  midioutplaynextpolyevent heap overflow exploits  

• January 27, 2012
• 16:45

  MS12-004 midiOutPlayNextPolyEvent Heap Overflow

   » ‎ Packet Storm Security Exploits
  This Metasploit module exploits a heap overflow vulnerability in the Windows Multimedia Library (winmm.dll). The vulnerability occurs when parsing specially crafted MIDI files. Remote code execution can be achieved by using Windows Media Player's ActiveX control. Exploitation is done by supplying a specially crafted MIDI file with specific events, causing the offset calculation being higher than how much is available on the heap (0x400 allocated by WINMM!winmmAlloc), and then allowing us to either "inc al" or "dec al" a byte. This can be used to corrupt an array (CImplAry) we setup, and force the browser to confuse types from tagVARIANT objects, which leverages remote code execution under the context of the user. At this time, for IE 8 target, JRE (Java Runtime Environment) is required to bypass DEP (Data Execution Prevention). Note: Based on our testing, the vulnerability does not seem to trigger when the victim machine is operated via rdesktop.

  Tags:  execution vulnerability heap java-runtime-environment overflow-vulnerability data-execution-prevention  

• 16:45

  MS12-004 midiOutPlayNextPolyEvent Heap Overflow

   » ‎ Packet Storm Security Recent Files
  This Metasploit module exploits a heap overflow vulnerability in the Windows Multimedia Library (winmm.dll). The vulnerability occurs when parsing specially crafted MIDI files. Remote code execution can be achieved by using Windows Media Player's ActiveX control. Exploitation is done by supplying a specially crafted MIDI file with specific events, causing the offset calculation being higher than how much is available on the heap (0x400 allocated by WINMM!winmmAlloc), and then allowing us to either "inc al" or "dec al" a byte. This can be used to corrupt an array (CImplAry) we setup, and force the browser to confuse types from tagVARIANT objects, which leverages remote code execution under the context of the user. At this time, for IE 8 target, JRE (Java Runtime Environment) is required to bypass DEP (Data Execution Prevention). Note: Based on our testing, the vulnerability does not seem to trigger when the victim machine is operated via rdesktop.

  Tags:  execution vulnerability heap java-runtime-environment overflow-vulnerability data-execution-prevention  

• 16:45

  MS12-004 midiOutPlayNextPolyEvent Heap Overflow

   » ‎ Packet Storm Security Misc. Files
  This Metasploit module exploits a heap overflow vulnerability in the Windows Multimedia Library (winmm.dll). The vulnerability occurs when parsing specially crafted MIDI files. Remote code execution can be achieved by using Windows Media Player's ActiveX control. Exploitation is done by supplying a specially crafted MIDI file with specific events, causing the offset calculation being higher than how much is available on the heap (0x400 allocated by WINMM!winmmAlloc), and then allowing us to either "inc al" or "dec al" a byte. This can be used to corrupt an array (CImplAry) we setup, and force the browser to confuse types from tagVARIANT objects, which leverages remote code execution under the context of the user. At this time, for IE 8 target, JRE (Java Runtime Environment) is required to bypass DEP (Data Execution Prevention). Note: Based on our testing, the vulnerability does not seem to trigger when the victim machine is operated via rdesktop.

  Tags:  execution vulnerability heap java-runtime-environment overflow-vulnerability data-execution-prevention  

• January 25, 2012
• 0:00

  Vuln: Evince AFM Font File Parser Heap Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Evince AFM Font File Parser Heap Buffer Overflow Vulnerability

  Tags:  buffer-overflow-vulnerability afm heap  

• January 19, 2012
• 0:00

  Vuln: Evince AFM Font File Parser Heap Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Evince AFM Font File Parser Heap Buffer Overflow Vulnerability

  Tags:  evince font afm buffer-overflow-vulnerability heap  

• January 17, 2012
• 0:00

  Vuln: JasPer Multiple Remote Heap Buffer Overflow Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  JasPer Multiple Remote Heap Buffer Overflow Vulnerabilities

  Tags:  multiple heap remote buffer-overflow-vulnerabilities jasper  

• January 16, 2012
• 0:00

  Vuln: Evince AFM Font File Parser Heap Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Evince AFM Font File Parser Heap Buffer Overflow Vulnerability

  Tags:  evince font afm buffer-overflow-vulnerability heap  

• January 11, 2012
• 0:00

  Vuln: Tor SOCKS Connection Heap Based Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Tor SOCKS Connection Heap Based Buffer Overflow Vulnerability

  Tags:  buffer heap overflow tor-socks-connection buffer-overflow-vulnerability based-buffer-overflow  

• January 07, 2012
• 9:46

  [Slides] Windows Vista Heap Management Enhancements– Security, Reliability and Performance

   » ‎ SecDocs
  Authors: Adrian Marinescu
  Tags: heap overflow Windows Vista
  Event: Black Hat USA 2006
  

  Tags:  heap vista windows adrian-marinescu usa heap-management marinescu black-hat  

• January 04, 2012
• 0:00

  Vuln: JasPer Multiple Remote Heap Buffer Overflow Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  JasPer Multiple Remote Heap Buffer Overflow Vulnerabilities

  Tags:  multiple heap remote buffer-overflow-vulnerabilities jasper  

• 0:00

  Vuln: Ghostscript TrueType Bytecode Interpreter Heap-Based Memory Corruption Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Ghostscript TrueType Bytecode Interpreter Heap-Based Memory Corruption Vulnerability

  Tags:  ghostscript truetype bytecode memory-corruption heap  

• January 03, 2012
• 0:00

  Vuln: VLC Media Player TiVo Demuxer Remote Heap-Based Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  VLC Media Player TiVo Demuxer Remote Heap-Based Buffer Overflow Vulnerability

  Tags:  player vlc media buffer-overflow-vulnerability based-buffer-overflow heap  

• December 22, 2011
• 0:00

  Vuln: KingView 'HistoryServer.exe' Heap Based Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  KingView 'HistoryServer.exe' Heap Based Buffer Overflow Vulnerability

  Tags:  exe kingview historyserver buffer-overflow-vulnerability based-buffer-overflow heap  

• December 20, 2011
• 0:00

  Vuln: JasPer Multiple Remote Heap Buffer Overflow Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  JasPer Multiple Remote Heap Buffer Overflow Vulnerabilities

  Tags:  multiple heap remote buffer-overflow-vulnerabilities jasper  

• December 16, 2011
• 0:00

  Vuln: JasPer Multiple Remote Heap Buffer Overflow Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  JasPer Multiple Remote Heap Buffer Overflow Vulnerabilities

  Tags:  multiple heap remote buffer-overflow-vulnerabilities jasper  

• December 13, 2011
• 21:30

  [Paper] Windows Heap Overflows

   » ‎ SecDocs
  Authors: David Litchfield
  Tags: heap overflow
  Event: Black Hat Windows Security 2004
  

  Tags:  heap paper windows david-litchfield black-hat overflows  

• 21:30

  [Slides] Windows Heap Overflows

   » ‎ SecDocs
  Authors: David Litchfield
  Tags: heap overflow
  Event: Black Hat Windows Security 2004
  

  Tags:  overflows heap windows david-litchfield black-hat  

• 0:00

  Vuln: JasPer Multiple Remote Heap Buffer Overflow Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  JasPer Multiple Remote Heap Buffer Overflow Vulnerabilities

  Tags:  multiple heap remote buffer-overflow-vulnerabilities jasper  

• December 12, 2011
• 0:00

  Vuln: JasPer Multiple Remote Heap Buffer Overflow Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  JasPer Multiple Remote Heap Buffer Overflow Vulnerabilities

  Tags:  multiple heap remote buffer-overflow-vulnerabilities jasper  

• December 09, 2011
• 0:00

  Vuln: JasPer Multiple Remote Heap Buffer Overflow Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  JasPer Multiple Remote Heap Buffer Overflow Vulnerabilities

  Tags:  multiple heap remote buffer-overflow-vulnerabilities jasper  

• December 05, 2011
• 0:00

  Vuln: nginx DNS Resolver Remote Heap Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  nginx DNS Resolver Remote Heap Buffer Overflow Vulnerability

  Tags:  buffer-overflow-vulnerability heap nginx  

• December 02, 2011
• 14:00

  Bugtraq: Heap Memory Corruption in HP Device Access Manager for Protect Tools Information Store

   » ‎ SecurityFocus Vulnerabilities
  Heap Memory Corruption in HP Device Access Manager for Protect Tools Information Store

  Tags:  corruption heap memory heap-memory memory-corruption information-store  

• November 30, 2011
• 0:00

  Vuln: CUPS 'gif_read_lzw()' CVE-2011-3170 GIF File Heap Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  CUPS 'gif_read_lzw()' CVE-2011-3170 GIF File Heap Buffer Overflow Vulnerability

  Tags:  gif read cups buffer-overflow-vulnerability heap  

• November 25, 2011
• 14:00

  [dos / poc] - XChat Heap Overflow DoS

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [dos / poc] - XChat Heap Overflow DoS

  Tags:  poc heap xchat  

• 5:33

  XChat 2.8.9 Heap Overflow

   » ‎ Packet Storm Security Exploits
  XChat heap overflow exploit that triggers a denial of service condition. Versions 2.8.9 and below are affected.

  Tags:  heap xchat overflow denial-of-service  

• 5:33

  XChat 2.8.9 Heap Overflow

   » ‎ Packet Storm Security Recent Files
  XChat heap overflow exploit that triggers a denial of service condition. Versions 2.8.9 and below are affected.

  Tags:  heap xchat overflow denial-of-service  

• 5:33

  XChat 2.8.9 Heap Overflow

   » ‎ Packet Storm Security Misc. Files
  XChat heap overflow exploit that triggers a denial of service condition. Versions 2.8.9 and below are affected.

  Tags:  heap xchat overflow denial-of-service  

• November 24, 2011
• 14:00

  [dos / poc] - XChat Heap Overflow DoS

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [dos / poc] - XChat Heap Overflow DoS

  Tags:  poc heap xchat  

• 0:00

  Vuln: ldns 'rr.c' Remote Heap Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  ldns 'rr.c' Remote Heap Buffer Overflow Vulnerability

  Tags:  buffer heap remote buffer-overflow-vulnerability  

• November 21, 2011
• 0:00

  Vuln: Adobe Acrobat and Reader CVE-2011-2437 Remote Heap Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Adobe Acrobat and Reader CVE-2011-2437 Remote Heap Buffer Overflow Vulnerability

  Tags:  acrobat reader adobe buffer-overflow-vulnerability adobe-acrobat heap  

• 0:00

  Vuln: abcm2ps 'getarena()' Heap Based Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  abcm2ps 'getarena()' Heap Based Buffer Overflow Vulnerability

  Tags:  getarena heap abcm buffer-overflow-vulnerability based-buffer-overflow  

• November 16, 2011
• 7:36

  Attachmate Reflection FTP Client Heap Overflow

   » ‎ Packet Storm Security Exploits
  Attachmate Reflection FTP client suffers from a heap overflow vulnerability. Metasploit module included.

  Tags:  reflection attachmate ftp overflow-vulnerability heap  

• 7:36

  Attachmate Reflection FTP Client Heap Overflow

   » ‎ Packet Storm Security Recent Files
  Attachmate Reflection FTP client suffers from a heap overflow vulnerability. Metasploit module included.

  Tags:  reflection attachmate ftp overflow-vulnerability heap  

• 7:36

  Attachmate Reflection FTP Client Heap Overflow

   » ‎ Packet Storm Security Misc. Files
  Attachmate Reflection FTP client suffers from a heap overflow vulnerability. Metasploit module included.

  Tags:  reflection attachmate ftp overflow-vulnerability heap  

• November 15, 2011
• 21:00

  [dos / poc] - Attachmate Reflection FTP Client Heap Overflow

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [dos / poc] - Attachmate Reflection FTP Client Heap Overflow

  Tags:  dos poc reflection attachmate heap  

• 14:00

  [dos / poc] - Attachmate Reflection FTP Client Heap Overflow

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [dos / poc] - Attachmate Reflection FTP Client Heap Overflow

  Tags:  dos poc reflection attachmate heap  

• 0:00

  Vuln: Adobe Acrobat and Reader CVE-2011-2433 Remote Heap Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Adobe Acrobat and Reader CVE-2011-2433 Remote Heap Buffer Overflow Vulnerability

  Tags:  acrobat reader adobe buffer-overflow-vulnerability adobe-acrobat heap  

• November 07, 2011
• 7:34

  Oracle Hyperion Strategic Finance Client 12.x Heap Overflow

   » ‎ Packet Storm Security Exploits
  Oracle Hyperion Strategic Finance client version 12.x Tidestone Formula One workbook OLE control TTF16 (6.3.5 Build 1) SetDevNames() remote heap overflow exploit.

  Tags:  strategic hyperion oracle oracle-hyperion heap overflow  

• 7:34

  Oracle Hyperion Strategic Finance Client 12.x Heap Overflow

   » ‎ Packet Storm Security Recent Files
  Oracle Hyperion Strategic Finance client version 12.x Tidestone Formula One workbook OLE control TTF16 (6.3.5 Build 1) SetDevNames() remote heap overflow exploit.

  Tags:  strategic hyperion oracle oracle-hyperion heap overflow  

• 7:34

  Oracle Hyperion Strategic Finance Client 12.x Heap Overflow

   » ‎ Packet Storm Security Misc. Files
  Oracle Hyperion Strategic Finance client version 12.x Tidestone Formula One workbook OLE control TTF16 (6.3.5 Build 1) SetDevNames() remote heap overflow exploit.

  Tags:  strategic hyperion oracle oracle-hyperion heap overflow  

• October 31, 2011
• 14:35

  Heap, Overflows And Exploitation

   » ‎ Packet Storm Security Recent Files
  Whitepaper called Heap, Overflows and Exploitation. Written in Turkish.

  Tags:  exploitation overflows heap  

• 14:35

  Heap, Overflows And Exploitation

   » ‎ Packet Storm Security Misc. Files
  Whitepaper called Heap, Overflows and Exploitation. Written in Turkish.

  Tags:  exploitation overflows heap  

• October 26, 2011
• 0:00

  Vuln: Adobe Acrobat and Reader CVE-2011-2433 Remote Heap Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Adobe Acrobat and Reader CVE-2011-2433 Remote Heap Buffer Overflow Vulnerability

  Tags:  acrobat reader adobe buffer-overflow-vulnerability adobe-acrobat heap  

• 0:00

  Vuln: Adobe Acrobat and Reader CVE-2011-2434 Remote Heap Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Adobe Acrobat and Reader CVE-2011-2434 Remote Heap Buffer Overflow Vulnerability

  Tags:  acrobat reader adobe buffer-overflow-vulnerability adobe-acrobat heap  

• October 15, 2011
• 1:01

  [Slides] BSD Heap Smashing

   » ‎ SecDocs
  Tags: heap overflow exploiting heap
  Event: Black Hat USA 2003
  

  Tags:  heap bsd smashing usa black-hat overflow  

• October 12, 2011
• 0:00

  Vuln: Apple Safari ImageIO TIFF Image Handling Heap Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apple Safari ImageIO TIFF Image Handling Heap Buffer Overflow Vulnerability

  Tags:  heap imageio handling tiff-image apple-safari buffer-overflow-vulnerability  

• October 11, 2011
• 0:00

  Vuln: Apple Mac OS X 'getBandProcTiff()' TIFF Image Handling Heap Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apple Mac OS X 'getBandProcTiff()' TIFF Image Handling Heap Buffer Overflow Vulnerability

  Tags:  heap handling getbandproctiff tiff-image apple-mac-os buffer-overflow-vulnerability  

• October 10, 2011
• 0:00

  Vuln: CUPS 'gif_read_lzw()' CVE-2011-3170 GIF File Heap Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  CUPS 'gif_read_lzw()' CVE-2011-3170 GIF File Heap Buffer Overflow Vulnerability

  Tags:  gif read cups buffer-overflow-vulnerability heap  

• October 07, 2011
• 0:00

  Vuln: BlazeVideo HDTV Player PLF File Heap Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  BlazeVideo HDTV Player PLF File Heap Buffer Overflow Vulnerability

  Tags:  hdtv blazevideo player buffer-overflow-vulnerability heap  

• October 04, 2011
• 6:39

  GenStat 14.1.0.5943 Array / Heap Overflows

   » ‎ Packet Storm Security Exploits
  GenStat versions 14.1.0.5943 and below suffer from an array overflow with write2 and a heap overflow. Proof of concept code included.

  Tags:  genstat array heap proof-of-concept overflow  

• 6:39

  GenStat 14.1.0.5943 Array / Heap Overflows

   » ‎ Packet Storm Security Recent Files
  GenStat versions 14.1.0.5943 and below suffer from an array overflow with write2 and a heap overflow. Proof of concept code included.

  Tags:  proof-of-concept heap overflow  

• 6:39

  GenStat 14.1.0.5943 Array / Heap Overflows

   » ‎ Packet Storm Security Misc. Files
  GenStat versions 14.1.0.5943 and below suffer from an array overflow with write2 and a heap overflow. Proof of concept code included.

  Tags:  genstat array heap proof-of-concept overflow  

• October 03, 2011
• 21:00

  [dos / poc] - Ashampoo Burning Studio Elements 10.0.9 (.ashprj) Heap Overflow

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [dos / poc] - Ashampoo Burning Studio Elements 10.0.9 (.ashprj) Heap Overflow

  Tags:  poc burning ashampoo ashampoo-burning-studio heap  

• September 30, 2011
• 8:21

  FreeBSD UIPC Socket Heap Overflow

   » ‎ Packet Storm Security Exploits
  FreeBSD UIPC socket heap overflow proof of concept exploit that causes a kernel panic. Tested on FreeBSD 8.2-RELEASE.

  Tags:  uipc freebsd socket kernel-panic proof-of-concept heap  

• 8:21

  FreeBSD UIPC Socket Heap Overflow

   » ‎ Packet Storm Security Recent Files
  FreeBSD UIPC socket heap overflow proof of concept exploit that causes a kernel panic. Tested on FreeBSD 8.2-RELEASE.

  Tags:  uipc freebsd socket kernel-panic proof-of-concept heap  

• 8:21

  FreeBSD UIPC Socket Heap Overflow

   » ‎ Packet Storm Security Misc. Files
  FreeBSD UIPC socket heap overflow proof of concept exploit that causes a kernel panic. Tested on FreeBSD 8.2-RELEASE.

  Tags:  uipc freebsd socket kernel-panic proof-of-concept heap  

• September 29, 2011
• 21:00

  [dos / poc] - FreeBSD UIPC socket heap overflow proof-of-concept

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [dos / poc] - FreeBSD UIPC socket heap overflow proof-of-concept

  Tags:  poc uipc freebsd proof-of-concept heap  

• September 28, 2011
• 15:34

  iDefense Security Advisory 09.26.11 - Novell Groupwise Heap Overflow

   » ‎ Packet Storm Security Advisories
  iDefense Security Advisory 09.26.11 - Remote exploitation of a heap overflow vulnerability in Novell Inc.'s GroupWise could allow an attacker to execute arbitrary code with the privileges of the affected service. This vulnerability is present in the calendar processing code, which resides within the GroupWise Internet Agent (GWIA) process. The vulnerability occurs when parsing a malformed calendar recurrence (RRULE) that recurs on weekdays. A heap based buffer overflow can be triggered due to the lack of checks to ensure that there is enough space in the buffer to hold all of the RRULE entry data. Novell GroupWise 8.0x up to (and including) 8.02HP2 are vulnerable.

  Tags:  novell heap groupwise novell-groupwise idefense-security-advisory overflow-vulnerability  

• 15:34

  iDefense Security Advisory 09.26.11 - Novell Groupwise Heap Overflow

   » ‎ Packet Storm Security Recent Files
  iDefense Security Advisory 09.26.11 - Remote exploitation of a heap overflow vulnerability in Novell Inc.'s GroupWise could allow an attacker to execute arbitrary code with the privileges of the affected service. This vulnerability is present in the calendar processing code, which resides within the GroupWise Internet Agent (GWIA) process. The vulnerability occurs when parsing a malformed calendar recurrence (RRULE) that recurs on weekdays. A heap based buffer overflow can be triggered due to the lack of checks to ensure that there is enough space in the buffer to hold all of the RRULE entry data. Novell GroupWise 8.0x up to (and including) 8.02HP2 are vulnerable.

  Tags:  novell heap groupwise novell-groupwise idefense-security-advisory overflow-vulnerability  

• 15:34

  iDefense Security Advisory 09.26.11 - Novell Groupwise Heap Overflow

   » ‎ Packet Storm Security Misc. Files
  iDefense Security Advisory 09.26.11 - Remote exploitation of a heap overflow vulnerability in Novell Inc.'s GroupWise could allow an attacker to execute arbitrary code with the privileges of the affected service. This vulnerability is present in the calendar processing code, which resides within the GroupWise Internet Agent (GWIA) process. The vulnerability occurs when parsing a malformed calendar recurrence (RRULE) that recurs on weekdays. A heap based buffer overflow can be triggered due to the lack of checks to ensure that there is enough space in the buffer to hold all of the RRULE entry data. Novell GroupWise 8.0x up to (and including) 8.02HP2 are vulnerable.

  Tags:  novell heap groupwise novell-groupwise idefense-security-advisory overflow-vulnerability  

• 6:25

  iDefense Security Advisory 09.26.11 - Novell Heap Overflow

   » ‎ Packet Storm Security Advisories
  iDefense Security Advisory 09.26.11 - Remote exploitation of a heap overflow vulnerability in Novell Inc.'s GroupWise could allow an attacker to execute arbitrary code with the privileges of the affected service. This vulnerability is present in the calendar processing code, which resides within the GroupWise Internet Agent (GWIA) process. The vulnerability occurs when parsing a malformed time zone description field (TZNAME). A heap based buffer overflow can be triggered by supplying an excessively long string when copying the time zone name. Novell GroupWise 8.0x up to (and including) 8.02HP2 are vulnerable.

  Tags:  novell heap overflow time-zone-name idefense-security-advisory overflow-vulnerability  

• 6:25

  iDefense Security Advisory 09.26.11 - Novell Heap Overflow

   » ‎ Packet Storm Security Recent Files
  iDefense Security Advisory 09.26.11 - Remote exploitation of a heap overflow vulnerability in Novell Inc.'s GroupWise could allow an attacker to execute arbitrary code with the privileges of the affected service. This vulnerability is present in the calendar processing code, which resides within the GroupWise Internet Agent (GWIA) process. The vulnerability occurs when parsing a malformed time zone description field (TZNAME). A heap based buffer overflow can be triggered by supplying an excessively long string when copying the time zone name. Novell GroupWise 8.0x up to (and including) 8.02HP2 are vulnerable.

  Tags:  novell heap overflow time-zone-name idefense-security-advisory overflow-vulnerability  

• 6:25

  iDefense Security Advisory 09.26.11 - Novell Heap Overflow

   » ‎ Packet Storm Security Misc. Files
  iDefense Security Advisory 09.26.11 - Remote exploitation of a heap overflow vulnerability in Novell Inc.'s GroupWise could allow an attacker to execute arbitrary code with the privileges of the affected service. This vulnerability is present in the calendar processing code, which resides within the GroupWise Internet Agent (GWIA) process. The vulnerability occurs when parsing a malformed time zone description field (TZNAME). A heap based buffer overflow can be triggered by supplying an excessively long string when copying the time zone name. Novell GroupWise 8.0x up to (and including) 8.02HP2 are vulnerable.

  Tags:  novell heap overflow time-zone-name idefense-security-advisory overflow-vulnerability  

• September 22, 2011
• 13:44

  [Paper] Advanced AIX Heap Exploitation Methods

   » ‎ SecDocs
  Authors: Tim Shelton
  Tags: heap overflow heap AIX
  Event: Black Hat USA 2010
  Abstract: With the ever increasing importance of providing and maintaining reliable services for both infrastructure support as well as business continuity, companies rely upon the IBM AIX operating system. In most cases, these machines hold the most critical data available for their business which makes IBM AIX a highly valued target from a hacker’s perspective. Over the past decade, hackers have increasingly focused on infiltrating valuable data such as proprietary databases, credit information, product pricing information and more. As such, the importance of protecting the IBM AIX operating system should be priority one. Initial heap exploitation research was first documented and published by David Litchfield, in August of 2005. His paper entitled, ”An Introduction to Heap overflows on AIX 5.3L” focused on AIX heap abuse within the utilization of heap’s free()/rightmost() functions. While Litchfield’s method solves one scenario, there is an additional scenario that has been left out. So what is the difference between the leftmost call versus rightmost? A stack trace will show leftmost is utilized when a fresh heap segment is requested, while rightmost is utilized when the application requests the heap to remove a previously allocated chunk from memory.

  Tags:  heap aix ibm tim-shelton-tags david-litchfield usa aix-operating-system exploitation-methods  

• 13:44

  [Slides] Advanced AIX Heap Exploitation Methods

   » ‎ SecDocs
  Authors: Tim Shelton
  Tags: heap overflow heap AIX
  Event: Black Hat USA 2010
  Abstract: With the ever increasing importance of providing and maintaining reliable services for both infrastructure support as well as business continuity, companies rely upon the IBM AIX operating system. In most cases, these machines hold the most critical data available for their business which makes IBM AIX a highly valued target from a hacker’s perspective. Over the past decade, hackers have increasingly focused on infiltrating valuable data such as proprietary databases, credit information, product pricing information and more. As such, the importance of protecting the IBM AIX operating system should be priority one. Initial heap exploitation research was first documented and published by David Litchfield, in August of 2005. His paper entitled, ”An Introduction to Heap overflows on AIX 5.3L” focused on AIX heap abuse within the utilization of heap’s free()/rightmost() functions. While Litchfield’s method solves one scenario, there is an additional scenario that has been left out. So what is the difference between the leftmost call versus rightmost? A stack trace will show leftmost is utilized when a fresh heap segment is requested, while rightmost is utilized when the application requests the heap to remove a previously allocated chunk from memory.

  Tags:  heap aix ibm tim-shelton-tags david-litchfield usa aix-operating-system exploitation-methods  

• September 20, 2011
• 23:31

  EViews 7.0.0.1 Memory Corruption / Heap Overflow

   » ‎ Packet Storm Security Exploits
  EViews versions 7.0.0.1 and below suffer from memory corruption and heap overflow vulnerabilities.

  Tags:  corruption eviews memory memory-corruption heap overflow  

• 23:31

  EViews 7.0.0.1 Memory Corruption / Heap Overflow

   » ‎ Packet Storm Security Recent Files
  EViews versions 7.0.0.1 and below suffer from memory corruption and heap overflow vulnerabilities.

  Tags:  corruption eviews memory memory-corruption heap overflow  

• 23:31

  EViews 7.0.0.1 Memory Corruption / Heap Overflow

   » ‎ Packet Storm Security Misc. Files
  EViews versions 7.0.0.1 and below suffer from memory corruption and heap overflow vulnerabilities.

  Tags:  corruption eviews memory memory-corruption heap overflow  

• 23:27

  MetaServer RT 3.2.1.450 Heap Overflow / Denial Of Service

   » ‎ Packet Storm Security Exploits
  MetaServer RT versions 3.2.1.450 and below suffer from heap overflow and denial of service vulnerabilities.

  Tags:  metaserver heap overflow metaserver-rt denial-of-service  

• 23:27

  MetaServer RT 3.2.1.450 Heap Overflow / Denial Of Service

   » ‎ Packet Storm Security Recent Files
  MetaServer RT versions 3.2.1.450 and below suffer from heap overflow and denial of service vulnerabilities.

  Tags:  metaserver heap overflow metaserver-rt denial-of-service  

• 23:27

  MetaServer RT 3.2.1.450 Heap Overflow / Denial Of Service

   » ‎ Packet Storm Security Misc. Files
  MetaServer RT versions 3.2.1.450 and below suffer from heap overflow and denial of service vulnerabilities.

  Tags:  metaserver heap overflow metaserver-rt denial-of-service  

• September 17, 2011
• 12:12

  RealNetworks Realplayer QCP Parsing Heap Overflow

   » ‎ Packet Storm Security Exploits
  This Metasploit module exploits a heap overflow in Realplayer when handling a .QCP file. The specific flaw exists within qcpfformat.dll. A static 256 byte buffer is allocated on the heap and user-supplied data from the file is copied within a memory copy loop. This allows a remote attacker to execute arbitrary code running in the context of the web browser via a .QCP file with a specially crafted "fmt" chunk. At this moment this module exploits the flaw on Windows XP IE6, IE7.

  Tags:  qcp heap realplayer qcp-file memory-copy  

• 12:12

  RealNetworks Realplayer QCP Parsing Heap Overflow

   » ‎ Packet Storm Security Recent Files
  This Metasploit module exploits a heap overflow in Realplayer when handling a .QCP file. The specific flaw exists within qcpfformat.dll. A static 256 byte buffer is allocated on the heap and user-supplied data from the file is copied within a memory copy loop. This allows a remote attacker to execute arbitrary code running in the context of the web browser via a .QCP file with a specially crafted "fmt" chunk. At this moment this module exploits the flaw on Windows XP IE6, IE7.

  Tags:  qcp heap realplayer qcp-file memory-copy  

• 12:12

  RealNetworks Realplayer QCP Parsing Heap Overflow

   » ‎ Packet Storm Security Misc. Files
  This Metasploit module exploits a heap overflow in Realplayer when handling a .QCP file. The specific flaw exists within qcpfformat.dll. A static 256 byte buffer is allocated on the heap and user-supplied data from the file is copied within a memory copy loop. This allows a remote attacker to execute arbitrary code running in the context of the web browser via a .QCP file with a specially crafted "fmt" chunk. At this moment this module exploits the flaw on Windows XP IE6, IE7.

  Tags:  qcp heap realplayer qcp-file memory-copy  

• September 16, 2011
• 21:00

  [remote exploits] - RealNetworks Realplayer QCP Parsing Heap Overflow

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [remote exploits] - RealNetworks Realplayer QCP Parsing Heap Overflow

  Tags:  qcp realnetworks realplayer heap overflow  

• 14:00

  [remote exploits] - RealNetworks Realplayer QCP Parsing Heap Overflow

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [remote exploits] - RealNetworks Realplayer QCP Parsing Heap Overflow

  Tags:  qcp realnetworks realplayer heap overflow  

• September 14, 2011
• 0:00

  Vuln: Siemens SIMATIC WinCC Flexible Runtime Advanced Loader Heap Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Siemens SIMATIC WinCC Flexible Runtime Advanced Loader Heap Buffer Overflow Vulnerability

  Tags:  wincc siemens simatic buffer-overflow-vulnerability heap siemens-simatic  

• 0:00

  Vuln: CUPS 'gif_read_lzw()' CVE-2011-3170 GIF File Heap Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  CUPS 'gif_read_lzw()' CVE-2011-3170 GIF File Heap Buffer Overflow Vulnerability

  Tags:  gif read cups buffer-overflow-vulnerability heap  

• September 13, 2011
• 21:49

  Progea Movicon / PowerHMI 11.2.1085 Heap Overflow

   » ‎ Packet Storm Security Exploits
  Pragea Movicon / PowerHMI versions 11.2.1085 and below suffer from a heap overflow vulnerability.

  Tags:  overflow-vulnerability movicon heap  

• 21:49

  Progea Movicon / PowerHMI 11.2.1085 Heap Overflow

   » ‎ Packet Storm Security Recent Files
  Pragea Movicon / PowerHMI versions 11.2.1085 and below suffer from a heap overflow vulnerability.

  Tags:  powerhmi movicon heap overflow-vulnerability  

• 21:49

  Progea Movicon / PowerHMI 11.2.1085 Heap Overflow

   » ‎ Packet Storm Security Misc. Files
  Pragea Movicon / PowerHMI versions 11.2.1085 and below suffer from a heap overflow vulnerability.

  Tags:  powerhmi movicon heap overflow-vulnerability  

• August 23, 2011
• 21:00

  [remote exploits] - F-Secure Multiple Products ActiveX SEH Overwrite (Heap Spray)

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [remote exploits] - F-Secure Multiple Products ActiveX SEH Overwrite (Heap Spray)

  Tags:  f-secure multiple activex multiple-products heap exploits  

• 18:00

  [remote exploits] - F-Secure Multiple Products ActiveX SEH Overwrite (Heap Spray)

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [remote exploits] - F-Secure Multiple Products ActiveX SEH Overwrite (Heap Spray)

  Tags:  f-secure multiple activex multiple-products heap exploits  

• August 19, 2011
• 7:17

  Firefox 4 / 5 Heap Overflows

   » ‎ Packet Storm Security Advisories
  Context discovered two memory corruption issues related to Firefox code that processes WebGL, that could result in remote code execution via a malicious web page. Heap overflows make use of the WebGL shader compiler and the ANGLE library. Versions 4.0.1 and 5 are affected.

  Tags:  code heap firefox corruption-issues memory-corruption code-execution  

• 7:17

  Firefox 4 / 5 Heap Overflows

   » ‎ Packet Storm Security Recent Files
  Context discovered two memory corruption issues related to Firefox code that processes WebGL, that could result in remote code execution via a malicious web page. Heap overflows make use of the WebGL shader compiler and the ANGLE library. Versions 4.0.1 and 5 are affected.

  Tags:  code heap firefox corruption-issues memory-corruption code-execution  

• 7:17

  Firefox 4 / 5 Heap Overflows

   » ‎ Packet Storm Security Misc. Files
  Context discovered two memory corruption issues related to Firefox code that processes WebGL, that could result in remote code execution via a malicious web page. Heap overflows make use of the WebGL shader compiler and the ANGLE library. Versions 4.0.1 and 5 are affected.

  Tags:  code heap firefox corruption-issues memory-corruption code-execution  

• August 17, 2011
• 23:59

  Notepad++ NppFTP Heap Overflow

   » ‎ Packet Storm Security Exploits
  Notepad++ NppFTP plugin LIST command remote heap overflow proof of concept exploit.

  Tags:  notepad heap nppftp proof-of-concept  

• August 16, 2011
• 21:00

  [dos / poc] - Notepad++ NppFTP plugin LIST command Remote Heap Overflow PoC

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [dos / poc] - Notepad++ NppFTP plugin LIST command Remote Heap Overflow PoC

  Tags:  poc notepad nppftp heap  

• August 09, 2011
• 0:00

  Vuln: Apple QuickTime CVE-2011-0252 STTS Atoms Heap Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apple QuickTime CVE-2011-0252 STTS Atoms Heap Buffer Overflow Vulnerability

  Tags:  stts heap atoms apple-quicktime buffer-overflow-vulnerability  

• July 28, 2011
• 19:39

  XenApp / XenDesktop Heap Corruption

   » ‎ Packet Storm Security Exploits
  A heap corruption vulnerability has been found in the Citrix XML Service of XenApp and XenDesktop which is installed on every server used for sharing applications. Successful exploitation allows arbitrary code execution on the server running the XML service.

  Tags:  heap xendesktop xenapp arbitrary-code-execution heap-corruption citrix-xml-service  

• 19:39

  XenApp / XenDesktop Heap Corruption

   » ‎ Packet Storm Security Recent Files
  A heap corruption vulnerability has been found in the Citrix XML Service of XenApp and XenDesktop which is installed on every server used for sharing applications. Successful exploitation allows arbitrary code execution on the server running the XML service.

  Tags:  heap xendesktop xenapp arbitrary-code-execution heap-corruption citrix-xml-service  

• 19:39

  XenApp / XenDesktop Heap Corruption

   » ‎ Packet Storm Security Misc. Files
  A heap corruption vulnerability has been found in the Citrix XML Service of XenApp and XenDesktop which is installed on every server used for sharing applications. Successful exploitation allows arbitrary code execution on the server running the XML service.

  Tags:  heap xendesktop xenapp arbitrary-code-execution heap-corruption citrix-xml-service  

• July 21, 2011
• 0:00

  Vuln: Apple Mac OS X TIFF Image Handling Heap Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apple Mac OS X TIFF Image Handling Heap Buffer Overflow Vulnerability

  Tags:  buffer heap handling x-tiff-image apple-mac-os buffer-overflow-vulnerability tiff-image  

• July 20, 2011
• 15:04

  [Paper] Heap Feng Shui in JavaScript

   » ‎ SecDocs
  Authors: Alexander Sotirov
  Tags: Javascript
  Event: Black Hat Europe 2007
  

  Tags:  javascript heap paper alexander-sotirov feng-shui europe hat-europe black-hat  

• 14:58

  [Slides] Heap Feng Shui in JavaScript

   » ‎ SecDocs
  Authors: Alexander Sotirov
  Tags: Javascript
  Event: Black Hat Europe 2007
  

  Tags:  javascript authors heap alexander-sotirov feng-shui europe hat-europe black-hat  

• July 15, 2011
• 0:00

  Vuln: PCRE Regular Expression Heap Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  PCRE Regular Expression Heap Overflow Vulnerability

  Tags:  expression heap pcre overflow-vulnerability regular-expression  

• July 09, 2011
• 7:51

  ZipItFast 3.0 Heap Overflow

   » ‎ Packet Storm Security Exploits
  ZipItFast version 3.0 .zip file heap overflow exploit.

  Tags:  heap zipitfast overflow zip-file  

• 7:51

  ZipItFast 3.0 Heap Overflow

   » ‎ Packet Storm Security Recent Files
  ZipItFast version 3.0 .zip file heap overflow exploit.

  Tags:  heap zipitfast overflow zip-file  

• 7:51

  ZipItFast 3.0 Heap Overflow

   » ‎ Packet Storm Security Misc. Files
  ZipItFast version 3.0 .zip file heap overflow exploit.

  Tags:  heap zipitfast overflow zip-file  

• July 05, 2011
• 7:22

  Apple Mac OS X ImageIO TIFF Integer Overflow

   » ‎ Packet Storm Security Advisories
  A heap overflow is caused by a signedness vulnerability within copyImageBlockSetTiff(). The crash occurs within any application using the framework, including Preview, QuickLook, Safari and Mail.

  Tags:  vulnerability overflow heap x-imageio tiff-integer apple-mac-os integer-overflow apple-mac-os-x  

• July 03, 2011
• 10:55

  Winamp 5.61 Heap Overflows

   » ‎ Packet Storm Security Exploits
  Winamp versions 5.61 and below suffer from multiple heap overflow vulnerabilities.

  Tags:  winamp-versions heap overflow  

• 10:55

  Winamp 5.61 Heap Overflows

   » ‎ Packet Storm Security Recent Files
  Winamp versions 5.61 and below suffer from multiple heap overflow vulnerabilities.

  Tags:  winamp-versions heap overflow  

• 10:55

  Winamp 5.61 Heap Overflows

   » ‎ Packet Storm Security Misc. Files
  Winamp versions 5.61 and below suffer from multiple heap overflow vulnerabilities.

  Tags:  winamp-versions heap overflow  

• July 01, 2011
• 6:14

  Winamp 5.61 Heap / Integer Overflows

   » ‎ Packet Storm Security Exploits
  Winamp versions 5.61 and below suffer from multiple heap overflows and corruption and an integer overflow. Proof of concept code included.

  Tags:  integer heap winamp winamp-versions integer-overflow proof-of-concept  

• 6:14

  Winamp 5.61 Heap / Integer Overflows

   » ‎ Packet Storm Security Recent Files
  Winamp versions 5.61 and below suffer from multiple heap overflows and corruption and an integer overflow. Proof of concept code included.

  Tags:  integer heap winamp winamp-versions integer-overflow proof-of-concept  

• 6:14

  Winamp 5.61 Heap / Integer Overflows

   » ‎ Packet Storm Security Misc. Files
  Winamp versions 5.61 and below suffer from multiple heap overflows and corruption and an integer overflow. Proof of concept code included.

  Tags:  integer heap winamp winamp-versions integer-overflow proof-of-concept  

• June 29, 2011
• 0:00

  Vuln: Winamp Essentials FLV File Heap Based Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Winamp Essentials FLV File Heap Based Buffer Overflow Vulnerability

  Tags:  essentials flv winamp buffer-overflow-vulnerability based-buffer-overflow heap  

• June 28, 2011
• 0:00

  Vuln: Apple Mac OS X TIFF Image Handling Heap Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apple Mac OS X TIFF Image Handling Heap Buffer Overflow Vulnerability

  Tags:  buffer heap handling x-tiff-image apple-mac-os buffer-overflow-vulnerability tiff-image  

• June 19, 2011
• 14:24

  [Paper] Heap Feng Shui in JavaScript

   » ‎ SecDocs
  Authors: Alexander Sotirov
  Tags: browser Javascript
  Event: Black Hat USA 2007
  

  Tags:  javascript heap paper alexander-sotirov feng-shui usa black-hat  

• 14:23

  [Slides] Heap Feng Shui in JavaScript

   » ‎ SecDocs
  Authors: Alexander Sotirov
  Tags: browser Javascript
  Event: Black Hat USA 2007
  

  Tags:  javascript authors heap alexander-sotirov feng-shui usa black-hat  

• June 17, 2011
• 0:00

  Vuln: Linux Kernel Heap Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel Heap Buffer Overflow Vulnerability

  Tags:  kernel heap linux buffer-overflow-vulnerability linux-kernel  

• 0:00

  Vuln: GIMP PCX Image Parsing Heap Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  GIMP PCX Image Parsing Heap Buffer Overflow Vulnerability

  Tags:  image pcx gimp buffer-overflow-vulnerability pcx-image heap  

• June 16, 2011
• 0:00

  Vuln: Microsoft Excel Heap Memory Corruption CVE-2011-1275 Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Microsoft Excel Heap Memory Corruption CVE-2011-1275 Remote Code Execution Vulnerability

  Tags:  excel microsoft heap heap-memory memory-corruption code-execution  

• June 15, 2011
• 0:00

  Vuln: GIMP PSP Image Parsing Heap Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  GIMP PSP Image Parsing Heap Buffer Overflow Vulnerability

  Tags:  psp image gimp buffer-overflow-vulnerability psp-image heap  

• June 14, 2011
• 20:59

  Apple CoreGraphics Library Heap Memory Corruption Vulnerability

   » ‎ SecuriTeam
  Remote exploitation of a heap memory corruption vulnerability in Apple Inc.'s CoreGraphics.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  corruption heap memory apple-coregraphics heap-memory memory-corruption safer-use  

• June 06, 2011
• 19:49

  1ClickUnzip 3.00 Heap Overflow

   » ‎ Packet Storm Security Exploits
  1ClickUnzip version 3.00 heap overflow exploit that creates a malicious .zip file.

  Tags:  heap clickunzip overflow zip-file  

• 19:49

  1ClickUnzip 3.00 Heap Overflow

   » ‎ Packet Storm Security Recent Files
  1ClickUnzip version 3.00 heap overflow exploit that creates a malicious .zip file.

  Tags:  heap clickunzip overflow zip-file  

• 19:49

  1ClickUnzip 3.00 Heap Overflow

   » ‎ Packet Storm Security Misc. Files
  1ClickUnzip version 3.00 heap overflow exploit that creates a malicious .zip file.

  Tags:  heap clickunzip overflow zip-file  

• June 04, 2011
• 21:00

  [dos / poc] - 1ClickUnzip 3.00 .ZIP File Heap Overflow Vulnerability

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [dos / poc] - 1ClickUnzip 3.00 .ZIP File Heap Overflow Vulnerability

  Tags:  poc clickunzip zip overflow-vulnerability heap  

• June 02, 2011
• 0:00

  Vuln: GIMP PCX Image Parsing Heap Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  GIMP PCX Image Parsing Heap Buffer Overflow Vulnerability

  Tags:  image pcx gimp buffer-overflow-vulnerability pcx-image heap  

• May 26, 2011
• 0:00

  Vuln: libcgroup Heap Based Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libcgroup Heap Based Buffer Overflow Vulnerability

  Tags:  buffer heap libcgroup buffer-overflow-vulnerability based-buffer-overflow  

• May 25, 2011
• 8:00

  Bugtraq: CORE-2010-0908: Lotus Notes XLS viewer malformed BIFF record heap overflow

   » ‎ SecurityFocus Vulnerabilities
  CORE-2010-0908: Lotus Notes XLS viewer malformed BIFF record heap overflow

  Tags:  lotus xls notes heap overflow  

• May 15, 2011
• 21:00

  [local exploits] - AVS Ringtone Maker 1.6.1 (.au) Heap Overflow Exploit

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [local exploits] - AVS Ringtone Maker 1.6.1 (.au) Heap Overflow Exploit

  Tags:  local avs exploits heap overflow  

• 13:27

  Winamp 5.61 Heap Overflow

   » ‎ Packet Storm Security Exploits
  Winamp version 5.61 suffers from an in_midi component heap overflow vulnerability. Crash proof of concept included.

  Tags:  heap winamp overflow overflow-vulnerability crash-proof proof-of-concept  

• 13:27

  Winamp 5.61 Heap Overflow

   » ‎ Packet Storm Security Recent Files
  Winamp version 5.61 suffers from an in_midi component heap overflow vulnerability. Crash proof of concept included.

  Tags:  heap winamp overflow overflow-vulnerability crash-proof proof-of-concept  

• 13:27

  Winamp 5.61 Heap Overflow

   » ‎ Packet Storm Security Misc. Files
  Winamp version 5.61 suffers from an in_midi component heap overflow vulnerability. Crash proof of concept included.

  Tags:  heap winamp overflow overflow-vulnerability crash-proof proof-of-concept  

• May 14, 2011
• 21:00

  [dos / poc] - Winamp 5.61 'in_midi' component heap overflow (crash only)

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [dos / poc] - Winamp 5.61 'in_midi' component heap overflow (crash only)

  Tags:  poc winamp midi winamp-5 heap  

• May 09, 2011
• 0:00

  Vuln: libTIFF ThunderCode Decoder Heap Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libTIFF ThunderCode Decoder Heap Buffer Overflow Vulnerability

  Tags:  decoder thundercode libtiff buffer-overflow-vulnerability heap  

• May 06, 2011
• 15:05

  Understanding The Heap By Breaking It

   » ‎ Packet Storm Security Recent Files
  Whitepaper called Understanding the heap by breaking it. A case study of the heap as a persistent data structure through non-traditional exploitation techniques.

  Tags:  heap whitepaper understanding exploitation-techniques persistent-data data-structure  

• 15:05

  Understanding The Heap By Breaking It

   » ‎ Packet Storm Security Misc. Files
  Whitepaper called Understanding the heap by breaking it. A case study of the heap as a persistent data structure through non-traditional exploitation techniques.

  Tags:  heap whitepaper understanding exploitation-techniques persistent-data data-structure  

• May 05, 2011
• 13:37

  [Paper] Understanding the Heap by Breaking It

   » ‎ SecDocs
  Authors: Justin Ferguson
  Tags: heap overflow exploiting heap
  Event: Black Hat USA 2007
  

  Tags:  heap understanding paper justin-ferguson-tags usa justin-ferguson black-hat  

• 13:36

  [Slides] Understanding the Heap by Breaking It

   » ‎ SecDocs
  Authors: Justin Ferguson
  Tags: heap overflow exploiting heap
  Event: Black Hat USA 2007
  

  Tags:  authors heap understanding justin-ferguson-tags usa justin-ferguson black-hat  

• April 28, 2011
• 20:12

  xMatters AlarmPoint APClient 3.2.0 Heap Buffer Overflow

   » ‎ Packet Storm Security Exploits
  xMatters AlarmPoint APClient version 3.2.0 suffers from a heap buffer overflow vulnerability.

  Tags:  apclient alarmpoint heap buffer-overflow-vulnerability  

• 20:12

  xMatters AlarmPoint APClient 3.2.0 Heap Buffer Overflow

   » ‎ Packet Storm Security Recent Files
  xMatters AlarmPoint APClient version 3.2.0 suffers from a heap buffer overflow vulnerability.

  Tags:  apclient alarmpoint heap buffer-overflow-vulnerability  

• 20:12

  xMatters AlarmPoint APClient 3.2.0 Heap Buffer Overflow

   » ‎ Packet Storm Security Misc. Files
  xMatters AlarmPoint APClient version 3.2.0 suffers from a heap buffer overflow vulnerability.

  Tags:  apclient alarmpoint heap buffer-overflow-vulnerability  

• April 27, 2011
• 11:28

  [Slides] Defeating Web Browser Heap Spray Attacks

   » ‎ SecDocs
  Authors: Moti Joseph Stephan Chenette
  Tags: heap overflow exploiting heap browser
  Event: Black Hat USA 2007
  

  Tags:  black-hat heap overflow  

• April 23, 2011
• 21:00

  [dos / poc] - eXPert PDF Editor 7 Professional Heap PoC

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [dos / poc] - eXPert PDF Editor 7 Professional Heap PoC

  Tags:  poc pdf expert heap  

• 14:00

  [dos / poc] - eXPert PDF Editor 7 Professional Heap PoC

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [dos / poc] - eXPert PDF Editor 7 Professional Heap PoC

  Tags:  poc pdf expert heap  

• April 22, 2011
• 10:58

  PHP Phar Extension Heap Overflow

   » ‎ Packet Storm Security Exploits
  The PHP phar extension suffers from a heap overflow vulnerability. PHP version 5.3.6 is affected with phar extension version 1.1.1.

  Tags:  php extension phar overflow-vulnerability heap  

• 10:58

  PHP Phar Extension Heap Overflow

   » ‎ Packet Storm Security Recent Files
  The PHP phar extension suffers from a heap overflow vulnerability. PHP version 5.3.6 is affected with phar extension version 1.1.1.

  Tags:  php extension phar overflow-vulnerability heap  

• 10:58

  PHP Phar Extension Heap Overflow

   » ‎ Packet Storm Security Misc. Files
  The PHP phar extension suffers from a heap overflow vulnerability. PHP version 5.3.6 is affected with phar extension version 1.1.1.

  Tags:  php extension phar overflow-vulnerability heap  

• April 19, 2011
• 0:00

  Vuln: libcgroup Heap Based Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libcgroup Heap Based Buffer Overflow Vulnerability

  Tags:  buffer heap libcgroup buffer-overflow-vulnerability based-buffer-overflow  

• April 11, 2011
• 17:06

  Microsoft Reader 2.1.1.3143 / 2.6.1.7169 Heap Overflow

   » ‎ Packet Storm Security Exploits
  Microsoft Reader versions 2.1.1.3143 and below and versions 2.6.1.7169 and below suffer from a heap overflow vulnerability caused by the allocation of a certain amount of memory and the copying of arbitrary data during the decompression of the sections. Proof of concept code included.

  Tags:  microsoft heap reader overflow-vulnerability proof-of-concept microsoft-reader  

• 17:06

  Microsoft Reader 2.1.1.3143 / 2.6.1.7169 Heap Overflow

   » ‎ Packet Storm Security Recent Files
  Microsoft Reader versions 2.1.1.3143 and below and versions 2.6.1.7169 and below suffer from a heap overflow vulnerability caused by the allocation of a certain amount of memory and the copying of arbitrary data during the decompression of the sections. Proof of concept code included.

  Tags:  microsoft heap reader overflow-vulnerability proof-of-concept microsoft-reader  

• 17:06

  Microsoft Reader 2.1.1.3143 / 2.6.1.7169 Heap Overflow

   » ‎ Packet Storm Security Misc. Files
  Microsoft Reader versions 2.1.1.3143 and below and versions 2.6.1.7169 and below suffer from a heap overflow vulnerability caused by the allocation of a certain amount of memory and the copying of arbitrary data during the decompression of the sections. Proof of concept code included.

  Tags:  microsoft heap reader overflow-vulnerability proof-of-concept microsoft-reader  

• 7:41

  Vallen Zipper 2.30 ZIP Heap Overflow

   » ‎ Packet Storm Security Exploits
  Vallen Zipper version 2.30 .zip file heap overflow exploit.

  Tags:  vallen zipper zip heap  

• 7:41

  Vallen Zipper 2.30 ZIP Heap Overflow

   » ‎ Packet Storm Security Recent Files
  Vallen Zipper version 2.30 .zip file heap overflow exploit.

  Tags:  vallen zipper zip heap  

• 7:41

  Vallen Zipper 2.30 ZIP Heap Overflow

   » ‎ Packet Storm Security Misc. Files
  Vallen Zipper version 2.30 .zip file heap overflow exploit.

  Tags:  vallen zipper zip heap  

• 0:00

  Vuln: libTIFF ThunderCode Decoder Heap Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libTIFF ThunderCode Decoder Heap Buffer Overflow Vulnerability

  Tags:  decoder thundercode libtiff buffer-overflow-vulnerability heap  

• April 08, 2011
• 14:02

  Compost heap temperature logger helps keep things hot

   » ‎ Hack a Day
  HackHut user [lackawanna] is looking to start his own compost pile, but as many urban composters discover, things can get quite smelly if you don’t manage it properly. The process of composting is broken up into two phases, aerobic and anaerobic decomposition. The former is the first stage to occur and produces plenty of heat, [...]

  Tags:  temperature heap compost compost-heap compost-pile temperature-logger chemistry hacks  

• 0:00

  Vuln: libcgroup Heap Based Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libcgroup Heap Based Buffer Overflow Vulnerability

  Tags:  buffer heap libcgroup buffer-overflow-vulnerability based-buffer-overflow  

• April 04, 2011
• 0:00

  Vuln: libTIFF ThunderCode Decoder Heap Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libTIFF ThunderCode Decoder Heap Buffer Overflow Vulnerability

  Tags:  decoder thundercode libtiff buffer-overflow-vulnerability heap  

• March 28, 2011
• 0:00

  Vuln: libcgroup Heap Based Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libcgroup Heap Based Buffer Overflow Vulnerability

  Tags:  buffer heap libcgroup buffer-overflow-vulnerability based-buffer-overflow  

• March 25, 2011
• 0:00

  Vuln: libcgroup Heap Based Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libcgroup Heap Based Buffer Overflow Vulnerability

  Tags:  buffer heap libcgroup buffer-overflow-vulnerability based-buffer-overflow  

• March 21, 2011
• 12:44

  RealPlayer 14.0.1.633 Heap Overflow

   » ‎ Packet Storm Security Exploits
  RealPlayer versions 14.0.1.633 and below suffers from a heap overflow during the handling of IVR files. This is caused by the allocation of a certain amount of data (frame size) decided by the attacker and the copying of another arbitrary amount on the same buffer. Proof of concept exploit included.

  Tags:  realplayer heap overflow proof-of-concept data-frame frame-size  

• 12:44

  RealPlayer 14.0.1.633 Heap Overflow

   » ‎ Packet Storm Security Recent Files
  RealPlayer versions 14.0.1.633 and below suffers from a heap overflow during the handling of IVR files. This is caused by the allocation of a certain amount of data (frame size) decided by the attacker and the copying of another arbitrary amount on the same buffer. Proof of concept exploit included.

  Tags:  realplayer heap overflow proof-of-concept data-frame frame-size  

• 12:44

  RealPlayer 14.0.1.633 Heap Overflow

   » ‎ Packet Storm Security Misc. Files
  RealPlayer versions 14.0.1.633 and below suffers from a heap overflow during the handling of IVR files. This is caused by the allocation of a certain amount of data (frame size) decided by the attacker and the copying of another arbitrary amount on the same buffer. Proof of concept exploit included.

  Tags:  realplayer heap overflow proof-of-concept data-frame frame-size  

• 10:00

  Bugtraq: Heap overflow in RealPlayer 14.0.1.633

   » ‎ SecurityFocus Vulnerabilities
  Heap overflow in RealPlayer 14.0.1.633

  Tags:  realplayer heap overflow  

• 0:00

  Vuln: MaraDNS 'compress_add_dlabel_points()' Heap Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  MaraDNS 'compress_add_dlabel_points()' Heap Buffer Overflow Vulnerability

  Tags:  dlabel heap maradns buffer-overflow-vulnerability  

• March 17, 2011
• 0:00

  Vuln: libcgroup Heap Based Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libcgroup Heap Based Buffer Overflow Vulnerability

  Tags:  buffer-overflow-vulnerability based-buffer-overflow heap  

• March 16, 2011
• 0:00

  Vuln: WellinTech KingView 'KVWebSvr.dll' ActiveX Control Heap Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  WellinTech KingView 'KVWebSvr.dll' ActiveX Control Heap Buffer Overflow Vulnerability

  Tags:  kingview kvwebsvr wellintech buffer-overflow-vulnerability activex-control heap  

• March 15, 2011
• 15:00

  [remote exploits] - Kingview 6.53 SCADA HMI HistorySvr Heap Overflow

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [remote exploits] - Kingview 6.53 SCADA HMI HistorySvr Heap Overflow

  Tags:  kingview hmi scada heap overflow exploits  

• March 11, 2011
• 14:17

  Linux NTP Query Client 4.2.6p1 Heap Overflow

   » ‎ Packet Storm Security Advisories
  Linux NTP query client version 4.2.6p1 suffers from a heap overflow vulnerability.

  Tags:  query ntp linux overflow-vulnerability heap  

• 14:17

  Linux NTP Query Client 4.2.6p1 Heap Overflow

   » ‎ Packet Storm Security Recent Files
  Linux NTP query client version 4.2.6p1 suffers from a heap overflow vulnerability.

  Tags:  query ntp linux overflow-vulnerability heap  

• 14:17

  Linux NTP Query Client 4.2.6p1 Heap Overflow

   » ‎ Packet Storm Security Misc. Files
  Linux NTP query client version 4.2.6p1 suffers from a heap overflow vulnerability.

  Tags:  query ntp linux overflow-vulnerability heap  

• 14:00

  [webapps / 0day] - Linux NTP query client v4.2.6p1 Heap Overflow Vulnerability

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [webapps / 0day] - Linux NTP query client v4.2.6p1 Heap Overflow Vulnerability

  Tags:  day ntp webapps overflow-vulnerability heap linux  

• March 04, 2011
• 14:22

  Heap Spray Attack Whitepaper

   » ‎ Packet Storm Security Recent Files
  This is a whitepaper called Heap Spray Attack. Written in Portuguese.

  Tags:  heap attack spray portuguese  

• 14:22

  Heap Spray Attack Whitepaper

   » ‎ Packet Storm Security Misc. Files
  This is a whitepaper called Heap Spray Attack. Written in Portuguese.

  Tags:  heap attack spray portuguese  

• March 03, 2011
• 15:41

  iDEFENSE Security Advisory 2011-03-02.1

   » ‎ Packet Storm Security Advisories
  iDefense Security Advisory 03.02.11 - Remote exploitation of a heap memory corruption vulnerability in Apple Inc.'s CoreGraphics library could allow an attacker to execute arbitrary code with the privileges of the current user. This vulnerability occurs during the processing of an embedded International Color Consortium (ICC) profile within a JPEG image. A small block of heap memory may be allocated for processing certain profile data. An index value is used to reference locations within this heap block. The index value can be manipulated in a manner that results in multiple memory writes to locations outside the bounds of the heap allocated block. This condition may lead to arbitrary code execution.

  Tags:  memory idefense heap arbitrary-code-execution idefense-security-advisory heap-memory  

• 15:41

  iDEFENSE Security Advisory 2011-03-02.1

   » ‎ Packet Storm Security Recent Files
  iDefense Security Advisory 03.02.11 - Remote exploitation of a heap memory corruption vulnerability in Apple Inc.'s CoreGraphics library could allow an attacker to execute arbitrary code with the privileges of the current user. This vulnerability occurs during the processing of an embedded International Color Consortium (ICC) profile within a JPEG image. A small block of heap memory may be allocated for processing certain profile data. An index value is used to reference locations within this heap block. The index value can be manipulated in a manner that results in multiple memory writes to locations outside the bounds of the heap allocated block. This condition may lead to arbitrary code execution.

  Tags:  memory idefense heap arbitrary-code-execution idefense-security-advisory heap-memory  

• 15:41

  iDEFENSE Security Advisory 2011-03-02.1

   » ‎ Packet Storm Security Misc. Files
  iDefense Security Advisory 03.02.11 - Remote exploitation of a heap memory corruption vulnerability in Apple Inc.'s CoreGraphics library could allow an attacker to execute arbitrary code with the privileges of the current user. This vulnerability occurs during the processing of an embedded International Color Consortium (ICC) profile within a JPEG image. A small block of heap memory may be allocated for processing certain profile data. An index value is used to reference locations within this heap block. The index value can be manipulated in a manner that results in multiple memory writes to locations outside the bounds of the heap allocated block. This condition may lead to arbitrary code execution.

  Tags:  memory idefense heap arbitrary-code-execution idefense-security-advisory heap-memory  

• 11:11

  iDEFENSE Security Advisory 2011-03-01.1

   » ‎ Packet Storm Security Advisories
  iDefense Security Advisory 03.01.11 - Remote exploitation of a heap memory corruption vulnerability in Apple Inc.'s CoreGraphics library could allow an attacker to execute arbitrary code with the privileges of the current user. This vulnerability occurs during the processing of an embedded International Color Consortium (ICC) profile within a JPEG image. A small block of heap memory may be allocated for processing certain profile data. An index value is used to reference locations within this heap block. The index value can be manipulated in a manner that results in multiple memory writes to locations outside the bounds of the heap allocated block. This condition may lead to arbitrary code execution.

  Tags:  memory idefense heap arbitrary-code-execution idefense-security-advisory heap-memory  

• 11:11

  iDEFENSE Security Advisory 2011-03-01.1

   » ‎ Packet Storm Security Recent Files
  iDefense Security Advisory 03.01.11 - Remote exploitation of a heap memory corruption vulnerability in Apple Inc.'s CoreGraphics library could allow an attacker to execute arbitrary code with the privileges of the current user. This vulnerability occurs during the processing of an embedded International Color Consortium (ICC) profile within a JPEG image. A small block of heap memory may be allocated for processing certain profile data. An index value is used to reference locations within this heap block. The index value can be manipulated in a manner that results in multiple memory writes to locations outside the bounds of the heap allocated block. This condition may lead to arbitrary code execution.

  Tags:  memory idefense heap arbitrary-code-execution idefense-security-advisory heap-memory  

• 11:11

  iDEFENSE Security Advisory 2011-03-01.1

   » ‎ Packet Storm Security Misc. Files
  iDefense Security Advisory 03.01.11 - Remote exploitation of a heap memory corruption vulnerability in Apple Inc.'s CoreGraphics library could allow an attacker to execute arbitrary code with the privileges of the current user. This vulnerability occurs during the processing of an embedded International Color Consortium (ICC) profile within a JPEG image. A small block of heap memory may be allocated for processing certain profile data. An index value is used to reference locations within this heap block. The index value can be manipulated in a manner that results in multiple memory writes to locations outside the bounds of the heap allocated block. This condition may lead to arbitrary code execution.

  Tags:  memory idefense heap arbitrary-code-execution idefense-security-advisory heap-memory  

• March 02, 2011
• 16:40

  RealPlayer RA5 Data Handling Heap Overflow Vulnerability

   » ‎ SecuriTeam
  RealPlayer contains a vulnerability caused by a heap overflow error when handling malformed RA5 files.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  realplayer heap overflow overflow-vulnerability overflow-error safer-use  

• 16:40

  RealPlayer RealMedia Data Handling Heap Overflow Vulnerabilities

   » ‎ SecuriTeam
  RealPlayer contains a vulnerability caused by a heap overflow error when handling Audio data within media files.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  realplayer heap overflow overflow-error safer-use  

• March 01, 2011
• 0:00

  Vuln: abcm2ps 'getarena()' Heap Based Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  abcm2ps 'getarena()' Heap Based Buffer Overflow Vulnerability

  Tags:  getarena heap abcm buffer-overflow-vulnerability based-buffer-overflow  

• February 25, 2011
• 0:00

  Vuln: Linux Kernel Heap Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel Heap Buffer Overflow Vulnerability

  Tags:  kernel heap linux buffer-overflow-vulnerability linux-kernel  

• February 21, 2011
• 0:00

  Vuln: Mozilla Firefox 3.5/3.6 Remote Heap Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Mozilla Firefox 3.5/3.6 Remote Heap Buffer Overflow Vulnerability

  Tags:  mozilla remote firefox buffer-overflow-vulnerability mozilla-firefox heap  

• February 14, 2011
• 14:00

  [dos / poc] - MS Windows Server 2003 AD Pre-Auth BROWSER ELECTION Heap Overflow

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [dos / poc] - MS Windows Server 2003 AD Pre-Auth BROWSER ELECTION Heap Overflow

  Tags:  dos poc windows ms-windows heap  

• 13:28

  Microsoft Windows Server 2003 AD Pre-Auth Heap Overflow

   » ‎ Packet Storm Security Exploits
  Microsoft Windows Server 2003 AD pre-auth browser election remote heap overflow exploit.

  Tags:  server microsoft windows microsoft-windows-server heap overflow  

• 13:28

  Microsoft Windows Server 2003 AD Pre-Auth Heap Overflow

   » ‎ Packet Storm Security Recent Files
  Microsoft Windows Server 2003 AD pre-auth browser election remote heap overflow exploit.

  Tags:  server microsoft windows microsoft-windows-server heap overflow  

• 13:28

  Microsoft Windows Server 2003 AD Pre-Auth Heap Overflow

   » ‎ Packet Storm Security Misc. Files
  Microsoft Windows Server 2003 AD pre-auth browser election remote heap overflow exploit.

  Tags:  server microsoft windows microsoft-windows-server heap overflow  

• January 21, 2011
• 0:00

  Vuln: Adobe Flash Player (CVE-2010-2167) Multiple Heap Buffer Overflow Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  Adobe Flash Player (CVE-2010-2167) Multiple Heap Buffer Overflow Vulnerabilities

  Tags:  player adobe flash buffer-overflow-vulnerabilities adobe-flash-player heap  

• January 13, 2011
• 10:22

  Avira AntiVir Personal Edition Heap Overflow / Memory Overwrite

   » ‎ Packet Storm Security Exploits
  This archive holds advisories, exploits, and even a video for multiple Avira vulnerabilities. Avira AntiVir Personal Edition with avguard.exe version 7.00.00.52 suffers from a heap overflow. avgntdd.sys suffers from arbitrary memory overwrite and trusted input vulnerabilities.

  Tags:  personal antivir avira exe-version personal-edition heap  

• 10:22

  Avira AntiVir Personal Edition Heap Overflow / Memory Overwrite

   » ‎ Packet Storm Security Recent Files
  This archive holds advisories, exploits, and even a video for multiple Avira vulnerabilities. Avira AntiVir Personal Edition with avguard.exe version 7.00.00.52 suffers from a heap overflow. avgntdd.sys suffers from arbitrary memory overwrite and trusted input vulnerabilities.

  Tags:  personal antivir avira exe-version personal-edition heap  

• 10:22

  Avira AntiVir Personal Edition Heap Overflow / Memory Overwrite

   » ‎ Packet Storm Security Misc. Files
  This archive holds advisories, exploits, and even a video for multiple Avira vulnerabilities. Avira AntiVir Personal Edition with avguard.exe version 7.00.00.52 suffers from a heap overflow. avgntdd.sys suffers from arbitrary memory overwrite and trusted input vulnerabilities.

  Tags:  personal antivir avira exe-version personal-edition heap  

• January 12, 2011
• 0:00

  Vuln: KingView Heap Based Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  KingView Heap Based Buffer Overflow Vulnerability

  Tags:  kingview buffer heap buffer-overflow-vulnerability based-buffer-overflow  

• January 10, 2011
• 0:00

  Vuln: FriBidi Python binding (pyfribidi) Heap Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  FriBidi Python binding (pyfribidi) Heap Buffer Overflow Vulnerability

  Tags:  python fribidi pyfribidi buffer-overflow-vulnerability heap  

• January 09, 2011
• 20:04

  KingView 6.53 SCADA HMI Heap Overflow

   » ‎ Packet Storm Security Exploits
  KingView version 6.53 SCADA HMI heap overflow proof of concept exploit.

  Tags:  kingview hmi scada proof-of-concept heap overflow  

• 20:04

  KingView 6.53 SCADA HMI Heap Overflow

   » ‎ Packet Storm Security Recent Files
  KingView version 6.53 SCADA HMI heap overflow proof of concept exploit.

  Tags:  kingview hmi scada proof-of-concept heap overflow  

• 14:00

  [remote exploits] - MS10-081: Windows Common Control Library (Comctl32) Heap Overflow

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [remote exploits] - MS10-081: Windows Common Control Library (Comctl32) Heap Overflow

  Tags:  exploit common remote common-control-library windows-common-control heap  

• January 08, 2011
• 14:00

  [remote exploits] - KingView 6.5.3 SCADA HMI Heap Overflow PoC

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [remote exploits] - KingView 6.5.3 SCADA HMI Heap Overflow PoC

  Tags:  kingview scada exploits heap overflow  

• January 07, 2011
• 0:00

  Vuln: Mozilla Firefox 3.5/3.6 Remote Heap Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Mozilla Firefox 3.5/3.6 Remote Heap Buffer Overflow Vulnerability

  Tags:  buffer-overflow-vulnerability mozilla-firefox heap  

• December 29, 2010
• 0:00

  Vuln: Tor Unspecified Heap Based Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Tor Unspecified Heap Based Buffer Overflow Vulnerability

  Tags:  buffer heap overflow tor-unspecified buffer-overflow-vulnerability based-buffer-overflow  

• December 22, 2010
• 0:00

  Vuln: Tor Unspecified Heap Based Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Tor Unspecified Heap Based Buffer Overflow Vulnerability

  Tags:  buffer heap overflow tor-unspecified buffer-overflow-vulnerability based-buffer-overflow  

• December 17, 2010
• 13:15

  Heap Taichi: Exploiting Memory Allocation Granularity In Heap-Spraying Attacks

   » ‎ Packet Storm Security Recent Files
  Whitepaper called Heap Taichi: Exploiting Memory Allocation Granularity in Heap-Spraying Attacks.

  Tags:  memory exploiting taichi memory-allocation granularity heap  

• 13:15

  Heap Taichi: Exploiting Memory Allocation Granularity In Heap-Spraying Attacks

   » ‎ Packet Storm Security Misc. Files
  Whitepaper called Heap Taichi: Exploiting Memory Allocation Granularity in Heap-Spraying Attacks.

  Tags:  memory exploiting taichi memory-allocation granularity heap  

• December 15, 2010
• 0:00

  Vuln: Real Networks RealPlayer 'GIF87a' File Parsing Heap Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Real Networks RealPlayer 'GIF87a' File Parsing Heap Overflow Vulnerability

  Tags:  realplayer networks real overflow-vulnerability real-networks heap