jetlib.sec » Tags » opcode

Feeds

133444 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

23 items tagged "opcode"

Related tags: code execution [+], based buffer overflow [+], sunway [+], snmp [+], php [+], pdf [+], omniinet [+], mops [+], information leak [+], buffer overflow [+], stack [+], oracle java [+], java [+], heap memory [+], forcecontrol [+], font [+], emc [+], buffer [+], attacker [+], arbitrary code [+], zero day [+], xor [+], vulnerability [+], rpc [+], ftagent [+], exploits [+], code [+], cmsd [+], buffer overflow vulnerability [+], autostart [+], arbitrary code execution [+], adobe flash player [+], adobe [+], txt [+], remote [+], pycommand [+], networker [+], indexd [+], exploit [+], exe [+], bdasm [+], address space [+]

• February 22, 2012
• 21:30

  Oracle Java True Type Font IDEF Opcode Parsing Remote Code Execution

   » ‎ Packet Storm Security Advisories
  A vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Java handles True Type Font files. When reading a font file, Java will use the MaxInstructionSize from the maxp table to create a heap memory location to store all the Instruction Definition found in the Font Program 'fpgm' table. However, when Java encounters an IDEF opcode (0x89) in the opcode stream it never checks the size of the MaxInstructionSize which can result in a heap buffer overflow. This can lead to remote code execution under the context of the current process.

  Tags:  java opcode font heap-memory oracle-java code-execution  

• 21:30

  Oracle Java True Type Font IDEF Opcode Parsing Remote Code Execution

   » ‎ Packet Storm Security Recent Files
  A vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Java handles True Type Font files. When reading a font file, Java will use the MaxInstructionSize from the maxp table to create a heap memory location to store all the Instruction Definition found in the Font Program 'fpgm' table. However, when Java encounters an IDEF opcode (0x89) in the opcode stream it never checks the size of the MaxInstructionSize which can result in a heap buffer overflow. This can lead to remote code execution under the context of the current process.

  Tags:  java opcode font heap-memory oracle-java code-execution  

• 21:30

  Oracle Java True Type Font IDEF Opcode Parsing Remote Code Execution

   » ‎ Packet Storm Security Misc. Files
  A vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Java handles True Type Font files. When reading a font file, Java will use the MaxInstructionSize from the maxp table to create a heap memory location to store all the Instruction Definition found in the Font Program 'fpgm' table. However, when Java encounters an IDEF opcode (0x89) in the opcode stream it never checks the size of the MaxInstructionSize which can result in a heap buffer overflow. This can lead to remote code execution under the context of the current process.

  Tags:  java opcode font heap-memory oracle-java code-execution  

• February 08, 2012
• 11:00

  Bugtraq: ZDI-12-025 : EMC Networker indexd.exe Opcode 0x01 Parsing Remote Code Execution

   » ‎ SecurityFocus Vulnerabilities
  ZDI-12-025 : EMC Networker indexd.exe Opcode 0x01 Parsing Remote Code Execution

  Tags:  indexd emc networker code-execution opcode  

• February 02, 2012
• 18:35

  Sunway Forcecontrol SNMP NetDBServer.exe Opcode 0x57

   » ‎ Packet Storm Security Exploits
  This Metasploit module exploits a stack based buffer overflow found in the SNMP NetDBServer service of Sunway Forcecontrol

  Tags:  forcecontrol sunway snmp based-buffer-overflow opcode stack  

• 18:35

  Sunway Forcecontrol SNMP NetDBServer.exe Opcode 0x57

   » ‎ Packet Storm Security Recent Files
  This Metasploit module exploits a stack based buffer overflow found in the SNMP NetDBServer service of Sunway Forcecontrol

  Tags:  forcecontrol sunway snmp based-buffer-overflow opcode stack  

• 18:35

  Sunway Forcecontrol SNMP NetDBServer.exe Opcode 0x57

   » ‎ Packet Storm Security Misc. Files
  This Metasploit module exploits a stack based buffer overflow found in the SNMP NetDBServer service of Sunway Forcecontrol

  Tags:  forcecontrol sunway snmp based-buffer-overflow opcode stack  

• 14:00

  [remote exploits] - Sunway Forcecontrol SNMP NetDBServer.exe Opcode 0x57

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [remote exploits] - Sunway Forcecontrol SNMP NetDBServer.exe Opcode 0x57

  Tags:  exploit sunway remote opcode snmp exploits  

• August 24, 2011
• 20:00

  Bugtraq: ZDI-11-275: EMC Autostart ftAgent Opcode 0x11 Parsing Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  ZDI-11-275: EMC Autostart ftAgent Opcode 0x11 Parsing Remote Code Execution Vulnerability

  Tags:  ftagent emc autostart code-execution opcode  

• 19:00

  Bugtraq: ZDI-11-274: EMC Autostart ftAgent Opcode 0x140 Parsing Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  ZDI-11-274: EMC Autostart ftAgent Opcode 0x140 Parsing Remote Code Execution Vulnerability

  Tags:  ftagent emc autostart code-execution opcode  

• July 02, 2011
• 4:47

  HP OmniInet.exe Opcode 27 Buffer Overflow

   » ‎ Packet Storm Security Exploits
  This Metasploit module exploits a buffer overflow in the Hewlett-Packard OmniInet NT Service. By sending a specially crafted opcode 27 packet, a remote attacker may be able to execute arbitrary code.

  Tags:  buffer opcode omniinet buffer-overflow arbitrary-code attacker  

• 4:47

  HP OmniInet.exe Opcode 27 Buffer Overflow

   » ‎ Packet Storm Security Recent Files
  This Metasploit module exploits a buffer overflow in the Hewlett-Packard OmniInet NT Service. By sending a specially crafted opcode 27 packet, a remote attacker may be able to execute arbitrary code.

  Tags:  buffer opcode omniinet buffer-overflow arbitrary-code attacker  

• 4:47

  HP OmniInet.exe Opcode 27 Buffer Overflow

   » ‎ Packet Storm Security Misc. Files
  This Metasploit module exploits a buffer overflow in the Hewlett-Packard OmniInet NT Service. By sending a specially crafted opcode 27 packet, a remote attacker may be able to execute arbitrary code.

  Tags:  buffer opcode omniinet buffer-overflow arbitrary-code attacker  

• June 30, 2011
• 21:00

  [remote exploits] - HP OmniInet.exe Opcode 27 Buffer Overflow

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [remote exploits] - HP OmniInet.exe Opcode 27 Buffer Overflow

  Tags:  exe opcode omniinet buffer-overflow exploits  

• September 29, 2010
• 14:01

  bdasm.py.txt

   » ‎ Packet Storm Security Tools
  bdasm is a PyCommand written for Immunity Debugger version 1.73. It searches the address space of a process for a certain opcode/instruction and dissasembles backwards and forwards for a specified number of instructions.

  Tags:  txt pycommand bdasm opcode address-space  

• June 25, 2010
• 19:05

  ZDI-10-114.txt

   » ‎ Packet Storm Security Recent Files
  Zero Day Initiative Advisory 10-114 - This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Adobe Flash Player. User interaction is required in that a target must visit a malicious web page. The specific vulnerability exists within the parsing of an undocumented opcode within Adobe's ActionScript Virtual Machine 2 bytecode. The operand to this opcode is used as an offset to a structure and if set to a malicious value can be pointed to attacker controlled data. The structure contains a function pointer that is later called. If an attacker modifies the controlled data pointed to by the invalid offset, this function pointer can be set to point to malicious code thus gaining execution under the context of the user running the browser.

  Tags:  code vulnerability adobe adobe-flash-player zero-day opcode  

• 19:03

  ZDI-10-114.txt

   » ‎ Packet Storm Security Advisories
  Zero Day Initiative Advisory 10-114 - This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Adobe Flash Player. User interaction is required in that a target must visit a malicious web page. The specific vulnerability exists within the parsing of an undocumented opcode within Adobe's ActionScript Virtual Machine 2 bytecode. The operand to this opcode is used as an offset to a structure and if set to a malicious value can be pointed to attacker controlled data. The structure contains a function pointer that is later called. If an attacker modifies the controlled data pointed to by the invalid offset, this function pointer can be set to point to malicious code thus gaining execution under the context of the user running the browser.

  Tags:  code vulnerability adobe adobe-flash-player zero-day opcode  

• May 10, 2010
• 21:00

  MOPS-2010-014.pdf

   » ‎ Packet Storm Security Recent Files
  Month Of PHP Security - PHP ZEND_BW_XOR Opcode Interruption Address Information Leak Vulnerability. PHP versions 5.2.13 and below and 5.3.2 and below are affected.

  Tags:  pdf php mops information-leak opcode xor  

• 21:00

  MOPS-2010-016.pdf

   » ‎ Packet Storm Security Recent Files
  Month Of PHP Security - PHP ZEND_SR Opcode Interruption Address Information Leak Vulnerability. PHP versions 5.2.13 and below and 5.3.2 and below are affected.

  Tags:  pdf php mops information-leak opcode  

• 21:00

  MOPS-2010-014.pdf

   » ‎ Packet Storm Security Exploits
  Month Of PHP Security - PHP ZEND_BW_XOR Opcode Interruption Address Information Leak Vulnerability. PHP versions 5.2.13 and below and 5.3.2 and below are affected.

  Tags:  pdf php mops information-leak opcode xor  

• 21:00

  MOPS-2010-016.pdf

   » ‎ Packet Storm Security Exploits
  Month Of PHP Security - PHP ZEND_SR Opcode Interruption Address Information Leak Vulnerability. PHP versions 5.2.13 and below and 5.3.2 and below are affected.

  Tags:  pdf php mops information-leak opcode  

• February 09, 2010
• 19:00

  rpc_cmsd_opcode21.rb.txt

   » ‎ Packet Storm Security Recent Files
  This Metasploit module exploits a buffer overflow vulnerability in opcode 21 handled by rpc.cmsd on AIX. By making a request with a long string passed to the first argument of the rtable_create RPC, a stack based buffer overflow occurs. This leads to arbitrary code execution.

  Tags:  opcode cmsd rpc buffer-overflow-vulnerability arbitrary-code-execution based-buffer-overflow  

• 19:00

  rpc_cmsd_opcode21.rb.txt

   » ‎ Packet Storm Security Exploits
  This Metasploit module exploits a buffer overflow vulnerability in opcode 21 handled by rpc.cmsd on AIX. By making a request with a long string passed to the first argument of the rtable_create RPC, a stack based buffer overflow occurs. This leads to arbitrary code execution.

  Tags:  opcode cmsd rpc buffer-overflow-vulnerability arbitrary-code-execution based-buffer-overflow