< Back to JetLib.com

arbitrary-code

Feeds

268064 items (21 unread) in 27 feeds

« Expand/Collapse

777 items tagged "arbitrary code"

Skip to page: 1 2 3 4

December 30, 2012
9:22
BlazeDVD 6.1 PLF Exploit DEP/ASLR Bypass
» ‎ Packet Storm Security Exploits

This Metasploit module updates an existing MSF module originally written for BlazeDVD 5.1. The new module will bypass DEP and ASLR on version 6. The original vulnerability is due to the handling of specially crafted PLF files. Exploiting this allows us to execute arbitrary code running under the context of the user.
Tags: plf blazedvd module module-updates msf arbitrary-code
9:22
BlazeDVD 6.1 PLF Exploit DEP/ASLR Bypass
» ‎ Packet Storm Security Exploits

This Metasploit module updates an existing MSF module originally written for BlazeDVD 5.1. The new module will bypass DEP and ASLR on version 6. The original vulnerability is due to the handling of specially crafted PLF files. Exploiting this allows us to execute arbitrary code running under the context of the user.
Tags: plf blazedvd module module-updates msf arbitrary-code

9:22
BlazeDVD 6.1 PLF Exploit DEP/ASLR Bypass
» ‎ Packet Storm Security Recent Files

This Metasploit module updates an existing MSF module originally written for BlazeDVD 5.1. The new module will bypass DEP and ASLR on version 6. The original vulnerability is due to the handling of specially crafted PLF files. Exploiting this allows us to execute arbitrary code running under the context of the user.
Tags: plf blazedvd module module-updates msf arbitrary-code
9:22
BlazeDVD 6.1 PLF Exploit DEP/ASLR Bypass
» ‎ Packet Storm Security Recent Files

This Metasploit module updates an existing MSF module originally written for BlazeDVD 5.1. The new module will bypass DEP and ASLR on version 6. The original vulnerability is due to the handling of specially crafted PLF files. Exploiting this allows us to execute arbitrary code running under the context of the user.
Tags: plf blazedvd module module-updates msf arbitrary-code

9:22
BlazeDVD 6.1 PLF Exploit DEP/ASLR Bypass
» ‎ Packet Storm Security Misc. Files

This Metasploit module updates an existing MSF module originally written for BlazeDVD 5.1. The new module will bypass DEP and ASLR on version 6. The original vulnerability is due to the handling of specially crafted PLF files. Exploiting this allows us to execute arbitrary code running under the context of the user.
Tags: plf blazedvd module module-updates msf arbitrary-code
9:22
BlazeDVD 6.1 PLF Exploit DEP/ASLR Bypass
» ‎ Packet Storm Security Misc. Files

This Metasploit module updates an existing MSF module originally written for BlazeDVD 5.1. The new module will bypass DEP and ASLR on version 6. The original vulnerability is due to the handling of specially crafted PLF files. Exploiting this allows us to execute arbitrary code running under the context of the user.
Tags: plf blazedvd module module-updates msf arbitrary-code

December 22, 2012
7:45
Zero Day Initiative Advisory 12-203
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 12-203 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Honeywell HMIWeb. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the ActiveX control defined within the HSCDSPRenderDll.dll file. The RequestDSPLoad method does not properly verify the length of a supplied argument before copying it into a fixed-length heap buffer. A remote attacker can abuse this to execute arbitrary code under the context of the user running the browser.
Tags: day zero initiative zero-day arbitrary-code target

7:45
Zero Day Initiative Advisory 12-203
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 12-203 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Honeywell HMIWeb. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the ActiveX control defined within the HSCDSPRenderDll.dll file. The RequestDSPLoad method does not properly verify the length of a supplied argument before copying it into a fixed-length heap buffer. A remote attacker can abuse this to execute arbitrary code under the context of the user running the browser.
Tags: day zero initiative zero-day arbitrary-code target

7:45
Zero Day Initiative Advisory 12-203
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 12-203 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Honeywell HMIWeb. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the ActiveX control defined within the HSCDSPRenderDll.dll file. The RequestDSPLoad method does not properly verify the length of a supplied argument before copying it into a fixed-length heap buffer. A remote attacker can abuse this to execute arbitrary code under the context of the user running the browser.
Tags: day zero initiative zero-day arbitrary-code target

7:42
Zero Day Initiative Advisory 12-195
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 12-195 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks Real Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists when the application attempts to decode an audio sample that is encoded with the ATRAC codec. While parsing sample data, the application will explicitly trust 2-bits as a loop counter which can be used to write outside the bounds of the target buffer. This can lead to code execution under the context of the application.
Tags: day zero application atrac-codec zero-day arbitrary-code

7:42
Zero Day Initiative Advisory 12-195
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 12-195 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks Real Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists when the application attempts to decode an audio sample that is encoded with the ATRAC codec. While parsing sample data, the application will explicitly trust 2-bits as a loop counter which can be used to write outside the bounds of the target buffer. This can lead to code execution under the context of the application.
Tags: day zero application atrac-codec zero-day arbitrary-code

7:42
Zero Day Initiative Advisory 12-195
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 12-195 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks Real Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists when the application attempts to decode an audio sample that is encoded with the ATRAC codec. While parsing sample data, the application will explicitly trust 2-bits as a loop counter which can be used to write outside the bounds of the target buffer. This can lead to code execution under the context of the application.
Tags: day zero application atrac-codec zero-day arbitrary-code

December 19, 2012
10:53
Ubuntu Security Notice USN-1675-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1675-1 - It was discovered that FFmpeg incorrectly handled certain malformed media files. If a user were tricked into opening a crafted media file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program.
Tags: ubuntu notice security application-crash denial-of-service arbitrary-code

10:53
Ubuntu Security Notice USN-1675-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1675-1 - It was discovered that FFmpeg incorrectly handled certain malformed media files. If a user were tricked into opening a crafted media file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program.
Tags: ubuntu notice security application-crash denial-of-service arbitrary-code

10:53
Ubuntu Security Notice USN-1675-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1675-1 - It was discovered that FFmpeg incorrectly handled certain malformed media files. If a user were tricked into opening a crafted media file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program.
Tags: ubuntu notice security application-crash denial-of-service arbitrary-code

10:53
Ubuntu Security Notice USN-1674-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1674-1 - It was discovered that Libav incorrectly handled certain malformed media files. If a user were tricked into opening a crafted media file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program.
Tags: ubuntu notice security application-crash denial-of-service arbitrary-code

10:53
Ubuntu Security Notice USN-1674-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1674-1 - It was discovered that Libav incorrectly handled certain malformed media files. If a user were tricked into opening a crafted media file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program.
Tags: ubuntu notice security application-crash denial-of-service arbitrary-code

10:53
Ubuntu Security Notice USN-1674-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1674-1 - It was discovered that Libav incorrectly handled certain malformed media files. If a user were tricked into opening a crafted media file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program.
Tags: ubuntu notice security application-crash denial-of-service arbitrary-code

December 17, 2012
16:57
Ubuntu Security Notice USN-1667-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1667-1 - Julius Plenz discovered that bogofilter incorrectly handled certain invalid base64 code. By sending a specially crafted email, a remote attacker could exploit this and cause bogofilter to crash, resulting in a denial of service, or possibly execute arbitrary code.
Tags: ubuntu notice security julius-plenz denial-of-service arbitrary-code security-notice

16:57
Ubuntu Security Notice USN-1667-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1667-1 - Julius Plenz discovered that bogofilter incorrectly handled certain invalid base64 code. By sending a specially crafted email, a remote attacker could exploit this and cause bogofilter to crash, resulting in a denial of service, or possibly execute arbitrary code.
Tags: ubuntu notice security julius-plenz denial-of-service arbitrary-code security-notice

16:57
Ubuntu Security Notice USN-1667-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1667-1 - Julius Plenz discovered that bogofilter incorrectly handled certain invalid base64 code. By sending a specially crafted email, a remote attacker could exploit this and cause bogofilter to crash, resulting in a denial of service, or possibly execute arbitrary code.
Tags: ubuntu notice security julius-plenz denial-of-service arbitrary-code security-notice

December 10, 2012
18:36
Ubuntu Security Notice USN-1659-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1659-1 - It was discovered that GIMP incorrectly handled malformed XWD files. If a user were tricked into opening a specially crafted XWD file, an attacker could cause GIMP to crash, or possibly execute arbitrary code with the user's privileges.
Tags: ubuntu notice security arbitrary-code security-notice attacker

18:36
Ubuntu Security Notice USN-1659-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1659-1 - It was discovered that GIMP incorrectly handled malformed XWD files. If a user were tricked into opening a specially crafted XWD file, an attacker could cause GIMP to crash, or possibly execute arbitrary code with the user's privileges.
Tags: ubuntu notice security arbitrary-code security-notice attacker

18:36
Ubuntu Security Notice USN-1659-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1659-1 - It was discovered that GIMP incorrectly handled malformed XWD files. If a user were tricked into opening a specially crafted XWD file, an attacker could cause GIMP to crash, or possibly execute arbitrary code with the user's privileges.
Tags: ubuntu notice security arbitrary-code security-notice attacker

18:36
Ubuntu Security Notice USN-1658-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1658-1 - It was discovered that MySQL incorrectly handled certain long arguments. A remote authenticated attacker could use this issue to possibly execute arbitrary code.
Tags: ubuntu notice security security-notice arbitrary-code attacker

18:36
Ubuntu Security Notice USN-1658-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1658-1 - It was discovered that MySQL incorrectly handled certain long arguments. A remote authenticated attacker could use this issue to possibly execute arbitrary code.
Tags: ubuntu notice security security-notice arbitrary-code attacker

18:36
Ubuntu Security Notice USN-1658-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1658-1 - It was discovered that MySQL incorrectly handled certain long arguments. A remote authenticated attacker could use this issue to possibly execute arbitrary code.
Tags: ubuntu notice security security-notice arbitrary-code attacker

December 05, 2012
15:55
Ubuntu Security Notice USN-1656-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1656-1 - It was discovered that libxml2 had a heap-based buffer underflow when parsing entities. If a user or automated system were tricked into processing a specially crafted XML document, applications linked against libxml2 could be made to crash or possibly execute arbitrary code.
Tags: ubuntu notice security document-applications automated-system arbitrary-code

15:55
Ubuntu Security Notice USN-1656-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1656-1 - It was discovered that libxml2 had a heap-based buffer underflow when parsing entities. If a user or automated system were tricked into processing a specially crafted XML document, applications linked against libxml2 could be made to crash or possibly execute arbitrary code.
Tags: ubuntu notice security document-applications automated-system arbitrary-code

November 26, 2012
16:31
Ubuntu Security Notice USN-1640-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1640-1 - Xi Wang and Florian Weimer discovered that libssh incorrectly handled memory. A remote attacker could use this to cause libssh to crash, resulting in a denial of service, or possibly execute arbitrary code.
Tags: ubuntu notice security florian-weimer denial-of-service arbitrary-code security-notice

16:31
Ubuntu Security Notice USN-1640-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1640-1 - Xi Wang and Florian Weimer discovered that libssh incorrectly handled memory. A remote attacker could use this to cause libssh to crash, resulting in a denial of service, or possibly execute arbitrary code.
Tags: ubuntu notice security florian-weimer denial-of-service arbitrary-code security-notice

16:31
Ubuntu Security Notice USN-1640-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1640-1 - Xi Wang and Florian Weimer discovered that libssh incorrectly handled memory. A remote attacker could use this to cause libssh to crash, resulting in a denial of service, or possibly execute arbitrary code.
Tags: ubuntu notice security florian-weimer denial-of-service arbitrary-code security-notice

November 23, 2012
8:20
Ubuntu Security Notice USN-1639-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1639-1 - It was discovered that unity-firefox-extension incorrectly handled certain callbacks. A remote attacker could use this issue to cause unity-firefox-extension to crash, resulting in a denial of service, or possibly execute arbitrary code.
Tags: ubuntu notice security denial-of-service arbitrary-code security-notice

8:20
Ubuntu Security Notice USN-1639-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1639-1 - It was discovered that unity-firefox-extension incorrectly handled certain callbacks. A remote attacker could use this issue to cause unity-firefox-extension to crash, resulting in a denial of service, or possibly execute arbitrary code.
Tags: ubuntu notice security denial-of-service arbitrary-code security-notice

8:20
Ubuntu Security Notice USN-1639-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1639-1 - It was discovered that unity-firefox-extension incorrectly handled certain callbacks. A remote attacker could use this issue to cause unity-firefox-extension to crash, resulting in a denial of service, or possibly execute arbitrary code.
Tags: ubuntu notice security denial-of-service arbitrary-code security-notice

November 21, 2012
15:01
Ubuntu Security Notice USN-1635-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1635-1 - It was discovered that libunity-webapps improperly handled certain hash tables. A remote attacker could use this issue to cause libunity-webapps to crash, or possibly execute arbitrary code.
Tags: ubuntu notice security hash-tables webapps arbitrary-code

15:01
Ubuntu Security Notice USN-1635-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1635-1 - It was discovered that libunity-webapps improperly handled certain hash tables. A remote attacker could use this issue to cause libunity-webapps to crash, or possibly execute arbitrary code.
Tags: ubuntu notice security hash-tables webapps arbitrary-code

15:01
Ubuntu Security Notice USN-1635-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1635-1 - It was discovered that libunity-webapps improperly handled certain hash tables. A remote attacker could use this issue to cause libunity-webapps to crash, or possibly execute arbitrary code.
Tags: ubuntu notice security hash-tables webapps arbitrary-code

November 18, 2012
16:00
Invision Power Board 'core.php' PHP Code Execution Vulnerability
» ‎ SecuriTeam

Invision Power Board is prone to a vulnerability that lets remote attackers execute arbitrary code.
Tags: board power invision code-execution arbitrary-code attackers

November 15, 2012
23:22
Zero Day Initiative Advisory 12-184
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 12-184 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within Excel's parsing of Feature11/Feature12 records. The process trusts a supplied counter value without validating its size and proceeds to use it within a copy operation to the stack. An attacker can abuse this to execute arbitrary code under the context of the user running Excel.
Tags: excel day zero excel-user zero-day arbitrary-code

23:22
Zero Day Initiative Advisory 12-184
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 12-184 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within Excel's parsing of Feature11/Feature12 records. The process trusts a supplied counter value without validating its size and proceeds to use it within a copy operation to the stack. An attacker can abuse this to execute arbitrary code under the context of the user running Excel.
Tags: excel day zero excel-user zero-day arbitrary-code

23:22
Zero Day Initiative Advisory 12-184
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 12-184 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within Excel's parsing of Feature11/Feature12 records. The process trusts a supplied counter value without validating its size and proceeds to use it within a copy operation to the stack. An attacker can abuse this to execute arbitrary code under the context of the user running Excel.
Tags: excel day zero excel-user zero-day arbitrary-code

November 14, 2012
16:00
Novell File Reporter 'NFRAgent.exe' Multiple Security Vulnerabilities
» ‎ SecuriTeam

Remote attackers can exploit these issues to upload and download arbitrary files and execute arbitrary code in the context of the application.
Tags: novell reporter file arbitrary-files security-vulnerabilities arbitrary-code

November 13, 2012
15:27
OpenVAS Command Injection
» ‎ Packet Storm Security Exploits

It has been identified that OpenVAS Manager is vulnerable to command injection due to insufficient validation of user supplied data when processing OMP requests. It has been identified that this vulnerability may allow arbitrary code to be executed with the privileges of the OpenVAS Manager on vulnerable systems.
Tags: injection openvas manager vulnerable-systems arbitrary-code vulnerability

15:27
OpenVAS Command Injection
» ‎ Packet Storm Security Recent Files

It has been identified that OpenVAS Manager is vulnerable to command injection due to insufficient validation of user supplied data when processing OMP requests. It has been identified that this vulnerability may allow arbitrary code to be executed with the privileges of the OpenVAS Manager on vulnerable systems.
Tags: injection openvas manager vulnerable-systems arbitrary-code vulnerability

15:27
OpenVAS Command Injection
» ‎ Packet Storm Security Misc. Files

It has been identified that OpenVAS Manager is vulnerable to command injection due to insufficient validation of user supplied data when processing OMP requests. It has been identified that this vulnerability may allow arbitrary code to be executed with the privileges of the OpenVAS Manager on vulnerable systems.
Tags: injection openvas manager vulnerable-systems arbitrary-code vulnerability

November 12, 2012
16:35
Ubuntu Security Notice USN-1630-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1630-1 - It was discovered that Libav incorrectly handled certain malformed media files. If a user were tricked into opening a crafted media file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program.
Tags: ubuntu notice security application-crash denial-of-service arbitrary-code

16:35
Ubuntu Security Notice USN-1630-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1630-1 - It was discovered that Libav incorrectly handled certain malformed media files. If a user were tricked into opening a crafted media file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program.
Tags: ubuntu notice security application-crash denial-of-service arbitrary-code

16:35
Ubuntu Security Notice USN-1630-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1630-1 - It was discovered that Libav incorrectly handled certain malformed media files. If a user were tricked into opening a crafted media file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program.
Tags: ubuntu notice security application-crash denial-of-service arbitrary-code

16:35
Ubuntu Security Notice USN-1629-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1629-1 - Tomas Mraz discovered that libproxy incorrectly handled certain PAC files. A remote attacker could use this issue to cause libproxy to crash, or to possibly execute arbitrary code.
Tags: ubuntu notice security tomas-mraz arbitrary-code security-notice attacker

16:35
Ubuntu Security Notice USN-1629-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1629-1 - Tomas Mraz discovered that libproxy incorrectly handled certain PAC files. A remote attacker could use this issue to cause libproxy to crash, or to possibly execute arbitrary code.
Tags: ubuntu notice security tomas-mraz arbitrary-code security-notice attacker

16:35
Ubuntu Security Notice USN-1629-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1629-1 - Tomas Mraz discovered that libproxy incorrectly handled certain PAC files. A remote attacker could use this issue to cause libproxy to crash, or to possibly execute arbitrary code.
Tags: ubuntu notice security tomas-mraz arbitrary-code security-notice attacker

November 07, 2012
16:00
SIEMENS Sipass Integrated Ethernet Bus Arbitrary Pointer Dereference
» ‎ SecuriTeam

This flaw allows remote attackers to execute arbitrary code on the target system, under the context of the SYSTEM account, where the vulnerable versions of SIEMENS SiPass Integrated are installed.
Tags: siemens sipass integrated target-system vulnerable-versions arbitrary-code

November 05, 2012
19:30
Ubuntu Security Notice USN-1623-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1623-1 - It was discovered that Mesa incorrectly handled certain arrays. An attacker could use this issue to cause Mesa to crash, resulting in a denial of service, or possibly execute arbitrary code.
Tags: ubuntu notice security denial-of-service arbitrary-code security-notice

19:30
Ubuntu Security Notice USN-1623-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1623-1 - It was discovered that Mesa incorrectly handled certain arrays. An attacker could use this issue to cause Mesa to crash, resulting in a denial of service, or possibly execute arbitrary code.
Tags: ubuntu notice security denial-of-service arbitrary-code security-notice

19:30
Ubuntu Security Notice USN-1623-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1623-1 - It was discovered that Mesa incorrectly handled certain arrays. An attacker could use this issue to cause Mesa to crash, resulting in a denial of service, or possibly execute arbitrary code.
Tags: ubuntu notice security denial-of-service arbitrary-code security-notice

16:00
HP-UX Running Java, Remote Execution of Arbitrary Code, and Other Vulnerabilities
» ‎ SecuriTeam

HP-UX Running Java, is prone to a Remote Execution of Arbitrary Code Vulnerability.
Tags: java hp-ux remote arbitrary-code vulnerability

November 02, 2012
6:00
Bugtraq: [security bulletin] HPSBUX02824 SSRT100970 rev.2 - HP-UX Running Java, Remote Execution of Arbitrary Code, and Other Vulnerabilities
» ‎ SecurityFocus Vulnerabilities

[security bulletin] HPSBUX02824 SSRT100970 rev.2 - HP-UX Running Java, Remote Execution of Arbitrary Code, and Other Vulnerabilities
Tags: hpsbux security bulletin hp-ux security-bulletin arbitrary-code

November 01, 2012
17:00
SIEMENS Sipass Integrated 2.6 Ethernet Bus Arbitrary Pointer Dereference
» ‎ SecuriTeam

This flaw allows remote attackers to execute arbitrary code on the target system, under the context of the SYSTEM account, where the vulnerable versions of SIEMENS SiPass Integrated are installed.
Tags: siemens sipass integrated target-system vulnerable-versions arbitrary-code

October 26, 2012
8:15
Ubuntu Security Notice USN-1618-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1618-1 - It was discovered that Exim incorrectly handled DKIM DNS decoding. This flaw could allow a remote attacker to execute arbitrary code.
Tags: ubuntu notice security security-notice arbitrary-code attacker

8:15
Ubuntu Security Notice USN-1618-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1618-1 - It was discovered that Exim incorrectly handled DKIM DNS decoding. This flaw could allow a remote attacker to execute arbitrary code.
Tags: ubuntu notice security security-notice arbitrary-code attacker

8:15
Ubuntu Security Notice USN-1618-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1618-1 - It was discovered that Exim incorrectly handled DKIM DNS decoding. This flaw could allow a remote attacker to execute arbitrary code.
Tags: ubuntu notice security security-notice arbitrary-code attacker

October 24, 2012
9:00
Bugtraq: [security bulletin] HPSBUX02824 SSRT100970 rev.1 - HP-UX Running Java, Remote Execution of Arbitrary Code, and Other Vulnerabilities
» ‎ SecurityFocus Vulnerabilities

[security bulletin] HPSBUX02824 SSRT100970 rev.1 - HP-UX Running Java, Remote Execution of Arbitrary Code, and Other Vulnerabilities
Tags: hpsbux security bulletin hp-ux security-bulletin arbitrary-code

October 17, 2012
23:05
Ubuntu Security Notice USN-1613-2
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1613-2 - USN-1613-1 fixed vulnerabilities in Python 2.5. This update provides the corresponding updates for Python 2.4. It was discovered that Python would prepend an empty string to sys.path under certain circumstances. A local attacker with write access to the current working directory could exploit this to execute arbitrary code. Various other issues were also addressed.
Tags: python ubuntu security empty-string arbitrary-code security-notice

23:05
Ubuntu Security Notice USN-1613-2
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1613-2 - USN-1613-1 fixed vulnerabilities in Python 2.5. This update provides the corresponding updates for Python 2.4. It was discovered that Python would prepend an empty string to sys.path under certain circumstances. A local attacker with write access to the current working directory could exploit this to execute arbitrary code. Various other issues were also addressed.
Tags: python ubuntu security empty-string arbitrary-code security-notice

23:05
Ubuntu Security Notice USN-1613-2
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1613-2 - USN-1613-1 fixed vulnerabilities in Python 2.5. This update provides the corresponding updates for Python 2.4. It was discovered that Python would prepend an empty string to sys.path under certain circumstances. A local attacker with write access to the current working directory could exploit this to execute arbitrary code. Various other issues were also addressed.
Tags: python ubuntu security empty-string arbitrary-code security-notice

October 06, 2012
17:00
Honeywellprocess Enterprise Building Manager Stack-based Buffer Overflow Vulnerability
» ‎ SecuriTeam

This allows remote attackers to execute arbitrary code via unspecified vectors.
Tags: building honeywellprocess enterprise buffer-overflow-vulnerability based-buffer-overflow arbitrary-code

October 02, 2012
16:34
Ubuntu Security Notice USN-1593-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1593-1 - Raphael Geissert discovered that the debdiff.pl tool incorrectly handled shell metacharacters. If a user or automated system were tricked into processing a specially crafted filename, a remote attacher could possibly execute arbitrary code. Raphael Geissert discovered that the dscverify tool incorrectly escaped arguments to external commands. If a user or automated system were tricked into processing specially crafted files, a remote attacher could possibly execute arbitrary code. Various other issues were also addressed.
Tags: ubuntu notice security raphael-geissert shell-metacharacters automated-system arbitrary-code

16:34
Ubuntu Security Notice USN-1593-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1593-1 - Raphael Geissert discovered that the debdiff.pl tool incorrectly handled shell metacharacters. If a user or automated system were tricked into processing a specially crafted filename, a remote attacher could possibly execute arbitrary code. Raphael Geissert discovered that the dscverify tool incorrectly escaped arguments to external commands. If a user or automated system were tricked into processing specially crafted files, a remote attacher could possibly execute arbitrary code. Various other issues were also addressed.
Tags: ubuntu notice security raphael-geissert shell-metacharacters automated-system arbitrary-code

16:34
Ubuntu Security Notice USN-1593-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1593-1 - Raphael Geissert discovered that the debdiff.pl tool incorrectly handled shell metacharacters. If a user or automated system were tricked into processing a specially crafted filename, a remote attacher could possibly execute arbitrary code. Raphael Geissert discovered that the dscverify tool incorrectly escaped arguments to external commands. If a user or automated system were tricked into processing specially crafted files, a remote attacher could possibly execute arbitrary code. Various other issues were also addressed.
Tags: ubuntu notice security raphael-geissert shell-metacharacters automated-system arbitrary-code

16:30
Ubuntu Security Notice USN-1590-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1590-1 - It was discovered that QEMU incorrectly handled certain VT100 escape sequences. A guest user with access to an emulated character device could use this flaw to cause QEMU to crash, or possibly execute arbitrary code on the host.
Tags: ubuntu notice security character-device arbitrary-code security-notice

16:30
Ubuntu Security Notice USN-1590-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1590-1 - It was discovered that QEMU incorrectly handled certain VT100 escape sequences. A guest user with access to an emulated character device could use this flaw to cause QEMU to crash, or possibly execute arbitrary code on the host.
Tags: ubuntu notice security character-device arbitrary-code security-notice

16:30
Ubuntu Security Notice USN-1590-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1590-1 - It was discovered that QEMU incorrectly handled certain VT100 escape sequences. A guest user with access to an emulated character device could use this flaw to cause QEMU to crash, or possibly execute arbitrary code on the host.
Tags: ubuntu notice security character-device arbitrary-code security-notice

September 27, 2012
11:42
Ubuntu Security Notice USN-1587-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1587-1 - Juri Aedla discovered that libxml2 incorrectly handled certain memory operations. If a user or application linked against libxml2 were tricked into opening a specially crafted XML file, an attacker could cause the application to crash or possibly execute arbitrary code with the privileges of the user invoking the program.
Tags: ubuntu notice security juri-aedla memory-operations juri arbitrary-code

11:42
Ubuntu Security Notice USN-1587-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1587-1 - Juri Aedla discovered that libxml2 incorrectly handled certain memory operations. If a user or application linked against libxml2 were tricked into opening a specially crafted XML file, an attacker could cause the application to crash or possibly execute arbitrary code with the privileges of the user invoking the program.
Tags: ubuntu notice security juri-aedla memory-operations juri arbitrary-code

11:42
Ubuntu Security Notice USN-1587-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1587-1 - Juri Aedla discovered that libxml2 incorrectly handled certain memory operations. If a user or application linked against libxml2 were tricked into opening a specially crafted XML file, an attacker could cause the application to crash or possibly execute arbitrary code with the privileges of the user invoking the program.
Tags: ubuntu notice security juri-aedla memory-operations juri arbitrary-code

September 24, 2012
8:04
Ubuntu Security Notice USN-1581-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1581-1 - Marc Schoenefeld discovered that Ghostscript did not correctly handle certain image files. If a user or automated system were tricked into opening a specially crafted file, an attacker could cause a denial of service and possibly execute arbitrary code with user privileges.
Tags: ubuntu notice security marc-schoenefeld denial-of-service automated-system arbitrary-code

8:04
Ubuntu Security Notice USN-1581-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1581-1 - Marc Schoenefeld discovered that Ghostscript did not correctly handle certain image files. If a user or automated system were tricked into opening a specially crafted file, an attacker could cause a denial of service and possibly execute arbitrary code with user privileges.
Tags: ubuntu notice security marc-schoenefeld denial-of-service automated-system arbitrary-code

8:04
Ubuntu Security Notice USN-1581-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1581-1 - Marc Schoenefeld discovered that Ghostscript did not correctly handle certain image files. If a user or automated system were tricked into opening a specially crafted file, an attacker could cause a denial of service and possibly execute arbitrary code with user privileges.
Tags: ubuntu notice security marc-schoenefeld denial-of-service automated-system arbitrary-code

September 17, 2012
10:29
Ubuntu Security Notice USN-1569-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1569-1 - It was discovered that PHP incorrectly handled certain character sequences when applying HTTP response-splitting protection. A remote attacker could create a specially-crafted URL and inject arbitrary headers. It was discovered that PHP incorrectly handled directories with a large number of files. This could allow a remote attacker to execute arbitrary code with the privileges of the web server, or to perform a denial of service. Various other issues were also addressed.
Tags: ubuntu notice security character-sequences denial-of-service arbitrary-code

10:29
Ubuntu Security Notice USN-1569-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1569-1 - It was discovered that PHP incorrectly handled certain character sequences when applying HTTP response-splitting protection. A remote attacker could create a specially-crafted URL and inject arbitrary headers. It was discovered that PHP incorrectly handled directories with a large number of files. This could allow a remote attacker to execute arbitrary code with the privileges of the web server, or to perform a denial of service. Various other issues were also addressed.
Tags: ubuntu notice security character-sequences denial-of-service arbitrary-code

10:29
Ubuntu Security Notice USN-1569-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1569-1 - It was discovered that PHP incorrectly handled certain character sequences when applying HTTP response-splitting protection. A remote attacker could create a specially-crafted URL and inject arbitrary headers. It was discovered that PHP incorrectly handled directories with a large number of files. This could allow a remote attacker to execute arbitrary code with the privileges of the web server, or to perform a denial of service. Various other issues were also addressed.
Tags: ubuntu notice security character-sequences denial-of-service arbitrary-code

September 11, 2012
8:24
Openfiler 2.x NetworkCard Command Execution
» ‎ Packet Storm Security Exploits

This Metasploit module exploits a vulnerability in Openfiler version 2.x which could be abused to allow authenticated users to execute arbitrary code under the context of the 'openfiler' user. The 'system.html' file uses user controlled data from the 'device' parameter to create a new 'NetworkCard' object. The class constructor in 'network.inc' calls exec() with the supplied data. The 'openfiler' user may 'sudo /bin/bash' without providing a system password.
Tags: openfiler user the command-execution system-password arbitrary-code

8:24
Openfiler 2.x NetworkCard Command Execution
» ‎ Packet Storm Security Recent Files

This Metasploit module exploits a vulnerability in Openfiler version 2.x which could be abused to allow authenticated users to execute arbitrary code under the context of the 'openfiler' user. The 'system.html' file uses user controlled data from the 'device' parameter to create a new 'NetworkCard' object. The class constructor in 'network.inc' calls exec() with the supplied data. The 'openfiler' user may 'sudo /bin/bash' without providing a system password.
Tags: openfiler user the command-execution system-password arbitrary-code

8:24
Openfiler 2.x NetworkCard Command Execution
» ‎ Packet Storm Security Misc. Files

This Metasploit module exploits a vulnerability in Openfiler version 2.x which could be abused to allow authenticated users to execute arbitrary code under the context of the 'openfiler' user. The 'system.html' file uses user controlled data from the 'device' parameter to create a new 'NetworkCard' object. The class constructor in 'network.inc' calls exec() with the supplied data. The 'openfiler' user may 'sudo /bin/bash' without providing a system password.
Tags: openfiler user the command-execution system-password arbitrary-code

September 05, 2012
18:42
mcrypt 2.6.8 Buffer Overflow Proof Of Concept
» ‎ Packet Storm Security Exploits

mcrypt versions 2.6.8 and below suffer from a vulnerability that is caused due to a boundary error in the processing of an encrypted file, which can be exploited to cause a stack-based buffer overflow when a user opens a specially crafted .nc file. Successful exploitation could potentially allow execution of arbitrary code on the affected machine.
Tags: based-buffer-overflow proof-of-concept arbitrary-code

18:42
mcrypt 2.6.8 Buffer Overflow Proof Of Concept
» ‎ Packet Storm Security Recent Files

mcrypt versions 2.6.8 and below suffer from a vulnerability that is caused due to a boundary error in the processing of an encrypted file, which can be exploited to cause a stack-based buffer overflow when a user opens a specially crafted .nc file. Successful exploitation could potentially allow execution of arbitrary code on the affected machine.
Tags: buffer overflow mcrypt based-buffer-overflow proof-of-concept arbitrary-code

18:42
mcrypt 2.6.8 Buffer Overflow Proof Of Concept
» ‎ Packet Storm Security Misc. Files

mcrypt versions 2.6.8 and below suffer from a vulnerability that is caused due to a boundary error in the processing of an encrypted file, which can be exploited to cause a stack-based buffer overflow when a user opens a specially crafted .nc file. Successful exploitation could potentially allow execution of arbitrary code on the affected machine.
Tags: buffer overflow mcrypt based-buffer-overflow proof-of-concept arbitrary-code

August 29, 2012
7:21
Zero Day Initiative Advisory 12-178
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 12-178 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP SiteScope. Authentication is not required to exploit this vulnerability. The specific flaw exists because HP SiteScope allows unauthenticated SOAP calls to be made to the SiteScope service. One of those calls is update() which allows an unauthenticated user to update the admin credentials. This can lead to remote code execution under the context of the current process.
Tags: sitescope day zero code-execution zero-day arbitrary-code

7:21
Zero Day Initiative Advisory 12-178
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 12-178 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP SiteScope. Authentication is not required to exploit this vulnerability. The specific flaw exists because HP SiteScope allows unauthenticated SOAP calls to be made to the SiteScope service. One of those calls is update() which allows an unauthenticated user to update the admin credentials. This can lead to remote code execution under the context of the current process.
Tags: sitescope day zero code-execution zero-day arbitrary-code

7:21
Zero Day Initiative Advisory 12-178
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 12-178 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP SiteScope. Authentication is not required to exploit this vulnerability. The specific flaw exists because HP SiteScope allows unauthenticated SOAP calls to be made to the SiteScope service. One of those calls is update() which allows an unauthenticated user to update the admin credentials. This can lead to remote code execution under the context of the current process.
Tags: sitescope day zero code-execution zero-day arbitrary-code

7:20
Zero Day Initiative Advisory 12-177
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 12-177 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP SiteScope. Authentication is not required to exploit this vulnerability. The specific flaw exists because HP SiteScope allows unauthenticated SOAP calls to be made to the SiteScope service. One of those calls is loadFileContent() which will return the content of any local file on the server including the configuration files containing password information. This can lead to remote code execution under the context of the current process.
Tags: sitescope day zero code-execution zero-day arbitrary-code

7:20
Zero Day Initiative Advisory 12-177
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 12-177 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP SiteScope. Authentication is not required to exploit this vulnerability. The specific flaw exists because HP SiteScope allows unauthenticated SOAP calls to be made to the SiteScope service. One of those calls is loadFileContent() which will return the content of any local file on the server including the configuration files containing password information. This can lead to remote code execution under the context of the current process.
Tags: sitescope day zero code-execution zero-day arbitrary-code

7:20
Zero Day Initiative Advisory 12-177
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 12-177 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP SiteScope. Authentication is not required to exploit this vulnerability. The specific flaw exists because HP SiteScope allows unauthenticated SOAP calls to be made to the SiteScope service. One of those calls is loadFileContent() which will return the content of any local file on the server including the configuration files containing password information. This can lead to remote code execution under the context of the current process.
Tags: sitescope day zero code-execution zero-day arbitrary-code

7:19
Zero Day Initiative Advisory 12-176
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 12-176 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP SiteScope. Authentication is not required to exploit this vulnerability. The specific flaw exists because HP SiteScope allows unauthenticated SOAP calls to be made to the SiteScope service. One of those calls is getFileInternal() which will return the content of any local file on the server including the configuration files containing password information. This can lead to remote code execution under the context of the current process.
Tags: sitescope day zero code-execution zero-day arbitrary-code

7:19
Zero Day Initiative Advisory 12-176
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 12-176 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP SiteScope. Authentication is not required to exploit this vulnerability. The specific flaw exists because HP SiteScope allows unauthenticated SOAP calls to be made to the SiteScope service. One of those calls is getFileInternal() which will return the content of any local file on the server including the configuration files containing password information. This can lead to remote code execution under the context of the current process.
Tags: sitescope day zero code-execution zero-day arbitrary-code

7:19
Zero Day Initiative Advisory 12-176
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 12-176 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP SiteScope. Authentication is not required to exploit this vulnerability. The specific flaw exists because HP SiteScope allows unauthenticated SOAP calls to be made to the SiteScope service. One of those calls is getFileInternal() which will return the content of any local file on the server including the configuration files containing password information. This can lead to remote code execution under the context of the current process.
Tags: sitescope day zero code-execution zero-day arbitrary-code

7:18
Zero Day Initiative Advisory 12-173
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 12-173 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP SiteScope. Authentication is not required to exploit this vulnerability. The specific flaw exists because HP SiteScope allows unauthenticated SOAP calls to be made to the SiteScope service. One of those calls is getSiteScopeConfiguration() which will return the current configuration of the server including the administrator login and password information. A remote attacker could abuse this vulnerability to login to SiteScope with administrative privileges then execute arbitrary code through the underlying functionality.
Tags: sitescope zero vulnerability administrative-privileges zero-day arbitrary-code

7:18
Zero Day Initiative Advisory 12-173
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 12-173 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP SiteScope. Authentication is not required to exploit this vulnerability. The specific flaw exists because HP SiteScope allows unauthenticated SOAP calls to be made to the SiteScope service. One of those calls is getSiteScopeConfiguration() which will return the current configuration of the server including the administrator login and password information. A remote attacker could abuse this vulnerability to login to SiteScope with administrative privileges then execute arbitrary code through the underlying functionality.
Tags: sitescope zero vulnerability administrative-privileges zero-day arbitrary-code

7:18
Zero Day Initiative Advisory 12-173
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 12-173 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP SiteScope. Authentication is not required to exploit this vulnerability. The specific flaw exists because HP SiteScope allows unauthenticated SOAP calls to be made to the SiteScope service. One of those calls is getSiteScopeConfiguration() which will return the current configuration of the server including the administrator login and password information. A remote attacker could abuse this vulnerability to login to SiteScope with administrative privileges then execute arbitrary code through the underlying functionality.
Tags: sitescope zero vulnerability administrative-privileges zero-day arbitrary-code

7:17
Zero Day Initiative Advisory 12-168
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 12-168 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Indusoft Thin Client. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within ISSymbol.ocx ActiveX component. The process performs insufficient bounds checking on user-supplied data passed in as the 'InternationalSeparator' parameter which results in a heap overflow. This vulnerability can be leveraged to execute code under the context of the user running the browser.
Tags: day zero vulnerability zero-day arbitrary-code thin-client

7:17
Zero Day Initiative Advisory 12-168
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 12-168 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Indusoft Thin Client. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within ISSymbol.ocx ActiveX component. The process performs insufficient bounds checking on user-supplied data passed in as the 'InternationalSeparator' parameter which results in a heap overflow. This vulnerability can be leveraged to execute code under the context of the user running the browser.
Tags: day zero vulnerability zero-day arbitrary-code thin-client

7:17
Zero Day Initiative Advisory 12-168
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 12-168 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Indusoft Thin Client. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within ISSymbol.ocx ActiveX component. The process performs insufficient bounds checking on user-supplied data passed in as the 'InternationalSeparator' parameter which results in a heap overflow. This vulnerability can be leveraged to execute code under the context of the user running the browser.
Tags: day zero vulnerability zero-day arbitrary-code thin-client

7:16
Zero Day Initiative Advisory 12-167
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 12-167 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell File Reporter Agent. Authentication is not required to exploit this vulnerability. The specific flaw exists within NFRAgent.exe which communicates with the Agent component over HTTPS on TCP port 3037. When parsing tags inside the VOL element, the process performs insufficient bounds checking on user-supplied data prior to copying it into a fixed-length buffer on the stack. This vulnerability can result in remote code execution under the context of the SYSTEM account.
Tags: day zero vulnerability reporter-agent code-execution zero-day arbitrary-code

7:16
Zero Day Initiative Advisory 12-167
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 12-167 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell File Reporter Agent. Authentication is not required to exploit this vulnerability. The specific flaw exists within NFRAgent.exe which communicates with the Agent component over HTTPS on TCP port 3037. When parsing tags inside the VOL element, the process performs insufficient bounds checking on user-supplied data prior to copying it into a fixed-length buffer on the stack. This vulnerability can result in remote code execution under the context of the SYSTEM account.
Tags: day zero vulnerability reporter-agent code-execution zero-day arbitrary-code

7:16
Zero Day Initiative Advisory 12-167
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 12-167 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell File Reporter Agent. Authentication is not required to exploit this vulnerability. The specific flaw exists within NFRAgent.exe which communicates with the Agent component over HTTPS on TCP port 3037. When parsing tags inside the VOL element, the process performs insufficient bounds checking on user-supplied data prior to copying it into a fixed-length buffer on the stack. This vulnerability can result in remote code execution under the context of the SYSTEM account.
Tags: day zero vulnerability reporter-agent code-execution zero-day arbitrary-code

August 27, 2012
20:43
Express Burn Plus 4.58 Buffer Overflow
» ‎ Packet Storm Security Exploits

Express Burn Plus version 4.58 suffers from a vulnerability that is caused due to a boundary error in the processing of a project file, which can be exploited to cause a unicode buffer overflow when a user opens e.g. a specially crafted .EBP file. Successful exploitation could allow execution of arbitrary code on the affected machine.
Tags: burn express plus buffer-overflow arbitrary-code vulnerability

20:43
Express Burn Plus 4.58 Buffer Overflow
» ‎ Packet Storm Security Recent Files

Express Burn Plus version 4.58 suffers from a vulnerability that is caused due to a boundary error in the processing of a project file, which can be exploited to cause a unicode buffer overflow when a user opens e.g. a specially crafted .EBP file. Successful exploitation could allow execution of arbitrary code on the affected machine.
Tags: burn express plus buffer-overflow arbitrary-code vulnerability

20:43
Express Burn Plus 4.58 Buffer Overflow
» ‎ Packet Storm Security Misc. Files

Express Burn Plus version 4.58 suffers from a vulnerability that is caused due to a boundary error in the processing of a project file, which can be exploited to cause a unicode buffer overflow when a user opens e.g. a specially crafted .EBP file. Successful exploitation could allow execution of arbitrary code on the affected machine.
Tags: burn express plus buffer-overflow arbitrary-code vulnerability

August 22, 2012
19:56
Zero Day Initiative Advisory 12-166
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 12-166 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP LeftHand Virtual SAN Appliance. Authentication is not required to exploit this vulnerability. The flaw exists within the hydra component which listens by default on 13841/tcp. The hydra daemon is responsible for management remote operations such as user creation, snapshots, etc. Insufficient authentication is performed prior to performing administrative level tasks. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the process.
Tags: day zero vulnerability san zero-day level-tasks arbitrary-code

19:56
Zero Day Initiative Advisory 12-166
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 12-166 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP LeftHand Virtual SAN Appliance. Authentication is not required to exploit this vulnerability. The flaw exists within the hydra component which listens by default on 13841/tcp. The hydra daemon is responsible for management remote operations such as user creation, snapshots, etc. Insufficient authentication is performed prior to performing administrative level tasks. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the process.
Tags: day zero vulnerability san zero-day level-tasks arbitrary-code

19:56
Zero Day Initiative Advisory 12-166
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 12-166 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP LeftHand Virtual SAN Appliance. Authentication is not required to exploit this vulnerability. The flaw exists within the hydra component which listens by default on 13841/tcp. The hydra daemon is responsible for management remote operations such as user creation, snapshots, etc. Insufficient authentication is performed prior to performing administrative level tasks. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the process.
Tags: day zero vulnerability san zero-day level-tasks arbitrary-code

19:40
Zero Day Initiative Advisory 12-156
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 12-156 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco AnyConnect VPN Client. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists due to insufficient signature checks with the Cisco AnyConnect VPN Client. When the client is invoked through the ActiveX control it downloads and checks a file called vpndownloader.exe. This file has to be properly signed by Cisco. Once this file is downloaded it is run and downloads additional configuration files. Within the downloaded config file it is possible to force a download of executable files. Those files are not properly checked for valid certificates and are run on the host as soon as they are downloaded.
Tags: client zero file cisco-anyconnect zero-day arbitrary-code executable-files

19:40
Zero Day Initiative Advisory 12-156
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 12-156 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco AnyConnect VPN Client. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists due to insufficient signature checks with the Cisco AnyConnect VPN Client. When the client is invoked through the ActiveX control it downloads and checks a file called vpndownloader.exe. This file has to be properly signed by Cisco. Once this file is downloaded it is run and downloads additional configuration files. Within the downloaded config file it is possible to force a download of executable files. Those files are not properly checked for valid certificates and are run on the host as soon as they are downloaded.
Tags: client zero file cisco-anyconnect zero-day arbitrary-code executable-files

19:40
Zero Day Initiative Advisory 12-156
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 12-156 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco AnyConnect VPN Client. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists due to insufficient signature checks with the Cisco AnyConnect VPN Client. When the client is invoked through the ActiveX control it downloads and checks a file called vpndownloader.exe. This file has to be properly signed by Cisco. Once this file is downloaded it is run and downloads additional configuration files. Within the downloaded config file it is possible to force a download of executable files. Those files are not properly checked for valid certificates and are run on the host as soon as they are downloaded.
Tags: client zero file cisco-anyconnect zero-day arbitrary-code executable-files

19:40
Zero Day Initiative Advisory 12-155
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 12-155 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Indusoft Thin Client. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within ISSymbol.ocx ActiveX component. When an overly large string is passed as the 'InternationalOrder' parameter, a heap overflow occurs. This vulnerability can be leveraged to execute code under the context of the user running the browser.
Tags: day zero vulnerability zero-day arbitrary-code thin-client

19:40
Zero Day Initiative Advisory 12-155
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 12-155 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Indusoft Thin Client. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within ISSymbol.ocx ActiveX component. When an overly large string is passed as the 'InternationalOrder' parameter, a heap overflow occurs. This vulnerability can be leveraged to execute code under the context of the user running the browser.
Tags: day zero vulnerability zero-day arbitrary-code thin-client

19:40
Zero Day Initiative Advisory 12-155
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 12-155 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Indusoft Thin Client. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within ISSymbol.ocx ActiveX component. When an overly large string is passed as the 'InternationalOrder' parameter, a heap overflow occurs. This vulnerability can be leveraged to execute code under the context of the user running the browser.
Tags: day zero vulnerability zero-day arbitrary-code thin-client

18:56
Zero Day Initiative Advisory 12-149
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 12-149 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco AnyConnect VPN Client. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists because the VPN AnyConnect helper program does not check the version number of the vpndownloader.exe program it downloads. As such it is possible to forcefully install an older version of the vpndownloader.exe that is vulnerable to previously patched issues.
Tags: version vpn vpndownloader cisco-anyconnect zero-day target arbitrary-code

18:56
Zero Day Initiative Advisory 12-149
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 12-149 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco AnyConnect VPN Client. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists because the VPN AnyConnect helper program does not check the version number of the vpndownloader.exe program it downloads. As such it is possible to forcefully install an older version of the vpndownloader.exe that is vulnerable to previously patched issues.
Tags: day zero initiative cisco-anyconnect zero-day target arbitrary-code

18:56
Zero Day Initiative Advisory 12-149
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 12-149 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco AnyConnect VPN Client. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists because the VPN AnyConnect helper program does not check the version number of the vpndownloader.exe program it downloads. As such it is possible to forcefully install an older version of the vpndownloader.exe that is vulnerable to previously patched issues.
Tags: day zero initiative cisco-anyconnect zero-day target arbitrary-code

August 17, 2012
15:34
Zero Day Initiative Advisory 12-139
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 12-139 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SAP Crystal Reports. Authentication is not required to exploit this vulnerability. The flaw exists within the ebus-3-3-2-7.dll component which is used by the crystalras.exe service. This process listens on a random TCP port. When unmarshalling GIOP ORB encapsulated data the process invokes a memcpy constrained by a user controlled value. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: day zero vulnerability crystal-reports zero-day memcpy arbitrary-code

15:34
Zero Day Initiative Advisory 12-139
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 12-139 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SAP Crystal Reports. Authentication is not required to exploit this vulnerability. The flaw exists within the ebus-3-3-2-7.dll component which is used by the crystalras.exe service. This process listens on a random TCP port. When unmarshalling GIOP ORB encapsulated data the process invokes a memcpy constrained by a user controlled value. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: day zero vulnerability crystal-reports zero-day memcpy arbitrary-code

15:34
Zero Day Initiative Advisory 12-139
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 12-139 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SAP Crystal Reports. Authentication is not required to exploit this vulnerability. The flaw exists within the ebus-3-3-2-7.dll component which is used by the crystalras.exe service. This process listens on a random TCP port. When unmarshalling GIOP ORB encapsulated data the process invokes a memcpy constrained by a user controlled value. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: day zero vulnerability crystal-reports zero-day memcpy arbitrary-code

August 13, 2012
21:30
Ubuntu Security Notice USN-1537-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1537-1 - It was discovered that OpenOffice.org incorrectly handled certain encryption tags in Open Document Text (.odt) files. If a user were tricked into opening a specially crafted file, an attacker could cause OpenOffice.org to crash or possibly execute arbitrary code with the privileges of the user invoking the program.
Tags: ubuntu notice security document-text open-document arbitrary-code

21:30
Ubuntu Security Notice USN-1537-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1537-1 - It was discovered that OpenOffice.org incorrectly handled certain encryption tags in Open Document Text (.odt) files. If a user were tricked into opening a specially crafted file, an attacker could cause OpenOffice.org to crash or possibly execute arbitrary code with the privileges of the user invoking the program.
Tags: ubuntu notice security document-text open-document arbitrary-code
21:30
Ubuntu Security Notice USN-1537-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1537-1 - It was discovered that OpenOffice.org incorrectly handled certain encryption tags in Open Document Text (.odt) files. If a user were tricked into opening a specially crafted file, an attacker could cause OpenOffice.org to crash or possibly execute arbitrary code with the privileges of the user invoking the program.
Tags: ubuntu notice security document-text open-document arbitrary-code

21:30
Ubuntu Security Notice USN-1537-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1537-1 - It was discovered that OpenOffice.org incorrectly handled certain encryption tags in Open Document Text (.odt) files. If a user were tricked into opening a specially crafted file, an attacker could cause OpenOffice.org to crash or possibly execute arbitrary code with the privileges of the user invoking the program.
Tags: ubuntu notice security document-text open-document arbitrary-code

21:30
Ubuntu Security Notice USN-1536-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1536-1 - It was discovered that LibreOffice incorrectly handled certain encryption tags in Open Document Text (.odt) files. If a user were tricked into opening a specially crafted file, an attacker could cause LibreOffice to crash or possibly execute arbitrary code with the privileges of the user invoking the program.
Tags: ubuntu notice security document-text open-document arbitrary-code

21:30
Ubuntu Security Notice USN-1536-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1536-1 - It was discovered that LibreOffice incorrectly handled certain encryption tags in Open Document Text (.odt) files. If a user were tricked into opening a specially crafted file, an attacker could cause LibreOffice to crash or possibly execute arbitrary code with the privileges of the user invoking the program.
Tags: ubuntu notice security document-text open-document arbitrary-code
21:30
Ubuntu Security Notice USN-1536-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1536-1 - It was discovered that LibreOffice incorrectly handled certain encryption tags in Open Document Text (.odt) files. If a user were tricked into opening a specially crafted file, an attacker could cause LibreOffice to crash or possibly execute arbitrary code with the privileges of the user invoking the program.
Tags: ubuntu notice security document-text open-document arbitrary-code

21:30
Ubuntu Security Notice USN-1536-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1536-1 - It was discovered that LibreOffice incorrectly handled certain encryption tags in Open Document Text (.odt) files. If a user were tricked into opening a specially crafted file, an attacker could cause LibreOffice to crash or possibly execute arbitrary code with the privileges of the user invoking the program.
Tags: ubuntu notice security document-text open-document arbitrary-code

August 02, 2012
19:36
Zenoss 3 showDaemonXMLConfig Command Execution
» ‎ Packet Storm Security Exploits

This Metasploit module exploits a command execution vulnerability in Zenoss 3.x which could be abused to allow authenticated users to execute arbitrary code under the context of the 'zenoss' user. The show_daemon_xml_configs() function in the 'ZenossInfo.py' script calls Popen() with user controlled data from the 'daemon' parameter.
Tags: the zenoss command command-execution arbitrary-code vulnerability

19:36
Zenoss 3 showDaemonXMLConfig Command Execution
» ‎ Packet Storm Security Recent Files

This Metasploit module exploits a command execution vulnerability in Zenoss 3.x which could be abused to allow authenticated users to execute arbitrary code under the context of the 'zenoss' user. The show_daemon_xml_configs() function in the 'ZenossInfo.py' script calls Popen() with user controlled data from the 'daemon' parameter.
Tags: the zenoss command command-execution arbitrary-code vulnerability

19:36
Zenoss 3 showDaemonXMLConfig Command Execution
» ‎ Packet Storm Security Misc. Files

This Metasploit module exploits a command execution vulnerability in Zenoss 3.x which could be abused to allow authenticated users to execute arbitrary code under the context of the 'zenoss' user. The show_daemon_xml_configs() function in the 'ZenossInfo.py' script calls Popen() with user controlled data from the 'daemon' parameter.
Tags: the zenoss command command-execution arbitrary-code vulnerability

July 12, 2012
21:00
Zero Day Initiative Advisory 12-116
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 12-116 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC Autostart. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ftAgent.exe service, which listens by default on TCP port 8045. When handling messages with opcode 50 (0x32) and subcode 04, the process performs arithmetic on an unvalidated user-supplied value used to determine the size of a new heap buffer, allowing a potential integer wrap. This user supplied value is also used to determine how many times a loop will parse the data into the buffer. Combined, the vulnerable code will allow for the heap to be corrupted. This vulnerability can be leveraged to execute code under the context of the SYSTEM user.
Tags: zero-day autostart arbitrary-code
July 11, 2012
18:29
Ubuntu Security Notice USN-1503-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1503-1 - Hans Spaans discovered that the Context plugin in Rhythmbox created a temporary directory in an insecure manner. A local attacker could exploit this to execute arbitrary code as the user invoking the program. The Context plugin is disabled by default in Ubuntu.
Tags: ubuntu notice security hans-spaans arbitrary-code security-notice attacker

18:29
Ubuntu Security Notice USN-1503-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1503-1 - Hans Spaans discovered that the Context plugin in Rhythmbox created a temporary directory in an insecure manner. A local attacker could exploit this to execute arbitrary code as the user invoking the program. The Context plugin is disabled by default in Ubuntu.
Tags: ubuntu notice security hans-spaans arbitrary-code security-notice attacker

18:29
Ubuntu Security Notice USN-1503-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1503-1 - Hans Spaans discovered that the Context plugin in Rhythmbox created a temporary directory in an insecure manner. A local attacker could exploit this to execute arbitrary code as the user invoking the program. The Context plugin is disabled by default in Ubuntu.
Tags: ubuntu notice security hans-spaans arbitrary-code security-notice attacker

June 29, 2012
16:39
Hewlett-Packard Data Protector DtbClsAddObject Parsing Remote Code Execution
» ‎ Packet Storm Security Advisories

A vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard Data Protector. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dpwintdb.exe process which listens by default on TCP port 3817. When parsing data within a DtbClsAddObject request, the process copies data from the network into a fixed-length buffer on the stack via an unchecked loop. This can be leveraged by attackers to execute arbitrary code under the context of the SYSTEM user.
Tags: code data packard data-protector code-execution arbitrary-code

16:39
Hewlett-Packard Data Protector DtbClsAddObject Parsing Remote Code Execution
» ‎ Packet Storm Security Recent Files

A vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard Data Protector. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dpwintdb.exe process which listens by default on TCP port 3817. When parsing data within a DtbClsAddObject request, the process copies data from the network into a fixed-length buffer on the stack via an unchecked loop. This can be leveraged by attackers to execute arbitrary code under the context of the SYSTEM user.
Tags: data-protector code-execution arbitrary-code

16:39
Hewlett-Packard Data Protector DtbClsAddObject Parsing Remote Code Execution
» ‎ Packet Storm Security Misc. Files

A vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard Data Protector. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dpwintdb.exe process which listens by default on TCP port 3817. When parsing data within a DtbClsAddObject request, the process copies data from the network into a fixed-length buffer on the stack via an unchecked loop. This can be leveraged by attackers to execute arbitrary code under the context of the SYSTEM user.
Tags: data-protector code-execution arbitrary-code

June 21, 2012
20:40
Lattice Diamond Programmer Buffer Overflow
» ‎ Packet Storm Security Exploits

Core Security Technologies Advisory - Lattice Diamond Programmer is vulnerable to client-side attacks, which can be exploited by remote attackers to run arbitrary code by sending specially crafted '.xcf' files.
Tags: buffer-overflow security-technologies arbitrary-code

20:40
Lattice Diamond Programmer Buffer Overflow
» ‎ Packet Storm Security Recent Files

Core Security Technologies Advisory - Lattice Diamond Programmer is vulnerable to client-side attacks, which can be exploited by remote attackers to run arbitrary code by sending specially crafted '.xcf' files.
Tags: lattice diamond programmer buffer-overflow security-technologies arbitrary-code

20:40
Lattice Diamond Programmer Buffer Overflow
» ‎ Packet Storm Security Misc. Files

Core Security Technologies Advisory - Lattice Diamond Programmer is vulnerable to client-side attacks, which can be exploited by remote attackers to run arbitrary code by sending specially crafted '.xcf' files.
Tags: buffer-overflow security-technologies arbitrary-code

8:34
Gentoo Linux Security Advisory 201206-08
» ‎ Packet Storm Security Advisories

Gentoo Linux Security Advisory 201206-8 - Multiple vulnerabilities have been found in Wicd, the worst of which might allow execution of arbitrary code as root. Versions less than 1.7.2.1 are affected.
Tags: gentoo security linux gentoo-linux-security security-advisory arbitrary-code

8:34
Gentoo Linux Security Advisory 201206-08
» ‎ Packet Storm Security Recent Files

Gentoo Linux Security Advisory 201206-8 - Multiple vulnerabilities have been found in Wicd, the worst of which might allow execution of arbitrary code as root. Versions less than 1.7.2.1 are affected.
Tags: gentoo security linux gentoo-linux-security security-advisory arbitrary-code

8:34
Gentoo Linux Security Advisory 201206-08
» ‎ Packet Storm Security Misc. Files

Gentoo Linux Security Advisory 201206-8 - Multiple vulnerabilities have been found in Wicd, the worst of which might allow execution of arbitrary code as root. Versions less than 1.7.2.1 are affected.
Tags: gentoo security linux gentoo-linux-security security-advisory arbitrary-code

May 21, 2012
17:25
Ubuntu Security Notice USN-1447-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1447-1 - Juri Aedla discovered that libxml2 contained an off by one error in its XPointer functionality. If a user or application linked against libxml2 were tricked into opening a specially crafted XML file, an attacker could cause the application to crash or possibly execute arbitrary code with the privileges of the user invoking the program.
Tags: juri arbitrary-code security-notice

17:25
Ubuntu Security Notice USN-1447-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1447-1 - Juri Aedla discovered that libxml2 contained an off by one error in its XPointer functionality. If a user or application linked against libxml2 were tricked into opening a specially crafted XML file, an attacker could cause the application to crash or possibly execute arbitrary code with the privileges of the user invoking the program.
Tags: ubuntu notice security juri-aedla juri arbitrary-code security-notice

17:25
Ubuntu Security Notice USN-1447-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1447-1 - Juri Aedla discovered that libxml2 contained an off by one error in its XPointer functionality. If a user or application linked against libxml2 were tricked into opening a specially crafted XML file, an attacker could cause the application to crash or possibly execute arbitrary code with the privileges of the user invoking the program.
Tags: ubuntu notice security juri-aedla juri arbitrary-code security-notice

May 02, 2012
8:55
Ubuntu Security Notice USN-1436-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1436-1 - Matthew Hall discovered that Libtasn1 incorrectly handled certain large values. An attacker could exploit this with a specially crafted ASN.1 structure and cause a denial of service, or possibly execute arbitrary code.
Tags: ubuntu notice security matthew-hall denial-of-service arbitrary-code

8:55
Ubuntu Security Notice USN-1436-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1436-1 - Matthew Hall discovered that Libtasn1 incorrectly handled certain large values. An attacker could exploit this with a specially crafted ASN.1 structure and cause a denial of service, or possibly execute arbitrary code.
Tags: ubuntu notice security matthew-hall denial-of-service arbitrary-code

April 24, 2012
19:07
Ubuntu Security Notice USN-1428-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1428-1 - It was discovered that the fix for CVE-2012-2110 was incomplete for OpenSSL 0.9.8. A remote attacker could trigger this flaw in services that used SSL to cause a denial of service or possibly execute arbitrary code with application privileges. Ubuntu 11.10 was not affected by this issue. The original upstream fix for CVE-2012-2110 would cause BUF_MEM_grow_clean() to sometimes return the wrong error condition. This update fixes the problem. Various other issues were also addressed.
Tags: ubuntu notice security denial-of-service error-condition arbitrary-code

19:07
Ubuntu Security Notice USN-1428-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1428-1 - It was discovered that the fix for CVE-2012-2110 was incomplete for OpenSSL 0.9.8. A remote attacker could trigger this flaw in services that used SSL to cause a denial of service or possibly execute arbitrary code with application privileges. Ubuntu 11.10 was not affected by this issue. The original upstream fix for CVE-2012-2110 would cause BUF_MEM_grow_clean() to sometimes return the wrong error condition. This update fixes the problem. Various other issues were also addressed.
Tags: ubuntu notice security denial-of-service error-condition arbitrary-code

19:07
Ubuntu Security Notice USN-1428-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1428-1 - It was discovered that the fix for CVE-2012-2110 was incomplete for OpenSSL 0.9.8. A remote attacker could trigger this flaw in services that used SSL to cause a denial of service or possibly execute arbitrary code with application privileges. Ubuntu 11.10 was not affected by this issue. The original upstream fix for CVE-2012-2110 would cause BUF_MEM_grow_clean() to sometimes return the wrong error condition. This update fixes the problem. Various other issues were also addressed.
Tags: ubuntu notice security denial-of-service error-condition arbitrary-code

April 22, 2012
17:00
Samba NDR PULL LSA TrustDomainInfoControllers Memory Corruption Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samba. Authentication is not required to exploit this vulnerability...
Tags: vulnerability samba ndr memory-corruption arbitrary-code attackers
17:00
Samba ndr_ValidatePassword heap overflow Remote Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samba. Authentication is not required to exploit this vulnerability.
Tags: code vulnerability samba code-execution arbitrary-code ndr

April 16, 2012
16:57
Apache OFBiz 10.04 Code Execution
» ‎ Packet Storm Security Recent Files

Apache OFBiz versions 10.04 and later allow remote attackers to execute arbitrary code.
Tags: ofbiz code apache code-execution arbitrary-code

16:57
Apache OFBiz 10.04 Code Execution
» ‎ Packet Storm Security Misc. Files

Apache OFBiz versions 10.04 and later allow remote attackers to execute arbitrary code.
Tags: ofbiz code apache code-execution arbitrary-code

April 13, 2012
12:37
Ubuntu Security Notice USN-1423-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1423-1 - Brian Gorenc discovered that Samba incorrectly calculated array bounds when handling remote procedure calls (RPC) over the network. A remote, unauthenticated attacker could exploit this to execute arbitrary code as the root user.
Tags: ubuntu notice security brian-gorenc array-bounds root-user arbitrary-code

12:37
Ubuntu Security Notice USN-1423-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1423-1 - Brian Gorenc discovered that Samba incorrectly calculated array bounds when handling remote procedure calls (RPC) over the network. A remote, unauthenticated attacker could exploit this to execute arbitrary code as the root user.
Tags: ubuntu notice security brian-gorenc array-bounds root-user arbitrary-code

12:37
Ubuntu Security Notice USN-1423-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1423-1 - Brian Gorenc discovered that Samba incorrectly calculated array bounds when handling remote procedure calls (RPC) over the network. A remote, unauthenticated attacker could exploit this to execute arbitrary code as the root user.
Tags: ubuntu notice security brian-gorenc array-bounds root-user arbitrary-code

April 09, 2012
21:31
Zero Day Initiative Advisory 12-059
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 12-059 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists in the parsing of Ogg Vorbis media files. By crafting a stream with specific values , it is possible to cause a decoding loop that copies memory to write controlled data beyond the end of a fixed size buffer. An attacker can leverage this behavior to gain remote code execution under the context of the current process.
Tags: day zero initiative code-execution zero-day arbitrary-code

21:31
Zero Day Initiative Advisory 12-059
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 12-059 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists in the parsing of Ogg Vorbis media files. By crafting a stream with specific values , it is possible to cause a decoding loop that copies memory to write controlled data beyond the end of a fixed size buffer. An attacker can leverage this behavior to gain remote code execution under the context of the current process.
Tags: day zero initiative code-execution zero-day arbitrary-code

21:31
Zero Day Initiative Advisory 12-059
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 12-059 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists in the parsing of Ogg Vorbis media files. By crafting a stream with specific values , it is possible to cause a decoding loop that copies memory to write controlled data beyond the end of a fixed size buffer. An attacker can leverage this behavior to gain remote code execution under the context of the current process.
Tags: day zero initiative code-execution zero-day arbitrary-code

20:39
Zero Day Initiative Advisory 12-055
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 12-055 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of WebKit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within the WebCore component as used by WebKit. Specifically within the handling of element properties. When importing a node having a nonattribute property such as an attached event, an object is improperly freed and accessed. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the browser.
Tags: day zero vulnerability element-properties zero-day arbitrary-code

20:39
Zero Day Initiative Advisory 12-055
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 12-055 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of WebKit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within the WebCore component as used by WebKit. Specifically within the handling of element properties. When importing a node having a nonattribute property such as an attached event, an object is improperly freed and accessed. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the browser.
Tags: day zero vulnerability element-properties zero-day arbitrary-code

20:39
Zero Day Initiative Advisory 12-055
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 12-055 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of WebKit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within the WebCore component as used by WebKit. Specifically within the handling of element properties. When importing a node having a nonattribute property such as an attached event, an object is improperly freed and accessed. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the browser.
Tags: day zero vulnerability element-properties zero-day arbitrary-code

April 03, 2012
17:25
NetOp Remote Control Client 9.5 Buffer Overflow
» ‎ Packet Storm Security Exploits

This Metasploit module exploits a stack-based buffer overflow in NetOp Remote Control 9.5. When opening a .dws file containing a specially crafted string longer then 520 characters will allow an attacker to execute arbitrary code.
Tags: control netop remote based-buffer-overflow arbitrary-code attacker

March 08, 2012
19:45
Ubuntu Security Notice USN-1395-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1395-1 - Markus Vervier discovered that PyPAM incorrectly handled passwords containing NULL bytes. An attacker could exploit this to cause applications using PyPAM to crash, or possibly execute arbitrary code.
Tags: ubuntu notice security markus-vervier arbitrary-code security-notice attacker

19:45
Ubuntu Security Notice USN-1395-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1395-1 - Markus Vervier discovered that PyPAM incorrectly handled passwords containing NULL bytes. An attacker could exploit this to cause applications using PyPAM to crash, or possibly execute arbitrary code.
Tags: ubuntu notice security markus-vervier arbitrary-code security-notice attacker

19:45
Ubuntu Security Notice USN-1395-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1395-1 - Markus Vervier discovered that PyPAM incorrectly handled passwords containing NULL bytes. An attacker could exploit this to cause applications using PyPAM to crash, or possibly execute arbitrary code.
Tags: ubuntu notice security markus-vervier arbitrary-code security-notice attacker

March 07, 2012
8:40
Ubuntu Security Notice USN-1391-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1391-1 - A flaw was discovered in the XFS filesystem. If a local user mounts a specially crafted XFS image it could potential execute arbitrary code on the system.
Tags: ubuntu notice security arbitrary-code security-notice usn

8:40
Ubuntu Security Notice USN-1391-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1391-1 - A flaw was discovered in the XFS filesystem. If a local user mounts a specially crafted XFS image it could potential execute arbitrary code on the system.
Tags: ubuntu notice security arbitrary-code security-notice usn

8:40
Ubuntu Security Notice USN-1391-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1391-1 - A flaw was discovered in the XFS filesystem. If a local user mounts a specially crafted XFS image it could potential execute arbitrary code on the system.
Tags: ubuntu notice security arbitrary-code security-notice usn

February 24, 2012
14:59
Ubuntu Security Notice USN-1374-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1374-1 - Andy Davis discovered that Samba incorrectly handled certain AndX offsets. A remote attacker could send a specially crafted request to the server and cause a denial of service, or possibly execute arbitrary code.
Tags: ubuntu notice security andy-davis denial-of-service arbitrary-code

14:59
Ubuntu Security Notice USN-1374-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1374-1 - Andy Davis discovered that Samba incorrectly handled certain AndX offsets. A remote attacker could send a specially crafted request to the server and cause a denial of service, or possibly execute arbitrary code.
Tags: ubuntu notice security andy-davis denial-of-service arbitrary-code

14:59
Ubuntu Security Notice USN-1374-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1374-1 - Andy Davis discovered that Samba incorrectly handled certain AndX offsets. A remote attacker could send a specially crafted request to the server and cause a denial of service, or possibly execute arbitrary code.
Tags: ubuntu notice security andy-davis denial-of-service arbitrary-code

February 22, 2012
20:44
Ubuntu Security Notice USN-1371-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1371-1 - It was discovered that cvs incorrectly handled certain responses from proxy servers. If a user were tricked into connecting to a malicious proxy server, a remote attacker could cause cvs to crash, or possibly execute arbitrary code.
Tags: ubuntu notice security proxy-servers arbitrary-code security-notice
February 20, 2012
18:43
Ubuntu Security Notice USN-1370-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1370-1 - It was discovered that libvorbis did not correctly handle certain malformed ogg files. If a user were tricked into opening a specially crafted ogg file with an application that uses libvorbis, an attacker could cause a denial of service or possibly execute arbitrary code with the user's privileges.
Tags: ubuntu notice security denial-of-service ogg-files arbitrary-code

18:43
Ubuntu Security Notice USN-1370-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1370-1 - It was discovered that libvorbis did not correctly handle certain malformed ogg files. If a user were tricked into opening a specially crafted ogg file with an application that uses libvorbis, an attacker could cause a denial of service or possibly execute arbitrary code with the user's privileges.
Tags: ubuntu notice security denial-of-service ogg-files arbitrary-code

18:43
Ubuntu Security Notice USN-1370-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1370-1 - It was discovered that libvorbis did not correctly handle certain malformed ogg files. If a user were tricked into opening a specially crafted ogg file with an application that uses libvorbis, an attacker could cause a denial of service or possibly execute arbitrary code with the user's privileges.
Tags: ubuntu notice security denial-of-service ogg-files arbitrary-code

February 08, 2012
14:42
Zero Day Initiative Advisory 12-030
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 12-030 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Rational Rhapsody. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within BB FlashBack Recorder.dll. Uninitialized pointers may be passed as arguments to TestCompatibilityRecordMode() which allows a remote attacker to reliably corrupt controlled memory regions. This behavior can be exploited to remotely execute arbitrary code in the context of the user running the browser.
Tags: day zero initiative memory-regions zero-day arbitrary-code

14:42
Zero Day Initiative Advisory 12-030
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 12-030 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Rational Rhapsody. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within BB FlashBack Recorder.dll. Uninitialized pointers may be passed as arguments to TestCompatibilityRecordMode() which allows a remote attacker to reliably corrupt controlled memory regions. This behavior can be exploited to remotely execute arbitrary code in the context of the user running the browser.
Tags: memory-regions zero-day arbitrary-code

14:42
Zero Day Initiative Advisory 12-030
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 12-030 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Rational Rhapsody. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within BB FlashBack Recorder.dll. Uninitialized pointers may be passed as arguments to TestCompatibilityRecordMode() which allows a remote attacker to reliably corrupt controlled memory regions. This behavior can be exploited to remotely execute arbitrary code in the context of the user running the browser.
Tags: day zero initiative memory-regions zero-day arbitrary-code

14:28
Zero Day Initiative Advisory 12-029
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 12-029 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Rational Rhapsody. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within BB FlashBack Recorder.dll. Uninitialized pointers may be passed as arguments to InsertMarker() which in turn can allow an attacker to corrupt memory in a controlled fashion. This behavior can be exploited to remotely execute arbitrary code in the context of the user running the browser.
Tags: day zero initiative zero-day arbitrary-code target

14:28
Zero Day Initiative Advisory 12-029
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 12-029 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Rational Rhapsody. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within BB FlashBack Recorder.dll. Uninitialized pointers may be passed as arguments to InsertMarker() which in turn can allow an attacker to corrupt memory in a controlled fashion. This behavior can be exploited to remotely execute arbitrary code in the context of the user running the browser.
Tags: day zero initiative zero-day arbitrary-code target

14:28
Zero Day Initiative Advisory 12-029
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 12-029 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Rational Rhapsody. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within BB FlashBack Recorder.dll. Uninitialized pointers may be passed as arguments to InsertMarker() which in turn can allow an attacker to corrupt memory in a controlled fashion. This behavior can be exploited to remotely execute arbitrary code in the context of the user running the browser.
Tags: day zero initiative zero-day arbitrary-code target

February 06, 2012
16:12
Red Hat Security Advisory 2012-0100-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0100-01 - Multiple format string flaws were found in Condor. An authenticated Condor service user could use these flaws to prevent other jobs from being scheduled and executed, crash the condor_schedd daemon, or, possibly, execute arbitrary code with the privileges of the "condor" user.
Tags: hat condor red red-hat-security security-advisory arbitrary-code

16:12
Red Hat Security Advisory 2012-0100-01
» ‎ Packet Storm Security Recent Files

Red Hat Security Advisory 2012-0100-01 - Multiple format string flaws were found in Condor. An authenticated Condor service user could use these flaws to prevent other jobs from being scheduled and executed, crash the condor_schedd daemon, or, possibly, execute arbitrary code with the privileges of the "condor" user.
Tags: hat condor red red-hat-security security-advisory arbitrary-code

16:12
Red Hat Security Advisory 2012-0100-01
» ‎ Packet Storm Security Misc. Files

Red Hat Security Advisory 2012-0100-01 - Multiple format string flaws were found in Condor. An authenticated Condor service user could use these flaws to prevent other jobs from being scheduled and executed, crash the condor_schedd daemon, or, possibly, execute arbitrary code with the privileges of the "condor" user.
Tags: hat condor red red-hat-security security-advisory arbitrary-code

February 02, 2012
16:31
RealNetworks RealPlayer RV10 Sample Height Parsing Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks Real Player.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code vulnerability realnetworks code-execution safer-use arbitrary-code
16:31
RealNetworks RealPlayer IVR MLTI Chunk Length Parsing Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks Real Player.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code vulnerability realnetworks code-execution safer-use arbitrary-code
16:31
RealNetworks RealPlayer RV30 Uninitialized Index Value Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks Real Player.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code vulnerability realnetworks code-execution safer-use arbitrary-code
16:25
RealNetworks RealPlayer Invalid Codec Name Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks Real Player.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code vulnerability realnetworks code-execution safer-use arbitrary-code

February 01, 2012
17:22
Ubuntu Security Notice USN-1354-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1354-1 - It was discovered that usbmuxd did not correctly perform bounds checking when processing the SerialNumber field of USB devices. An attacker with physical access could use this to crash usbmuxd or potentially execute arbitrary code as the 'usbmux' user.
Tags: ubuntu notice security arbitrary-code security-notice usb-devices

17:22
Ubuntu Security Notice USN-1354-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1354-1 - It was discovered that usbmuxd did not correctly perform bounds checking when processing the SerialNumber field of USB devices. An attacker with physical access could use this to crash usbmuxd or potentially execute arbitrary code as the 'usbmux' user.
Tags: ubuntu notice security arbitrary-code security-notice usb-devices

17:22
Ubuntu Security Notice USN-1354-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1354-1 - It was discovered that usbmuxd did not correctly perform bounds checking when processing the SerialNumber field of USB devices. An attacker with physical access could use this to crash usbmuxd or potentially execute arbitrary code as the 'usbmux' user.
Tags: ubuntu notice security arbitrary-code security-notice usb-devices

January 31, 2012
16:29
RealNetworks RealPlayer genr Sample Size Parsing Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code realplayer realnetworks code-execution safer-use arbitrary-code
16:24
RealNetworks RealPlayer Malformed AAC File Parsing Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks Realplayer.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code realplayer realnetworks code-execution safer-use arbitrary-code
15:34
HP Data Protector LogBackupLocationStatus SQL Injection Vulnerabilty
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector Notebook Extension.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: protector logbackuplocationstatus data data-protector safer-use arbitrary-code
15:34
InduSoft WebStudio Unauthenticated Operations Code Execution Vulnerabilityy
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Indusoft WebStudio.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code webstudio indusoft code-execution safer-use arbitrary-code
15:34
InduSoft WebStudio CEServer Operation 0x15 Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Indusoft WebStudio.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code webstudio indusoft code-execution safer-use arbitrary-code
15:29
ProFTPD Response Pool Use-After-Free Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the ProFTPd server.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: use code proftpd code-execution safer-use arbitrary-code

7:55
EdrawSoft Office Viewer Component ActiveX 5.6 Buffer Overflow
» ‎ Packet Storm Security Exploits

EdrawSoft Office Viewer Component ActiveX version 5.6.5781 suffers from a buffer overflow vulnerability when parsing large amount of bytes to the FtpUploadFile member in FtpUploadFile() function, resulting memory corruption overwriting several registers including the SEH. An attacker can gain access to the system of the affected node and execute arbitrary code.
Tags: office viewer edrawsoft buffer-overflow-vulnerability memory-corruption arbitrary-code

7:55
EdrawSoft Office Viewer Component ActiveX 5.6 Buffer Overflow
» ‎ Packet Storm Security Recent Files

EdrawSoft Office Viewer Component ActiveX version 5.6.5781 suffers from a buffer overflow vulnerability when parsing large amount of bytes to the FtpUploadFile member in FtpUploadFile() function, resulting memory corruption overwriting several registers including the SEH. An attacker can gain access to the system of the affected node and execute arbitrary code.
Tags: office viewer edrawsoft buffer-overflow-vulnerability memory-corruption arbitrary-code

7:55
EdrawSoft Office Viewer Component ActiveX 5.6 Buffer Overflow
» ‎ Packet Storm Security Misc. Files

EdrawSoft Office Viewer Component ActiveX version 5.6.5781 suffers from a buffer overflow vulnerability when parsing large amount of bytes to the FtpUploadFile member in FtpUploadFile() function, resulting memory corruption overwriting several registers including the SEH. An attacker can gain access to the system of the affected node and execute arbitrary code.
Tags: office viewer edrawsoft buffer-overflow-vulnerability memory-corruption arbitrary-code

January 30, 2012
20:29
vBSEO 3.6.0 PHP Code Injection
» ‎ Packet Storm Security Exploits

This Metasploit module exploits a vulnerability in the 'proc_deutf()' function defined in /includes/functions_vbseocp_abstract.php in vBSEO versions 3.6.0 and below. User input passed through 'char_repl' POST parameter is not properly sanitized before being used in a call to preg_replace() function which uses the 'e' modifier. This can be exploited to inject and execute arbitrary code leveraging the PHP's complex curly syntax.
Tags: code vbseo php arbitrary-code vulnerability syntax

20:29
vBSEO 3.6.0 PHP Code Injection
» ‎ Packet Storm Security Recent Files

This Metasploit module exploits a vulnerability in the 'proc_deutf()' function defined in /includes/functions_vbseocp_abstract.php in vBSEO versions 3.6.0 and below. User input passed through 'char_repl' POST parameter is not properly sanitized before being used in a call to preg_replace() function which uses the 'e' modifier. This can be exploited to inject and execute arbitrary code leveraging the PHP's complex curly syntax.
Tags: code vbseo php arbitrary-code vulnerability syntax

20:29
vBSEO 3.6.0 PHP Code Injection
» ‎ Packet Storm Security Misc. Files

This Metasploit module exploits a vulnerability in the 'proc_deutf()' function defined in /includes/functions_vbseocp_abstract.php in vBSEO versions 3.6.0 and below. User input passed through 'char_repl' POST parameter is not properly sanitized before being used in a call to preg_replace() function which uses the 'e' modifier. This can be exploited to inject and execute arbitrary code leveraging the PHP's complex curly syntax.
Tags: code vbseo php arbitrary-code vulnerability syntax

January 27, 2012
3:11
vBSEO 3.6.0 proc_deutf() Remote PHP Code Injection
» ‎ Packet Storm Security Exploits

This Metasploit module exploits a vulnerability in the 'proc_deutf()' function defined in /includes/functions_vbseocp_abstract.php. User input passed through 'char_repl' POST parameter isn't properly sanitized before being used in a call to preg_replace() function which uses the 'e' modifier. This can be exploited to inject and execute arbitrary code leveraging the PHP's complex curly syntax.
Tags: proc php deutf arbitrary-code php-code vulnerability

3:11
vBSEO 3.6.0 proc_deutf() Remote PHP Code Injection
» ‎ Packet Storm Security Recent Files

This Metasploit module exploits a vulnerability in the 'proc_deutf()' function defined in /includes/functions_vbseocp_abstract.php. User input passed through 'char_repl' POST parameter isn't properly sanitized before being used in a call to preg_replace() function which uses the 'e' modifier. This can be exploited to inject and execute arbitrary code leveraging the PHP's complex curly syntax.
Tags: proc php deutf arbitrary-code php-code vulnerability

3:11
vBSEO 3.6.0 proc_deutf() Remote PHP Code Injection
» ‎ Packet Storm Security Misc. Files

This Metasploit module exploits a vulnerability in the 'proc_deutf()' function defined in /includes/functions_vbseocp_abstract.php. User input passed through 'char_repl' POST parameter isn't properly sanitized before being used in a call to preg_replace() function which uses the 'e' modifier. This can be exploited to inject and execute arbitrary code leveraging the PHP's complex curly syntax.
Tags: proc php deutf arbitrary-code php-code vulnerability

January 26, 2012
17:14
HP Data Protector Notebook Extension RequestCopy SQL Injection Vulnerabilty
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector Notebook Extension.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: notebook protector data data-protector safer-use arbitrary-code
17:14
HP Data Protector Notebook Extension LogClientInstallation SQL Injection Vulnerabilty
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector Notebook Extension.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: notebook protector data data-protector safer-use arbitrary-code
17:09
HP Data Protector Notebook Extension GetPolicies SQL Injection Vulnerabilty
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector Notebook Extension.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: notebook protector data data-protector safer-use arbitrary-code

7:35
Ubuntu Security Notice USN-1348-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1348-1 - It was discovered that ICU did not properly handle invalid locale data during Unicode conversion. If an application using ICU processed crafted data, an attacker could cause it to crash or potentially execute arbitrary code with the privileges of the user invoking the program.
Tags: ubuntu notice security locale-data arbitrary-code security-notice

7:35
Ubuntu Security Notice USN-1348-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1348-1 - It was discovered that ICU did not properly handle invalid locale data during Unicode conversion. If an application using ICU processed crafted data, an attacker could cause it to crash or potentially execute arbitrary code with the privileges of the user invoking the program.
Tags: ubuntu notice security locale-data arbitrary-code security-notice

January 25, 2012
13:22
Ubuntu Security Notice USN-1347-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1347-1 - It was discovered that Evince did not properly parse AFM font files when processing DVI files. If a user were tricked into opening a specially crafted DVI file, an attacker could cause Evince to crash or potentially execute arbitrary code with the privileges of the user invoking the program. In the default installation, attackers would be isolated by the Evince AppArmor profile. Various other issues were also addressed.
Tags: ubuntu evince security dvi-files font-files arbitrary-code

13:22
Ubuntu Security Notice USN-1347-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1347-1 - It was discovered that Evince did not properly parse AFM font files when processing DVI files. If a user were tricked into opening a specially crafted DVI file, an attacker could cause Evince to crash or potentially execute arbitrary code with the privileges of the user invoking the program. In the default installation, attackers would be isolated by the Evince AppArmor profile. Various other issues were also addressed.
Tags: ubuntu evince security dvi-files font-files arbitrary-code

13:22
Ubuntu Security Notice USN-1347-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1347-1 - It was discovered that Evince did not properly parse AFM font files when processing DVI files. If a user were tricked into opening a specially crafted DVI file, an attacker could cause Evince to crash or potentially execute arbitrary code with the privileges of the user invoking the program. In the default installation, attackers would be isolated by the Evince AppArmor profile. Various other issues were also addressed.
Tags: ubuntu evince security dvi-files font-files arbitrary-code

January 24, 2012
16:59
HP Data Protector Notebook Extension LogClientHealth SQL Injection Vulnerabilty
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector Notebook Extension.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: data-protector safer-use arbitrary-code
16:54
HP Data Protector Notebook Extension LogCopyOperation SQL Injection Vulnerabilty
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector Notebook Extension.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: notebook protector data data-protector safer-use arbitrary-code
16:54
HP Data Protector Notebook Extension FinishedCopy SQL Injection Vulnerabilty
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector Notebook Extension.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: notebook protector data data-protector safer-use arbitrary-code

January 19, 2012
15:51
Ubuntu Security Notice USN-1334-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1334-1 - It was discovered that libxml2 contained an off by one error. If a user or application linked against libxml2 were tricked into opening a specially crafted XML file, an attacker could cause the application to crash or possibly execute arbitrary code with the privileges of the user invoking the program. It was discovered that libxml2 is vulnerable to double-free conditions when parsing certain XML documents. This could allow a remote attacker to cause a denial of service. Various other issues were also addressed.
Tags: ubuntu security libxml denial-of-service arbitrary-code security-notice

15:51
Ubuntu Security Notice USN-1334-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1334-1 - It was discovered that libxml2 contained an off by one error. If a user or application linked against libxml2 were tricked into opening a specially crafted XML file, an attacker could cause the application to crash or possibly execute arbitrary code with the privileges of the user invoking the program. It was discovered that libxml2 is vulnerable to double-free conditions when parsing certain XML documents. This could allow a remote attacker to cause a denial of service. Various other issues were also addressed.
Tags: ubuntu security libxml denial-of-service arbitrary-code security-notice

15:51
Ubuntu Security Notice USN-1334-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1334-1 - It was discovered that libxml2 contained an off by one error. If a user or application linked against libxml2 were tricked into opening a specially crafted XML file, an attacker could cause the application to crash or possibly execute arbitrary code with the privileges of the user invoking the program. It was discovered that libxml2 is vulnerable to double-free conditions when parsing certain XML documents. This could allow a remote attacker to cause a denial of service. Various other issues were also addressed.
Tags: ubuntu security libxml denial-of-service arbitrary-code security-notice

15:49
Ubuntu Security Notice USN-1335-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1335-1 - Jon Larimer discovered that t1lib did not properly parse AFM fonts. If a user were tricked into using a specially crafted font file, a remote attacker could cause t1lib to crash or possibly execute arbitrary code with user privileges. Jonathan Brossard discovered that t1lib did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause t1lib to crash. Various other issues were also addressed.
Tags: user font lib jonathan-brossard jon-larimer font-files brossard arbitrary-code

15:49
Ubuntu Security Notice USN-1335-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1335-1 - Jon Larimer discovered that t1lib did not properly parse AFM fonts. If a user were tricked into using a specially crafted font file, a remote attacker could cause t1lib to crash or possibly execute arbitrary code with user privileges. Jonathan Brossard discovered that t1lib did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause t1lib to crash. Various other issues were also addressed.
Tags: user font lib jonathan-brossard jon-larimer font-files brossard arbitrary-code

15:49
Ubuntu Security Notice USN-1335-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1335-1 - Jon Larimer discovered that t1lib did not properly parse AFM fonts. If a user were tricked into using a specially crafted font file, a remote attacker could cause t1lib to crash or possibly execute arbitrary code with user privileges. Jonathan Brossard discovered that t1lib did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause t1lib to crash. Various other issues were also addressed.
Tags: user font lib jonathan-brossard jon-larimer font-files brossard arbitrary-code

January 17, 2012
16:54
Ubuntu Security Notice USN-1333-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1333-1 - Steve Manzuik discovered that Libav incorrectly handled certain malformed Matroska files. If a user were tricked into opening a crafted Matroska file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. This issue only affected Ubuntu 11.04. Phillip Langlois discovered that Libav incorrectly handled certain malformed QDM2 streams. If a user were tricked into opening a crafted QDM2 stream file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. Various other issues were also addressed.
Tags: user ubuntu security phillip-langlois steve-manzuik application-crash denial-of-service arbitrary-code

16:54
Ubuntu Security Notice USN-1333-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1333-1 - Steve Manzuik discovered that Libav incorrectly handled certain malformed Matroska files. If a user were tricked into opening a crafted Matroska file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. This issue only affected Ubuntu 11.04. Phillip Langlois discovered that Libav incorrectly handled certain malformed QDM2 streams. If a user were tricked into opening a crafted QDM2 stream file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. Various other issues were also addressed.
Tags: user ubuntu security phillip-langlois steve-manzuik application-crash denial-of-service arbitrary-code

16:54
Ubuntu Security Notice USN-1333-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1333-1 - Steve Manzuik discovered that Libav incorrectly handled certain malformed Matroska files. If a user were tricked into opening a crafted Matroska file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. This issue only affected Ubuntu 11.04. Phillip Langlois discovered that Libav incorrectly handled certain malformed QDM2 streams. If a user were tricked into opening a crafted QDM2 stream file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. Various other issues were also addressed.
Tags: user ubuntu security phillip-langlois steve-manzuik application-crash denial-of-service arbitrary-code

January 12, 2012
16:24
Symantec IM Manager ProcessAction Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec IM Manager.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code symantec manager code-execution safer-use arbitrary-code

January 05, 2012
16:12
Ubuntu Security Notice USN-1320-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1320-1 - Steve Manzuik discovered that FFmpeg incorrectly handled certain malformed Matroska files. If a user were tricked into opening a crafted Matroska file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. Phillip Langlois discovered that FFmpeg incorrectly handled certain malformed QDM2 streams. If a user were tricked into opening a crafted QDM2 stream file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. Various other issues were also addressed.
Tags: user ubuntu security phillip-langlois steve-manzuik application-crash denial-of-service arbitrary-code

16:12
Ubuntu Security Notice USN-1320-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1320-1 - Steve Manzuik discovered that FFmpeg incorrectly handled certain malformed Matroska files. If a user were tricked into opening a crafted Matroska file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. Phillip Langlois discovered that FFmpeg incorrectly handled certain malformed QDM2 streams. If a user were tricked into opening a crafted QDM2 stream file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. Various other issues were also addressed.
Tags: user ubuntu security phillip-langlois steve-manzuik application-crash denial-of-service arbitrary-code

16:12
Ubuntu Security Notice USN-1320-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1320-1 - Steve Manzuik discovered that FFmpeg incorrectly handled certain malformed Matroska files. If a user were tricked into opening a crafted Matroska file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. Phillip Langlois discovered that FFmpeg incorrectly handled certain malformed QDM2 streams. If a user were tricked into opening a crafted QDM2 stream file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. Various other issues were also addressed.
Tags: user ubuntu security phillip-langlois steve-manzuik application-crash denial-of-service arbitrary-code

January 02, 2012
19:09
Novell Cloud Manager Insufficient Framework User Validation Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Cloud Manager.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: novell manager cloud safer-use arbitrary-code attackers

December 29, 2011
9:00
Bugtraq: [security bulletin] HPSBPI02732 SSRT100435 rev.1 - HP Managed Printing Administration, Remote Execution of Arbitrary Code and Other Vulnerabilities
» ‎ SecurityFocus Vulnerabilities

[security bulletin] HPSBPI02732 SSRT100435 rev.1 - HP Managed Printing Administration, Remote Execution of Arbitrary Code and Other Vulnerabilities
Tags: security hpsbpi bulletin security-bulletin arbitrary-code bugtraq

December 28, 2011
16:09
Adobe Reader Compound Glyph Index Sign Extension dCode Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: vulnerability reader adobe safer-use adobe-reader arbitrary-code

December 21, 2011
13:58
Ubuntu Security Notice USN-1316-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1316-1 - Jonathan Brossard discovered that t1lib did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause t1lib to crash or possibly execute arbitrary code with user privileges.
Tags: ubuntu notice security jonathan-brossard font-files brossard arbitrary-code

13:58
Ubuntu Security Notice USN-1316-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1316-1 - Jonathan Brossard discovered that t1lib did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause t1lib to crash or possibly execute arbitrary code with user privileges.
Tags: ubuntu notice security jonathan-brossard font-files brossard arbitrary-code

13:58
Ubuntu Security Notice USN-1316-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1316-1 - Jonathan Brossard discovered that t1lib did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause t1lib to crash or possibly execute arbitrary code with user privileges.
Tags: ubuntu notice security jonathan-brossard font-files brossard arbitrary-code

December 20, 2011
11:38
Ubuntu Security Notice USN-1315-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1315-1 - Jonathan Foote discovered that JasPer incorrectly handled certain malformed JPEG-2000 image files. If a user were tricked into opening a specially crafted JPEG-2000 image file, a remote attacker could cause JasPer to crash or possibly execute arbitrary code with user privileges.
Tags: ubuntu notice security jonathan-foote arbitrary-code security-notice

11:38
Ubuntu Security Notice USN-1315-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1315-1 - Jonathan Foote discovered that JasPer incorrectly handled certain malformed JPEG-2000 image files. If a user were tricked into opening a specially crafted JPEG-2000 image file, a remote attacker could cause JasPer to crash or possibly execute arbitrary code with user privileges.
Tags: ubuntu notice security jonathan-foote arbitrary-code security-notice

11:38
Ubuntu Security Notice USN-1315-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1315-1 - Jonathan Foote discovered that JasPer incorrectly handled certain malformed JPEG-2000 image files. If a user were tricked into opening a specially crafted JPEG-2000 image file, a remote attacker could cause JasPer to crash or possibly execute arbitrary code with user privileges.
Tags: ubuntu notice security jonathan-foote arbitrary-code security-notice

December 19, 2011
15:34
Oracle Secure Backup validate_login Command Injection Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Secure Backup.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: secure code oracle code-execution safer-use arbitrary-code
15:34
HP Easy Printer Care XMLSimpleAccessor Class ActiveX Control Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Easy Printer Care.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: care easy printer code-execution safer-use arbitrary-code

December 14, 2011
16:59
Ubuntu Security Notice USN-1308-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1308-1 - vladz discovered that executables compressed by bzexe insecurely create temporary files when they are ran. A local attacker could exploit this issue to execute arbitrary code as the user running a compressed executable.
Tags: ubuntu notice security arbitrary-code security-notice temporary-files

Skip to page: 1 2 3 4

jetlib.sec » Tags » arbitrary-code

Feeds

777 items tagged "arbitrary code"

Tags: plf blazedvd module module-updates msf arbitrary-code

Tags: plf blazedvd module module-updates msf arbitrary-code

Tags: plf blazedvd module module-updates msf arbitrary-code

Tags: plf blazedvd module module-updates msf arbitrary-code

Tags: plf blazedvd module module-updates msf arbitrary-code

Tags: plf blazedvd module module-updates msf arbitrary-code

Tags: day zero initiative zero-day arbitrary-code target

Tags: day zero initiative zero-day arbitrary-code target

Tags: day zero initiative zero-day arbitrary-code target

Tags: day zero application atrac-codec zero-day arbitrary-code

Tags: day zero application atrac-codec zero-day arbitrary-code

Tags: day zero application atrac-codec zero-day arbitrary-code

Tags: ubuntu notice security application-crash denial-of-service arbitrary-code

Tags: ubuntu notice security application-crash denial-of-service arbitrary-code

Tags: ubuntu notice security application-crash denial-of-service arbitrary-code

Tags: ubuntu notice security application-crash denial-of-service arbitrary-code

Tags: ubuntu notice security application-crash denial-of-service arbitrary-code

Tags: ubuntu notice security application-crash denial-of-service arbitrary-code

Tags: ubuntu notice security julius-plenz denial-of-service arbitrary-code security-notice

Tags: ubuntu notice security julius-plenz denial-of-service arbitrary-code security-notice

Tags: ubuntu notice security julius-plenz denial-of-service arbitrary-code security-notice

Tags: ubuntu notice security arbitrary-code security-notice attacker

Tags: ubuntu notice security arbitrary-code security-notice attacker

Tags: ubuntu notice security arbitrary-code security-notice attacker

Tags: ubuntu notice security security-notice arbitrary-code attacker

Tags: ubuntu notice security security-notice arbitrary-code attacker

Tags: ubuntu notice security security-notice arbitrary-code attacker

Tags: ubuntu notice security document-applications automated-system arbitrary-code

Tags: ubuntu notice security document-applications automated-system arbitrary-code

Tags: ubuntu notice security florian-weimer denial-of-service arbitrary-code security-notice

Tags: ubuntu notice security florian-weimer denial-of-service arbitrary-code security-notice

Tags: ubuntu notice security florian-weimer denial-of-service arbitrary-code security-notice

Tags: ubuntu notice security denial-of-service arbitrary-code security-notice

Tags: ubuntu notice security denial-of-service arbitrary-code security-notice

Tags: ubuntu notice security denial-of-service arbitrary-code security-notice

Tags: ubuntu notice security hash-tables webapps arbitrary-code

Tags: ubuntu notice security hash-tables webapps arbitrary-code

Tags: ubuntu notice security hash-tables webapps arbitrary-code

Tags: board power invision code-execution arbitrary-code attackers

Tags: excel day zero excel-user zero-day arbitrary-code

Tags: excel day zero excel-user zero-day arbitrary-code

Tags: excel day zero excel-user zero-day arbitrary-code

Tags: novell reporter file arbitrary-files security-vulnerabilities arbitrary-code

Tags: injection openvas manager vulnerable-systems arbitrary-code vulnerability

Tags: injection openvas manager vulnerable-systems arbitrary-code vulnerability

Tags: injection openvas manager vulnerable-systems arbitrary-code vulnerability

Tags: ubuntu notice security application-crash denial-of-service arbitrary-code

Tags: ubuntu notice security application-crash denial-of-service arbitrary-code

Tags: ubuntu notice security application-crash denial-of-service arbitrary-code

Tags: ubuntu notice security tomas-mraz arbitrary-code security-notice attacker

Tags: ubuntu notice security tomas-mraz arbitrary-code security-notice attacker

Tags: ubuntu notice security tomas-mraz arbitrary-code security-notice attacker

Tags: siemens sipass integrated target-system vulnerable-versions arbitrary-code

Tags: ubuntu notice security denial-of-service arbitrary-code security-notice

Tags: ubuntu notice security denial-of-service arbitrary-code security-notice

Tags: ubuntu notice security denial-of-service arbitrary-code security-notice

Tags: java hp-ux remote arbitrary-code vulnerability

Tags: hpsbux security bulletin hp-ux security-bulletin arbitrary-code

Tags: siemens sipass integrated target-system vulnerable-versions arbitrary-code

Tags: ubuntu notice security security-notice arbitrary-code attacker

Tags: ubuntu notice security security-notice arbitrary-code attacker

Tags: ubuntu notice security security-notice arbitrary-code attacker

Tags: hpsbux security bulletin hp-ux security-bulletin arbitrary-code

Tags: python ubuntu security empty-string arbitrary-code security-notice

Tags: python ubuntu security empty-string arbitrary-code security-notice

Tags: python ubuntu security empty-string arbitrary-code security-notice

Tags: building honeywellprocess enterprise buffer-overflow-vulnerability based-buffer-overflow arbitrary-code

Tags: ubuntu notice security raphael-geissert shell-metacharacters automated-system arbitrary-code

Tags: ubuntu notice security raphael-geissert shell-metacharacters automated-system arbitrary-code

Tags: ubuntu notice security raphael-geissert shell-metacharacters automated-system arbitrary-code

Tags: ubuntu notice security character-device arbitrary-code security-notice

Tags: ubuntu notice security character-device arbitrary-code security-notice

Tags: ubuntu notice security character-device arbitrary-code security-notice