RedKernel-Softwares.com > OSVDB.org NEWS

RedKernel-Softwares > OSVDB.org NEWS

Mon, 05 Nov 2007 20:18:22 EST: Apple QuickTime Movie File CTAB Handling Overflow
A remote overflow exists in Apple QuickTime Player. The media player fails to provide adequate bounds checking on the color table atom contained in a movie resulting in a heap-based overflow. With a specially crafted request, an attacker can cause arbitrary code execution resulting in a loss of confidentiality, integrity, and/or availability.

Tue, 24 Apr 2007 12:33:28 EDT: Adobe Photoshop Document Handling Overflow
A local overflow exists in Adobe Photoshop. The application fails to check bounds on file fields resulting in a stack-based overflow. With a specially crafted BMP, DIB, PNG or RLE file, an attacker can cause arbitrary code execution resulting in a loss of integrity.

Mon, 05 Nov 2007 20:18:22 EST: Apple QuickTime VR Extension QTVR Movie Handling Overflow
A remote overflow exists in Apple QuickTime Player. The media player fails to check bounds on panorama sample atoms in QuickTime Virtual Reality movies resulting in a heap-based overflow. With a specially crafted movie file, an attacker can cause arbitrary code execution resulting in a loss of integrity.

Mon, 12 Feb 2007 04:18:55 EST: uTorrent announce Header Processing Overflow
A remote overflow exists in uTorrent. The client fails to perform boundary checking on the torrent announce header resulting in a stack-based overflow. With a specially crafted torrent file, an attacker can cause arbitrary code execution resulting in a loss of integrity.

Mon, 01 Jan 2007 01:06:36 EST: Kerio Personal Firewall (SKPF) iphlpapi.dll Subversion Local Privilege Escalation
Sunbelt Kerio Personal Firewall contains a flaw that may allow a malicious user to gain access to unauthorized privileges. The issue is triggered when a local attacker places a tainted version of iphlpapi.dll in the installation directory. The application will execute this local library in the context of the service. This flaw may lead to a loss of integrity.

Wed, 17 Aug 2005 06:29:04 EDT: Chris Moneymakers World Poker Championship Nickname Join Remote Overflow
A remote overflow exists in Chris Moneymaker's World Poker Championship. The game server fails to check bounds on player nickname's resulting in a stack-based overflow. With a specially crafted request, an attacker can cause arbitrary code execution resulting in a loss of integrity.

Tue, 04 Jan 2000 00:00:00 EST: Winamp Client .pls File Overflow
A buffer overflow exists in Winamp. Winamp fails to check bounds on the length of playlist entries resulting in a buffer overflow. With a specially crafted file, a local attacker can cause arbitrary code execution resulting in a loss of integrity.

Tue, 14 Aug 2007 14:48:58 EDT: Microsoft Windows Media Player Skin File Handling Overflow
A buffer overflow exists in Windows Media Player 11. The player fails to handle the space allocated for uncompressing a compressed skin file resulting in a heap overflow. With a specially crafted file, a remote attacker can cause arbitrary code execution resulting in a loss of integrity.

Tue, 27 Mar 2007 07:49:51 EDT: aBitWhizzy whizzylink.php d Variable Traversal Arbitrary Directory Listing
aBitWhizzy contains a flaw that allows a remote attacker to directory listing outside of the web path. The issue is due to the whizzylink.php not properly sanitizing user input, specifically directory traversal style attacks (../../) supplied via the 'd' variable.

Tue, 27 Mar 2007 07:49:51 EDT: aBitWhizzy whizzypic.php d Variable Traversal Arbitrary Directory Listing
aBitWhizzy contains a flaw that allows a remote attacker to directory listing outside of the web path. The issue is due to the whizzypic.php not properly sanitizing user input, specifically directory traversal style attacks (../../) supplied via the 'd' variable.

Contact: Email or

ICQ 97265485
Copyright IDDN Certification