Photodex ProShow Producer version 5.0.3297 suffers from a stack-based buffer overflow vulnerability. When opening a crafted transition file (.pxt) the application loads the "title" value from the pxt file. The application does not properly validate the length of the string loaded from the "title" value from the pxt file before using it in the further application context, which leads to a buffer overflow condition with possible code execution via overwritten SEH chains on Windows XP/7 32bit. Proof of concept code included.
ea2d7dca9a83d313a225c8b9a5f034f06ab679db12c229e96637363431e9c049This toolkit houses various IPv6 tools that have been tested to compile and run on Debian GNU/Linux 6.0, FreeBSD 9.0, NetBSD 5.1, OpenBSD 5.0, Mac OS 10.8.0, and Ubuntu 11.10.
182d3e7b34ea800eae21d5fbf5fd4fa7f13792f27d9a4c5f61947ae0e178a720Debian Linux Security Advisory 2625-1 - Multiple vulnerabilities were discovered in the dissectors for the CLNP, DTLS, DCP-ETSI and NTLMSSP protocols, which could result in denial of service or the execution of arbitrary code.
ca4004f5cc1cd1fa59fcd3119fda76f3fb2889d730e5eb1625839d1f349f366dDebian Linux Security Advisory 2624-1 - Several vulnerabilities have been discovered in FFmpeg, a multimedia player, server and encoder. Multiple input validations in the decoders/ demuxers for Shorten, Chines AVS video, VP5, VP6, AVI, AVS and MPEG-1/2 files could lead to the execution of arbitrary code.
4b876f7df715ca0333966cf9cf484bac9cf550cd727edda152042ca8ddb7c066360-FAAR Firewall Analysis Audit and Repair is an offline command line perl policy manipulation tool to filter, compare to logs, merge, translate and output firewall commands for new policies, in checkpoint dbedit or screenos commands.
5ac32a9f5919e2aacba845b13f0462fa75bf8dcf78d7edca80b390ceb59f5d75Demandware Store software suffers from a cross site scripting vulnerability.
5dd99eca7616449febf63a21dc70de761531284c0fd9181638c1aa61c67c7be6Smoke Loader Command and Control panel suffers from local file inclusion and file deletion vulnerabilities.
587519e2fdb61e9e365a4f4b17b8c75e68b3cc0b725b1248c46fd1e6ec095b730101SHOP CMS suffers from multiple remote SQL injection vulnerabilities. Note that this finding houses site-specific data.
98f4225f210a2c559dd4809bda09437039f3365ffd866a2a2bc690d3d224867fScripts Genie Top Sites script suffers from a remote SQL injection vulnerability.
dbb0b437f0a8decd77e87d47d475ebdc3a0ff202b8afc7de48ba5addd8f9bdbfThe Shopping.com API V3 PHP script suffers from a cross site scripting vulnerability.
5917bfd984a3d929ce655c1ae300b33d529e84e562eb42da91b5668f5e6c7864
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed