4 commits

Author	SHA1	Message	Date
Offensive Security	68825c6583	DB: 2017-11-24 ... 2 new exploits Apache < 1.3.37/2.0.59/2.2.3 mod_rewrite - Remote Overflow (PoC) Anti-Trojan Elite 4.2.1 - 'Atepmon.sys' IOCTL Request Local Overflow Sun SUNWlldap Library Hostname - Buffer Overflow Sun SUNWlldap Library Hostname - Local Buffer Overflow Microsoft Windows XP - 'explorer.exe' Buffer Overflow Microsoft Windows XP - 'explorer.exe' Local Buffer Overflow Solaris Runtime Linker (SPARC) - 'ld.so.1' Buffer Overflow Solaris Runtime Linker (SPARC) - 'ld.so.1' Local Buffer Overflow FirstClass Desktop 7.1 - Buffer Overflow FirstClass Desktop 7.1 - Local Buffer Overflow xsplumber - 'strcpy()' Buffer Overflow xsplumber - 'strcpy()' Local Buffer Overflow BSDi 3.0 inc - Buffer Overflow Privilege Escalation BSDi 3.0 inc - Local Buffer OverflowPrivilege Escalation expect (/usr/bin/expect) - Buffer Overflow expect (/usr/bin/expect) - Local Buffer Overflow xsoldier 0.96 (RedHat 6.2) - Buffer Overflow xsoldier 0.96 (RedHat 6.2) - Local Buffer Overflow Seyon 2.1 rev. 4b i586-Linux (RedHat 4.0/5.1) - Overflow Seyon 2.1 rev. 4b i586-Linux (RedHat 4.0/5.1) - Local Overflow splitvt < 1.6.5 - Overflow splitvt < 1.6.5 - Local Overflow SquirrelMail - 'chpasswd' Buffer Overflow SquirrelMail - 'chpasswd' Local Buffer Overflow AIX lquerylv - Buffer Overflow Privilege Escalation AIX lquerylv - Local Buffer OverflowPrivilege Escalation IRIX 5.3 - '/usr/sbin/iwsh' Buffer Overflow Privilege Escalation IRIX 5.3 - '/usr/sbin/iwsh' Local Buffer Overflow Privilege Escalation zgv - '$HOME' Buffer Overflow Solaris 2.4 passwd / yppasswd / nispasswd - Overflows zgv - '$HOME' Local Buffer Overflow Solaris 2.4 passwd / yppasswd / nispasswd - Local Overflows htpasswd Apache 1.3.31 - Overflow htpasswd Apache 1.3.31 - Local Overflow Apple Mac OSX 10.3.8 - 'CF_CHARSET_PATH' Buffer Overflow Privilege Escalation Apple Mac OSX 10.3.8 - 'CF_CHARSET_PATH' Local Buffer Overflow Privilege Escalation Oracle Database Server 10.1.0.2 - Buffer Overflow Oracle Database Server 10.1.0.2 - Local Buffer Overflow WinRAR 3.30 - 'Filename' Buffer Overflow (1) WinRAR 3.30 - 'Filename' Buffer Overflow (2) WinRAR 3.30 - 'Filename' Local Buffer Overflow (1) WinRAR 3.30 - 'Filename' Local Buffer Overflow (2) Oracle Database Server 9i/10g - 'XML' Buffer Overflow Oracle Database Server 9i/10g - 'XML' Local Buffer Overflow Microsoft HTML Help Workshop - '.hhp' Buffer Overflow (1) Microsoft HTML Help Workshop - '.hhp' Local Buffer Overflow (1) Microsoft HTML Help Workshop - '.hhp' Buffer Overflow (2) Microsoft HTML Help Workshop - '.hhp' Buffer Overflow (3) Microsoft HTML Help Workshop - '.hhp' Local Buffer Overflow (2) Microsoft HTML Help Workshop - '.hhp' Local Buffer Overflow (3) Microsoft Visual Studio 6.0 sp6 - '.dbp' Buffer Overflow Microsoft Visual Studio 6.0 sp6 - '.dbp' Local Buffer Overflow Pico Zip 4.01 - 'Filename' Buffer Overflow Pico Zip 4.01 - 'Filename' Local Buffer Overflow PowerZip 7.06.38950 - 'Filename Handling' Buffer Overflow PowerZip 7.06.38950 - 'Filename Handling' Local Buffer Overflow AtomixMP3 < 2.3 - '.m3u' Buffer Overflow BlazeVideo HDTV Player 2.1 - '.PLF' Buffer Overflow (PoC) AtomixMP3 < 2.3 - '.m3u' Local Buffer Overflow BlazeVideo HDTV Player 2.1 - '.PLF' Local Buffer Overflow (PoC) Microsoft Help Workshop 4.03.0002 - '.cnt' Buffer Overflow Microsoft Help Workshop 4.03.0002 - '.cnt' Local Buffer Overflow Microsoft Help Workshop 4.03.0002 - '.HPJ' Buffer Overflow Microsoft Help Workshop 4.03.0002 - '.HPJ' Local Buffer Overflow FreeBSD mcweject 0.9 'Eject' - Buffer Overflow Privilege Escalation FreeBSD mcweject 0.9 'Eject' - Local Buffer OverflowPrivilege Escalation Corel Paint Shop Pro Photo 11.20 - '.clp' Buffer Overflow Adobe Photoshop CS2 / CS3 - '.bmp' Buffer Overflow ABC-View Manager 1.42 - '.psp' Buffer Overflow FreshView 7.15 - '.psp' Buffer Overflow Corel Paint Shop Pro Photo 11.20 - '.clp' Local Buffer Overflow Adobe Photoshop CS2 / CS3 - '.bmp' Local Buffer Overflow ABC-View Manager 1.42 - '.psp' Local Buffer Overflow FreshView 7.15 - '.psp' Local Buffer Overflow IrfanView 4.00 - '.iff' Buffer Overflow Photoshop CS2/CS3 / Paint Shop Pro 11.20 - '.png' Buffer Overflow IrfanView 4.00 - '.iff' Local Buffer Overflow Photoshop CS2/CS3 / Paint Shop Pro 11.20 - '.png' Local Buffer Overflow Live for Speed S1/S2/Demo - '.mpr replay' Buffer Overflow Live for Speed S1/S2/Demo - '.mpr replay' Local Buffer Overflow Live for Speed S1/S2/Demo - '.ply' Buffer Overflow Live for Speed S1/S2/Demo - '.spr' Buffer Overflow Live for Speed S1/S2/Demo - '.ply' Local Buffer Overflow Live for Speed S1/S2/Demo - '.spr' Local Buffer Overflow VideoLAN VLC Media Player 0.9.4 - '.ty' Buffer Overflow (SEH) VideoLAN VLC Media Player 0.9.4 - '.ty' Local Buffer Overflow (SEH) Cain & Abel 4.9.23 - '.rdp' Buffer Overflow Cain & Abel 4.9.23 - '.rdp' Local Buffer Overflow CoolPlayer 2.19 - 'PlaylistSkin' Buffer Overflow CoolPlayer 2.19 - 'PlaylistSkin' Local Buffer Overflow Free Download Manager 3.0 Build 844 - '.torrent' Buffer Overflow Free Download Manager 3.0 Build 844 - '.torrent' Local Buffer Overflow BulletProof FTP Client 2009 - '.bps' Buffer Overflow (SEH) BulletProof FTP Client 2009 - '.bps' Local Buffer Overflow (SEH) cTorrent/DTorrent - '.torrent' Buffer Overflow cTorrent/DTorrent - '.torrent' Local Buffer Overflow CoolPlayer Portable 2.19.1 - '.m3u' Buffer Overflow (1) CoolPlayer Portable 2.19.1 - '.m3u' Buffer Overflow (2) CoolPlayer Portable 2.19.1 - 'Skin' Buffer Overflow CoolPlayer Portable 2.19.1 - '.m3u' Local Buffer Overflow (1) CoolPlayer Portable 2.19.1 - '.m3u' Local Buffer Overflow (2) CoolPlayer Portable 2.19.1 - 'Skin' Local Buffer Overflow Zoom Player Pro 3.30 - '.m3u' Buffer Overflow (SEH) Zoom Player Pro 3.30 - '.m3u' Local Buffer Overflow (SEH) Mini-stream ASX to MP3 Converter 3.0.0.7 - '.RAM' Buffer Overflow Mini-stream ASX to MP3 Converter 3.0.0.7 - '.RAM' Local Buffer Overflow Live For Speed 2 Version Z - '.mpr' Buffer Overflow (SEH) Live For Speed 2 Version Z - '.mpr' Local Buffer Overflow (SEH) NScan 0.9.1 - 'Target' Buffer Overflow NScan 0.9.1 - 'Target' Local Buffer Overflow Audio Lib Player - '.m3u' Buffer Overflow (SEH) Audio Lib Player - '.m3u' Local Buffer Overflow (SEH) Alleycode HTML Editor 2.2.1 - Buffer Overflow Alleycode HTML Editor 2.2.1 - Local Buffer Overflow Millenium MP3 Studio 2.0 - '.m3u' Buffer Overflow Millenium MP3 Studio 2.0 - 'mpf' Buffer Overflow Millenium MP3 Studio 2.0 - '.m3u' Local Buffer Overflow Millenium MP3 Studio 2.0 - 'mpf' Local Buffer Overflow Xion Audio Player 1.0 121 - '.m3u' Buffer Overflow (2) Xion Audio Player 1.0 121 - '.m3u' Local Buffer Overflow (2) Alleycode 2.21 - Overflow (SEH) (PoC) Alleycode 2.21 - Local Overflow (SEH) (PoC) Serenity Audio Player Playlist - '.m3u' Buffer Overflow Millenium MP3 Studio 2.0 - 'pls' Buffer Overflow Serenity Audio Player Playlist - '.m3u' Local Buffer Overflow Millenium MP3 Studio 2.0 - 'pls' Local Buffer Overflow Adobe Illustrator CS4 14.0.0 - Encapsulated Postscript '.eps' Buffer Overflow Adobe Illustrator CS4 14.0.0 - Encapsulated Postscript '.eps' Local Buffer Overflow M3U To ASX-WPL 1.1 - '.m3u' Buffer Overflow Microsoft HTML Help Workshop 4.74 - '.hhp' Buffer Overflow (1) Audacity 1.2.6 - '.gro' Buffer Overflow M3U To ASX-WPL 1.1 - '.m3u' Local Buffer Overflow Microsoft HTML Help Workshop 4.74 - '.hhp' Local Buffer Overflow (1) Audacity 1.2.6 - '.gro' Local Buffer Overflow Ghostscript < 8.64 - 'gdevpdtb.c' Buffer Overflow PointDev IDEAL Administration 2009 9.7 - Buffer Overflow (Metasploit) HTML Help Workshop 4.74 - '.hhp' Buffer Overflow (Metasploit) gAlan 0.2.1 - Buffer Overflow (1) Ghostscript < 8.64 - 'gdevpdtb.c' Local Buffer Overflow PointDev IDEAL Administration 2009 9.7 - Local Buffer Overflow (Metasploit) HTML Help Workshop 4.74 - '.hhp' Local Buffer Overflow (Metasploit) gAlan 0.2.1 - Local Buffer Overflow (1) Audio Workstation 6.4.2.4.3 - '.pls' Buffer Overflow (Metasploit) Audio Workstation 6.4.2.4.3 - '.pls' Local Buffer Overflow (Metasploit) Easy RM to MP3 Converter 2.7.3.700 - Buffer Overflow Easy RM to MP3 Converter 2.7.3.700 - Local Buffer Overflow Easy RM to MP3 27.3.700 (Windows XP SP3) - Overflow Easy RM to MP3 27.3.700 (Windows XP SP3) - Local Overflow Easy RM to MP3 2.7.3.700 - Buffer Overflow Easy RM to MP3 2.7.3.700 - Local Buffer Overflow Mini-stream RM-MP3 Converter 3.1.2.1 - '.m3u' Buffer Overflow Media Jukebox 8.0.400 - Buffer Overflow (SEH) (Metasploit) Mini-stream RM-MP3 Converter 3.1.2.1 - '.m3u' Local Buffer Overflow Media Jukebox 8.0.400 - Local Buffer Overflow (SEH) (Metasploit) Mini-stream 3.0.1.1 - Buffer Overflow (Metasploit) Mini-stream 3.0.1.1 - Local Buffer Overflow (Metasploit) DJ Studio Pro 5.1.6.5.2 - Overflow (SEH) DJ Studio Pro 5.1.6.5.2 - Local Overflow (SEH) PlayMeNow 7.3/7.4 - Buffer Overflow (Metasploit) PlayMeNow 7.3/7.4 - Local Buffer Overflow (Metasploit) Audiotran 1.4.1 (Windows XP SP2/SP3 English) - Buffer Overflow Audiotran 1.4.1 (Windows XP SP2/SP3 English) - Local Buffer Overflow Rosoft Media Player 4.4.4 - Buffer Overflow (SEH) (1) Rosoft Media Player 4.4.4 - Local Buffer Overflow (SEH) (1) VideoLAN VLC Media Player 0.8.6 a/b/c/d (Win32 Universal) - '.ass' Buffer Overflow VideoLAN VLC Media Player 0.8.6 a/b/c/d (Win32 Universal) - '.ass' Local Buffer Overflow RM Downloader - '.m3u' Buffer Overflow (SEH) RM Downloader - '.m3u' Local Buffer Overflow (SEH) SOMPL Player 1.0 - Buffer Overflow SOMPL Player 1.0 - Local Buffer Overflow Winamp 5.572 - Overflow (SEH) Winamp 5.572 - Local Overflow (SEH) Yahoo Player 1.0 - '.m3u' / '.pls' / '.ypl' Buffer Overflow (SEH) Yahoo Player 1.0 - '.m3u' / '.pls' / '.ypl' Local Buffer Overflow (SEH) Yahoo Player 1.0 - '.m3u' Buffer Overflow Yahoo Player 1.0 - '.m3u' Local Buffer Overflow KenWard's Zipper 1.400 - Buffer Overflow (2) KenWard's Zipper 1.400 - Local Buffer Overflow (2) ZipScan 2.2c - Overflow (SEH) PHP 6.0 Dev - 'str_transliterate()' Buffer Overflow ZipScan 2.2c - Local Overflow (SEH) PHP 6.0 Dev - 'str_transliterate()' Local Buffer Overflow PHP 6.0 Dev - 'str_transliterate()' Buffer Overflow (NX + ASLR Bypass) PHP 6.0 Dev - 'str_transliterate()' Local Buffer Overflow (NX + ASLR Bypass) WM Downloader 3.0.0.9 - Buffer Overflow (Metasploit) WM Downloader 3.0.0.9 - Local Buffer Overflow (Metasploit) AVCON H323Call - Buffer Overflow IDEAL Migration 4.5.1 - Buffer Overflow (Metasploit) AVCON H323Call - Local Buffer Overflow IDEAL Migration 4.5.1 - Local Buffer Overflow (Metasploit) SyncBack Freeware 3.2.20.0 - Overflow (SEH) SyncBack Freeware 3.2.20.0 - Local Overflow (SEH) Rumba FTP Client 'FTPSFtp.dll' 4.2.0.0 - 'OpenSession()' Buffer Overflow Rumba FTP Client 'FTPSFtp.dll' 4.2.0.0 - 'OpenSession()' Local Buffer Overflow IP2location.dll 1.0.0.1 - Function 'Initialize()' Buffer Overflow Mediacoder 0.7.3.4672 - Overflow (SEH) IP2location.dll 1.0.0.1 - Function 'Initialize()' Local Buffer Overflow Mediacoder 0.7.3.4672 - Local Overflow (SEH) Free WMA MP3 Converter 1.1 - Buffer Overflow (SEH) Free WMA MP3 Converter 1.1 - Local Buffer Overflow (SEH) Easy CD-DA Recorder 2007 - Buffer Overflow (SEH) Easy CD-DA Recorder 2007 - Local Buffer Overflow (SEH) ActivePerl 5.8.8.817 - Buffer Overflow Power Tab Editor 1.7 (Build 80) - Buffer Overflow Rosoft Audio Converter 4.4.4 - Buffer Overflow ActivePerl 5.8.8.817 - Local Buffer Overflow Power Tab Editor 1.7 (Build 80) - Local Buffer Overflow Rosoft Audio Converter 4.4.4 - Local Buffer Overflow FieldNotes 32 5.0 - Buffer Overflow (SEH) FieldNotes 32 5.0 - Local Buffer Overflow (SEH) BlazeDVD 6.0 - Buffer Overflow (Metasploit) RM Downloader 3.1.3 - Buffer Overflow (SEH) BlazeDVD 6.0 - Local Buffer Overflow (Metasploit) RM Downloader 3.1.3 - Local Buffer Overflow (SEH) HP OpenView Network Node Manager (OV NNM) 7.53 - 'ovwebsnmpsrv.exe' Buffer Overflow (SEH) HP OpenView Network Node Manager (OV NNM) 7.53 - 'ovwebsnmpsrv.exe' Local Buffer Overflow (SEH) MoreAmp - Buffer Overflow (SEH) (Metasploit) MoreAmp - Local Buffer Overflow (SEH) (Metasploit) ZipCentral - '.zip' Buffer Overflow (SEH) ZipCentral - '.zip' Local Buffer Overflow (SEH) WM Downloader 3.1.2.2 2010.04.15 - Buffer Overflow (SEH) HTML Email Creator 2.42 build 718 - Buffer Overflow (SEH) WM Downloader 3.1.2.2 - Buffer Overflow (1) WM Downloader 3.1.2.2 2010.04.15 - Local Buffer Overflow (SEH) HTML Email Creator 2.42 build 718 - Local Buffer Overflow (SEH) WM Downloader 3.1.2.2 - Local Buffer Overflow (1) Microsoft Windows - 'win32k.sys' Driver 'CreateDIBPalette()' Buffer Overflow Mini-stream Ripper 3.1.2.1 - Buffer Overflow (DEP Bypass) myMP3-Player 3.0 - Buffer Overflow Microsoft Windows - 'win32k.sys' Driver 'CreateDIBPalette()' Local Buffer Overflow Mini-stream Ripper 3.1.2.1 - Local Buffer Overflow (DEP Bypass) myMP3-Player 3.0 - Local Buffer Overflow Mediacoder 0.7.5.4710 - Buffer Overflow Mediacoder 0.7.5.4710 - 'Universal' Buffer Overflow (SEH) Mediacoder 0.7.5.4710 - Local Buffer Overflow Mediacoder 0.7.5.4710 - 'Universal' Local Buffer Overflow (SEH) Rosoft Media Player 4.4.4 - Buffer Overflow (SEH) (2) Rosoft Media Player 4.4.4 - Local Buffer Overflow (SEH) (2) MicroP 0.1.1.1600 - 'mppl' Buffer Overflow MicroP 0.1.1.1600 - 'mppl' Local Buffer Overflow Audiotran 1.4.2.4 - Overflow (SEH) Audiotran 1.4.2.4 - Local Overflow (SEH) MP3 Workstation 9.2.1.1.2 - Overflow (SEH) MP3 Workstation 9.2.1.1.2 - Local Overflow (SEH) BACnet OPC Client - Buffer Overflow (1) DJ Studio Pro 8.1.3.2.1 - Overflow (SEH) BACnet OPC Client - Local Buffer Overflow (1) DJ Studio Pro 8.1.3.2.1 - Local Overflow (SEH) Audiotran 1.4.2.4 - Overflow (SEH) (DEP Bypass) Audiotran 1.4.2.4 - Local Overflow (SEH) (DEP Bypass) MP3 Workstation 9.2.1.1.2 - Overflow (SEH) (Metasploit) MP3 Workstation 9.2.1.1.2 - Local Overflow (SEH) (Metasploit) iworkstation 9.3.2.1.4 - Overflow (SEH) Digital Music Pad 8.2.3.3.4 - Overflow (SEH) (Metasploit) iworkstation 9.3.2.1.4 - Local Overflow (SEH) Digital Music Pad 8.2.3.3.4 - Local Overflow (SEH) (Metasploit) Xion Audio Player 1.0.127 - '.m3u' Buffer Overflow Xion Audio Player 1.0.127 - '.m3u' Local Buffer Overflow Fat Player 0.6b - '.wav' Buffer Overflow (SEH) Fat Player 0.6b - '.wav' Local Buffer Overflow (SEH) MiniShare 1.4.0 < 1.5.5 - 'users.txt' Buffer Overflow MiniShare 1.5.5 - Buffer Overflow (SEH) GSPlayer 1.83a Win32 Release - Buffer Overflow MiniShare 1.4.0 < 1.5.5 - 'users.txt' Local Buffer Overflow MiniShare 1.5.5 - Local Buffer Overflow (SEH) GSPlayer 1.83a Win32 Release - Local Buffer Overflow Free CD to MP3 Converter 3.1 - Buffer Overflow Free CD to MP3 Converter 3.1 - Local Buffer Overflow Free CD to MP3 Converter 3.1 - Buffer Overflow (SEH) MP3-Nator 2.0 - Buffer Overflow (SEH) Free CD to MP3 Converter 3.1 - Local Buffer Overflow (SEH) MP3-Nator 2.0 - Local Buffer Overflow (SEH) Realtek Audio Control Panel 1.0.1.65 - Buffer Overflow Realtek Audio Microphone Calibration 1.1.1.6 - Buffer Overflow Realtek HD Audio Control Panel 2.1.3.2 - Buffer Overflow Realtek Audio Control Panel 1.0.1.65 - Local Buffer Overflow Realtek Audio Microphone Calibration 1.1.1.6 - Local Buffer Overflow Realtek HD Audio Control Panel 2.1.3.2 - Local Buffer Overflow MP3-Nator - Buffer Overflow (SEH) (DEP Bypass) MiniShare 1.5.5 - 'users.txt' Buffer Overflow (Egghunter) MP3-Nator - Local Buffer Overflow (SEH) (DEP Bypass) MiniShare 1.5.5 - 'users.txt' Local Buffer Overflow (Egghunter) Mediacoder 0.7.5.4792 - Buffer Overflow (SEH) Mediacoder 0.7.5.4797 - '.m3u' Buffer Overflow (SEH) Video Charge Studio 2.9.5.643 - '.vsc' Buffer Overflow (SEH) Mediacoder 0.7.5.4792 - Local Buffer Overflow (SEH) Mediacoder 0.7.5.4797 - '.m3u' Local Buffer Overflow (SEH) Video Charge Studio 2.9.5.643 - '.vsc' Local Buffer Overflow (SEH) FreeAmp 2.0.7 - '.m3u' Buffer Overflow PowerShell XP 3.0.1 - Buffer Overflow FreeAmp 2.0.7 - '.m3u' Local Buffer Overflow PowerShell XP 3.0.1 - Local Buffer Overflow Aesop GIF Creator 2.1 - '.aep' Buffer Overflow Altarsoft Audio Converter 1.1 - Buffer Overflow (SEH) Aesop GIF Creator 2.1 - '.aep' Local Buffer Overflow Altarsoft Audio Converter 1.1 - Local Buffer Overflow (SEH) Word Splash Pro 9.5 - Buffer Overflow MP3 CD Converter Professional - Buffer Overflow (SEH) Word Splash Pro 9.5 - Local Buffer Overflow MP3 CD Converter Professional - Local Buffer Overflow (SEH) Music Animation Machine MIDI Player - Buffer Overflow (SEH) Music Animation Machine MIDI Player - Local Buffer Overflow (SEH) Enzip 3.00 - Buffer Overflow BS.Player 2.57 - Buffer Overflow (SEH Unicode) Enzip 3.00 - Local Buffer Overflow BS.Player 2.57 - Local Buffer Overflow (SEH Unicode) Magic Music Editor - Buffer Overflow Nokia MultiMedia Player 1.0 - Overflow (SEH Unicode) Magic Music Editor - Local Buffer Overflow Nokia MultiMedia Player 1.0 - Local Overflow (SEH Unicode) eXtremeMP3 Player - Buffer Overflow (SEH) A-PDF All to MP3 Converter 2.0.0 - '.wav' Buffer Overflow eXtremeMP3 Player - Local Buffer Overflow (SEH) A-PDF All to MP3 Converter 2.0.0 - '.wav' Local Buffer Overflow A-PDF All to MP3 Converter 2.0.0 - '.wav' Buffer Overflow (SEH) A-PDF All to MP3 Converter 2.0.0 - '.wav' Local Buffer Overflow (SEH) CodeBlocks 8.02 - 'cbp' Buffer Overflow CodeBlocks 8.02 - 'cbp' Local Buffer Overflow AOL Desktop 9.6 - '.rtx' Buffer Overflow AOL Desktop 9.6 - '.rtx' Local Buffer Overflow MoviePlay 4.82 - '.lst' Buffer Overflow CuteZip 2.1 - Buffer Overflow MoviePlay 4.82 - '.lst' Local Buffer Overflow CuteZip 2.1 - Local Buffer Overflow Elecard AVC_HD/MPEG Player 5.7 - Buffer Overflow Elecard AVC_HD/MPEG Player 5.7 - Local Buffer Overflow Adobe - 'util.printf()' Buffer Overflow (Metasploit) (1) Adobe - 'util.printf()' Local Buffer Overflow (Metasploit) (1) Adobe - 'Collab.getIcon()' Buffer Overflow (Metasploit) (1) Adobe - 'Collab.getIcon()' Local Buffer Overflow (Metasploit) (1) VUPlayer - '.m3u' Buffer Overflow (Metasploit) VUPlayer - '.m3u' Local Buffer Overflow (Metasploit) Adobe - 'util.printf()' Buffer Overflow (Metasploit) (2) Adobe - 'util.printf()' Local Buffer Overflow (Metasploit) (2) Fat Player Media Player 0.6b0 - Buffer Overflow (Metasploit) Fat Player Media Player 0.6b0 - Local Buffer Overflow (Metasploit) Steinberg MyMP3Player 3.0 - Buffer Overflow (Metasploit) Steinberg MyMP3Player 3.0 - Local Buffer Overflow (Metasploit) WM Downloader 3.1.2.2 - Buffer Overflow (Metasploit) (2) WM Downloader 3.1.2.2 - Local Buffer Overflow (Metasploit) (2) Altap Salamander 2.5 PE Viewer - Buffer Overflow (Metasploit) VUPlayer - '.cue' Buffer Overflow (Metasploit) Altap Salamander 2.5 PE Viewer - Local Buffer Overflow (Metasploit) VUPlayer - '.cue' Local Buffer Overflow (Metasploit) A-PDF WAV to MP3 1.0.0 - Buffer Overflow (Metasploit) S.O.M.P.L 1.0 Player - Buffer Overflow (Metasploit) gAlan 0.2.1 - Buffer Overflow (Metasploit) (2) A-PDF WAV to MP3 1.0.0 - Local Buffer Overflow (Metasploit) S.O.M.P.L 1.0 Player - Local Buffer Overflow (Metasploit) gAlan 0.2.1 - Local Buffer Overflow (Metasploit) (2) BACnet OPC Client - Buffer Overflow (Metasploit) (2) BACnet OPC Client - Local Buffer Overflow (Metasploit) (2) Adobe - 'Collab.collectEmailInfo()' Buffer Overflow (Metasploit) Adobe - 'Collab.collectEmailInfo()' Local Buffer Overflow (Metasploit) Microsoft Visual Basic - '.VBP' Buffer Overflow (Metasploit) Adobe - 'Collab.getIcon()' Buffer Overflow (Metasploit) (2) Microsoft Visual Basic - '.VBP' Local Buffer Overflow (Metasploit) Adobe - 'Collab.getIcon()' Local Buffer Overflow (Metasploit) (2) Movavi VideoSuite 8.0 MediaPlayer - '.m3u' Buffer Overflow Movavi VideoSuite 8.0 MediaPlayer - '.m3u' Local Buffer Overflow ABBS Audio Media Player - '.m3u' / '.LST' Buffer Overflow ABBS Audio Media Player 3.0 - '.lst' Buffer Overflow (SEH) ABBS Electronic Flash Cards 2.1 - '.fcd' Buffer Overflow ABBS Audio Media Player - '.m3u' / '.LST' Local Buffer Overflow ABBS Audio Media Player 3.0 - '.lst' Local Buffer Overflow (SEH) ABBS Electronic Flash Cards 2.1 - '.fcd' Local Buffer Overflow POP Peeper 3.7 - Overflow (SEH) CORE MultiMedia Suite 2011 CORE Player 2.4 - '.m3u' Buffer Overflow Mediacoder 2011 RC3 - '.m3u' Buffer Overflow POP Peeper 3.7 - Local Overflow (SEH) CORE MultiMedia Suite 2011 CORE Player 2.4 - '.m3u' Local Buffer Overflow Mediacoder 2011 RC3 - '.m3u' Local Buffer Overflow Word List Builder - Buffer Overflow (SEH) MPlayer (r33064 Lite) - Buffer Overflow + ROP Word List Builder - Local Buffer Overflow (SEH) MPlayer (r33064 Lite) - Local Buffer Overflow+ ROP MikeyZip 1.1 - '.zip' Buffer Overflow MikeyZip 1.1 - '.zip' Local Buffer Overflow VeryTools VideoSpirit Pro 1.70 - '.visprj' Buffer Overflow (Metasploit) Wordtrainer 3.0 - '.ord' Buffer Overflow VeryTools VideoSpirit Pro 1.70 - '.visprj' Local Buffer Overflow (Metasploit) Wordtrainer 3.0 - '.ord' Local Buffer Overflow PlaylistMaker 1.5 - '.txt' Buffer Overflow PlaylistMaker 1.5 - '.txt' Local Buffer Overflow SimplyPlay 66 - '.pls' Buffer Overflow SimplyPlay 66 - '.pls' Local Buffer Overflow Wireshark 1.4.1 < 1.4.4 - Overflow (SEH) Wireshark 1.4.1 < 1.4.4 - Local Overflow (SEH) Subtitle Processor 7.7.1 - Buffer Overflow (SEH Unicode) NetOp Remote Control 8.0/9.1/9.2/9.5 - Buffer Overflow Subtitle Processor 7.7.1 - Local Buffer Overflow (SEH Unicode) NetOp Remote Control 8.0/9.1/9.2/9.5 - Local Buffer Overflow PHP 5.3.5 - 'socket_connect()' Buffer Overflow Chasys Media Player 2.0 - Buffer Overflow (SEH) PHP 5.3.5 - 'socket_connect()' Local Buffer Overflow Chasys Media Player 2.0 - Local Buffer Overflow (SEH) CoolPlayer Portable 2.19.2 - Buffer Overflow Sonique 1.96 - '.m3u' Buffer Overflow SpongeBob SquarePants Typing - Buffer Overflow (SEH) CoolPlayer Portable 2.19.2 - Local Buffer Overflow Sonique 1.96 - '.m3u' Local Buffer Overflow SpongeBob SquarePants Typing - Local Buffer Overflow (SEH) The KMPlayer 3.0.0.1440 (Windows 7) - '.mp3' Buffer Overflow (ASLR Bypass) The KMPlayer 3.0.0.1440 (Windows 7) - '.mp3' Local Buffer Overflow (ASLR Bypass) FreeAmp 2.0.7 - '.fat' Buffer Overflow FreeAmp 2.0.7 - '.pls' Buffer Overflow FreeAmp 2.0.7 - '.fat' Local Buffer Overflow FreeAmp 2.0.7 - '.pls' Local Buffer Overflow PHP 5.3.6 - Buffer Overflow (ROP) (PoC) PHP 5.3.6 - Local Buffer Overflow (ROP) (PoC) Word List Builder 1.0 - Buffer Overflow (Metasploit) Wordtrainer 3.0 - '.ord' Buffer Overflow (Metasploit) CoolPlayer Portable 2.19.2 - Buffer Overflow (Metasploit) Word List Builder 1.0 - Local Buffer Overflow (Metasploit) Wordtrainer 3.0 - '.ord' Local Buffer Overflow (Metasploit) CoolPlayer Portable 2.19.2 - Local Buffer Overflow (Metasploit) ZipGenius 6.3.2.3000 - '.zip' Buffer Overflow ZipGenius 6.3.2.3000 - '.zip' Local Buffer Overflow MPlayer Lite r33064 - '.m3u' Buffer Overflow (DEP Bypass) Zinf Audio Player 2.2.1 - '.pls' Buffer Overflow (DEP Bypass) ABBS Audio Media Player 3.0 - Buffer Overflow (Metasploit) ABBS Electronic Flashcards 2.1 - Buffer Overflow (Metasploit) FreeAmp 2.0.7 - '.fat' Buffer Overflow (Metasploit) MPlayer Lite r33064 - '.m3u' Local Buffer Overflow (DEP Bypass) Zinf Audio Player 2.2.1 - '.pls' Local Buffer Overflow (DEP Bypass) ABBS Audio Media Player 3.0 - Local Buffer Overflow (Metasploit) ABBS Electronic Flashcards 2.1 - Local Buffer Overflow (Metasploit) FreeAmp 2.0.7 - '.fat' Local Buffer Overflow (Metasploit) CoolPlayer Portable 2.19.2 - Buffer Overflow (ASLR Bypass) (1) CoolPlayer Portable 2.19.2 - Local Buffer Overflow (ASLR Bypass) (1) DVD X Player 5.5 Pro - Overflow (SEH + ASLR + DEP Bypass) ScadaTEC ModbusTagServer & ScadaPhone - '.zip' Buffer Overflow DVD X Player 5.5 Pro - Local Overflow (SEH + ASLR + DEP Bypass) ScadaTEC ModbusTagServer & ScadaPhone - '.zip' Local Buffer Overflow Wav Player 1.1.3.6 - '.pll' Buffer Overflow Wav Player 1.1.3.6 - '.pll' Local Buffer Overflow Muse Music All-in-One 1.5.0.001 - '.pls' Buffer Overflow (DEP Bypass) Muse Music All-in-One 1.5.0.001 - '.pls' Local Buffer Overflow (DEP Bypass) GTA SA-MP - 'server.cfg' Buffer Overflow (Metasploit) GTA SA-MP - 'server.cfg' Local Buffer Overflow (Metasploit) Mini-stream Ripper 3.0.1.1 - Buffer Overflow (Metasploit) (3) Mini-stream Ripper 3.0.1.1 - Local Buffer Overflow (Metasploit) (3) Microsoft Excel 2007 - '.xlb' Buffer Overflow (MS11-021) (Metasploit) Microsoft Excel 2007 - '.xlb' Local Buffer Overflow (MS11-021) (Metasploit) BS.Player 2.57 - Buffer Overflow (SEH Unicode) (Metasploit) BS.Player 2.57 - Local Buffer Overflow (SEH Unicode) (Metasploit) DJ Studio Pro 5.1.6.5.2 - Overflow (SEH) (Metasploit) DJ Studio Pro 5.1.6.5.2 - Local Overflow (SEH) (Metasploit) Socusoft Photo 2 Video 8.05 - Buffer Overflow Socusoft Photo 2 Video 8.05 - Local Buffer Overflow RM Downloader 3.1.3.3.2010.06.26 - '.m3u' Buffer Overflow (Metasploit) RM Downloader 3.1.3.3.2010.06.26 - '.m3u' Local Buffer Overflow (Metasploit) Bitsmith PS Knowbase 3.2.3 - Buffer Overflow BlazeVideo HDTV Player 6.6 Professional - Overflow (SEH + ASLR + DEP Bypass) Bitsmith PS Knowbase 3.2.3 - Local Buffer Overflow BlazeVideo HDTV Player 6.6 Professional - Local Overflow (SEH + ASLR + DEP Bypass) GSM SIM Editor 5.15 - Buffer Overflow (Metasploit) xRadio 0.95b - Buffer Overflow (Metasploit) Shadow Stream Recorder 3.0.1.7 - Buffer Overflow (Metasploit) GSM SIM Editor 5.15 - Local Buffer Overflow (Metasploit) xRadio 0.95b - Local Buffer Overflow (Metasploit) Shadow Stream Recorder 3.0.1.7 - Local Buffer Overflow (Metasploit) SkinCrafter ActiveX Control 3.0 - Buffer Overflow SkinCrafter ActiveX Control 3.0 - Local Buffer Overflow Fred N. van Kempen dip 3.3.7 - Buffer Overflow (1) Fred N. van Kempen dip 3.3.7 - Buffer Overflow (2) Fred N. van Kempen dip 3.3.7 - Local Buffer Overflow (1) Fred N. van Kempen dip 3.3.7 - Local Buffer Overflow (2) TFM MMPlayer - '.m3u' / '.ppl' Buffer Overflow (Metasploit) TFM MMPlayer - '.m3u' / '.ppl' Local Buffer Overflow (Metasploit) Sun Solaris 7.0 - '/usr/dt/bin/dtprintinfo' Buffer Overflow Sun Solaris 7.0 - '/usr/bin/lpset' Buffer Overflow Sun Solaris 7.0 - '/usr/dt/bin/dtprintinfo' Local Buffer Overflow Sun Solaris 7.0 - '/usr/bin/lpset' Local Buffer Overflow Xcmail 0.99.6 - Buffer Overflow Xcmail 0.99.6 - Local Buffer Overflow Slackware Linux 3.1 - '/usr/X11/bin/SuperProbe' Buffer Overflow Armidale Software Yapp Conferencing System 2.2 - Buffer Overflow Slackware Linux 3.1/3.2 - 'color_xterm' Buffer Overflow (1) Slackware Linux 3.1/3.2 - 'color_xterm' Buffer Overflow (2) Slackware Linux 3.1 - '/usr/X11/bin/SuperProbe' Local Buffer Overflow Armidale Software Yapp Conferencing System 2.2 - Local Buffer Overflow Slackware Linux 3.1/3.2 - 'color_xterm' Local Buffer Overflow (1) Slackware Linux 3.1/3.2 - 'color_xterm' Local Buffer Overflow (2) IBM AIX 4.2.1 - '/usr/bin/portmir' Buffer Overflow / Insecure Temporary File Creation IBM AIX 4.2 - 'ping' Buffer Overflow IBM AIX 4.2 - '/usr/sbin/lchangelv' Buffer Overflow IBM AIX 4.2.1 - '/usr/bin/portmir' Local Buffer Overflow / Insecure Temporary File Creation IBM AIX 4.2 - 'ping' Local Buffer Overflow IBM AIX 4.2 - '/usr/sbin/lchangelv' Local Buffer Overflow RedHat Linux 5.0/5.1/5.2 / Slackware Linux 3.5 - 'klogd' Buffer Overflow (1) RedHat Linux 5.0/5.1/5.2 / Slackware Linux 3.5 - 'klogd' Buffer Overflow (2) RedHat Linux 5.0/5.1/5.2 / Slackware Linux 3.5 - 'klogd' Local Buffer Overflow (1) RedHat Linux 5.0/5.1/5.2 / Slackware Linux 3.5 - 'klogd' Local Buffer Overflow (2) URL Hunter - Buffer Overflow DEP Bypass Solaris 2.5.1 - 'kcms' Buffer Overflow (1) Solaris 2.5.1 - 'kcms' Buffer Overflow (2) URL Hunter - Local Buffer OverflowDEP Bypass Solaris 2.5.1 - 'kcms' Local Buffer Overflow (1) Solaris 2.5.1 - 'kcms' Local Buffer Overflow (2) Linux libc 5.3.12/5.4 / RedHat Linux 4.0 - 'vsyslog()' Buffer Overflow Linux libc 5.3.12/5.4 / RedHat Linux 4.0 - 'vsyslog()' Local Buffer Overflow Xi Graphics Accelerated X 4.0.x/5.0 - Buffer Overflow VMware 1.0.1 - Buffer Overflow Debian 2.0/2.0 r5 / FreeBSD 3.2 / OpenBSD 2.4 / RedHat 5.2 i386 / S.u.S.E 6.1 - 'Lsof' Buffer Overflow (1) Debian 2.0/2.0 r5 / FreeBSD 3.2 / OpenBSD 2.4 / RedHat 5.2 i386 / S.u.S.E 6.1 - 'Lsof' Buffer Overflow (2) Xi Graphics Accelerated X 4.0.x/5.0 - Local Buffer Overflow VMware 1.0.1 - Local Buffer Overflow Debian 2.0/2.0 r5 / FreeBSD 3.2 / OpenBSD 2.4 / RedHat 5.2 i386 / S.u.S.E 6.1 - 'Lsof' Local Buffer Overflow (1) Debian 2.0/2.0 r5 / FreeBSD 3.2 / OpenBSD 2.4 / RedHat 5.2 i386 / S.u.S.E 6.1 - 'Lsof' Local Buffer Overflow (2) Samba < 2.0.5 - Overflow Samba < 2.0.5 - Local Overflow RedHat Linux 6.0 / Slackware Linux 4.0 - Termcap 'tgetent()' Buffer Overflow (1) RedHat Linux 6.0 / Slackware Linux 4.0 - Termcap 'tgetent()' Buffer Overflow (2) RedHat Linux 6.0 / Slackware Linux 4.0 - Termcap 'tgetent()' Local Buffer Overflow (1) RedHat Linux 6.0 / Slackware Linux 4.0 - Termcap 'tgetent()' Local Buffer Overflow (2) Martin Stover Mars NWE 0.99 - Buffer Overflow DIGITAL UNIX 4.0 d/e/f / AIX 4.3.2 / CDE 2.1 / IRIX 6.5.14 / Solaris 7.0 - Buffer Overflow Martin Stover Mars NWE 0.99 - Local Buffer Overflow DIGITAL UNIX 4.0 d/e/f / AIX 4.3.2 / CDE 2.1 / IRIX 6.5.14 / Solaris 7.0 - Local Buffer Overflow DIGITAL UNIX 4.0 d/f / AIX 4.3.2 / CDE 2.1 / IRIX 6.5.14 / Solaris 7.0 / SunOS 4.1.4 - Buffer Overflow DIGITAL UNIX 4.0 d/f / AIX 4.3.2 / CDE 2.1 / IRIX 6.5.14 / Solaris 7.0 / SunOS 4.1.4 - Local Buffer Overflow BSD/OS 2.1/3.0 / Larry Wall Perl 5.0 03 / RedHat 4.0/4.1 / SGI Freeware 1.0/2.0 SUIDPerl - Overflow (1) BSD/OS 2.1/3.0 / Larry Wall Perl 5.0 03 / RedHat 4.0/4.1 / SGI Freeware 1.0/2.0 SUIDPerl - Overflow (2) BSD/OS 2.1/3.0 / Larry Wall Perl 5.0 03 / RedHat 4.0/4.1 / SGI Freeware 1.0/2.0 SUIDPerl - Local Overflow (1) BSD/OS 2.1/3.0 / Larry Wall Perl 5.0 03 / RedHat 4.0/4.1 / SGI Freeware 1.0/2.0 SUIDPerl - Local Overflow (2) xsoldier (FreeBSD 3.3/Linux Mandrake 7.0) - Buffer Overflow (1) xsoldier (FreeBSD 3.3/Linux Mandrake 7.0) - Buffer Overflow (2) IRIX 6.5 / Solaris 7.0 / Turbolinux 4.2 - 'uum' Buffer Overflow Turbolinux 3.5 b2 - 'canuum' Buffer Overflow Yamaha MidiPlug 1.1 b-j MidiPlug - Buffer Overflow Hylafax Hylafax 4.0.2 - Buffer Overflow xsoldier (FreeBSD 3.3/Linux Mandrake 7.0) - Local Buffer Overflow (1) xsoldier (FreeBSD 3.3/Linux Mandrake 7.0) - Local Buffer Overflow (2) IRIX 6.5 / Solaris 7.0 / Turbolinux 4.2 - 'uum' Local Buffer Overflow Turbolinux 3.5 b2 - 'canuum' Local Buffer Overflow Yamaha MidiPlug 1.1 b-j MidiPlug - Local Buffer Overflow Hylafax Hylafax 4.0.2 - Local Buffer Overflow SCO Unixware 7.0 - 'xlock(1)' 'Username' Buffer Overflow SCO Unixware 7.0 - 'xlock(1)' 'Username' Local Buffer Overflow FreeBSD 3.3 - 'gdc' Buffer Overflow FreeBSD 3.3 - 'gdc' Local Buffer Overflow FreeBSD 3.3 - 'xmindpath' Buffer Overflow FreeBSD 3.3 - 'angband' Buffer Overflow FreeBSD 3.3 - 'xmindpath' Local Buffer Overflow FreeBSD 3.3 - 'angband' Local Buffer Overflow RSA Security RSAREF 2.0 - Buffer Overflow SCO Unixware 7.0/7.0.1/7.1/7.1.1 - 'xauto' Buffer Overflow RSA Security RSAREF 2.0 - Local Buffer Overflow SCO Unixware 7.0/7.0.1/7.1/7.1.1 - 'xauto' Local Buffer Overflow SCO Unixware 7.1 pkgcat - Buffer Overflow SCO Unixware 7.1 pkginstall - Buffer Overflow SCO Unixware 7.1 pkgcat - Local Buffer Overflow SCO Unixware 7.1 pkginstall - Local Buffer Overflow VDOLive Player 3.0.2 - Buffer Overflow VDOLive Player 3.0.2 - Local Buffer Overflow SCO Open Server 5.0.5 / IRIX 6.2 ibX11/X11 Toolkit/Athena Widget Library - Buffer Overflows SCO Open Server 5.0.5 / IRIX 6.2 ibX11/X11 Toolkit/Athena Widget Library - Local Buffer Overflows Inter7 vpopmail (vchkpw) 3.4.11 - Buffer Overflow Inter7 vpopmail (vchkpw) 3.4.11 - Local Buffer Overflow Microsoft Clip Art Gallery 5.0 - Buffer Overflow Microsoft Clip Art Gallery 5.0 - Local Buffer Overflow Sam Hawker wmcdplay 1.0 beta1-2 - Buffer Overflow (1) Sam Hawker wmcdplay 1.0 beta1-2 - Buffer Overflow (2) Sam Hawker wmcdplay 1.0 beta1-2 - Local Buffer Overflow (1) Sam Hawker wmcdplay 1.0 beta1-2 - Local Buffer Overflow (2) Solaris 2.6/7.0 - 'lpset -r' Buffer Overflow (1) Solaris 2.6/7.0 - 'lpset -r' Buffer Overflow (2) Solaris 2.6/7.0 - 'lpset -r' Buffer Overflow (3) Solaris 2.6/7.0 - 'lpset -r' Local Buffer Overflow (1) Solaris 2.6/7.0 - 'lpset -r' Local Buffer Overflow (2) Solaris 2.6/7.0 - 'lpset -r' Local Buffer Overflow (3) SuSE Linux 6.3/6.4 Gnomelib - Buffer Overflow SuSE Linux 6.3/6.4 Gnomelib - Local Buffer Overflow Solaris 2.6/7.0/8 - 'netpr' Buffer Overflow (1) Solaris 2.6/7.0/8 - 'netpr' Buffer Overflow (2) Solaris 2.6/7.0/8 - 'netpr' Local Buffer Overflow (1) Solaris 2.6/7.0/8 - 'netpr' Local Buffer Overflow (2) Cygnus Network Security 4.0/KerbNet 5.0 / MIT Kerberos 4/5 / RedHat 6.2 - Compatibility 'krb_rd_req()' Buffer Overflow (2) Cygnus Network Security 4.0/KerbNet 5.0 / MIT Kerberos 4/5 / RedHat 6.2 - Compatibility 'krb_rd_req()' Local Buffer Overflow (2) S.u.S.E Linux 4.x/5.x/6.x/7.0 / Slackware 3.x/4.0 / Turbolinux 6 / OpenLinux 7.0 - 'fdmount' Buffer Overflow (1) S.u.S.E Linux 4.x/5.x/6.x/7.0 / Slackware 3.x/4.0 / Turbolinux 6 / OpenLinux 7.0 - 'fdmount' Buffer Overflow (2) S.u.S.E Linux 4.x/5.x/6.x/7.0 / Slackware 3.x/4.0 / Turbolinux 6 / OpenLinux 7.0 - 'fdmount' Buffer Overflow (3) S.u.S.E Linux 4.x/5.x/6.x/7.0 / Slackware 3.x/4.0 / Turbolinux 6 / OpenLinux 7.0 - 'fdmount' Local Buffer Overflow (1) S.u.S.E Linux 4.x/5.x/6.x/7.0 / Slackware 3.x/4.0 / Turbolinux 6 / OpenLinux 7.0 - 'fdmount' Local Buffer Overflow (2) S.u.S.E Linux 4.x/5.x/6.x/7.0 / Slackware 3.x/4.0 / Turbolinux 6 / OpenLinux 7.0 - 'fdmount' Local Buffer Overflow (3) Mandriva Linux Mandrake 7.0 - Buffer Overflow Mandriva Linux Mandrake 7.0 - Local Buffer Overflow BSD 'mailx' 8.1.1-10 - Buffer Overflow (1) mailx 8.1.1-10 (BSD/Slackware) - Buffer Overflow (2) BSD 'mailx' 8.1.1-10 - Local Buffer Overflow (1) mailx 8.1.1-10 (BSD/Slackware) - Local Buffer Overflow (2) Sam Lantinga splitvt 1.6.3 - Buffer Overflow Solaris 2.5/2.6/7.0/8 ufsrestore - Buffer Overflow Sam Lantinga splitvt 1.6.3 - Local Buffer Overflow Solaris 2.5/2.6/7.0/8 ufsrestore - Local Buffer Overflow Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 - Buffer Overflow (ASLR + DEP Bypass) IRIX 6.5.x - '/usr/sbin/gr_osview' Buffer Overflow SGI IRIX 6.2 - 'libgl.so' Buffer Overflow IRIX 6.5.x - '/usr/sbin/dmplay' Buffer Overflow IRIX 6.2/6.3 - '/bin/lpstat' Buffer Overflow Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 - Local Buffer Overflow (ASLR + DEP Bypass) IRIX 6.5.x - '/usr/sbin/gr_osview' Local Buffer Overflow SGI IRIX 6.2 - 'libgl.so' Local Buffer Overflow IRIX 6.5.x - '/usr/sbin/dmplay' Local Buffer Overflow IRIX 6.2/6.3 - '/bin/lpstat' Local Buffer Overflow IRIX 5.3/6.x - '/usr/bin/mail' Buffer Overflow IRIX 5.3/6.x - '/usr/bin/mail' Local Buffer Overflow CoolPlayer Portable 2.19.2 - Buffer Overflow (ASLR Bypass) (2) CoolPlayer Portable 2.19.2 - Local Buffer Overflow (ASLR Bypass) (2) CoolPlayer+ Portable 2.19.2 - Buffer Overflow (ASLR Bypass) CoolPlayer+ Portable 2.19.2 - Local Buffer Overflow (ASLR Bypass) Exim Buffer 1.6.2/1.6.51 - Overflow Exim Buffer 1.6.2/1.6.51 - Local Overflow Jan Hubicka Koules 1.4 - 'Svgalib' Buffer Overflow Jan Hubicka Koules 1.4 - 'Svgalib' Local Buffer Overflow aSc Timetables 2017 - Buffer Overflow aSc Timetables 2017 - Local Buffer Overflow IBM AIX 4.x - '/usr/bin/setsenv' Buffer Overflow IBM AIX 4.3 - '/usr/lib/lpd/digest' Buffer Overflow IBM AIX 4.x - 'enq' Buffer Overflow IBM AIX 4.3.x - '/usr/lib/lpd/piobe' Buffer Overflow IBM AIX 4.x - '/usr/bin/setsenv' Local Buffer Overflow IBM AIX 4.3 - '/usr/lib/lpd/digest' Local Buffer Overflow IBM AIX 4.x - 'enq' Local Buffer Overflow IBM AIX 4.3.x - '/usr/lib/lpd/piobe' Local Buffer Overflow Rob Malda ASCDC 0.3 - Buffer Overflow (1) Rob Malda ASCDC 0.3 - Buffer Overflow (2) Rob Malda ASCDC 0.3 - Local Buffer Overflow (1) Rob Malda ASCDC 0.3 - Local Buffer Overflow (2) Solaris 2.5/2.6/7.0/8 tip - Buffer Overflow Solaris 2.5/2.6/7.0/8 tip - Local Buffer Overflow DG/UX 4.20 lpsched - 'Error Message' Buffer Overflow DG/UX 4.20 lpsched - 'Error Message' Local Buffer Overflow SGI IRIX 6.5 / Solaris 7.0/8 CDE - '/usr/dt/bin/dtsession' Buffer Overflow SGI IRIX 6.5 / Solaris 7.0/8 CDE - '/usr/dt/bin/dtsession' Local Buffer Overflow Solaris 2.5/2.6/7.0/8 - 'mailx -F' Buffer Overflow (1) Solaris 2.5/2.6/7.0/8 - 'mailx -F' Buffer Overflow (2) Solaris 2.5/2.6/7.0/8 - 'mailx -F' Local Buffer Overflow (1) Solaris 2.5/2.6/7.0/8 - 'mailx -F' Local Buffer Overflow (2) Solaris 8 mailtool - Buffer Overflow Solaris 8 mailtool - Local Buffer Overflow kosch suid wrapper 1.1.1 - Buffer Overflow kosch suid wrapper 1.1.1 - Local Buffer Overflow Rxvt 2.6.1/2.6.2 - Buffer Overflow Rxvt 2.6.1/2.6.2 - Local Buffer Overflow cfingerd 1.4.1/1.4.2/1.4.3 Utilities - Buffer Overflow (1) cfingerd 1.4.1/1.4.2/1.4.3 Utilities - Buffer Overflow (2) cfingerd 1.4.1/1.4.2/1.4.3 Utilities - Buffer Overflow (3) cfingerd 1.4.1/1.4.2/1.4.3 Utilities - Local Buffer Overflow (1) cfingerd 1.4.1/1.4.2/1.4.3 Utilities - Local Buffer Overflow (2) cfingerd 1.4.1/1.4.2/1.4.3 Utilities - Local Buffer Overflow (3) Solaris 8 libsldap - Buffer Overflow (1) Solaris 8 libsldap - Buffer Overflow (2) Solaris 2.6/2.6/7.0/8 whodo - Buffer Overflow Solaris 8 libsldap - Local Buffer Overflow (1) Solaris 8 libsldap - Local Buffer Overflow (2) Solaris 2.6/2.6/7.0/8 whodo - Local Buffer Overflow Xvt 2.1 - Buffer Overflow Xvt 2.1 - Local Buffer Overflow AIX 4.2/4.3 - '/usr/lib/lpd/pio/etc/piomkapqd' Buffer Overflow AIX 4.2/4.3 - '/usr/lib/lpd/pio/etc/piomkapqd' Local Buffer Overflow SuSE Linux 6.4/7.0/7.1/7.2 Berkeley Parallel Make - Buffer Overflow SuSE Linux 6.4/7.0/7.1/7.2 Berkeley Parallel Make - Local Buffer Overflow Internet Download Manager - Buffer Overflow (SEH) Internet Download Manager - Local Buffer Overflow (SEH) GNU Screen 3.9.x Braille Module - Buffer Overflow GNU Screen 3.9.x Braille Module - Local Buffer Overflow IBM Informix SE 7.25 sqlexec - Buffer Overflow (1) IBM Informix SE 7.25 sqlexec - Buffer Overflow (2) IBM Informix SE 7.25 sqlexec - Local Buffer Overflow (1) IBM Informix SE 7.25 sqlexec - Local Buffer Overflow (2) QNX RTOS 6.1 - 'PKG-Installer' Buffer Overflow QNX RTOS 6.1 - 'PKG-Installer' Local Buffer Overflow HP CIFS/9000 Server A.01.05/A.01.06 - Buffer Overflow HP CIFS/9000 Server A.01.05/A.01.06 - Local Buffer Overflow NCMedia Sound Editor Pro 7.5.1 - Overflow (SEH + DEP Bypass) NCMedia Sound Editor Pro 7.5.1 - Local Overflow (SEH + DEP Bypass) HP Tru64/OSF1 DXTerm - Buffer Overflow HP Tru64/OSF1 DXTerm - Local Buffer Overflow PLIB 1.8.5 - 'ssg/ssgParser.cxx' Buffer Overflow PLIB 1.8.5 - 'ssg/ssgParser.cxx' Local Buffer Overflow HPUX 10.20/11 Wall Message - Buffer Overflow HPUX 10.20/11 Wall Message - Local Buffer Overflow HT Editor 2.0.20 - Buffer Overflow (ROP) (PoC) HT Editor 2.0.20 - Local Buffer Overflow (ROP) (PoC) Microsoft Windows XP/2000 - 'RunDLL32.exe' Buffer Overflow Microsoft Windows XP/2000 - 'RunDLL32.exe' Local Buffer Overflow XBlast 2.6.1 - 'HOME Environment' Buffer Overflow XBlast 2.6.1 - 'HOME Environment' Local Buffer Overflow ViRobot Linux Server 2.0 - Overflow ViRobot Linux Server 2.0 - Local Overflow Nvidia Display Driver Service (Nsvr) - Buffer Overflow Nvidia Display Driver Service (Nsvr) - Local Buffer Overflow VirtualDJ Pro/Home 7.3 - Buffer Overflow HexChat 2.9.4 - Overflow VirtualDJ Pro/Home 7.3 - Local Buffer Overflow HexChat 2.9.4 - Local Overflow FuzeZip 1.0.0.131625 - Buffer Overflow (SEH) WinArchiver 3.2 - Buffer Overflow (SEH) FuzeZip 1.0.0.131625 - Local Buffer Overflow (SEH) WinArchiver 3.2 - Local Buffer Overflow (SEH) AudioCoder 0.8.18 - Buffer Overflow (SEH) AudioCoder 0.8.18 - Local Buffer Overflow (SEH) ABBS Audio Media Player 3.1 - '.lst' Buffer Overflow ABBS Audio Media Player 3.1 - '.lst' Local Buffer Overflow AudioCoder - '.m3u' Buffer Overflow (Metasploit) AudioCoder - '.m3u' Local Buffer Overflow (Metasploit) Adrenalin Player 2.2.5.3 - '.m3u' Buffer Overflow (SEH) Adrenalin Player 2.2.5.3 - '.m3u' Local Buffer Overflow (SEH) AdobeCollabSync - Buffer Overflow Adobe Reader X Sandbox Bypass (Metasploit) AdobeCollabSync - Local Buffer OverflowAdobe Reader X Sandbox Bypass (Metasploit) PHP 5.0.0 - 'tidy_parse_file()' Buffer Overflow PHP 5.0.0 - 'tidy_parse_file()' Local Buffer Overflow Adrenalin Player 2.2.5.3 - '.wax' Buffer Overflow (SEH) Adrenalin Player 2.2.5.3 - '.wax' Local Buffer Overflow (SEH) Adrenalin Player 2.2.5.3 - '.asx' Buffer Overflow (SEH) Adrenalin Player 2.2.5.3 - '.asx' Local Buffer Overflow (SEH) Mediacoder (.lst) - Buffer Overflow (SEH) Mediacoder - '.m3u' Buffer Overflow (SEH) Mediacoder PMP Edition 0.8.17 - '.m3u' Buffer Overflow Mediacoder (.lst) - Local Buffer Overflow (SEH) Mediacoder - '.m3u' Local Buffer Overflow (SEH) Mediacoder PMP Edition 0.8.17 - '.m3u' Local Buffer Overflow Static HTTP Server 1.0 - Overflow (SEH) AudioCoder (.lst) - Buffer Overflow (Metasploit) Adrenalin Player 2.2.5.3 - '.wvx' Buffer Overflow (SEH) Static HTTP Server 1.0 - Local Overflow (SEH) AudioCoder (.lst) - Local Buffer Overflow (Metasploit) Adrenalin Player 2.2.5.3 - '.wvx' Local Buffer Overflow (SEH) ABBS Audio Media Player - '.LST' Buffer Overflow (Metasploit) ABBS Audio Media Player - '.LST' Local Buffer Overflow (Metasploit) Easy LAN Folder Share 3.2.0.100 - Buffer Overflow (SEH) Easy LAN Folder Share 3.2.0.100 - Local Buffer Overflow (SEH) Chasys Draw IES - Buffer Overflow (Metasploit) Chasys Draw IES - Local Buffer Overflow (Metasploit) glibc and eglibc 2.5/2.7/2.13 - Buffer Overflow glibc and eglibc 2.5/2.7/2.13 - Local Buffer Overflow Internet Haut Debit Mobile PCW_MATMARV1.0.0B03 - Buffer Overflow (SEH) Beetel Connection Manager PCW_BTLINDV1.0.0B04 - Buffer Overflow (SEH) Internet Haut Debit Mobile PCW_MATMARV1.0.0B03 - Local Buffer Overflow (SEH) Beetel Connection Manager PCW_BTLINDV1.0.0B04 - Local Buffer Overflow (SEH) BlazeDVD Pro Player 7.0 - '.plf' Buffer Overflow (SEH) BlazeDVD Pro Player 7.0 - '.plf' Local Buffer Overflow (SEH) VideoCharge Studio 2.12.3.685 - Buffer Overflow (SEH) VideoCharge Studio 2.12.3.685 - Local Buffer Overflow (SEH) Watermark Master 2.2.23 - Buffer Overflow (SEH) BlazeDVD 6.2 - '.plf' Buffer Overflow (SEH) AudioCoder 0.8.22 - '.m3u' Buffer Overflow (SEH) Watermark Master 2.2.23 - Local Buffer Overflow (SEH) BlazeDVD 6.2 - '.plf' Local Buffer Overflow (SEH) AudioCoder 0.8.22 - '.m3u' Local Buffer Overflow (SEH) Steinberg MyMp3PRO 5.0 - Buffer Overflow (SEH) (DEP Bypass + ROP) Steinberg MyMp3PRO 5.0 - Local Buffer Overflow (SEH) (DEP Bypass + ROP) VideoSpirit Pro 1.90 - Buffer Overflow (SEH) VideoSpirit Pro 1.90 - Local Buffer Overflow (SEH) VideoSpirit Lite 1.77 - Buffer Overflow (SEH) VideoSpirit Lite 1.77 - Local Buffer Overflow (SEH) Watermark Master 2.2.23 - '.wstyle' Buffer Overflow (SEH) Watermark Master 2.2.23 - '.wstyle' Local Buffer Overflow (SEH) Light Alloy 4.7.3 - '.m3u' Buffer Overflow (SEH Unicode) Light Alloy 4.7.3 - '.m3u' Local Buffer Overflow (SEH Unicode) GOM Player 2.2.53.5169 - '.reg' Buffer Overflow (SEH) GOM Player 2.2.53.5169 - '.reg' Local Buffer Overflow (SEH) Total Video Player 1.3.1 (Settings.ini) - Buffer Overflow (SEH) Total Video Player 1.3.1 (Settings.ini) - Local Buffer Overflow (SEH) Kingsoft Office Writer 2012 8.1.0.3385 - '.wps' Buffer Overflow (SEH) Kingsoft Office Writer 2012 8.1.0.3385 - '.wps' Local Buffer Overflow (SEH) Adrenalin Player 2.2.5.3 - '.m3u' Buffer Overflow (SEH) (ASLR + DEP Bypass) Adrenalin Player 2.2.5.3 - '.m3u' Local Buffer Overflow (SEH) (ASLR + DEP Bypass) Publish-It 3.6d - '.pui' Buffer Overflow (SEH) Publish-It 3.6d - '.pui' Local Buffer Overflow (SEH) Easy CD-DA Recorder - '.pls' Buffer Overflow (Metasploit) Easy CD-DA Recorder - '.pls' Local Buffer Overflow (Metasploit) Gold MP4 Player 3.3 - Buffer Overflow (SEH) Total Video Player 1.3.1 - 'Settings.ini' Buffer Overflow (SEH) (Metasploit) Gold MP4 Player 3.3 - Local Buffer Overflow (SEH) Total Video Player 1.3.1 - 'Settings.ini' Local Buffer Overflow (SEH) (Metasploit) ALLPlayer 5.8.1 - '.m3u' Buffer Overflow (SEH) Calavera UpLoader 3.5 - Buffer Overflow (SEH) ALLPlayer 5.8.1 - '.m3u' Local Buffer Overflow (SEH) Calavera UpLoader 3.5 - Local Buffer Overflow (SEH) ALLPlayer - '.m3u' Buffer Overflow (Metasploit) KMPlayer 3.8.0.117 - Buffer Overflow ALLPlayer - '.m3u' Local Buffer Overflow (Metasploit) KMPlayer 3.8.0.117 - Local Buffer Overflow MP3Info 0.8.5a - Buffer Overflow (SEH) MP3Info 0.8.5a - Local Buffer Overflow (SEH) Anti-Trojan Elite 4.2.1 - 'Atepmon.sys' IOCTL Request Local Overflow / Privilege Escalation Free WMA MP3 Converter 1.8 - '.wav' Buffer Overflow Free WMA MP3 Converter 1.8 - '.wav' Local Buffer Overflow i-FTP 2.20 - Buffer Overflow (SEH) i-FTP 2.20 - Local Buffer Overflow (SEH) Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 - '.wax' Buffer Overflow (SEH) Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 - '.wax' Local Buffer Overflow (SEH) BulletProof FTP Client 2010 - Buffer Overflow (SEH) (Ruby) VFU 4.10-1.1 - Buffer Overflow BulletProof FTP Client 2010 - Local Buffer Overflow (SEH) (Ruby) VFU 4.10-1.1 - Local Buffer Overflow Advantech AdamView 4.30.003 - '.gni' Buffer Overflow (SEH) Advantech AdamView 4.30.003 - '.gni' Local Buffer Overflow (SEH) i-FTP Schedule - Buffer Overflow (Metasploit) i-FTP Schedule - Local Buffer Overflow (Metasploit) T-Mobile Internet Manager - Buffer Overflow (SEH) Congstar Internet Manager - Buffer Overflow (SEH) T-Mobile Internet Manager - Local Buffer Overflow (SEH) Congstar Internet Manager - Local Buffer Overflow (SEH) MooPlayer 1.3.0 - 'm3u' Buffer Overflow (SEH) (1) MooPlayer 1.3.0 - 'm3u' Local Buffer Overflow (SEH) (1) Publish-It 3.6d - Buffer Overflow (SEH) Publish-It 3.6d - Local Buffer Overflow (SEH) Publish-It - '.PUI' Buffer Overflow (SEH) (Metasploit) Publish-It - '.PUI' Local Buffer Overflow (SEH) (Metasploit) MooPlayer 1.3.0 - 'm3u' Buffer Overflow (SEH) (2) MooPlayer 1.3.0 - 'm3u' Local Buffer Overflow (SEH) (2) Mediacoder 0.8.34.5716 - '.m3u' Buffer Overflow (SEH) Mediacoder 0.8.34.5716 - '.m3u' Local Buffer Overflow (SEH) VideoCharge Express 3.16.3.04 - Buffer Overflow VideoCharge Professional + Express Vanilla 3.18.4.04 - Buffer Overflow VideoCharge Vanilla 3.16.4.06 - Buffer Overflow VideoCharge Express 3.16.3.04 - Local Buffer Overflow VideoCharge Professional + Express Vanilla 3.18.4.04 - Local Buffer Overflow VideoCharge Vanilla 3.16.4.06 - Local Buffer Overflow BulletProof FTP Client 2010 - Buffer Overflow (DEP Bypass) BulletProof FTP Client 2010 - Local Buffer Overflow (DEP Bypass) Jildi FTP Client 1.5.6 - Buffer Overflow (SEH) Jildi FTP Client 1.5.6 - Local Buffer Overflow (SEH) 1 Click Audio Converter 2.3.6 - Activex Buffer Overflow 1 Click Audio Converter 2.3.6 - Activex Local Buffer Overflow Blueberry Express 5.9.0.3678 - Buffer Overflow (SEH) Blueberry Express 5.9.0.3678 - Local Buffer Overflow (SEH) Tomabo MP4 Player 3.11.3 - '.m3u' Buffer Overflow (SEH) Tomabo MP4 Player 3.11.3 - '.m3u' Local Buffer Overflow (SEH) PDF Shaper 3.5 - Buffer Overflow (Metasploit) PDF Shaper 3.5 - Local Buffer Overflow (Metasploit) Microsoft HTML Help Compiler 4.74.8702.0 - Overflow (SEH) Microsoft HTML Help Compiler 4.74.8702.0 - Local Overflow (SEH) VideoCharge Studio - Buffer Overflow (SEH) (Metasploit) VideoCharge Studio - Local Buffer Overflow (SEH) (Metasploit) Multiple ChiefPDF Software 2.0 - Buffer Overflow Multiple ChiefPDF Software 2.0 - Local Buffer Overflow ZSNES 1.51 - Buffer Overflow FENIX 0.92 - Buffer Overflow BSIGN 0.4.5 - Buffer Overflow Boxoft WAV to MP3 Converter - 'convert' Buffer Overflow ZSNES 1.51 - Local Buffer Overflow FENIX 0.92 - Local Buffer Overflow BSIGN 0.4.5 - Local Buffer Overflow Boxoft WAV to MP3 Converter - 'convert' Local Buffer Overflow AutoCAD DWG and DXF To PDF Converter 2.2 - Buffer Overflow AutoCAD DWG and DXF To PDF Converter 2.2 - Local Buffer Overflow VeryPDF HTML Converter 2.0 - Buffer Overflow (SEH/ToLower() Bypass) VeryPDF HTML Converter 2.0 - Local Buffer Overflow (SEH/ToLower() Bypass) Logitech Webcam Software 1.1 - 'eReg.exe' Buffer Overflow (SEH Unicode) Logitech Webcam Software 1.1 - 'eReg.exe' Local Buffer Overflow (SEH Unicode) ZTE PC UI USB Modem Software - Buffer Overflow IKEView R60 - Buffer Overflow Local (SEH) ZTE PC UI USB Modem Software - Local Buffer Overflow IKEView R60 - Local Buffer OverflowLocal (SEH) GNU Coreutils 'sort' Text Utility - Buffer Overflow Total Commander 8.52 (Windows 10) - Buffer Overflow Total Commander 8.52 - Buffer Overflow GNU Coreutils 'sort' Text Utility - Local Buffer Overflow Total Commander 8.52 (Windows 10) - Local Buffer Overflow Total Commander 8.52 - Local Buffer Overflow Symantec Encryption Desktop 10 - Buffer Overflow Privilege Escalation Symantec Encryption Desktop 10 - Local Buffer OverflowPrivilege Escalation VeryPDF Image2PDF Converter - Buffer Overflow (SEH) Boxoft WAV to MP3 Converter 1.1 - Buffer Overflow (SEH) VeryPDF Image2PDF Converter - Local Buffer Overflow (SEH) Boxoft WAV to MP3 Converter 1.1 - Local Buffer Overflow (SEH) Blat 2.7.6 SMTP / NNTP Mailer - Buffer Overflow Blat 2.7.6 SMTP / NNTP Mailer - Local Buffer Overflow TCPing 2.1.0 - Buffer Overflow TCPing 2.1.0 - Local Buffer Overflow IBM i Access 7.1 - Buffer Overflow Code Execution IBM i Access 7.1 - Local Buffer OverflowCode Execution FTPShell Client 5.24 - Buffer Overflow FTPShell Client 5.24 - Local Buffer Overflow Oracle - 'HtmlConverter.exe' Buffer Overflow Oracle - 'HtmlConverter.exe' Local Buffer Overflow Core FTP Server 1.2 - Buffer Overflow (PoC) Core FTP Server 1.2 - Local Buffer Overflow (PoC) MP3 WAV to CD Burner 1.4.24 - Buffer Overflow (SEH) MP3 WAV to CD Burner 1.4.24 - Local Buffer Overflow (SEH) Mediacoder 0.8.43.5830 - '.m3u' Buffer Overflow (SEH) VUPlayer 2.49 (Windows 7) - '.m3u' Buffer Overflow (DEP Bypass) Mediacoder 0.8.43.5830 - '.m3u' Local Buffer Overflow (SEH) VUPlayer 2.49 (Windows 7) - '.m3u' Local Buffer Overflow (DEP Bypass) My Video Converter 1.5.24 - Buffer Overflow (SEH) My Video Converter 1.5.24 - Local Buffer Overflow (SEH) VirusChaser 8.0 - Buffer Overflow (SEH) VirusChaser 8.0 - Local Buffer Overflow (SEH) Disk Sorter Enterprise 9.5.12 - 'Import Command' Buffer Overflow DiskBoss Enterprise 7.8.16 - 'Import Command' Buffer Overflow Sync Breeze Enterprise 9.5.16 - 'Import Command' Buffer Overflow Disk Sorter Enterprise 9.5.12 - 'Import Command' Local Buffer Overflow DiskBoss Enterprise 7.8.16 - 'Import Command' Local Buffer Overflow Sync Breeze Enterprise 9.5.16 - 'Import Command' Local Buffer Overflow Easy Video to iPod/MP4/PSP/3GP Converter 1.5.20 - Buffer Overflow (SEH) Easy Video to iPod/MP4/PSP/3GP Converter 1.5.20 - Local Buffer Overflow (SEH) Gemalto SmartDiag Diagnosis Tool < 2.5 - Buffer Overflow (SEH) Gemalto SmartDiag Diagnosis Tool < 2.5 - Local Buffer Overflow (SEH) Easy MOV Converter 1.4.24 - 'Enter User Name' Buffer Overflow (SEH) Easy MOV Converter 1.4.24 - 'Enter User Name' Local Buffer Overflow (SEH) JAD Java Decompiler 1.5.8e - Buffer Overflow Flat Assembler 1.7.21 - Buffer Overflow JAD Java Decompiler 1.5.8e - Local Buffer Overflow Flat Assembler 1.7.21 - Local Buffer Overflow Easy AVI DivX Converter 1.2.24 - Buffer Overflow (SEH) Easy AVI DivX Converter 1.2.24 - Local Buffer Overflow (SEH) DNSTracer 1.9 - Buffer Overflow DNSTracer 1.9 - Local Buffer Overflow ALLPlayer 7.4 - Buffer Overflow (SEH Unicode) Internet Download Manager 6.28 Build 17 - Buffer Overflow (SEH Unicode) ALLPlayer 7.4 - Local Buffer Overflow (SEH Unicode) Internet Download Manager 6.28 Build 17 - Local Buffer Overflow (SEH Unicode) Easy DVD Creater 2.5.11 - Buffer Overflow (SEH) Disk Pulse Enterprise 9.9.16 - 'Import Command' Buffer Overflow Easy DVD Creater 2.5.11 - Local Buffer Overflow (SEH) Disk Pulse Enterprise 9.9.16 - 'Import Command' Local Buffer Overflow Disk Savvy Enterprise 9.9.14 - 'Import Command' Buffer Overflow VX Search Enterprise 9.9.12 - 'Import Command' Buffer Overflow Disk Savvy Enterprise 9.9.14 - 'Import Command' Local Buffer Overflow VX Search Enterprise 9.9.12 - 'Import Command' Local Buffer Overflow Easy DVD Creator 2.5.11 - Buffer Overflow (SEH) Easy WMV/ASF/ASX to DVD Burner 2.3.11 - Buffer Overflow (SEH) Easy RM RMVB to DVD Burner 1.8.11 - Buffer Overflow (SEH) Easy Vedio to PSP Converter 1.6.20 - Buffer Overflow (SEH) Easy DVD Creator 2.5.11 - Local Buffer Overflow (SEH) Easy WMV/ASF/ASX to DVD Burner 2.3.11 - Local Buffer Overflow (SEH) Easy RM RMVB to DVD Burner 1.8.11 - Local Buffer Overflow (SEH) Easy Vedio to PSP Converter 1.6.20 - Local Buffer Overflow (SEH) CyberLink LabelPrint < 2.5 - Buffer Overflow (SEH Unicode) CyberLink LabelPrint < 2.5 - Local Buffer Overflow (SEH Unicode) DiskBoss Enterprise 8.4.16 - 'Import Command' Buffer Overflow Dup Scout Enterprise 10.0.18 - 'Import Command' Buffer Overflow DiskBoss Enterprise 8.4.16 - 'Import Command' Local Buffer Overflow Dup Scout Enterprise 10.0.18 - 'Import Command' Local Buffer Overflow ASX to MP3 3.1.3.7 - '.m3u' Buffer Overflow ASX to MP3 3.1.3.7 - '.m3u' Local Buffer Overflow Easy MPEG/AVI/DIVX/WMV/RM to DVD - 'Enter User Name' Buffer Overflow (SEH) Easy MPEG/AVI/DIVX/WMV/RM to DVD - 'Enter User Name' Local Buffer Overflow (SEH) VX Search 10.2.14 - 'Proxy' Buffer Overflow (SEH) VX Search 10.2.14 - 'Proxy' Local Buffer Overflow (SEH) Samba 2.2.x - Buffer Overflow SETI@home Clients - Buffer Overflow Samba 2.2.x - Remote Buffer Overflow SETI@home Clients - Remote Buffer Overflow GtkFtpd 1.0.4 - Buffer Overflow GtkFtpd 1.0.4 - Remote Buffer Overflow IPSwitch IMail LDAP Daemon/Service - Buffer Overflow IPSwitch IMail LDAP Daemon/Service - Remote Buffer Overflow Monit 4.1 - Buffer Overflow Monit 4.2 - Buffer Overflow Monit 4.1 - Remote Buffer Overflow Monit 4.2 - Remote Buffer Overflow PHF (Linux/x86) - Buffer Overflow PHF (Linux/x86) - Remote Buffer Overflow Ability Server 2.34 - FTP 'STOR' Buffer Overflow Ability Server 2.34 - FTP 'STOR' Remote Buffer Overflow TABS MailCarrier 2.51 - SMTP 'EHLO' / 'HELO' Buffer Overflow TABS MailCarrier 2.51 - SMTP 'EHLO' / 'HELO' Remote Buffer Overflow Ability Server 2.34 (Unix) - FTP 'STOR' Buffer Overflow Ability Server 2.34 (Unix) - FTP 'STOR' Remote Buffer Overflow DMS POP3 Server 1.5.3 build 37 - Buffer Overflow CoffeeCup FTP Clients (Direct 6.2.0.62) (Free 3.0.0.10) - Buffer Overflow DMS POP3 Server 1.5.3 build 37 - Remote Buffer Overflow CoffeeCup FTP Clients (Direct 6.2.0.62) (Free 3.0.0.10) - Remote Buffer Overflow Solaris 2.5.1/2.6/7/8 rlogin (SPARC) - '/bin/login' Buffer Overflow Solaris 2.5.1/2.6/7/8 rlogin (SPARC) - '/bin/login' Remote Buffer Overflow PHP 4.3.7 - 'openlog()' Buffer Overflow PHP 4.3.7 - 'openlog()' Remote Buffer Overflow NodeManager Professional 2.00 - Buffer Overflow NodeManager Professional 2.00 - Remote Buffer Overflow GlobalScape Secure FTP Server 3.0 - Buffer Overflow GlobalScape Secure FTP Server 3.0 - Remote Buffer Overflow Microsoft Windows Message Queuing - Buffer Overflow Universal (MS05-017) (v.0.3) Microsoft Windows Message Queuing - Remote Buffer Overflow Universal (MS05-017) (v.0.3) CA BrightStor ARCserve Backup - 'dsconfig.exe' Buffer Overflow CA BrightStor ARCserve Backup - 'dsconfig.exe' Remote Buffer Overflow Mirabilis ICQ 2003a - Buffer Overflow Download Shellcode Mirabilis ICQ 2003a - Remote Buffer Overflow Download Shellcode MailEnable Enterprise Edition 1.1 - 'EXAMINE' Buffer Overflow MailEnable Enterprise Edition 1.1 - 'EXAMINE' Remote Buffer Overflow Ultr@VNC 1.0.1 - 'client Log::ReallyPrint' Buffer Overflow Ultr@VNC 1.0.1 - 'client Log::ReallyPrint' Remote Buffer Overflow Apache < 1.3.37/2.0.59/2.2.3 mod_rewrite - Remote Overflow Evince Document Viewer - 'DocumentMedia' Buffer Overflow Evince Document Viewer - 'DocumentMedia' Remote Buffer Overflow Apple QuickTime (Windows 2000) - 'rtsp URL Handler' Buffer Overflow Apple QuickTime (Windows 2000) - 'rtsp URL Handler' Remote Buffer Overflow dproxy-nexgen (Linux x86) - Buffer Overflow dproxy-nexgen (Linux x86) - Remote Buffer Overflow IPIX Image Well - ActiveX 'iPIX-ImageWell-ipix.dll' Buffer Overflow IPIX Image Well - ActiveX 'iPIX-ImageWell-ipix.dll' Remote Buffer Overflow LeadTools Raster Thumbnail Object Library - 'LTRTM14e.dll' Buffer Overflow LeadTools Raster Thumbnail Object Library - 'LTRTM14e.dll' Remote Buffer Overflow AMX Corp. VNC ActiveX Control - 'AmxVnc.dll 1.0.13.0' Buffer Overflow AXIS Camera Control (AxisCamControl.ocx 1.0.2.15) - Buffer Overflow AMX Corp. VNC ActiveX Control - 'AmxVnc.dll 1.0.13.0' Remote Buffer Overflow AXIS Camera Control (AxisCamControl.ocx 1.0.2.15) - Remote Buffer Overflow Postcast Server Pro 3.0.61 / Quiksoft EasyMail - 'emsmtp.dll 6.0.1' Buffer Overflow Postcast Server Pro 3.0.61 / Quiksoft EasyMail - 'emsmtp.dll 6.0.1' Remote Buffer Overflow EasyMail MessagePrinter Object - 'emprint.dll 6.0.1.0' Buffer Overflow EasyMail MessagePrinter Object - 'emprint.dll 6.0.1.0' Remote Buffer Overflow Persits Software XUpload Control - 'AddFolder()' Buffer Overflow IBM Domino Web Access 7.0 Upload Module - 'inotes6.dll' Buffer Overflow Persits Software XUpload Control - 'AddFolder()' Remote Buffer Overflow IBM Domino Web Access 7.0 Upload Module - 'inotes6.dll' Remote Buffer Overflow IBM Domino Web Access Upload Module - 'dwa7w.dll' Buffer Overflow IBM Domino Web Access Upload Module - 'dwa7w.dll' Remote Buffer Overflow StreamAudio ChainCast ProxyManager - 'ccpm_0237.dll' Buffer Overflow NUVICO DVR NVDV4 / PdvrAtl Module 'PdvrAtl.DLL 1.0.1.25' - Buffer Overflow StreamAudio ChainCast ProxyManager - 'ccpm_0237.dll' Remote Buffer Overflow NUVICO DVR NVDV4 / PdvrAtl Module 'PdvrAtl.DLL 1.0.1.25' - Remote Buffer Overflow RTS Sentry Digital Surveillance - 'CamPanel.dll 2.1.0.2' Buffer Overflow RTS Sentry Digital Surveillance - 'CamPanel.dll 2.1.0.2' Remote Buffer Overflow HP Virtual Rooms WebHPVCInstall Control - Buffer Overflow HP Virtual Rooms WebHPVCInstall Control - Remote Buffer Overflow Move Networks Upgrade Manager Control - Buffer Overflow Move Networks Upgrade Manager Control - Remote Buffer Overflow MySpace Uploader - 'MySpaceUploader.ocx 1.0.0.4' Buffer Overflow MySpace Uploader - 'MySpaceUploader.ocx 1.0.0.4' Remote Buffer Overflow FaceBook PhotoUploader - 'ImageUploader4.ocx 4.5.57.0' Buffer Overflow FaceBook PhotoUploader - 'ImageUploader4.ocx 4.5.57.0' Remote Buffer Overflow dBpowerAMP Audio Player 2 - '.m3u' Buffer Overflow dBpowerAMP Audio Player 2 - '.m3u' Remote Buffer Overflow Move Networks Quantum Streaming Player Control - Buffer Overflow D-Link MPEG4 SHM Audio Control - 'VAPGDecoder.dll 1.7.0.5' Buffer Overflow Symantec BackupExec Calendar Control - 'PVCalendar.ocx' Buffer Overflow Move Networks Quantum Streaming Player Control - Remote Buffer Overflow D-Link MPEG4 SHM Audio Control - 'VAPGDecoder.dll 1.7.0.5' Remote Buffer Overflow Symantec BackupExec Calendar Control - 'PVCalendar.ocx' Remote Buffer Overflow Black Ice Software Annotation Plugin - 'BiAnno.ocx' Buffer Overflow (2) Black Ice Software Annotation Plugin - 'BiAnno.ocx' Remote Buffer Overflow (2) FlashGet 1.9.0.1012 - 'FTP PWD Response' Buffer Overflow (SafeSEH) FlashGet 1.9.0.1012 - 'FTP PWD Response' Remote Buffer Overflow (SafeSEH) EasyMail - ActiveX 'emmailstore.dll 6.5.0.3' Buffer Overflow EasyMail - ActiveX 'emmailstore.dll 6.5.0.3' Remote Buffer Overflow NaviCOPA Web Server 3.0.1 - Buffer Overflow / Script Source Disclosure NaviCOPA Web Server 3.0.1 - Remote Buffer Overflow / Script Source Disclosure Serv-U Web Client 9.0.0.5 - Buffer Overflow (2) Serv-U Web Client 9.0.0.5 - Remote Buffer Overflow (2) Xion Audio Player 1.0 121 - '.m3u' Buffer Overflow (1) Xion Audio Player 1.0 121 - '.m3u' Remote Buffer Overflow (1) Novell eDirectory 8.8sp5 - Buffer Overflow Novell eDirectory 8.8sp5 - Remote Buffer Overflow Solaris TelnetD - 'TTYPROMPT' Buffer Overflow (1) (Metasploit) Solaris TelnetD - 'TTYPROMPT' Remote Buffer Overflow (1) (Metasploit) Solaris sadmind adm_build_path - Buffer Overflow (Metasploit) Solaris sadmind adm_build_path - Remote Buffer Overflow (Metasploit) NTPd 4.0.99j-k readvar - Buffer Overflow (Metasploit) NTPd 4.0.99j-k readvar - Remote Buffer Overflow (Metasploit) Borland Interbase 2007 - 'PWD_db_aliased' Buffer Overflow (Metasploit) Pegasus Mail Client 4.51 - Buffer Overflow (PoC) Serv-U Web Client 9.0.0.5 - Buffer Overflow (1) Borland Interbase 2007 - 'PWD_db_aliased' Remote Buffer Overflow (Metasploit) Pegasus Mail Client 4.51 - Remote Buffer Overflow (PoC) Serv-U Web Client 9.0.0.5 - Remote Buffer Overflow (1) Borland Interbase 2007/2007 SP2 - 'open_marker_file' Buffer Overflow (Metasploit) Borland Interbase 2007/2007 SP2 - 'jrd8_create_database' Buffer Overflow (Metasploit) Borland Interbase 2007/2007 SP2 - 'INET_connect' Buffer Overflow (Metasploit) Borland Interbase 2007/2007 SP2 - 'open_marker_file' Remote Buffer Overflow (Metasploit) Borland Interbase 2007/2007 SP2 - 'jrd8_create_database' Remote Buffer Overflow (Metasploit) Borland Interbase 2007/2007 SP2 - 'INET_connect' Remote Buffer Overflow (Metasploit) Linksys WRT54G < 4.20.7 / WRT54GS < 1.05.2 - 'apply.cgi' Buffer Overflow (Metasploit) Linksys WRT54G < 4.20.7 / WRT54GS < 1.05.2 - 'apply.cgi' Remote Buffer Overflow (Metasploit) Xtacacsd 4.1.2 - 'report()' Buffer Overflow (Metasploit) Xtacacsd 4.1.2 - 'report()' Remote Buffer Overflow (Metasploit) SAP GUI VSFlexGrid.VSFlexGridL sp 14 - Buffer Overflow SAP GUI VSFlexGrid.VSFlexGridL sp 14 - Remote Buffer Overflow Ada Image Server 0.6.7 - 'imgsrv.exe' Buffer Overflow Ada Image Server 0.6.7 - 'imgsrv.exe' Remote Buffer Overflow Hero DVD Remote 1.0 - Buffer Overflow HP Application Recovery Manager - 'OmniInet.exe' Buffer Overflow Hero DVD Remote 1.0 - Remote Buffer Overflow HP Application Recovery Manager - 'OmniInet.exe' Remote Buffer Overflow EFS Software Easy Chat Server 2.2 - Buffer Overflow EFS Software Easy Chat Server 2.2 - Remote Buffer Overflow AOL 9.5 - Phobos.Playlist 'Import()' Buffer Overflow (Metasploit) AOL 9.5 - Phobos.Playlist 'Import()' Remote Buffer Overflow (Metasploit) ProSSHD 1.2 20090726 - Buffer Overflow ProSSHD 1.2 20090726 - Remote Buffer Overflow Image22 ActiveX 1.1.1 - Buffer Overflow Image22 ActiveX 1.1.1 - Remote Buffer Overflow XFTP 3.0 Build 0239 - 'Filename' Buffer Overflow XFTP 3.0 Build 0239 - 'Filename' Remote Buffer Overflow Apple Mac OSX EvoCam Web Server 3.6.6/3.6.7 - Buffer Overflow Apple Mac OSX EvoCam Web Server 3.6.6/3.6.7 - Remote Buffer Overflow UFO: Alien Invasion 2.2.1 (Windows 7) - Buffer Overflow (ASLR + DEP Bypass) UFO: Alien Invasion 2.2.1 (Windows 7) - Remote Buffer Overflow (ASLR + DEP Bypass) Hero DVD - Buffer Overflow (Metasploit) Hero DVD - Remote Buffer Overflow (Metasploit) Barcodewiz Barcode ActiveX Control 3.29 - Buffer Overflow (SEH) Barcodewiz Barcode ActiveX Control 3.29 - Remote Buffer Overflow (SEH) Easy FTP 1.7.0.11 - 'NLST' / 'NLST -al' / 'APPE' / 'RETR' / 'SIZE' / 'XCWD' Buffer Overflow Easy FTP 1.7.0.11 - 'NLST' / 'NLST -al' / 'APPE' / 'RETR' / 'SIZE' / 'XCWD' Remote Buffer Overflow Softek Barcode Reader Toolkit ActiveX 7.1.4.14 - 'SoftekATL.dll' Buffer Overflow (PoC) Softek Barcode Reader Toolkit ActiveX 7.1.4.14 - 'SoftekATL.dll' Remote Buffer Overflow (PoC) Novell iPrint Client - ActiveX Control 'debug' Buffer Overflow (Metasploit) Novell iPrint Client - ActiveX Control 'debug' Remote Buffer Overflow (Metasploit) Oracle Java 6 - OBJECT tag 'launchjnlp'/'docbase' Buffer Overflow Oracle Java 6 - OBJECT tag 'launchjnlp'/'docbase' Remote Buffer Overflow DATAC RealWin SCADA Server 1.06 - Buffer Overflow XBMC 9.04.1r20672 - 'soap_action_name' POST UPnP 'sscanf' Buffer Overflow DATAC RealWin SCADA Server 1.06 - Remote Buffer Overflow XBMC 9.04.1r20672 - 'soap_action_name' POST UPnP 'sscanf' Remote Buffer Overflow Viscom Image Viewer CP Gold 5.5 - 'Image2PDF()' Buffer Overflow (Metasploit) Viscom Image Viewer CP Gold 5.5 - 'Image2PDF()' Remote Buffer Overflow (Metasploit) Viscom Image Viewer CP Gold 6 - ActiveX 'TifMergeMultiFiles()' Buffer Overflow Freefloat FTP Server - Buffer Overflow Viscom Image Viewer CP Gold 6 - ActiveX 'TifMergeMultiFiles()' Remote Buffer Overflow Freefloat FTP Server - Remote Buffer Overflow Kolibri 2.0 - 'HEAD' Buffer Overflow RET (SEH) Kolibri 2.0 - 'HEAD' Remote Buffer Overflow RET (SEH) FTPGetter 3.58.0.21 - 'PASV' Buffer Overflow FTPGetter 3.58.0.21 - 'PASV' Remote Buffer Overflow NTP daemon readvar - Buffer Overflow (Metasploit) NTP daemon readvar - Remote Buffer Overflow (Metasploit) Samba 2.2.2 < 2.2.6 - 'nttrans' Buffer Overflow (Metasploit) (1) Samba 2.2.2 < 2.2.6 - 'nttrans' Remote Buffer Overflow (Metasploit) (1) Sun Solaris sadmind - 'adm_build_path()' Buffer Overflow (Metasploit) Sun Solaris sadmind - 'adm_build_path()' Remote Buffer Overflow (Metasploit) Solaris TelnetD - 'TTYPROMPT' Buffer Overflow (2) (Metasploit) Solaris TelnetD - 'TTYPROMPT' Remote Buffer Overflow (2) (Metasploit) WinComLPD 3.0.2 - Buffer Overflow (Metasploit) WinComLPD 3.0.2 - Remote Buffer Overflow (Metasploit) SapLPD 6.28 - Buffer Overflow (Metasploit) SapLPD 6.28 - Remote Buffer Overflow (Metasploit) Oracle 8i - TNS Listener 'ARGUMENTS' Buffer Overflow (Metasploit) Oracle 8i - TNS Listener 'ARGUMENTS' Remote Buffer Overflow (Metasploit) D-Link TFTP 1.0 - 'Filename' Buffer Overflow (Metasploit) ProSysInfo TFTP server TFTPDWIN 0.4.2 - 'Filename' Buffer Overflow (Metasploit) 3Com TFTP Service (3CTftpSvc) - 'Mode' Buffer Overflow (Metasploit) D-Link TFTP 1.0 - 'Filename' Remote Buffer Overflow (Metasploit) ProSysInfo TFTP server TFTPDWIN 0.4.2 - 'Filename' Remote Buffer Overflow (Metasploit) 3Com TFTP Service (3CTftpSvc) - 'Mode' Remote Buffer Overflow (Metasploit) TFTPD32 < 2.21 - 'Filename' Buffer Overflow (Metasploit) TFTPD32 < 2.21 - 'Filename' Remote Buffer Overflow (Metasploit) CitectSCADA/CitectFacilities ODBC - Buffer Overflow (Metasploit) MOXA Device Manager Tool 2.1 - Buffer Overflow (Metasploit) CitectSCADA/CitectFacilities ODBC - Remote Buffer Overflow (Metasploit) MOXA Device Manager Tool 2.1 - Remote Buffer Overflow (Metasploit) DATAC RealWin SCADA Server - Buffer Overflow (Metasploit) DATAC RealWin SCADA Server - Remote Buffer Overflow (Metasploit) Omni-NFS Server - Buffer Overflow (Metasploit) Omni-NFS Server - Remote Buffer Overflow (Metasploit) EMC AlphaStor Agent - Buffer Overflow (Metasploit) EMC AlphaStor Agent - Remote Buffer Overflow (Metasploit) CA BrightStor ARCserve for Laptops & Desktops LGServer - Buffer Overflow (Metasploit) (1) CA BrightStor ARCserve for Laptops & Desktops LGServer - Remote Buffer Overflow (Metasploit) (1) CA BrightStor ARCserve for Laptops & Desktops LGServer - Buffer Overflow (Metasploit) (2) CA BrightStor ARCserve for Laptops & Desktops LGServer - Remote Buffer Overflow (Metasploit) (2) CA BrightStor ARCserve for Laptops & Desktops LGServer - Buffer Overflow (Metasploit) (3) CA BrightStor ARCserve Message Engine 0x72 - Buffer Overflow (Metasploit) CA BrightStor ARCserve for Laptops & Desktops LGServer - Remote Buffer Overflow (Metasploit) (3) CA BrightStor ARCserve Message Engine 0x72 - Remote Buffer Overflow (Metasploit) CA BrightStor ARCserve License Service - 'GCR NETWORK' Buffer Overflow (Metasploit) CA BrightStor ARCserve for Laptops & Desktops LGServer - 'rxsSetDataGrowthScheduleAndFilter' Buffer Overflow (Metasploit) CA BrightStor ARCserve License Service - 'GCR NETWORK' Remote Buffer Overflow (Metasploit) CA BrightStor ARCserve for Laptops & Desktops LGServer - 'rxsSetDataGrowthScheduleAndFilter' Remote Buffer Overflow (Metasploit) Firebird Relational Database - 'SVC_attach()' Buffer Overflow (Metasploit) IBM Tivoli Storage Manager Express CAD Service - Buffer Overflow (Metasploit) (1) Firebird Relational Database - 'SVC_attach()' Remote Buffer Overflow (Metasploit) IBM Tivoli Storage Manager Express CAD Service - Remote Buffer Overflow (Metasploit) (1) SAP Business One License Manager 2005 - Buffer Overflow (Metasploit) SAP Business One License Manager 2005 - Remote Buffer Overflow (Metasploit) Asus Dpcproxy - Buffer Overflow (Metasploit) Asus Dpcproxy - Remote Buffer Overflow (Metasploit) Microsoft Windows RSH daemon - Buffer Overflow (Metasploit) IBM Tivoli Storage Manager Express RCA Service - Buffer Overflow (Metasploit) Microsoft Windows RSH daemon - Remote Buffer Overflow (Metasploit) IBM Tivoli Storage Manager Express RCA Service - Remote Buffer Overflow (Metasploit) BigAnt Server 2.2 - Buffer Overflow (Metasploit) BigAnt Server 2.50 SP1 - Buffer Overflow (Metasploit) Firebird Relational Database - 'isc_create_database()' Buffer Overflow (Metasploit) BomberClone 0.11.6 - Buffer Overflow (Metasploit) BigAnt Server 2.2 - Remote Buffer Overflow (Metasploit) BigAnt Server 2.50 SP1 - Remote Buffer Overflow (Metasploit) Firebird Relational Database - 'isc_create_database()' Remote Buffer Overflow (Metasploit) BomberClone 0.11.6 - Remote Buffer Overflow (Metasploit) Borland Interbase - 'isc_create_database()' Buffer Overflow (Metasploit) Borland Interbase - 'isc_create_database()' Remote Buffer Overflow (Metasploit) NetTransport Download Manager 2.90.510 - Buffer Overflow (Metasploit) Firebird Relational Database - 'isc_attach_database()' Buffer Overflow (Metasploit) NetTransport Download Manager 2.90.510 - Remote Buffer Overflow (Metasploit) Firebird Relational Database - 'isc_attach_database()' Remote Buffer Overflow (Metasploit) Bopup Communications Server - Buffer Overflow (Metasploit) UFO: Alien Invasion IRC Client (Windows) - Buffer Overflow (Metasploit) Borland Interbase - 'isc_attach_database()' Buffer Overflow (Metasploit) Bopup Communications Server - Remote Buffer Overflow (Metasploit) UFO: Alien Invasion IRC Client (Windows) - Remote Buffer Overflow (Metasploit) Borland Interbase - 'isc_attach_database()' Remote Buffer Overflow (Metasploit) Borland Interbase - 'SVC_attach()' Buffer Overflow (Metasploit) Borland Interbase - 'SVC_attach()' Remote Buffer Overflow (Metasploit) Borland Interbase - 'Create-Request' Buffer Overflow (Metasploit) Borland Interbase - 'Create-Request' Remote Buffer Overflow (Metasploit) Realtek Media Player Playlist - Buffer Overflow (Metasploit) Realtek Media Player Playlist - Remote Buffer Overflow (Metasploit) SecureCRT 4.0 Beta 2 SSH1 - Buffer Overflow (Metasploit) SecureCRT 4.0 Beta 2 SSH1 - Remote Buffer Overflow (Metasploit) PuTTy.exe 0.53 - Buffer Overflow (Metasploit) PuTTy.exe 0.53 - Remote Buffer Overflow (Metasploit) Eudora Qualcomm WorldMail 3.0 - IMAPd 'LIST' Buffer Overflow (Metasploit) Eudora Qualcomm WorldMail 3.0 - IMAPd 'LIST' Remote Buffer Overflow (Metasploit) IBM Lotus Domino Web Access Upload Module - Buffer Overflow (Metasploit) IBM Lotus Domino Web Access Upload Module - Remote Buffer Overflow (Metasploit) Macrovision Installshield Update Service - Buffer Overflow (Metasploit) Macrovision Installshield Update Service - Remote Buffer Overflow (Metasploit) SAP AG SAPgui EAI WebViewer3D - Buffer Overflow (Metasploit) SAP AG SAPgui EAI WebViewer3D - Remote Buffer Overflow (Metasploit) Symantec BackupExec Calendar Control - Buffer Overflow (Metasploit) Symantec BackupExec Calendar Control - Remote Buffer Overflow (Metasploit) RealNetworks RealPlayer - '.SMIL' Buffer Overflow (Metasploit) RealNetworks RealPlayer - '.SMIL' Remote Buffer Overflow (Metasploit) AOL Radio AmpX - ActiveX Control 'ConvertFile()' Buffer Overflow (Metasploit) AOL Radio AmpX - ActiveX Control 'ConvertFile()' Remote Buffer Overflow (Metasploit) NCTAudioFile2 2.x - ActiveX Control 'SetFormatLikeSample()' Buffer Overflow (Metasploit) NCTAudioFile2 2.x - ActiveX Control 'SetFormatLikeSample()' Remote Buffer Overflow (Metasploit) Winamp Ultravox Streaming Metadata 'in_mp3.dll' - Buffer Overflow (Metasploit) Winamp Ultravox Streaming Metadata 'in_mp3.dll' - Remote Buffer Overflow (Metasploit) Racer 0.5.3 Beta 5 - Buffer Overflow (Metasploit) Racer 0.5.3 Beta 5 - Remote Buffer Overflow (Metasploit) CesarFTP 0.99g - 'MKD' Buffer Overflow (Metasploit) CesarFTP 0.99g - 'MKD' Remote Buffer Overflow (Metasploit) Xlink FTP Server - Buffer Overflow (Metasploit) Xlink FTP Server - Remote Buffer Overflow (Metasploit) Xlink FTP Client - Buffer Overflow (Metasploit) Xlink FTP Client - Remote Buffer Overflow (Metasploit) FileCOPA FTP Server (Pre 18 Jul Version) - 'LIST' Buffer Overflow (Metasploit) FileCOPA FTP Server (Pre 18 Jul Version) - 'LIST' Remote Buffer Overflow (Metasploit) NetTerm NetFTPD - 'USER' Buffer Overflow (Metasploit) NetTerm NetFTPD - 'USER' Remote Buffer Overflow (Metasploit) MiniShare 1.4.1 - Buffer Overflow (Metasploit) MiniShare 1.4.1 - Remote Buffer Overflow (Metasploit) Private Wire Gateway - Buffer Overflow (Metasploit) BadBlue 2.5 - 'ext.dll' Buffer Overflow (Metasploit) Private Wire Gateway - Remote Buffer Overflow (Metasploit) BadBlue 2.5 - 'ext.dll' Remote Buffer Overflow (Metasploit) IBM Tivoli Storage Manager Express CAD Service - Buffer Overflow (Metasploit) (2) IBM Tivoli Storage Manager Express CAD Service - Remote Buffer Overflow (Metasploit) (2) IA WebMail Server 3.x - Buffer Overflow (Metasploit) IA WebMail Server 3.x - Remote Buffer Overflow (Metasploit) Now SMS/Mms Gateway - Buffer Overflow (Metasploit) Now SMS/Mms Gateway - Remote Buffer Overflow (Metasploit) Hewlett-Packard (HP) Power Manager Administration - Buffer Overflow (Metasploit) Hewlett-Packard (HP) Power Manager Administration - Remote Buffer Overflow (Metasploit) IPSwitch WhatsUp Gold 8.03 - Buffer Overflow (Metasploit) IPSwitch WhatsUp Gold 8.03 - Remote Buffer Overflow (Metasploit) Apache Tomcat mod_jk 1.2.20 - Buffer Overflow (Metasploit) httpdx - 'h_handlepeer()' Buffer Overflow (Metasploit) Apache Tomcat mod_jk 1.2.20 - Remote Buffer Overflow (Metasploit) httpdx - 'h_handlepeer()' Remote Buffer Overflow (Metasploit) Alt-N SecurityGateway 1.0.1 - 'Username' Buffer Overflow (Metasploit) Alt-N SecurityGateway 1.0.1 - 'Username' Remote Buffer Overflow (Metasploit) IBM TPM for OS Deployment 5.1.0.x - 'rembo.exe' Buffer Overflow (Metasploit) IBM TPM for OS Deployment 5.1.0.x - 'rembo.exe' Remote Buffer Overflow (Metasploit) Novell Groupwise Messenger Client - Buffer Overflow (Metasploit) Novell Groupwise Messenger Client - Remote Buffer Overflow (Metasploit) GAMSoft TelSrv 1.5 - 'Username' Buffer Overflow (Metasploit) GoodTech Telnet Server 5.0.6 - Buffer Overflow (Metasploit) YahooPOPs (YPOPS) 0.6 - Buffer Overflow (Metasploit) SoftiaCom wMailServer 1.0 - Buffer Overflow (Metasploit) GAMSoft TelSrv 1.5 - 'Username' Remote Buffer Overflow (Metasploit) GoodTech Telnet Server 5.0.6 - Remote Buffer Overflow (Metasploit) YahooPOPs (YPOPS) 0.6 - Remote Buffer Overflow (Metasploit) SoftiaCom wMailServer 1.0 - Remote Buffer Overflow (Metasploit) IPSwitch IMail LDAP Daemon/Service - Buffer Overflow (Metasploit) IPSwitch IMail LDAP Daemon/Service - Remote Buffer Overflow (Metasploit) Symantec Alert Management System Intel Alert Originator Service - Buffer Overflow (Metasploit) Trend Micro ServerProtect 5.58 - Buffer Overflow (Metasploit) Trend Micro ServerProtect 5.58 - 'CreateBinding()' Buffer Overflow (Metasploit) Trend Micro ServerProtect 5.58 - 'EarthAgent.exe' Buffer Overflow (Metasploit) Symantec Remote Management - Buffer Overflow (Metasploit) Symantec Alert Management System Intel Alert Originator Service - Remote Buffer Overflow (Metasploit) Trend Micro ServerProtect 5.58 - Remote Buffer Overflow (Metasploit) Trend Micro ServerProtect 5.58 - 'CreateBinding()' Remote Buffer Overflow (Metasploit) Trend Micro ServerProtect 5.58 - 'EarthAgent.exe' Remote Buffer Overflow (Metasploit) Symantec Remote Management - Remote Buffer Overflow (Metasploit) Borland Interbase - 'PWD_db_aliased()' Buffer Overflow (Metasploit) Borland Interbase - 'open_marker_file()' Buffer Overflow (Metasploit) Borland Interbase - 'PWD_db_aliased()' Remote Buffer Overflow (Metasploit) Borland Interbase - 'open_marker_file()' Remote Buffer Overflow (Metasploit) Borland Interbase - 'jrd8_create_database()' Buffer Overflow (Metasploit) Borland Interbase - 'INET_connect()' Buffer Overflow (Metasploit) Borland Interbase - 'jrd8_create_database()' Remote Buffer Overflow (Metasploit) Borland Interbase - 'INET_connect()' Remote Buffer Overflow (Metasploit) ProFTPd 1.2 < 1.3.0 (Linux) - 'sreplace' Buffer Overflow (Metasploit) ProFTPd 1.2 < 1.3.0 (Linux) - 'sreplace' Remote Buffer Overflow (Metasploit) Linksys WRT54 Access Point - 'apply.cgi' Buffer Overflow (Metasploit) Linksys WRT54 Access Point - 'apply.cgi' Remote Buffer Overflow (Metasploit) Apple iPhone MobileSafari LibTIFF - 'browser' Buffer Overflow (Metasploit) (1) Apple iPhone MobileSafari LibTIFF - 'browser' Remote Buffer Overflow (Metasploit) (1) UFO: Alien Invasion IRC Client (OSX) - Buffer Overflow (Metasploit) UFO: Alien Invasion IRC Client (OSX) - Remote Buffer Overflow (Metasploit) Apple iPhone MobileSafari LibTIFF - 'email' Buffer Overflow (Metasploit) (2) Apple iPhone MobileSafari LibTIFF - 'email' Remote Buffer Overflow (Metasploit) (2) HP Network Node Manager (NMM) - CGI 'webappmon.exe OvJavaLocale' Buffer Overflow (Metasploit) HP Network Node Manager (NMM) - CGI 'webappmon.exe execvp' Buffer Overflow (Metasploit) HP Network Node Manager (NMM) - CGI 'webappmon.exe OvJavaLocale' Remote Buffer Overflow (Metasploit) HP Network Node Manager (NMM) - CGI 'webappmon.exe execvp' Remote Buffer Overflow (Metasploit) HP OpenView Network Node Manager (OV NNM) - 'nnmRptConfig.exe schdParams' Buffer Overflow (Metasploit) HP OpenView Network Node Manager (OV NNM) - 'snmpviewer.exe' Buffer Overflow (Metasploit) HP OpenView Network Node Manager (OV NNM) - 'nnmRptConfig.exe schdParams' Remote Buffer Overflow (Metasploit) HP OpenView Network Node Manager (OV NNM) - 'snmpviewer.exe' Remote Buffer Overflow (Metasploit) HP OpenView Network Node Manager (OV NNM) - 'ovwebsnmpsrv.exe main' Buffer Overflow (Metasploit) HP OpenView Network Node Manager (OV NNM) - 'ovwebsnmpsrv.exe main' Remote Buffer Overflow (Metasploit) HP OpenView Network Node Manager (OV NNM) - 'ovwebsnmpsrv.exe ovutil' Buffer Overflow (Metasploit) HP OpenView Network Node Manager (OV NNM) - 'ovwebsnmpsrv.exe ovutil' Remote Buffer Overflow (Metasploit) SPlayer 3.7 (build 2055) - Buffer Overflow SPlayer 3.7 (build 2055) - Remote Buffer Overflow Citrix Provisioning Services 5.6 - 'streamprocess.exe' Buffer Overflow (Metasploit) Citrix Provisioning Services 5.6 - 'streamprocess.exe' Remote Buffer Overflow (Metasploit) Sielco Sistemi Winlog - Buffer Overflow (Metasploit) Sielco Sistemi Winlog - Remote Buffer Overflow (Metasploit) HP OmniInet.exe Opcode 20 - Buffer Overflow (Metasploit) HP OmniInet.exe Opcode 20 - Remote Buffer Overflow (Metasploit) Freefloat FTP Server - Buffer Overflow (Metasploit) Freefloat FTP Server - Remote Buffer Overflow (Metasploit) Blue Coat Authentication and Authorization Agent (BCAAA) 5 - Buffer Overflow (Metasploit) Blue Coat Authentication and Authorization Agent (BCAAA) 5 - Remote Buffer Overflow (Metasploit) Freefloat FTP Server - 'LIST' Buffer Overflow Freefloat FTP Server - 'LIST' Remote Buffer Overflow Freefloat FTP Server 1.0 - 'MKD' Buffer Overflow Freefloat FTP Server - 'MKD' Buffer Overflow (Metasploit) Freefloat FTP Server 1.0 - 'MKD' Remote Buffer Overflow Freefloat FTP Server - 'MKD' Remote Buffer Overflow (Metasploit) Freefloat FTP Server 1.0 - 'REST' / 'PASV' Buffer Overflow Freefloat FTP Server - 'REST' Buffer Overflow (Metasploit) Freefloat FTP Server 1.0 - 'ACCL' Buffer Overflow Freefloat FTP Server 1.0 - 'REST' / 'PASV' Remote Buffer Overflow Freefloat FTP Server - 'REST' Remote Buffer Overflow (Metasploit) Freefloat FTP Server 1.0 - 'ACCL' Remote Buffer Overflow KnFTP Server - Buffer Overflow KnFTP Server - Remote Buffer Overflow Freefloat FTP Server - Buffer Overflow (DEP Bypass) Freefloat FTP Server - Remote Buffer Overflow (DEP Bypass) HP Power Manager - 'formExportDataLogs' Buffer Overflow (Metasploit) HP Power Manager - 'formExportDataLogs' Remote Buffer Overflow (Metasploit) KnFTP 1.0 - Buffer Overflow (DEP Bypass) (Metasploit) KnFTP 1.0 - Remote Buffer Overflow (DEP Bypass) (Metasploit) RhinoSoft Serv-U FTPd Server < 4.2 - Buffer Overflow (Metasploit) RhinoSoft Serv-U FTPd Server < 4.2 - Remote Buffer Overflow (Metasploit) TFTP Server 1.4 - ST 'RRQ' Buffer Overflow TFTP Server 1.4 - ST 'RRQ' Remote Buffer Overflow Linux BSD-derived Telnet Service Encryption Key ID - Buffer Overflow (Metasploit) Linux BSD-derived Telnet Service Encryption Key ID - Remote Buffer Overflow (Metasploit) Savant Web Server 3.1 - Buffer Overflow (Egghunter) NetOp Remote Control Client 9.5 - Buffer Overflow (Metasploit) Savant Web Server 3.1 - Remote Buffer Overflow (Egghunter) NetOp Remote Control Client 9.5 - Remote Buffer Overflow (Metasploit) Sysax 5.53 - SSH 'Username' Buffer Overflow Unauthenticated Remote Code Execution (Egghunter) Sysax 5.53 - SSH 'Username' Remote Buffer Overflow Unauthenticated Remote Code Execution (Egghunter) FlashFXP 4.1.8.1701 - Buffer Overflow Sysax 5.53 - SSH 'Username' Buffer Overflow (Metasploit) FlashFXP 4.1.8.1701 - Remote Buffer Overflow Sysax 5.53 - SSH 'Username' Remote Buffer Overflow (Metasploit) Netmechanica NetDecision HTTP Server 4.5.1 - Buffer Overflow (Metasploit) Netmechanica NetDecision HTTP Server 4.5.1 - Remote Buffer Overflow (Metasploit) UltraVNC 1.0.2 Client - 'vncviewer.exe' Buffer Overflow (Metasploit) UltraVNC 1.0.2 Client - 'vncviewer.exe' Remote Buffer Overflow (Metasploit) RabidHamster R4 - Log Entry 'sprintf()' Buffer Overflow (Metasploit) RabidHamster R4 - Log Entry 'sprintf()' Remote Buffer Overflow (Metasploit) Sielco Sistemi Winlog 2.07.14 - Buffer Overflow (Metasploit) Sielco Sistemi Winlog 2.07.14 - Remote Buffer Overflow (Metasploit) Sielco Sistemi Winlog 2.07.16 - Buffer Overflow Sielco Sistemi Winlog 2.07.16 - Remote Buffer Overflow BSD 4.2 - 'fingerd' Buffer Overflow BSD 4.2 - 'fingerd' Remote Buffer Overflow Stalker Internet Mail Server 1.6 - Buffer Overflow Stalker Internet Mail Server 1.6 - Remote Buffer Overflow Qualcomm Eudora Internet Mail Server 1.2 - Buffer Overflow Qualcomm Eudora Internet Mail Server 1.2 - Remote Buffer Overflow Lynx 2.8 - Buffer Overflow Lynx 2.8 - Remote Buffer Overflow WU-FTPD 2.4.2 / SCO Open Server 5.0.5 / ProFTPd 1.2 pre1 - 'realpath' Buffer Overflow (1) WU-FTPD 2.4.2 / SCO Open Server 5.0.5 / ProFTPd 1.2 pre1 - 'realpath' Buffer Overflow (2) WU-FTPD 2.4.2 / SCO Open Server 5.0.5 / ProFTPd 1.2 pre1 - 'realpath' Remote Buffer Overflow (1) WU-FTPD 2.4.2 / SCO Open Server 5.0.5 / ProFTPd 1.2 pre1 - 'realpath' Remote Buffer Overflow (2) Muhammad A. Muquit wwwcount 2.3 - 'Count.cgi' Buffer Overflow Netscape Messaging Server 3.55 & University of Washington imapd 10.234 - Buffer Overflow Muhammad A. Muquit wwwcount 2.3 - 'Count.cgi' Remote Buffer Overflow Netscape Messaging Server 3.55 & University of Washington imapd 10.234 - Remote Buffer Overflow ISC BIND (Linux/BSD) - Buffer Overflow (1) ISC BIND (Multiple OSes) - Buffer Overflow (2) ISC BIND (Linux/BSD) - Remote Buffer Overflow (1) ISC BIND (Multiple OSes) - Remote Buffer Overflow (2) Cat Soft Serv-U FTP Server 2.5 - Buffer Overflow Cat Soft Serv-U FTP Server 2.5 - Remote Buffer Overflow SmartDesk WebSuite 2.1 - Buffer Overflow SmartDesk WebSuite 2.1 - Remote Buffer Overflow University of Washington pop2d 4.4 - Buffer Overflow University of Washington pop2d 4.4 - Remote Buffer Overflow Microsoft IIS 4.0 - Buffer Overflow (1) Microsoft IIS 4.0 - Buffer Overflow (2) Microsoft IIS 4.0 - Buffer Overflow (3) Microsoft IIS 4.0 - Buffer Overflow (4) Microsoft IIS 4.0 - Remote Buffer Overflow (1) Microsoft IIS 4.0 - Remote Buffer Overflow (2) Microsoft IIS 4.0 - Remote Buffer Overflow (3) Microsoft IIS 4.0 - Remote Buffer Overflow (4) Symantec pcAnywhere 12.5.0 - 'Login' / 'Password' Buffer Overflow Symantec pcAnywhere 12.5.0 - 'Login' / 'Password' Remote Buffer Overflow ToxSoft NextFTP 1.82 - Buffer Overflow Fujitsu Chocoa 1.0 beta7R - 'Topic' Buffer Overflow CREAR ALMail32 1.10 - Buffer Overflow ToxSoft NextFTP 1.82 - Remote Buffer Overflow Fujitsu Chocoa 1.0 beta7R - 'Topic' Remote Buffer Overflow CREAR ALMail32 1.10 - Remote Buffer Overflow Hybrid Ircd 5.0.3 p7 - Buffer Overflow Hybrid Ircd 5.0.3 p7 - Remote Buffer Overflow BSD/OS 3.1/4.0.1 / FreeBSD 3.0/3.1/3.2 / RedHat Linux 6.0 - 'amd' Buffer Overflow (1) BSD/OS 3.1/4.0.1 / FreeBSD 3.0/3.1/3.2 / RedHat Linux 6.0 - 'amd' Buffer Overflow (2) BSD/OS 3.1/4.0.1 / FreeBSD 3.0/3.1/3.2 / RedHat Linux 6.0 - 'amd' Remote Buffer Overflow (1) BSD/OS 3.1/4.0.1 / FreeBSD 3.0/3.1/3.2 / RedHat Linux 6.0 - 'amd' Remote Buffer Overflow (2) Washington University WU-FTPD 2.5.0 - 'message' Buffer Overflow Washington University WU-FTPD 2.5.0 - 'message' Remote Buffer Overflow Omnicron OmniHTTPd 1.1/2.4 Pro - Buffer Overflow Omnicron OmniHTTPd 1.1/2.4 Pro - Remote Buffer Overflow BTD Studio Zom-Mail 1.0.9 - Buffer Overflow BTD Studio Zom-Mail 1.0.9 - Remote Buffer Overflow IBM HomePagePrint 1.0 7 - Buffer Overflow IBM HomePagePrint 1.0 7 - Remote Buffer Overflow Trend Micro Interscan VirusWall 3.2.3/3.3 - 'HELO' Buffer Overflow (1) Poison Ivy 2.3.2 (C2 Server) - Buffer Overflow (Metasploit) Trend Micro Interscan VirusWall 3.2.3/3.3 - 'HELO' Buffer Overflow (2) Trend Micro Interscan VirusWall 3.2.3/3.3 - 'HELO' Remote Buffer Overflow (1) Poison Ivy 2.3.2 (C2 Server) - Remote Buffer Overflow (Metasploit) Trend Micro Interscan VirusWall 3.2.3/3.3 - 'HELO' Remote Buffer Overflow (2) Admiral Systems EmailClub 1.0.0.5 - Buffer Overflow Antelope Software W4-Server 2.6 a/Win32 - 'Cgitest.exe' Buffer Overflow Admiral Systems EmailClub 1.0.0.5 - Remote Buffer Overflow Antelope Software W4-Server 2.6 a/Win32 - 'Cgitest.exe' Remote Buffer Overflow ETL Delegate 5.9.x/6.0.x - Buffer Overflow ETL Delegate 5.9.x/6.0.x - Remote Buffer Overflow Solaris 2.3/2.4/2.5/2.5.1/2.6/7.0 snoop - 'print_domain_name' Buffer Overflow WolfPack Development XSHIPWARS 1.0/1.2.4 - Buffer Overflow Solaris 2.5/2.5.1/2.6/7.0 - 'sadmind' Buffer Overflow (1) Solaris 2.5/2.5.1/2.6/7.0 - 'sadmind' Buffer Overflow (2) Solaris 2.5/2.5.1/2.6/7.0 - 'sadmind' Buffer Overflow (3) Solaris 2.5/2.5.1/2.6/7.0 - 'sadmind' Buffer Overflow (4) Solaris 2.3/2.4/2.5/2.5.1/2.6/7.0 snoop - 'print_domain_name' Remote Buffer Overflow WolfPack Development XSHIPWARS 1.0/1.2.4 - Remote Buffer Overflow Solaris 2.5/2.5.1/2.6/7.0 - 'sadmind' Remote Buffer Overflow (1) Solaris 2.5/2.5.1/2.6/7.0 - 'sadmind' Remote Buffer Overflow (2) Solaris 2.5/2.5.1/2.6/7.0 - 'sadmind' Remote Buffer Overflow (3) Solaris 2.5/2.5.1/2.6/7.0 - 'sadmind' Remote Buffer Overflow (4) ZBServer Pro 1.5 - Buffer Overflow (1) ZBServer Pro 1.5 - Buffer Overflow (2) ZBServer Pro 1.5 - Remote Buffer Overflow (1) ZBServer Pro 1.5 - Remote Buffer Overflow (2) Hughes Technologies Mini SQL (mSQL) 2.0.11 - 'w3-msql' Buffer Overflow Hughes Technologies Mini SQL (mSQL) 2.0.11 - 'w3-msql' Remote Buffer Overflow Qualcomm qpopper 3.0 - 'LIST' Buffer Overflow Qualcomm qpopper 3.0 - 'LIST' Remote Buffer Overflow Michael Sandrof IrcII 4.4-7 - Buffer Overflow Michael Sandrof IrcII 4.4-7 - Remote Buffer Overflow Microsoft FrontPage 98 Server Extensions for IIS / Microsoft InterDev 1.0 - Buffer Overflow UoW IMAPd Server 10.234/12.264 - Buffer Overflow Microsoft FrontPage 98 Server Extensions for IIS / Microsoft InterDev 1.0 - Remote Buffer Overflow UoW IMAPd Server 10.234/12.264 - Remote Buffer Overflow ALLMediaServer 0.8 - Buffer Overflow (Metasploit) ALLMediaServer 0.8 - Remote Buffer Overflow (Metasploit) LCDProc 0.4 - Buffer Overflow LCDProc 0.4 - Remote Buffer Overflow NetWin DNews 5.3 Server - Buffer Overflow NetWin DNews 5.3 Server - Remote Buffer Overflow Cygnus Network Security 4.0/KerbNet 5.0 / MIT Kerberos 4/5 / RedHat 6.2 - Compatibility 'krb_rd_req()' Buffer Overflow (1) Cygnus Network Security 4.0/KerbNet 5.0 / MIT Kerberos 4/5 / RedHat 6.2 - Compatibility 'krb_rd_req()' Buffer Overflow (3) Cygnus Network Security 4.0/KerbNet 5.0 / MIT Kerberos 4/5 / RedHat 6.2 - Compatibility 'krb_rd_req()' Remote Buffer Overflow (1) Cygnus Network Security 4.0/KerbNet 5.0 / MIT Kerberos 4/5 / RedHat 6.2 - Compatibility 'krb_rd_req()' Remote Buffer Overflow (3) Novell ZENworks Configuration Management Preboot Service 0x06 - Buffer Overflow (Metasploit) Novell ZENworks Configuration Management Preboot Service 0x21 - Buffer Overflow (Metasploit) Novell ZENworks Configuration Management Preboot Service 0x06 - Remote Buffer Overflow (Metasploit) Novell ZENworks Configuration Management Preboot Service 0x21 - Remote Buffer Overflow (Metasploit) Lotus Domino Enterprise Server 5.0.1/5.0.2/5.0.3 / Mail Server 5.0.1/5.0.2/5.0.3 - Buffer Overflow Lotus Domino Enterprise Server 5.0.1/5.0.2/5.0.3 / Mail Server 5.0.1/5.0.2/5.0.3 - Remote Buffer Overflow Concatus IMate Web Mail Server 2.5 - Buffer Overflow Concatus IMate Web Mail Server 2.5 - Remote Buffer Overflow SapporoWorks WinProxy 2.0/2.0.1 - Buffer Overflow SapporoWorks WinProxy 2.0/2.0.1 - Remote Buffer Overflow DALnet Bahamut IRCd 4.6.5 - 'SUMMON' Buffer Overflow DALnet Bahamut IRCd 4.6.5 - 'SUMMON' Remote Buffer Overflow Michael Lamont Savant Web Server 2.1/3.0 - Buffer Overflow Michael Lamont Savant Web Server 2.1/3.0 - Remote Buffer Overflow Infopulse GateKeeper 3.5 - Buffer Overflow Infopulse GateKeeper 3.5 - Remote Buffer Overflow OReilly Software WebSite Professional 2.3.18/2.4/2.4.9 - 'webfind.exe' Buffer Overflow OReilly Software WebSite Professional 2.3.18/2.4/2.4.9 - 'webfind.exe' Remote Buffer Overflow NAI Net Tools PKI Server 1.0 - 'strong.exe' Buffer Overflow NAI Net Tools PKI Server 1.0 - 'strong.exe' Remote Buffer Overflow MediaHouse Software Statistics Server LiveStats 5.2 - Buffer Overflow MediaHouse Software Statistics Server LiveStats 5.2 - Remote Buffer Overflow Luca Deri ntop 1.2 a7-9/1.3.1 - Buffer Overflow Luca Deri ntop 1.2 a7-9/1.3.1 - Remote Buffer Overflow RobTex Viking Server 1.0.6 Build 355 - Buffer Overflow RobTex Viking Server 1.0.6 Build 355 - Remote Buffer Overflow eEye Digital Security IRIS 1.0.1 / SpyNet CaptureNet 3.0.12 - Buffer Overflow eEye Digital Security IRIS 1.0.1 / SpyNet CaptureNet 3.0.12 - Remote Buffer Overflow Mobius DocumentDirect for the Internet 1.2 - Buffer Overflow Mobius DocumentDirect for the Internet 1.2 - Remote Buffer Overflow Cisco Secure ACS for Windows NT 2.42 - Buffer Overflow Cisco Secure ACS for Windows NT 2.42 - Remote Buffer Overflow UoW Pine 4.0.4/4.10/4.21 - 'From:' Buffer Overflow UoW Pine 4.0.4/4.10/4.21 - 'From:' Remote Buffer Overflow Nevis Systems All-Mail 1.1 - Buffer Overflow Nevis Systems All-Mail 1.1 - Remote Buffer Overflow Samba 1.9.19 - 'Password' Buffer Overflow Samba 1.9.19 - 'Password' Remote Buffer Overflow Joe Kloss RobinHood 1.1 - Buffer Overflow Joe Kloss RobinHood 1.1 - Remote Buffer Overflow Microsoft Windows Media Player 7.0 - '.asx' Buffer Overflow Microsoft Windows Media Player 7.0 - '.asx' Remote Buffer Overflow Oops Proxy Server 1.4.22 - Buffer Overflow (1) Oops Proxy Server 1.4.22 - Buffer Overflow (2) Oops Proxy Server 1.4.22 - Remote Buffer Overflow (1) Oops Proxy Server 1.4.22 - Remote Buffer Overflow (2) AOL Instant Messenger 3.5.1856/4.0/4.1.2010/4.2.1193 - 'aim://' Buffer Overflow AOL Instant Messenger 3.5.1856/4.0/4.1.2010/4.2.1193 - 'aim://' Remote Buffer Overflow SWSoft ASPSeek 1.0 - 's.cgi' Buffer Overflow SWSoft ASPSeek 1.0 - 's.cgi' Remote Buffer Overflow FreeBSD 2.2-4.2 / NetBSD 1.2-4.5 / OpenBSD 2.x - FTPd 'glob()' Buffer Overflow FreeBSD 4.2-stable - FTPd 'glob()' Buffer Overflow OpenBSD 2.x < 2.8 FTPd - 'glob()' Buffer Overflow FreeBSD 2.2-4.2 / NetBSD 1.2-4.5 / OpenBSD 2.x - FTPd 'glob()' Remote Buffer Overflow FreeBSD 4.2-stable - FTPd 'glob()' Remote Buffer Overflow OpenBSD 2.x < 2.8 FTPd - 'glob()' Remote Buffer Overflow Netscape SmartDownload 1.3 - Buffer Overflow Netscape SmartDownload 1.3 - Remote Buffer Overflow WFTPD 3.0 - 'RETR' / 'CWD' Buffer Overflow WFTPD 3.0 - 'RETR' / 'CWD' Remote Buffer Overflow Xinetd 2.1.8 - Buffer Overflow Xinetd 2.1.8 - Remote Buffer Overflow Microsoft Visual Studio RAD Support - Buffer Overflow Microsoft Visual Studio RAD Support - Buffer Overflow (MS03-051) (Metasploit) Microsoft Visual Studio RAD Support - Remote Buffer Overflow Microsoft Visual Studio RAD Support - Remote Buffer Overflow (MS03-051) (Metasploit) Solaris 2.x/7.0/8 / IRIX 6.5.x / OpenBSD 2.x / NetBSD 1.x / Debian 3 / HP-UX 10 - 'TelnetD' Buffer Overflow Solaris 2.x/7.0/8 / IRIX 6.5.x / OpenBSD 2.x / NetBSD 1.x / Debian 3 / HP-UX 10 - 'TelnetD' Remote Buffer Overflow xloadimage 4.1 - Buffer Overflow xloadimage 4.1 - Remote Buffer Overflow NCSA HTTPd 1.x - Buffer Overflow (1) NCSA HTTPd 1.x - Buffer Overflow (2) NCSA HTTPd 1.x - Remote Buffer Overflow (1) NCSA HTTPd 1.x - Remote Buffer Overflow (2) AOLServer 3 - 'Authentication String' Buffer Overflow (1) AOLServer 3 - 'Authentication String' Buffer Overflow (2) AIX 4.1/4.2 - 'pdnsd' Buffer Overflow AOLServer 3 - 'Authentication String' Remote Buffer Overflow (1) AOLServer 3 - 'Authentication String' Remote Buffer Overflow (2) AIX 4.1/4.2 - 'pdnsd' Remote Buffer Overflow EFTP 2.0.7 337 - Buffer Overflow Code Execution / Denial of Service EFTP 2.0.7 337 - Remote Buffer Overflow Code Execution / Denial of Service Oracle9iAS Web Cache 2.0 - Buffer Overflow Oracle9iAS Web Cache 2.0 - Remote Buffer Overflow Ipswitch WS_FTP Server 1.0.x/2.0.x - 'STAT' Buffer Overflow Ipswitch WS_FTP Server 1.0.x/2.0.x - 'STAT' Remote Buffer Overflow ActivePerl 5.6.1 - 'perlIIS.dll' Buffer Overflow (1) ActivePerl 5.6.1 - 'perlIIS.dll' Buffer Overflow (2) ActivePerl 5.6.1 - 'perlIIS.dll' Buffer Overflow (3) ActivePerl 5.6.1 - 'perlIIS.dll' Remote Buffer Overflow (1) ActivePerl 5.6.1 - 'perlIIS.dll' Remote Buffer Overflow (2) ActivePerl 5.6.1 - 'perlIIS.dll' Remote Buffer Overflow (3) Solaris 2.x/7.0/8 - Derived 'login' Buffer Overflow Solaris 2.x/7.0/8 - Derived 'login' Remote Buffer Overflow BrowseFTP Client 1.62 - Buffer Overflow BrowseFTP Client 1.62 - Remote Buffer Overflow Boozt 0.9.8 - Buffer Overflow Boozt 0.9.8 - Remote Buffer Overflow John Roy Pi3Web 2.0 For Windows - Buffer Overflow John Roy Pi3Web 2.0 For Windows - Remote Buffer Overflow Phusion WebServer 1.0 - 'URL' Buffer Overflow Phusion WebServer 1.0 - 'URL' Remote Buffer Overflow Essentia Web Server 2.1 - 'URL' Buffer Overflow Essentia Web Server 2.1 - 'URL' Remote Buffer Overflow Youngzsoft CMailServer 3.30/4.0 - Buffer Overflow (1) Youngzsoft CMailServer 3.30/4.0 - Buffer Overflow (2) Matu FTP Server 1.13 - Buffer Overflow Youngzsoft CMailServer 3.30/4.0 - Remote Buffer Overflow (1) Youngzsoft CMailServer 3.30/4.0 - Remote Buffer Overflow (2) Matu FTP Server 1.13 - Remote Buffer Overflow Microsoft Internet Explorer 5/6 / Microsoft ISA Server 2000 / Microsoft Proxy Server 2.0 Gopher Client - Buffer Overflow Microsoft Internet Explorer 5/6 / Microsoft ISA Server 2000 / Microsoft Proxy Server 2.0 Gopher Client - Remote Buffer Overflow ATPhttpd 0.4b - Buffer Overflow ATPhttpd 0.4b - Remote Buffer Overflow Trillian 0.x IRC Module - Buffer Overflow Trillian 0.x IRC Module - Remote Buffer Overflow Avaya WinPMD UniteHostRouter - Buffer Overflow (Metasploit) Avaya WinPMD UniteHostRouter - Remote Buffer Overflow (Metasploit) ghttpd 1.4.x - 'Log()' Buffer Overflow ghttpd 1.4.x - 'Log()' Remote Buffer Overflow TFTPD32 2.50 - 'Filename' Buffer Overflow TFTPD32 2.50 - 'Filename' Remote Buffer Overflow AIX 3.x/4.x / Windows 95/98/2000/NT 4.0 / SunOS 5 - 'gethostbyname()' Buffer Overflow AIX 3.x/4.x / Windows 95/98/2000/NT 4.0 / SunOS 5 - 'gethostbyname()' Remote Buffer Overflow PGP4Pine 1.75.6/1.76 - 'Message Line' Buffer Overflow PGP4Pine 1.75.6/1.76 - 'Message Line' Remote Buffer Overflow Freefloat FTP Server - 'PUT' Buffer Overflow Freefloat FTP Server - 'PUT' Remote Buffer Overflow Microsoft IIS 5.0 (Windows XP/2000/NT 4.0) - WebDAV 'ntdll.dll' Buffer Overflow (1) Microsoft IIS 5.0 (Windows XP/2000/NT 4.0) - WebDAV 'ntdll.dll' Buffer Overflow (2) Microsoft IIS 5.0 (Windows XP/2000/NT 4.0) - WebDAV 'ntdll.dll' Buffer Overflow (3) Microsoft IIS 5.0 (Windows XP/2000/NT 4.0) - WebDAV 'ntdll.dll' Buffer Overflow (4) Microsoft IIS 5.0 (Windows XP/2000/NT 4.0) - WebDAV 'ntdll.dll' Remote Buffer Overflow (1) Microsoft IIS 5.0 (Windows XP/2000/NT 4.0) - WebDAV 'ntdll.dll' Remote Buffer Overflow (2) Microsoft IIS 5.0 (Windows XP/2000/NT 4.0) - WebDAV 'ntdll.dll' Remote Buffer Overflow (3) Microsoft IIS 5.0 (Windows XP/2000/NT 4.0) - WebDAV 'ntdll.dll' Remote Buffer Overflow (4) Aladdin Knowledge System Ltd - 'ChooseFilePath' Buffer Overflow (Metasploit) Aladdin Knowledge System Ltd - 'ChooseFilePath' Remote Buffer Overflow (Metasploit) HP Intelligent Management Center UAM - Buffer Overflow (Metasploit) HP Intelligent Management Center UAM - Remote Buffer Overflow (Metasploit) Microsoft Internet Explorer 5 - Remote 'URLMON.dll' Buffer Overflow Microsoft Internet Explorer 5 - Remote 'URLMON.dll' Remote Buffer Overflow Yahoo! Voice Chat ActiveX Control 1.0.0.43 - Buffer Overflow Yahoo! Voice Chat ActiveX Control 1.0.0.43 - Remote Buffer Overflow MNOGoSearch 3.1.20 - 'search.cgi?UL' Buffer Overflow (1) MNOGoSearch 3.1.20 - 'search.cgi?UL' Buffer Overflow (2) MNOGoSearch 3.1.20 - 'search.cgi?UL' Remote Buffer Overflow (1) MNOGoSearch 3.1.20 - 'search.cgi?UL' Remote Buffer Overflow (2) Alt-N WebAdmin 2.0.x - 'USER' Buffer Overflow (1) Alt-N WebAdmin 2.0.x - 'USER' Buffer Overflow (2) Alt-N WebAdmin 2.0.x - 'USER' Remote Buffer Overflow (1) Alt-N WebAdmin 2.0.x - 'USER' Remote Buffer Overflow (2) Freefloat FTP Server - 'USER' Buffer Overflow Freefloat FTP Server - 'USER' Remote Buffer Overflow PLD Software Ebola 0.1.4 - Buffer Overflow PLD Software Ebola 0.1.4 - Remote Buffer Overflow Webcam Corp Webcam Watchdog 1.0/1.1/3.63 Web Server - Buffer Overflow Webcam Corp Webcam Watchdog 1.0/1.1/3.63 Web Server - Remote Buffer Overflow Metamail 2.7 - Multiple Buffer Overflow/Format String Handling Vulnerabilities Metamail 2.7 - Multiple Buffer Overflow / Format String Handling Vulnerabilities Enterasys NetSight - 'nssyslogd.exe' Buffer Overflow (Metasploit) Enterasys NetSight - 'nssyslogd.exe' Remote Buffer Overflow (Metasploit) LHA 1.x - Buffer Overflow / Directory Traversal LHA 1.x - Remote Buffer Overflow / Directory Traversal Novell eDirectory 8 - Buffer Overflow (Metasploit) Novell eDirectory 8 - Remote Buffer Overflow (Metasploit) Citadel/UX 5.9/6.x - 'Username' Buffer Overflow (1) Citadel/UX 5.9/6.x - 'Username' Buffer Overflow (2) Citadel/UX 5.9/6.x - 'Username' Remote Buffer Overflow (1) Citadel/UX 5.9/6.x - 'Username' Remote Buffer Overflow (2) Freefloat FTP Server 1.0 - 'Raw' Buffer Overflow Freefloat FTP Server 1.0 - 'Raw' Remote Buffer Overflow Raven Software Soldier Of Fortune 2 - Buffer Overflow Raven Software Soldier Of Fortune 2 - Remote Buffer Overflow Cool PDF Image Stream - Buffer Overflow (Metasploit) Cool PDF Image Stream - Remote Buffer Overflow (Metasploit) KNet Web Server 1.04b - Buffer Overflow (SEH) BigAnt Server 2.97 - DDNF 'Username' Buffer Overflow KNet Web Server 1.04b - Remote Buffer Overflow (SEH) BigAnt Server 2.97 - DDNF 'Username' Remote Buffer Overflow MinaliC WebServer 2.0.0 - Buffer Overflow MinaliC WebServer 2.0.0 - Remote Buffer Overflow 2Fax 3.0 Tab Expansion - Buffer Overflow 2Fax 3.0 Tab Expansion - Remote Buffer Overflow Light HTTPD 0.1 (Windows) - Buffer Overflow Light HTTPD 0.1 (Windows) - Remote Buffer Overflow PGN2WEB 0.3 - Buffer Overflow PGN2WEB 0.3 - Remote Buffer Overflow Mesh Viewer 0.2.2 - Buffer Overflow Mesh Viewer 0.2.2 - Remote Buffer Overflow CSV2XML 0.5.1 - Buffer Overflow CSV2XML 0.5.1 - Remote Buffer Overflow PCAL 4.x - Calendar File 'getline' Buffer Overflow PCAL 4.x - Calendar File 'get_holiday' Buffer Overflow PCAL 4.x - Calendar File 'getline' Remote Buffer Overflow PCAL 4.x - Calendar File 'get_holiday' Remote Buffer Overflow Microsoft MSN Messenger 6.2.0137 - '.png' Buffer Overflow Microsoft MSN Messenger 6.2.0137 - '.png' Remote Buffer Overflow Convert-UUlib 1.04/1.05 Perl Module - Buffer Overflow Convert-UUlib 1.04/1.05 Perl Module - Remote Buffer Overflow Clever's Games Terminator 3: War of the Machines 1.16 Server - Buffer Overflow Clever's Games Terminator 3: War of the Machines 1.16 Server - Remote Buffer Overflow PCMan FTP Server 2.0.7 - Buffer Overflow PCMan FTP Server 2.0.7 - Remote Buffer Overflow PCMan FTP Server 2.07 - 'PASS' Buffer Overflow PCMan FTP Server 2.07 - 'PASS' Remote Buffer Overflow MinaliC WebServer 2.0.0 - Buffer Overflow (Egghunter) MinaliC WebServer 2.0.0 - Remote Buffer Overflow (Egghunter) Intrasrv 1.0 - Buffer Overflow (Metasploit) Intrasrv 1.0 - Remote Buffer Overflow (Metasploit) PCMan FTP Server 2.07 - 'STOR' Buffer Overflow PCMan FTP Server 2.07 - 'STOR' Remote Buffer Overflow freeFTPd 1.0.10 - 'PASS' Buffer Overflow (SEH) freeFTPd 1.0.10 - 'PASS' Remote Buffer Overflow (SEH) freeFTPd 1.0.10 - 'PASS' Buffer Overflow (SEH) (Metasploit) freeFTPd 1.0.10 - 'PASS' Remote Buffer Overflow (SEH) (Metasploit) freeFTPd 1.0.10 - 'PASS' Buffer Overflow (Metasploit) freeFTPd 1.0.10 - 'PASS' Remote Buffer Overflow (Metasploit) NETGEAR MA521 Wireless Driver 5.148.724 - 'Beacon Probe' Buffer Overflow NETGEAR MA521 Wireless Driver 5.148.724 - 'Beacon Probe' Remote Buffer Overflow Supermicro Onboard IPMI - 'close_window.cgi' Buffer Overflow (Metasploit) Supermicro Onboard IPMI - 'close_window.cgi' Remote Buffer Overflow (Metasploit) PHP 5.1.6 - 'Imap_Mail_Compose()' Buffer Overflow PHP 5.1.6 - 'Imap_Mail_Compose()' Remote Buffer Overflow LANDesk Management Suite 8.7 Alert Service - 'AOLSRVR.exe' Buffer Overflow LANDesk Management Suite 8.7 Alert Service - 'AOLSRVR.exe' Remote Buffer Overflow BlueSkyChat ActiveX Control 8.1.2 - Buffer Overflow BlueSkyChat ActiveX Control 8.1.2 - Remote Buffer Overflow OpenBase 10.0.x - Buffer Overflow / Remote Command Execution OpenBase 10.0.x - Remote Buffer Overflow / Remote Command Execution GlobalLink 'GLChat.ocx' 2.5.1 - ActiveX Control 'ChatRoom()' Buffer Overflow GlobalLink 'GLChat.ocx' 2.5.1 - ActiveX Control 'ChatRoom()' Remote Buffer Overflow LamaHub 0.0.6.2 - Buffer Overflow LamaHub 0.0.6.2 - Remote Buffer Overflow WinComLPD Total 3.0.2.623 - Buffer Overflow / Authentication Bypass WinComLPD Total 3.0.2.623 - Remote Buffer Overflow / Authentication Bypass PCMan FTP Server 2.07 - 'ABOR' Buffer Overflow PCMan FTP Server 2.07 - 'CWD' Buffer Overflow PCMan FTP Server 2.07 - 'ABOR' Remote Buffer Overflow PCMan FTP Server 2.07 - 'CWD' Remote Buffer Overflow haneWIN DNS Server 1.5.3 - Buffer Overflow (SEH) haneWIN DNS Server 1.5.3 - Remote Buffer Overflow (SEH) Ghostscript 8.0.1/8.15 - 'zseticcspace()' Buffer Overflow Ghostscript 8.0.1/8.15 - 'zseticcspace()' Remote Buffer Overflow PECL 3.0.x - Alternative PHP Cache Extension 'apc_search_paths()' Buffer Overflow PECL 3.0.x - Alternative PHP Cache Extension 'apc_search_paths()' Remote Buffer Overflow PCMan FTP Server 2.07 - Buffer Overflow PCMan FTP Server 2.07 - Remote Buffer Overflow Yokogawa CENTUM CS 3000 - 'BKHOdeq.exe' Buffer Overflow (Metasploit) Yokogawa CENTUM CS 3000 - 'BKBCopyD.exe' Buffer Overflow (Metasploit) Yokogawa CENTUM CS 3000 - 'BKHOdeq.exe' Remote Buffer Overflow (Metasploit) Yokogawa CENTUM CS 3000 - 'BKBCopyD.exe' Remote Buffer Overflow (Metasploit) Novell ZENworks Desktop Management 6.5 - ActiveX Control 'CanUninstall()' Buffer Overflow Novell ZENworks Desktop Management 6.5 - ActiveX Control 'CanUninstall()' Remote Buffer Overflow Hummingbird HostExplorer 6.2/8.0 - ActiveX Control 'PlainTextPassword()' Buffer Overflow Hummingbird HostExplorer 6.2/8.0 - ActiveX Control 'PlainTextPassword()' Remote Buffer Overflow PyCrypto ARC2 Module - Buffer Overflow PyCrypto ARC2 Module - Remote Buffer Overflow Novell eDirectory 8.8 - '/dhost/modules?I:' Buffer Overflow Novell eDirectory 8.8 - '/dhost/modules?I:' Remote Buffer Overflow SmartVMD 1.3 - ActiveX Control 'VideoMovementDetection.dll' Buffer Overflow SmartVMD 1.3 - ActiveX Control 'VideoMovementDetection.dll' Remote Buffer Overflow Yokogawa CS3000 - 'BKESimmgr.exe' Buffer Overflow (Metasploit) Yokogawa CS3000 - 'BKESimmgr.exe' Remote Buffer Overflow (Metasploit) Xfig and Transfig 3.2.5 - '.fig' Buffer Overflow Xfig and Transfig 3.2.5 - '.fig' Remote Buffer Overflow Ericom AccessNow Server - Buffer Overflow (Metasploit) Ericom AccessNow Server - Remote Buffer Overflow (Metasploit) WinSoftMagic Photo Editor - '.png' Buffer Overflow WinSoftMagic Photo Editor - '.png' Remote Buffer Overflow D-Link Devices - 'Authentication.cgi' Buffer Overflow (Metasploit) D-Link Devices - 'hedwig.cgi' Buffer Overflow in Cookie Header (Metasploit) D-Link Devices - 'Authentication.cgi' Remote Buffer Overflow (Metasploit) D-Link Devices - 'hedwig.cgi' Remote Buffer Overflow in Cookie Header (Metasploit) Serenity Audio Player 3.2.3 - '.m3u' Buffer Overflow Serenity Audio Player 3.2.3 - '.m3u' Buffer Overflow (Metasploit) Serenity Audio Player 3.2.3 - '.m3u' Remote Buffer Overflow Serenity Audio Player 3.2.3 - '.m3u' Remote Buffer Overflow (Metasploit) X-Motor Racing 1.26 - Buffer Overflow / Multiple Denial of Service Vulnerabilities X-Motor Racing 1.26 - Remote Buffer Overflow / Multiple Denial of Service Vulnerabilities Yokogawa CS3000 - 'BKFSim_vhfd.exe' Buffer Overflow (Metasploit) Yokogawa CS3000 - 'BKFSim_vhfd.exe' Remote Buffer Overflow (Metasploit) Enemy Territory: Quake Wars 1.5.12642.33243 - Buffer Overflow Enemy Territory: Quake Wars 1.5.12642.33243 - Remote Buffer Overflow Mozilla Firefox and SeaMonkey Plugin Parameters - Buffer Overflow Mozilla Firefox and SeaMonkey Plugin Parameters - Remote Buffer Overflow Kolibri WebServer 2.0 - Buffer Overflow (EMET 5.0 / EMET 4.1 Partial Bypass) Kolibri WebServer 2.0 - Remote Buffer Overflow (EMET 5.0 / EMET 4.1 Partial Bypass) Belkin N750 - 'jump?login' Buffer Overflow Belkin N750 - 'jump?login' Remote Buffer Overflow ESTsoft ALZip 8.12.0.3 - '.zip' Buffer Overflow ESTsoft ALZip 8.12.0.3 - '.zip' Remote Buffer Overflow Monkey's Audio - '.ape' Buffer Overflow Monkey's Audio - '.ape' Remote Buffer Overflow Microsoft Excel - Buffer Overflow Microsoft Excel - Remote Buffer Overflow OpenMyZip 0.1 - '.zip' Buffer Overflow OpenMyZip 0.1 - '.zip' Remote Buffer Overflow Achat 0.150 beta7 - Buffer Overflow (Metasploit) Achat 0.150 beta7 - Remote Buffer Overflow (Metasploit) PCMan FTP Server 2.0.7 - 'MKD' Buffer Overflow PCMan FTP Server 2.0.7 - 'MKD' Remote Buffer Overflow WebDrive 12.2 (Build #4172) - Buffer Overflow (PoC) WebDrive 12.2 (Build #4172) - Remote Buffer Overflow (PoC) FileZilla Client 2.2.x - Buffer Overflow (SEH) PCMan FTP Server 2.0.7 - 'PUT' Buffer Overflow FileZilla Client 2.2.x - Remote Buffer Overflow (SEH) PCMan FTP Server 2.0.7 - 'PUT' Remote Buffer Overflow PCMan FTP Server 2.0.7 - 'GET' Buffer Overflow PCMan FTP Server 2.0.7 - 'GET' Remote Buffer Overflow PCMan FTP Server 2.0.7 - 'RENAME' Buffer Overflow PCMan FTP Server 2.0.7 - 'RENAME' Remote Buffer Overflow Achat 0.150 beta7 - Buffer Overflow Achat 0.150 beta7 - Remote Buffer Overflow AVM FRITZ!Box < 6.30 - Buffer Overflow AVM FRITZ!Box < 6.30 - Remote Buffer Overflow PCMan FTP Server 2.0.7 - 'RENAME' Buffer Overflow (Metasploit) PCMan FTP Server 2.0.7 - 'RENAME' Remote Buffer Overflow (Metasploit) Poison Ivy 2.1.x (C2 Server) - Buffer Overflow (Metasploit) Poison Ivy 2.1.x (C2 Server) - Remote Buffer Overflow (Metasploit) PCMan FTP Server 2.0.7 - 'ls' Buffer Overflow (Metasploit) PCMan FTP Server 2.0.7 - 'ls' Remote Buffer Overflow (Metasploit) TFTP Server 1.4 - 'WRQ' Buffer Overflow (Egghunter) TFTP Server 1.4 - 'WRQ' Remote Buffer Overflow (Egghunter) Disk Pulse Enterprise 9.0.34 - 'Login' Buffer Overflow VX Search Enterprise 9.0.26 - 'Login' Buffer Overflow Sync Breeze Enterprise 8.9.24 - 'Login' Buffer Overflow Dup Scout Enterprise 9.0.28 - 'Login' Buffer Overflow Disk Sorter Enterprise 9.0.24 - 'Login' Buffer Overflow Disk Savvy Enterprise 9.0.32 - 'Login' Buffer Overflow Disk Pulse Enterprise 9.0.34 - 'Login' Remote Buffer Overflow VX Search Enterprise 9.0.26 - 'Login' Remote Buffer Overflow Sync Breeze Enterprise 8.9.24 - 'Login' Remote Buffer Overflow Dup Scout Enterprise 9.0.28 - 'Login' Remote Buffer Overflow Disk Sorter Enterprise 9.0.24 - 'Login' Remote Buffer Overflow Disk Savvy Enterprise 9.0.32 - 'Login' Remote Buffer Overflow PCMan FTP Server 2.0.7 - 'DELETE' Buffer Overflow Freefloat FTP Server 1.0 - 'ABOR' Buffer Overflow Freefloat FTP Server 1.0 - 'RMD' Buffer Overflow Freefloat FTP Server 1.0 - 'HOST' Buffer Overflow PCMan FTP Server 2.0.7 - 'DELETE' Remote Buffer Overflow Freefloat FTP Server 1.0 - 'ABOR' Remote Buffer Overflow Freefloat FTP Server 1.0 - 'RMD' Remote Buffer Overflow Freefloat FTP Server 1.0 - 'HOST' Remote Buffer Overflow Freefloat FTP Server 1.0 - 'RENAME' Buffer Overflow PCMan FTP Server 2.0.7 - 'UMASK' Buffer Overflow Freefloat FTP Server 1.0 - 'DIR' Buffer Overflow Freefloat FTP Server 1.0 - 'RENAME' Remote Buffer Overflow PCMan FTP Server 2.0.7 - 'UMASK' Remote Buffer Overflow Freefloat FTP Server 1.0 - 'DIR' Remote Buffer Overflow PCMan FTP Server 2.0.7 - 'ACCT' Buffer Overflow Freefloat FTP Server 1.0 - 'SITE ZONE' Buffer Overflow PCMan FTP Server 2.0.7 - 'NLST' Buffer Overflow PCMan FTP Server 2.0.7 - 'SITE CHMOD' Buffer Overflow PCMan FTP Server 2.0.7 - 'PORT' Buffer Overflow PCMan FTP Server 2.0.7 - 'ACCT' Remote Buffer Overflow Freefloat FTP Server 1.0 - 'SITE ZONE' Remote Buffer Overflow PCMan FTP Server 2.0.7 - 'NLST' Remote Buffer Overflow PCMan FTP Server 2.0.7 - 'SITE CHMOD' Remote Buffer Overflow PCMan FTP Server 2.0.7 - 'PORT' Remote Buffer Overflow Disk Pulse Enterprise 9.0.34 - 'Login' Buffer Overflow' (Metasploit) Disk Pulse Enterprise 9.0.34 - 'Login' Remote Buffer Overflow (Metasploit) VX Search Enterprise 9.1.12 - 'Login' Buffer Overflow Sync Breeze Enterprise 9.1.16 - 'Login' Buffer Overflow Disk Sorter Enterprise 9.1.12 - 'Login' Buffer Overflow Dup Scout Enterprise 9.1.14 - 'Login' Buffer Overflow Disk Savvy Enterprise 9.1.14 - 'Login' Buffer Overflow Disk Pulse Enterprise 9.1.16 - 'Login' Buffer Overflow Disk Savvy Enterprise 9.1.14 - 'GET' Buffer Overflow VX Search Enterprise 9.1.12 - 'Login' Remote Buffer Overflow Sync Breeze Enterprise 9.1.16 - 'Login' Remote Buffer Overflow Disk Sorter Enterprise 9.1.12 - 'Login' Remote Buffer Overflow Dup Scout Enterprise 9.1.14 - 'Login' Remote Buffer Overflow Disk Savvy Enterprise 9.1.14 - 'Login' Remote Buffer Overflow Disk Pulse Enterprise 9.1.16 - 'Login' Remote Buffer Overflow Disk Savvy Enterprise 9.1.14 - 'GET' Remote Buffer Overflow Dup Scout Enterprise 9.1.14 - Buffer Overflow (SEH) DiskBoss Enterprise 7.4.28 - 'GET' Buffer Overflow Dup Scout Enterprise 9.1.14 - Remote Buffer Overflow (SEH) DiskBoss Enterprise 7.4.28 - 'GET' Remote Buffer Overflow DiskBoss Enterprise 7.5.12 - 'POST' Buffer Overflow (SEH) DiskBoss Enterprise 7.5.12 - 'POST' Remote Buffer Overflow (SEH) WinaXe Plus 8.7 - Buffer Overflow WinaXe Plus 8.7 - Remote Buffer Overflow Disk Savvy Enterprise 9.4.18 - Buffer Overflow (SEH) Disk Savvy Enterprise 9.4.18 - Remote Buffer Overflow (SEH) SysGauge 1.5.18 - Buffer Overflow SysGauge 1.5.18 - Remote Buffer Overflow FTPShell Client 6.53 - Buffer Overflow Azure Data Expert Ultimate 2.2.16 - Buffer Overflow FTPShell Client 6.53 - Remote Buffer Overflow Azure Data Expert Ultimate 2.2.16 - Remote Buffer Overflow Disk Sorter Enterprise 9.5.12 - 'GET' Buffer Overflow (SEH) Disk Sorter Enterprise 9.5.12 - 'GET' Remote Buffer Overflow (SEH) Easy File Sharing Web Server 7.2 - GET 'PassWD' Buffer Overflow (SEH) Easy File Sharing Web Server 7.2 - GET 'PassWD' Remote Buffer Overflow (SEH) Microsoft IIS 6.0 - WebDAV 'ScStoragePathFromUrl' Buffer Overflow Microsoft IIS 6.0 - WebDAV 'ScStoragePathFromUrl' Remote Buffer Overflow Sync Breeze Enterprise 9.5.16 - 'GET' Buffer Overflow (SEH) Sync Breeze Enterprise 9.5.16 - 'GET' Remote Buffer Overflow (SEH) LabF nfsAxe 3.7 FTP Client - Buffer Overflow (SEH) LabF nfsAxe 3.7 FTP Client - Remote Buffer Overflow (SEH) EFS Easy Chat Server 3.1 - Buffer Overflow (SEH) EFS Easy Chat Server 3.1 - Remote Buffer Overflow (SEH) Easy File Sharing Web Server 7.2 - 'POST' Buffer Overflow Easy File Sharing Web Server 7.2 - 'POST' Remote Buffer Overflow Easy File Sharing Web Server 7.2 - 'POST' Buffer Overflow (DEP Bypass) SpyCamLizard 1.230 - Buffer Overflow Easy File Sharing Web Server 7.2 - 'POST' Remote Buffer Overflow (DEP Bypass) SpyCamLizard 1.230 - Remote Buffer Overflow Easy File Sharing Web Server 7.2 - GET 'PassWD' Buffer Overflow (DEP Bypass) Easy File Sharing Web Server 7.2 - GET 'PassWD' Remote Buffer Overflow (DEP Bypass) FTPGetter 5.89.0.85 - Buffer Overflow (SEH) FTPGetter 5.89.0.85 - Remote Buffer Overflow (SEH) DiskBoss Enterprise 8.2.14 - Buffer Overflow DiskBoss Enterprise 8.2.14 - Remote Buffer Overflow Dup Scout Enterprise 9.9.14 - Buffer Overflow (SEH) Disk Savvy Enterprise 9.9.14 - Buffer Overflow (SEH) Sync Breeze Enterprise 9.9.16 - Buffer Overflow (SEH) Disk Pulse Enterprise 9.9.16 - Buffer Overflow (SEH) Dup Scout Enterprise 9.9.14 - Remote Buffer Overflow (SEH) Disk Savvy Enterprise 9.9.14 - Remote Buffer Overflow (SEH) Sync Breeze Enterprise 9.9.16 - Remote Buffer Overflow (SEH) Disk Pulse Enterprise 9.9.16 - Remote Buffer Overflow (SEH) Gh0st Client (C2 Server) - Buffer Overflow (Metasploit) Gh0st Client (C2 Server) - Remote Buffer Overflow (Metasploit) Sielco Sistemi Winlog 2.07.16 - Buffer Overflow (Metasploit) Sielco Sistemi Winlog 2.07.16 - Remote Buffer Overflow (Metasploit) Lockstep Backup for Workgroups 4.0.3 - Buffer Overflow (Metasploit) Disk Pulse Server 2.2.34 - 'GetServerInfo' Buffer Overflow (Metasploit) haneWIN DNS Server 1.5.3 - Buffer Overflow (Metasploit) Lockstep Backup for Workgroups 4.0.3 - Remote Buffer Overflow (Metasploit) Disk Pulse Server 2.2.34 - 'GetServerInfo' Remote Buffer Overflow (Metasploit) haneWIN DNS Server 1.5.3 - Remote Buffer Overflow (Metasploit) Sync Breeze Enterprise 10.0.28 - Buffer Overflow Sync Breeze Enterprise 10.0.28 - Remote Buffer Overflow VX Search Enterprise 10.1.12 - Buffer Overflow Sync Breeze Enterprise 10.1.16 - Buffer Overflow (SEH) (Metasploit) VX Search Enterprise 10.1.12 - Remote Buffer Overflow Sync Breeze Enterprise 10.1.16 - Remote Buffer Overflow (SEH) (Metasploit) Ayukov NFTP FTP Client < 2.0 - Buffer Overflow Ayukov NFTP FTP Client < 2.0 - Remote Buffer Overflow Avaya OfficeScan (IPO) < 10.1 - 'SoftConsole' Buffer Overflow (SEH) Avaya OfficeScan (IPO) < 10.1 - 'SoftConsole' Remote Buffer Overflow (SEH) Dup Scout Enterprise 10.0.18 - 'Login' Buffer Overflow Sync Breeze Enterprise 10.1.16 - 'POST' Buffer Overflow Dup Scout Enterprise 10.0.18 - 'Login' Remote Buffer Overflow Sync Breeze Enterprise 10.1.16 - 'POST' Remote Buffer Overflow	2017-11-24 05:02:25 +00:00
Offensive Security	4b39f0d26d	DB: 2017-11-16 ... 23 new exploits VideoLAN VLC Media Player 0.8.6a - Unspecified Denial of Service (1) VideoLAN VLC Media Player 0.8.6a - Denial of Service (1) Microsoft Windows Explorer - '.AVI' Unspecified Denial of Service Microsoft Windows Explorer - '.AVI' File Denial of Service Microsoft Windows Explorer - Unspecified '.ANI' File Denial of Service Microsoft Windows Explorer - '.ANI' File Denial of Service Microsoft Windows Explorer - Unspecified '.doc' File Denial of Service Microsoft Windows Explorer - '.doc' File Denial of Service CDBurnerXP 4.2.4.1351 - Local Crash (Denial of Service) Juniper Networks JUNOS 7.1.1 - Malformed TCP Packet Denial of Service / Unspecified Vulnerabilities Juniper Networks JUNOS 7.1.1 - Malformed TCP Packet Denial of Service / Multiple Vulnerabilities iPhone / iTouch FtpDisc 1.0 3 - ExploitsInOne Buffer Overflow Denial of Service iPhone / iTouch FtpDisc 1.0 - Buffer Overflow / Denial of Service Aladdin eToken PKI Client 4.5 - Virtual File Handling Unspecified Memory Corruption (PoC) Aladdin eToken PKI Client 4.5 - Virtual File Handling Memory Corruption (PoC) Webby WebServer - SEH Control (PoC) Webby WebServer - Overflow (SEH) (PoC) Quick 'n Easy FTP Server Lite 3.1 - Exploit Quick 'n Easy FTP Server Lite 3.1 - Denial of Service Subtitle Translation Wizard 3.0.0 - Exploit (SEH) (PoC) Subtitle Translation Wizard 3.0.0 - Overflow (SEH) (PoC) FFDshow - SEH Exception Leading to Null Pointer on Read FFDshow - Overflow (SEH) Exception Leading to Null Pointer on Read Microsoft Internet Explorer - MSHTML Findtext Processing Issue Microsoft Internet Explorer - MSHTML Findtext Processing Exploit Oreans WinLicense 2.1.8.0 - XML File Handling Unspecified Memory Corruption Oreans WinLicense 2.1.8.0 - XML File Handling Memory Corruption Debian suidmanager 0.18 - Exploit AMD K6 Processor - Exploit Apple Personal Web Sharing 1.1 - Remote Denial of Service AMD K6 Processor - Denial of Service Sun Solaris 7.0 - 'procfs' Denial of Service S.u.S.E. Linux 6.2 / Slackware Linux 3.2/3.6 - identd Denial of Service S.u.S.E. Linux 6.2 / Slackware Linux 3.2/3.6 - 'identd' Denial of Service Debian 2.1/2.2 / Mandrake 6.0/6.1/7.0 / RedHat 6.x - rpc.lockd Remote Denial of Service Debian 2.1/2.2 / Mandrake 6.0/6.1/7.0 / RedHat 6.x - 'rpc.lockd' Remote Denial of Service D-Link DIR605L - Denial of Service RedHat Linux 6.1 i386 - Tmpwatch Recursive Write Denial of Service (Linux Kernel) ReiserFS 3.5.28 - Code Execution / Denial of Service ReiserFS 3.5.28 (Linux Kernel) - Code Execution / Denial of Service IBM AIX 4.3.3/5.1/5.2 libIM - Buffer Overflow IBM AIX 4.3.3/5.1/5.2 - 'libIM' Buffer Overflow xfstt 1.2/1.4 - Unspecified Memory Disclosure xfstt 1.2/1.4 - Memory Disclosure ViRobot Linux Server 2.0 - Exploit Linux Kernel 2.4.x/2.6.x - Multiple Unspecified ISO9660 Filesystem Handling Vulnerabilities Linux Kernel 2.4.x/2.6.x - Multiple ISO9660 Filesystem Handling Vulnerabilities IBM AIX 5.x - Invscout Local Buffer Overflow IBM AIX 5.x - 'Invscout' Local Buffer Overflow Microsoft Internet Explorer 5.0.1 - '.JPEG' Image Rendering Unspecified Buffer Overflow Microsoft Internet Explorer 5.0.1 - '.JPEG' Image Rendering Buffer Overflow Microsoft Excel 95/97/2000/2002/2003/2004 - Unspecified Memory Corruption (MS06-012) Microsoft Excel 95/97/2000/2002/2003/2004 - Memory Corruption (MS06-012) IBM Tivoli Directory Server 6.0 - Unspecified LDAP Memory Corruption IBM Tivoli Directory Server 6.0 - LDAP Memory Corruption Quake 3 Engine - CL_ParseDownload Remote Buffer Overflow Quake 3 Engine - 'CL_ParseDownload' Remote Buffer Overflow Zabbix 1.1.2 - Multiple Unspecified Remote Code Execution Vulnerabilities Zabbix 1.1.2 - Multiple Remote Code Execution Vulnerabilities VideoLAN VLC Media Player 0.8.6a - Unspecified Denial of Service (2) VideoLAN VLC Media Player 0.8.6a - Denial of Service (2) Sun Solaris 10 - ICMP Unspecified Remote Denial of Service Sun Solaris 10 - ICMP Remote Denial of Service Mozilla Firefox 2.0.0.2 - Unspecified GIF Handling Denial of Service Mozilla Firefox 2.0.0.2 - '.GIF' Handling Denial of Service Progress WebSpeed 3.0/3.1 - Denial of Service GStreamer 0.10.15 - Multiple Unspecified Remote Denial of Service Vulnerabilities GStreamer 0.10.15 - Multiple Remote Denial of Service Vulnerabilities Wireshark 0.99.8 - X.509sat Dissector Unspecified Denial of Service Wireshark 0.99.8 - LDAP Dissector Unspecified Denial of Service Wireshark 0.99.8 - SCCP Dissector Decode As Feature Unspecified Denial of Service Wireshark 0.99.8 - X.509sat Dissector Denial of Service Wireshark 0.99.8 - LDAP Dissector Denial of Service Wireshark 0.99.8 - SCCP Dissector Decode As Feature Denial of Service Novell Client 4.91.5 - ActiveX Control 'nwsetup.dll' Unspecified Remote Denial of Service (1) Novell Client 4.91.5 - ActiveX Control 'nwsetup.dll' Unspecified Remote Denial of Service (2) Nokia Lotus Notes Connector - 'lnresobject.dll' Unspecified Remote Denial of Service Novell Client 4.91.5 - ActiveX Control 'nwsetup.dll' Remote Denial of Service (1) Novell Client 4.91.5 - ActiveX Control 'nwsetup.dll' Remote Denial of Service (2) Nokia Lotus Notes Connector - 'lnresobject.dll' Remote Denial of Service Wireshark 1.2.1 - OpcUa Dissector Unspecified Resource Exhaustion (Denial of Service) Wireshark 1.2.1 - TLS Dissector 1.2 Conversation Handling Unspecified Remote Denial of Service Wireshark 1.2.1 - GSM A RR Dissector packet.c Unspecified Remote Denial of Service Wireshark 1.2.1 - OpcUa Dissector Resource Exhaustion (Denial of Service) Wireshark 1.2.1 - TLS Dissector 1.2 Conversation Handling Remote Denial of Service Wireshark 1.2.1 - GSM A RR Dissector packet.c Remote Denial of Service Opera Web Browser < 11.60 - Multiple Denial of Service / Unspecified Vulnerabilities Opera Web Browser < 11.60 - Denial of Service / Multiple Vulnerabilities SmallFTPd - Unspecified Denial of Service SmallFTPd - Denial of Service Apple Mac OSX - 'IntelAccelerator::gstqConfigure' Exploitable Kernel NULL Dereference Apple Mac OSX - 'IntelAccelerator::gstqConfigure' Kernel NULL Dereference Apple Mac OSX - IOSCSIPeripheralDeviceType00 Userclient Type 12 Exploitable Kernel NULL Dereference Apple Mac OSX - IOSCSIPeripheralDeviceType00 Userclient Type 12 Kernel NULL Dereference Apple Mac OSX - OSMetaClassBase::safeMetaCast in IOAccelContext2::connectClient Exploitable NULL Dereference Apple Mac OSX - OSMetaClassBase::safeMetaCast in IOAccelContext2::connectClient NULL Dereference Microsoft Windows - 'gdi32.dll' Multiple Issues 'EMF CREATECOLORSPACEW' Record Handling (MS16-055) Microsoft Windows - 'gdi32.dll' Multiple Issues 'EMF COMMENT_MULTIFORMATS' Record Handling (MS16-055) Microsoft Windows - 'gdi32.dll' Multiple 'EMF CREATECOLORSPACEW' Record Handling (MS16-055) Microsoft Windows - 'gdi32.dll' Multiple 'EMF COMMENT_MULTIFORMATS' Record Handling (MS16-055) Apple Mac OSX Kernel - Exploitable Null Pointer Dereference in nvCommandQueue::GetHandleIndex in GeForce.kext Apple Mac OSX Kernel - Null Pointer Dereference in nvCommandQueue::GetHandleIndex in GeForce.kext Apple Mac OSX Kernel - Exploitable Null Pointer Dereference in AppleMuxControl.kext Apple Mac OSX Kernel - Exploitable Null Pointer Dereference in AppleGraphicsDeviceControl Apple Mac OSX Kernel - Exploitable NULL Dereference in IOAccelSharedUserClient2::page_off_resource Apple Mac OSX Kernel - Exploitable NULL Dereference in CoreCaptureResponder Due to Unchecked Return Value Apple Mac OSX Kernel - Exploitable Null Pointer Dereference in IOAudioEngine Apple Mac OSX Kernel - Null Pointer Dereference in AppleMuxControl.kext Apple Mac OSX Kernel - Null Pointer Dereference in AppleGraphicsDeviceControl Apple Mac OSX Kernel - NULL Dereference in IOAccelSharedUserClient2::page_off_resource Apple Mac OSX Kernel - NULL Dereference in CoreCaptureResponder Due to Unchecked Return Value Apple Mac OSX Kernel - Null Pointer Dereference in IOAudioEngine Apple OS X/iOS - mach_ports_register Multiple Memory Safety Issues Apple OS X/iOS - 'mach_ports_register' Multiple Memory Safety Exploits Linux Kernel 3.10.0-327/4.8.0-22 (Ubuntu 16.10 / RedHat) - 'keyctl' Null Pointer Dereference Linux Kernel 4.8.0-22/3.10.0-327 (Ubuntu 16.10 / RedHat) - 'keyctl' Null Pointer Dereference Microsoft MsMpEng - Remotely Exploitable Use-After-Free due to Design Issue in GC Engine Microsoft MsMpEng - Remote Use-After-Free Due to Design Issue in GC Engine Microsoft Windows Kernel - 'win32k.sys' Multiple Issues 'NtGdiGetDIBitsInternal' System Call Microsoft Windows Kernel - 'win32k.sys' Multiple 'NtGdiGetDIBitsInternal' System Call Mandrake Linux 8.2 /usr/mail - Local Exploit Mandrake Linux 8.2 - '/usr/mail' Local Exploit RedHat 6.2 /sbin/restore - Exploit RedHat 6.2 - '/sbin/restore' Privilege Escalation dump 0.4b15 (RedHat 6.2) - Exploit dump 0.4b15 (RedHat 6.2) - Privilege Escalation xsoldier 0.96 (RedHat 6.2) - Exploit Pine (Local Message Grabber) - Exploit xsoldier 0.96 (RedHat 6.2) - Buffer Overflow Pine (Local Message Grabber) - Local Message Read Seyon 2.1 rev. 4b i586-Linux - Exploit Seyon 2.1 rev. 4b i586-Linux (RedHat 4.0/5.1) - Overflow glibc-2.2 / openssh-2.3.0p1 / glibc 2.1.9x - Exploit glibc-2.2 / openssh-2.3.0p1 / glibc 2.1.9x - File Read suid_perl 5.001 - Exploit suid_perl 5.001 - Command Execution Sendmail 8.11.x (Linux/i386) - Exploit Sendmail 8.11.x (Linux/i386) - Privilege Escalation Microsoft Excel - Unspecified Remote Code Execution Microsoft Excel - Remote Code Execution Microsoft Word 2000 - Unspecified Code Execution Microsoft Word 2000 - Code Execution IBM AIX 5.3 sp6 - capture Terminal Sequence Privilege Escalation IBM AIX 5.3 sp6 - pioout Arbitrary Library Loading Privilege Escalation IBM AIX 5.3 SP6 - Capture Terminal Sequence Privilege Escalation IBM AIX 5.3 SP6 - 'pioout' Arbitrary Library Loading Privilege Escalation IBM AIX 5.3 libc - MALLOCDEBUG File Overwrite IBM AIX 5.3 - 'libc' MALLOCDEBUG File Overwrite Easy RM to MP3 Converter 2.7.3.700 - Exploit Easy RM to MP3 Converter 2.7.3.700 - Buffer Overflow Easy RM to MP3 27.3.700 (Windows XP SP3) - Exploit Easy RM to MP3 27.3.700 (Windows XP SP3) - Overflow Adobe Reader and Acrobat - Exploit Adobe Reader / Acrobat - '.PDF' File Overflow Mini-stream Ripper (Windows XP SP2/SP3) - Exploit Mini-stream Ripper (Windows XP SP2/SP3) - Local Overflow DJ Studio Pro 5.1.6.5.2 - Exploit (SEH) DJ Studio Pro 5.1.6.5.2 - Overflow (SEH) Winamp 5.572 - Exploit (SEH) Winamp 5.572 - Overflow (SEH) ZipScan 2.2c - Exploit (SEH) ZipScan 2.2c - Overflow (SEH) Local Glibc shared library (.so) 2.11.1 - Exploit (Linux Kernel 2.6.34-rc3) ReiserFS (RedHat / Ubuntu 9.10) - 'xattr' Privilege Escalation Local Glibc Shared Library (.so) 2.11.1 - Code Execution ReiserFS (Linux Kernel 2.6.34-rc3 / RedHat / Ubuntu 9.10) - 'xattr' Privilege Escalation SyncBack Freeware 3.2.20.0 - Exploit SyncBack Freeware 3.2.20.0 - Overflow (SEH) Mediacoder 0.7.3.4672 - Exploit (SEH) Mediacoder 0.7.3.4672 - Overflow (SEH) MP3 Workstation 9.2.1.1.2 - Exploit (SEH) MP3 Workstation 9.2.1.1.2 - Overflow (SEH) DJ Studio Pro 8.1.3.2.1 - Exploit (SEH) DJ Studio Pro 8.1.3.2.1 - Overflow (SEH) MP3 Workstation 9.2.1.1.2 - Exploit (SEH) (Metasploit) MP3 Workstation 9.2.1.1.2 - Overflow (SEH) (Metasploit) iworkstation 9.3.2.1.4 - Exploit (SEH) iworkstation 9.3.2.1.4 - Overflow (SEH) Nokia MultiMedia Player 1.0 - Exploit (SEH Unicode) Nokia MultiMedia Player 1.0 - Overflow (SEH Unicode) POP Peeper 3.7 - Exploit (SEH) POP Peeper 3.7 - Overflow (SEH) DVD X Player 5.5 Pro - SEH + ASLR + DEP Bypass DVD X Player 5.5 Pro - Overflow (SEH + ASLR + DEP Bypass) DJ Studio Pro 5.1.6.5.2 - Exploit (SEH) (Metasploit) DJ Studio Pro 5.1.6.5.2 - Overflow (SEH) (Metasploit) BlazeVideo HDTV Player 6.6 Professional - SEH + ASLR + DEP Bypass BlazeVideo HDTV Player 6.6 Professional - Overflow (SEH + ASLR + DEP Bypass) Slackware Linux 3.4 - 'liloconfig-color' Temporary file Slackware Linux 3.4 - 'makebootdisk' Temporary file Slackware Linux 3.4 - 'liloconfig-color' Temporary File Slackware Linux 3.4 - 'makebootdisk' Temporary File Slackware Linux 3.4 - 'netconfig' Temporary file Slackware Linux 3.4 - 'pkgtool' Temporary file Slackware Linux 3.4 - 'netconfig' Temporary File Slackware Linux 3.4 - 'pkgtool' Temporary File Debian suidmanager 0.18 - Command Execution BSDI BSD/OS 2.1 / FreeBSD 2.1 / IBM AIX 4.2 / SGI IRIX 6.4 / Sun SunOS 4.1.3 - Exploit HP HP-UX 10.20/11.0 / IBM AIX 4.3 / SCO Unixware 7.0 / Sun Solaris 2.6 - Exploit Slackware Linux 3.5 - Missing /etc/group Privilege Escalation BSDI BSD/OS 2.1 / FreeBSD 2.1 / IBM AIX 4.2 / SGI IRIX 6.4 / Sun SunOS 4.1.3 - Buffer Overrun HP HP-UX 10.20/11.0 / IBM AIX 4.3 / SCO Unixware 7.0 / Sun Solaris 2.6 - Change File Permission Slackware Linux 3.5 - '/etc/group' Privilege Escalation Sun Solaris 2.6 power management - Exploit Sun Solaris 2.6 - power management Exploit DataLynx suGuard 1.0 - Exploit Sun Solaris 2.5.1 PAM & unix_scheme - Exploit Solaris 2.5.1 ffbconfig - Exploit Solaris 2.5.1 chkey - Exploit Solaris 2.5.1 Ping - Exploit SGI IRIX 6.4 ioconfig - Exploit DataLynx suGuard 1.0 - Privilege Escalation Sun Solaris 2.5.1 PAM / unix_scheme - 'passwd' Privilege Escalation Solaris 2.5.1 - 'ffbconfig' Exploit Solaris 2.5.1 - 'chkey' Exploit Solaris 2.5.1 - 'Ping' Exploit SGI IRIX 6.4 - 'ioconfig' Exploit BSD/OS 2.1 / DG/UX 7.0 / Debian 1.3 / HP-UX 10.34 / IBM AIX 4.2 / SGI IRIX 6.4 / Solaris 2.5.1 - xlock Exploit (1) BSD/OS 2.1 / DG/UX 7.0 / Debian 1.3 / HP-UX 10.34 / IBM AIX 4.2 / SGI IRIX 6.4 / Solaris 2.5.1 - xlock Exploit (2) BSD/OS 2.1 / DG/UX 7.0 / Debian 1.3 / HP-UX 10.34 / IBM AIX 4.2 / SGI IRIX 6.4 / Solaris 2.5.1 - 'xlock' Exploit (1) BSD/OS 2.1 / DG/UX 7.0 / Debian 1.3 / HP-UX 10.34 / IBM AIX 4.2 / SGI IRIX 6.4 / Solaris 2.5.1 - '/usr/bin/X11/xlock' Privilege Escalation (2) Solaris 2.5.1 automount - Exploit Solaris 2.5.1 - 'automount' Exploit BSD/OS 2.1 / DG/UX 4.0 / Debian 0.93 / Digital UNIX 4.0 B / FreeBSD 2.1.5 / HP-UX 10.34 / IBM AIX 4.1.5 / NetBSD 1.0/1.1 / NeXTstep 4.0 / SGI IRIX 6.3 / SunOS 4.1.4 - 'rlogin' Exploit Sun Solaris 7.0 dtprintinfo - Buffer Overflow Sun Solaris 7.0 lpset - Buffer Overflow BSD/OS 2.1 / DG/UX 4.0 / Debian 0.93 / Digital UNIX 4.0 B / FreeBSD 2.1.5 / HP-UX 10.34 / IBM AIX 4.1.5 / NetBSD 1.0/1.1 / NeXTstep 4.0 / SGI IRIX 6.3 / SunOS 4.1.4 - 'rlogin' Privilege Escalation Sun Solaris 7.0 - '/usr/dt/bin/dtprintinfo' Buffer Overflow Sun Solaris 7.0 - '/usr/bin/lpset' Buffer Overflow IBM Remote Control Software 1.0 - Exploit IBM Remote Control Software 1.0 - Code Execution Xcmail 0.99.6 - Exploit Xcmail 0.99.6 - Buffer Overflow Sun Solaris 7.0 ff.core - Exploit S.u.S.E. 5.2 lpc - Exploit Sun Solaris 7.0 - 'ff.core' Exploit S.u.S.E. 5.2 - 'lpc' Exploit SGI IRIX 6.2 cdplayer - Exploit SGI IRIX 6.2 - 'cdplayer' Exploit SGI IRIX 5.3 Cadmin - Exploit SGI IRIX 6.0.1 colorview - Exploit SGI IRIX 5.3 - 'Cadmin' Exploit SGI IRIX 6.0.1 - 'colorview' Exploit SGI IRIX 6.3 df - Exploit SGI IRIX 6.4 - datman/cdman Exploit SGI IRIX 6.3 - 'df' Exploit SGI IRIX 6.4 - datman/cdman Exploit RedHat Linux 2.1 - abuse.console Exploit SGI IRIX 6.2 fsdump - Exploit RedHat Linux 5.1 xosview - Exploit Slackware Linux 3.1 - Buffer Overflow RedHat Linux 2.1 - 'abuse.console' Exploit SGI IRIX 6.2 - 'fsdump' Exploit RedHat Linux 5.1 - xosview Slackware Linux 3.1 - '/usr/X11/bin/SuperProbe' Buffer Overflow IBM AIX 4.3 infod - Exploit IBM AIX 4.3 - 'infod' Exploit IBM AIX 4.2.1 snap - Insecure Temporary File Creation IBM AIX 4.2.1 - 'snap' Insecure Temporary File Creation SGI IRIX 6.4 inpview - Exploit RedHat Linux 5.0 msgchk - Exploit IBM AIX 4.2.1 portmir - Buffer Overflow / Insecure Temporary File Creation IBM AIX 4.2 ping - Buffer Overflow IBM AIX 4.2 lchangelv - Buffer Overflow SGI IRIX 6.4 - 'inpview' Exploit RedHat Linux 5.0 - 'msgchk' Exploit IBM AIX 4.2.1 - '/usr/bin/portmir' Buffer Overflow / Insecure Temporary File Creation IBM AIX 4.2 - 'ping' Buffer Overflow IBM AIX 4.2 - '/usr/sbin/lchangelv' Buffer Overflow RedHat Linux 4.2 / SGI IRIX 6.3 / Solaris 2.6 mailx - Exploit (1) RedHat Linux 4.2 / SGI IRIX 6.3 / Solaris 2.6 - 'mailx' Exploit (1) SGI IRIX 6.4 netprint - Exploit SGI IRIX 6.4 - 'netprint' Exploit SGI IRIX 5.3/6.2 ordist - Exploit SGI IRIX 5.3/6.2 - 'ordist' Exploit SGI IRIX 5.3 pkgadjust - Exploit SGI IRIX 5.3 - 'pkgadjust' Exploit Sun Solaris 7.0 procfs - Exploit IBM AIX 3.2.5 - IFS Exploit IBM AIX 4.2.1 lquerypv - Exploit IBM AIX 3.2.5 - 'IFS' Exploit IBM AIX 4.2.1 - 'lquerypv' File Read SGI IRIX 6.3 pset - Exploit SGI IRIX 6.4 rmail - Exploit SGI IRIX 6.3 - 'pset' Exploit SGI IRIX 6.4 - 'rmail' Exploit SGI IRIX 5.2/5.3 serial_ports - Exploit SGI IRIX 6.4 suid_exec - Exploit SGI IRIX 5.1/5.2 sgihelp - Exploit SGI IRIX 6.4 startmidi - Exploit SGI IRIX 5.2/5.3 - 'serial_ports' Exploit SGI IRIX 6.4 - 'suid_exec' Exploit SGI IRIX 5.1/5.2- 'sgihelp' Exploit SGI IRIX 6.4 - 'startmidi' Exploit SGI IRIX 6.4 xfsdump - Exploit SGI IRIX 6.4 - 'xfsdump' Exploit IBM AIX 4.3.1 adb - Exploit IBM AIX 4.3.1 - 'adb' Denial of Service Apple At Ease 5.0 - Exploit Samba < 2.0.5 - Exploit Apple At Ease 5.0 - Information Disclosure Samba < 2.0.5 - Overflow NetBSD 1.4 / OpenBSD 2.5 /Solaris 7.0 profil(2) - Exploit NetBSD 1.4 / OpenBSD 2.5 / Solaris 7.0 - 'profil(2)' Modify The Internal Data Space Mandriva Linux Mandrake 6.0 / Gnome Libs 1.0.8 espeaker - Local Buffer Overflow Mandriva Linux Mandrake 6.0 / Gnome Libs 1.0.8 - 'espeaker' Local Buffer Overflow HP-UX 10.20 newgrp - Exploit HP-UX 10.20 newgrp - Privilege Escalation BSD/OS 2.1 / FreeBSD 2.1.5 / NeXTstep 4.x / IRIX 6.4 / SunOS 4.1.3/4.1.4 - 'lpr' Buffer Overrun (2) BSD/OS 2.1 / FreeBSD 2.1.5 / NeXTstep 4.x / IRIX 6.4 / SunOS 4.1.3/4.1.4 - '/usr/bin/lpr' Buffer Overrun Privilege Escalation (2) BSD 2 / CND 1 / Sendmail 8.x / FreeBSD 2.1.x / HP-UX 10.x / AIX 4 / RedHat 4 - Sendmail Daemon Exploit BSD 2 / CND 1 / Sendmail 8.x / FreeBSD 2.1.x / HP-UX 10.x / AIX 4 / RedHat 4 - Sendmail Daemon FreeBSD 3.3/Linux Mandrake 7.0 - 'xsoldier' Buffer Overflow (1) FreeBSD 3.3/Linux Mandrake 7.0 - 'xsoldier' Buffer Overflow (2) xsoldier (FreeBSD 3.3/Linux Mandrake 7.0) - Buffer Overflow (1) xsoldier (FreeBSD 3.3/Linux Mandrake 7.0) - Buffer Overflow (2) Solaris 7.0 kcms_configure - Exploit Solaris 7.0 - 'kcms_configure Exploit Windowmaker wmmon 1.0 b2 - Exploit Windowmaker wmmon 1.0 b2 - Command Execution Oracle8i Standard Edition 8.1.5 for Linux Installer - Exploit Oracle8i Standard Edition 8.1.5 for Linux Installer - Privilege Escalation Standard & Poors ComStock 4.2.4 - Exploit Standard & Poors ComStock 4.2.4 - Command Execution KDE 1.1.2 KApplication configfile - Exploit (1) KDE 1.1.2 KApplication configfile - Exploit (2) KDE 1.1.2 KApplication configfile - Exploit (3) KDE 1.1.2 KApplication configfile - Privilege Escalation (1) KDE 1.1.2 KApplication configfile - Privilege Escalation (2) KDE 1.1.2 KApplication configfile - Privilege Escalation (3) BSD 'mailx' 8.1.1-10 - Buffer Overflow (2) mailx 8.1.1-10 (BSD/Slackware) - Buffer Overflow (2) Mandrake 7.0/7.1 / RedHat Kon2 0.3.9 - fld Input File Overflow Mandrake 7.0/7.1 / RedHat Kon2 0.3.9 - '/usr/bin/fld' Input File Overflow IRIX 6.5.x - GR_OSView Buffer Overflow SGI IRIX 6.2 libgl.so - Buffer Overflow IRIX 6.5.x - dmplay Buffer Overflow IRIX 6.2/6.3 lpstat - Buffer Overflow IRIX 6.5.x - inpview Race Condition IRIX 6.5.x - '/usr/sbin/gr_osview' Buffer Overflow SGI IRIX 6.2 - 'libgl.so' Buffer Overflow IRIX 6.5.x - '/usr/sbin/dmplay' Buffer Overflow IRIX 6.2/6.3 - '/bin/lpstat' Buffer Overflow IRIX 6.5.x - '/usr/lib/InPerson/inpview' Race Condition IRIX 5.3/6.x - mail Exploit IRIX 5.3/6.x - '/usr/bin/mail' Buffer Overflow Libc locale - Exploit (1) Libc locale - Exploit (2) Libc locale - Privilege Escalation (1) Libc locale - Privilege Escalation (2) GNOME esound 0.2.19 - Unix Domain Socket Race Condition Apple Mac OSX 10 / HP-UX 9/10/11 / Mandriva 6/7 / RedHat 5/6 / SCO 5 / IRIX 6 - Shell redirection Race Condition Apple Mac OSX 10 / HP-UX 9/10/11 / Mandriva 6/7 / RedHat 5/6 / SCO 5 / IRIX 6 - Shell Redirection Race Condition IBM AIX 4.x - setsenv Buffer Overflow IBM AIX 4.3 digest - Buffer Overflow IBM AIX 4.x - enq Buffer Overflow IBM AIX 4.3.x - piobe Buffer Overflow IBM AIX 4.x - '/usr/bin/setsenv' Buffer Overflow IBM AIX 4.3 - '/usr/lib/lpd/digest' Buffer Overflow IBM AIX 4.x - 'enq' Buffer Overflow IBM AIX 4.3.x - '/usr/lib/lpd/piobe' Buffer Overflow SGI IRIX 6.5 / Solaris 7.0/8 - CDE dtsession Buffer Overflow SGI IRIX 6.5 / Solaris 7.0/8 CDE - '/usr/dt/bin/dtsession' Buffer Overflow AIX 4.2/4.3 - piomkapqd Buffer Overflow AIX 4.2/4.3 - '/usr/lib/lpd/pio/etc/piomkapqd' Buffer Overflow (Linux Kernel 2.4.17-8) User-Mode Linux - Memory Access Privilege Escalation User-Mode Linux (Linux Kernel 2.4.17-8) - Memory Access Privilege Escalation (Linux Kernel) Grsecurity Kernel Patch 1.9.4 - Memory Protection Grsecurity Kernel Patch 1.9.4 (Linux Kernel) - Memory Protection QNX RTOS 6.1 - phlocale Environment Variable Buffer Overflow QNX RTOS 6.1 - PKG-Installer Buffer Overflow QNX RTOS 6.1 - '/usr/photon/bin/phlocale' Environment Variable Buffer Overflow QNX RTOS 6.1 - 'PKG-Installer' Buffer Overflow NCMedia Sound Editor Pro 7.5.1 - SEH + DEP Bypass NCMedia Sound Editor Pro 7.5.1 - Overflow (SEH + DEP Bypass) AFD 1.2.x - Working Directory Local Buffer Overflow AFD 1.2.x - Working Directory Local Buffer Overflow Privilege Escalation IBM AIX 4.3.x/5.1 - ERRPT Local Buffer Overflow IBM AIX 4.3.x/5.1 - 'ERRPT' Local Buffer Overflow HP-UX 10.x - rs.F3000 Unspecified Unauthorized Access HP-UX 10.x - rs.F3000 Unauthorized Access Leksbot 1.2 - Multiple Unspecified Vulnerabilities Leksbot 1.2 - Multiple Vulnerabilities IBM AIX 4.3.x/5.1 - LSMCODE Environment Variable Local Buffer Overflow IBM AIX 4.3.x/5.1 - 'LSMCODE' Environment Variable Local Buffer Overflow IBM UniVerse 10.0.0.9 - uvadmsh Privilege Escalation IBM UniVerse 10.0.0.9 - 'uvadmsh' Privilege Escalation ViRobot Linux Server 2.0 - Overflow (Linux Kernel 2.6) Samba 2.2.8 (Debian / Mandrake) - Share Privilege Escalation Samba 2.2.8 (Linux Kernel 2.6 / Debian / Mandrake) - Share Privilege Escalation Veritas NetBackup 3.5/4.5/5.0 - Multiple Unspecified Local Memory Corruption Vulnerabilities (1) Veritas NetBackup 3.5/4.5/5.0 - Multiple Unspecified Local Memory Corruption Vulnerabilities (2) Veritas NetBackup 3.5/4.5/5.0 - Multiple Unspecified Local Memory Corruption Vulnerabilities (3) Veritas NetBackup 3.5/4.5/5.0 - Multiple Local Memory Corruption Vulnerabilities (1) Veritas NetBackup 3.5/4.5/5.0 - Multiple Local Memory Corruption Vulnerabilities (2) Veritas NetBackup 3.5/4.5/5.0 - Multiple Local Memory Corruption Vulnerabilities (3) Nvidia Display Driver Service (Nsvr) - Exploit Nvidia Display Driver Service (Nsvr) - Buffer Overflow IBM AIX 5.3 - GetShell and GetCommand File Enumeration IBM AIX 5.3 - GetShell and GetCommand Partial File Disclosure IBM AIX 5.3 - 'GetShell' / 'GetCommand' File Enumeration IBM AIX 5.3 - 'GetShell' / 'GetCommand' File Disclosure Apple 2.0.4 - Safari Unspecified Local Apple 2.0.4 - Safari Local Exploit Systrace - Multiple System Call Wrappers Concurrency Vulnerabilities IBM AIX 6.1.8 libodm - Arbitrary File Write IBM AIX 6.1.8 - 'libodm' Arbitrary File Write Apple iOS 4.0.2 - Networking Packet Filter Rules Privilege Escalation VeryPDF HTML Converter 2.0 - SEH/ToLower() Bypass Buffer Overflow VeryPDF HTML Converter 2.0 - Buffer Overflow (SEH/ToLower() Bypass) Symantec Encryption Desktop 10 - Buffer Overflow Privilege Escalation QEMU (Gentoo) - Local Priv Escalation QEMU (Gentoo) - Privilege Escalation Apache Tomcat 8/7/6 (RedHat-Based Distros) - Privilege Escalation Apache Tomcat 8/7/6 (RedHat Based Distros) - Privilege Escalation RedStar 3.0 Server - 'BEAM & RSSMON' Command Execution (Shellshock) RedStar 3.0 Server - 'BEAM' / 'RSSMON' Command Injection (Shellshock) Microsoft WordPerfect Document Converter - Exploit (MS03-036) Microsoft WordPerfect Document Converter (Windows NT4 Workstation SP5/SP6 French) - File Template Buffer Overflow (MS03-036) CA BrightStor ARCserve Backup - Exploiter Tool CA BrightStor ARCserve Backup - Overflow NCTAudioEditor2 ActiveX DLL 'NCTWMAFile2.dll 2.6.2.157' - Exploit NCTAudioEditor2 ActiveX DLL 'NCTWMAFile2.dll 2.6.2.157' - File Write CDBurnerXP 4.2.4.1351 - Exploit PeerCast 0.1216 - Exploit (Metasploit) PeerCast 0.1216 - Stack Overflow (Metasploit) BigAnt Server 2.52 - Exploit (SEH) BigAnt Server 2.52 - Overflow (SEH) NetTransport Download Manager 2.90.510 - Exploit NetTransport Download Manager 2.90.510 - Overflow (SEH) File Sharing Wizard 1.5.0 - Exploit (SEH) File Sharing Wizard 1.5.0 - Overflow (SEH) Real Player 12.0.0.879 - Exploit Sun Java Web Server 7.0 u7 - Exploit (DEP Bypass) Real Player 12.0.0.879 - Code Execution Sun Java Web Server 7.0 u7 - Overflow (DEP Bypass) IBM AIX 5l FTPd - Remote DES Hash Exploit IBM AIX 5l - 'FTPd' Remote DES Hash Exploit Microsoft Data Access Components - Exploit (MS11-002) Microsoft Data Access Components - Overflow (PoC) (MS11-002) FileCOPA FTP Server (Pre 18 Jul Version) - Exploit (Metasploit) FileCOPA FTP Server (Pre 18 Jul Version) - 'LIST' Buffer Overflow (Metasploit) Viscom Software Movie Player Pro SDK ActiveX 6.8 - Exploit (Metasploit) Viscom Software Movie Player Pro SDK ActiveX 6.8 - Stack-Based Buffer Overflow (Metasploit) Apple Personal Web Sharing 1.1 - Exploit id Software Solaris Quake II 3.13/3.14 / QuakeWorld 2.0/2.1 / Quake 1.9/3.13/3.14 - Exploit id Software Solaris Quake II 3.13/3.14 / QuakeWorld 2.0/2.1 / Quake 1.9/3.13/3.14 - Command Execution Metainfo Sendmail 2.0/2.5 & MetaIP 3.1 - Exploit Metainfo Sendmail 2.0/2.5 / MetaIP 3.1 - Upload / Execute Read Scripts IBM AIX 3.2/4.1 & SCO Unixware 7.1.1 & SGI IRIX 5.3 & Sun Solaris 2.5.1 - Exploit IBM AIX 3.2/4.1 / SCO Unixware 7.1.1 / SGI IRIX 5.3 / Sun Solaris 2.5.1 - Privilege Escalation HP HP-UX 10.34 rlpdaemon - Exploit HP HP-UX 10.34 rlpdaemon - Remote Overflow Ray Chan WWW Authorization Gateway 0.1 - Exploit Ray Chan WWW Authorization Gateway 0.1 - Command Execution Solaris 7.0 Coredump - Exploit Solaris 7.0 - 'Coredump' File Write IBM Scalable POWERparallel (SP) 2.0 sdrd - Exploit SGI IRIX 6.2 cgi-bin wrap - Exploit IBM Scalable POWERparallel (SP) 2.0 - 'sdrd' File Read SGI IRIX 6.2 - cgi-bin wrap Exploit SGI IRIX 6.5.2 nsd - Exploit SGI IRIX 6.5.2 - 'nsd'' Exploit IBM AIX 3.2.5 - login(1) Exploit IBM AIX 3.2.5 - 'login(1)' Exploit Compaq Java Applet for Presario SpawnApp - Exploit Compaq Java Applet for Presario SpawnApp - Code Execution Network Security Wizards Dragon-Fire IDS 1.0 - Exploit Network Security Wizards Dragon-Fire IDS 1.0 - Command Execution Hughes Technologies Mini SQL (mSQL) 2.0/2.0.10 - Exploit Hughes Technologies Mini SQL (mSQL) 2.0/2.0.10 - Information Disclosure IBM AIX 4.3.2 ftpd - Remote Buffer Overflow IBM AIX 4.3.2 - 'ftpd' Remote Buffer Overflow glFTPd 1.17.2 - Exploit glFTPd 1.17.2 - Code Execution Netopia R-series routers 4.6.2 - Exploit Netopia R-series Routers 4.6.2 - Modifying SNMP Tables Sun Java Web Server 1.1.3/2.0 Servlets - Exploit Sun Java Web Server 1.1.3/2.0 Servlets - information Disclosure IPFilter 3.x - Fragment Rule Bypass CGIWrap 2.x/3.x - Cross-Site Scripting AIX 4.1/4.2 - pdnsd Buffer Overflow AIX 4.1/4.2 - 'pdnsd' Buffer Overflow RedHat Linux 7.0 Apache - Remote 'Username' Enumeration RedHat Linux 7.0 Apache - Remote Username Enumeration Hylafax 4.1.x - HFaxD Unspecified Format String Hylafax 4.1.x - HFaxD Format String EZMeeting 3.x - 'EZNet.exe' Long HTTP Request Remote Buffer Overflow LHA 1.x - Multiple extract_one Buffer Overflow Vulnerabilities LHA 1.x - 'extract_one' Multiple Buffer Overflow Vulnerabilities Ethereal 0.x - Multiple Unspecified iSNS / SMB / SNMP Protocol Dissector Vulnerabilities Ethereal 0.x - Multiple iSNS / SMB / SNMP Protocol Dissector Vulnerabilities Oracle 9i - Multiple Unspecified Vulnerabilities Oracle 9i - Multiple Vulnerabilities File ELF 4.x - Header Unspecified Buffer Overflow File ELF 4.x - Header Buffer Overflow Microsoft PowerPoint 2003 - 'mso.dll' .PPT Processing Unspecified Code Execution Microsoft PowerPoint 2003 - 'powerpnt.exe' Unspecified Issue Microsoft PowerPoint 2003 - 'mso.dll' '.PPT' Processing Code Execution Microsoft PowerPoint 2003 - 'powerpnt.exe' Exploit CA eSCC r8/1.0 / eTrust Audit r8/1.5 - Unspecified Arbitrary File Manipulation CA eSCC r8/1.0 / eTrust Audit r8/1.5 - Audit Event System Unspecified Replay Attack CA eSCC r8/1.0 / eTrust Audit r8/1.5 - Arbitrary File Manipulation CA eSCC r8/1.0 / eTrust Audit r8/1.5 - Audit Event System Replay Attack Microsoft Internet Explorer 6 - Unspecified Code Execution (1) Microsoft Internet Explorer 6 - Unspecified Code Execution (2) Microsoft Internet Explorer 6 - Code Execution (1) Microsoft Internet Explorer 6 - Code Execution (2) GNU Tar 1.1x - GNUTYPE_NAMES Directory Traversal GNU Tar 1.1x - 'GNUTYPE_NAMES' Directory Traversal TFTP Server TFTPDWin 0.4.2 - Unspecified Directory Traversal TFTP Server TFTPDWin 0.4.2 - Directory Traversal Novell eDirectory 8.x - eMBox Utility 'edirutil' Command Unspecified Novell eDirectory 8.x - eMBox Utility 'edirutil' Command Exploit Multiple CA Service Management Products - Unspecified Remote Command Execution Multiple CA Service Management Products - Remote Command Execution NovaStor NovaNET 12 - 'DtbClsLogin()' Remote Stack Buffer Overflow Bash - Environment Variables Code Injection (Shellshock) Bash - Environment Variables Command Injection (Shellshock) OpenVPN 2.2.29 - Remote Exploit (Shellshock) OpenVPN 2.2.29 - Remote Command Injection (Shellshock) Postfix SMTP 4.2.x < 4.2.48 - Remote Exploit (Shellshock) Apache mod_cgi - Remote Exploit (Shellshock) Postfix SMTP 4.2.x < 4.2.48 - Remote Command Injection (Shellshock) Apache mod_cgi - Remote Command Injection (Shellshock) Poison Ivy 2.3.2 - Unspecified Remote Buffer Overflow Poison Ivy 2.3.2 - Remote Buffer Overflow Samba 3.5.11/3.6.3 - Unspecified Remote Code Execution Samba 3.5.11/3.6.3 - Remote Code Execution Advantech Switch - Bash Environment Variable Code Injection (Shellshock) (Metasploit) Advantech Switch - Bash Environment Variable Command Injection (Shellshock) (Metasploit) Cisco UCS Manager 2.1(1b) - Remote Exploit (Shellshock) Cisco UCS Manager 2.1(1b) - Remote Command Injection (Shellshock) IPFire - Bash Environment Variable Injection (Shellshock) (Metasploit) IPFire - Bash Environment Variable Command Injection (Shellshock) (Metasploit) TrendMicro InterScan Web Security Virtual Appliance - Remote Code Execution (Shellshock) TrendMicro InterScan Web Security Virtual Appliance - Remote Command Injection (Shellshock) Microsoft Security Essentials / SCEP (Microsoft Windows 8/8.1/10 / Windows Server) - 'MsMpEng' Remotely Exploitable Type Confusion Microsoft Security Essentials / SCEP (Microsoft Windows 8/8.1/10 / Windows Server) - 'MsMpEng' Remote Type Confusion Poll It CGI 2.0 - Exploit Poll It CGI 2.0 - Multiple Vulnerabilities DreamPoll 3.1 - Exploit DreamPoll 3.1 - SQL Injection WordPress Plugin WP-Cumulus 1.20 - Exploit WordPress Plugin WP-Cumulus 1.20 - Full Path Disclosure / Cross-Site Scripting Public Media Manager - Exploit Public Media Manager - Remote File Inclusion Joomla! Component com_adagency - Exploit Joomla! Component com_adagency - Local File Inclusion File Upload Manager 1.3 - Exploit File Upload Manager 1.3 - Web Shell File Upload Joomla! Component com_caddy - Exploit Renista CMS - Exploit Renista CMS - SQL Injection BtiTracker 1.3.x < 1.4.x - Exploit BtiTracker 1.3.x < 1.4.x - SQL Injection WordPress Plugin Cimy Counter - Exploit WordPress Plugin Cimy Counter - Full Path Disclosure / Redirector / Cross-Site Scripting / HTTP Response Spitting Belkin F5D7234-4 v5 G Wireless Router - Exploit Belkin F5D7234-4 v5 G Wireless Router - Remote Hash Exposed WhatsApp Status Changer 0.2 - Exploit WhatsApp - Remote Change Status MySimpleNews 1.0 - Remotely Readable Administrator Password MySimpleNews 1.0 - Remote Readable Administrator Password SquirrelMail 1.2.11 - Exploit SquirrelMail 1.2.11 - Multiple Vulnerabilities D-Link DCS-936L Network Camera - Cross-Site Request Forgery Yappa-ng 1.x/2.x - Unspecified Remote File Inclusion Yappa-ng 1.x/2.x - Unspecified Cross-Site Scripting Yappa-ng 1.x/2.x - Remote File Inclusion Yappa-ng 1.x/2.x - Cross-Site Scripting Aenovo - Multiple Unspecified Cross-Site Scripting Vulnerabilities Aenovo - Multiple Cross-Site Scripting Vulnerabilities Codegrrl - 'Protection.php' Unspecified Code Execution Codegrrl - 'Protection.php' Code Execution Red Mombin 0.7 - 'index.php' Unspecified Cross-Site Scripting Red Mombin 0.7 - 'process_login.php' Unspecified Cross-Site Scripting Red Mombin 0.7 - 'index.php' Cross-Site Scripting Red Mombin 0.7 - 'process_login.php' Cross-Site Scripting A-Blog 1.0 - Unspecified Cross-Site Scripting A-Blog 1.0 - Cross-Site Scripting Liens_Dynamiques 2.1 - Multiple Unspecified Cross-Site Scripting Vulnerabilities Liens_Dynamiques 2.1 - Multiple Cross-Site Scripting Vulnerabilities WordPress Plugin Akismet 2.1.3 - Unspecified WordPress Plugin Akismet 2.1.3 - Exploit SquirrelMail G/PGP Encryption Plugin 2.0/2.1 - Multiple Unspecified Remote Command Execution Vulnerabilities SquirrelMail G/PGP Encryption Plugin 2.0/2.1 - Multiple Remote Command Execution Vulnerabilities UPC Ireland Cisco EPC 2425 Router / Horizon Box - Exploit UPC Ireland Cisco EPC 2425 Router / Horizon Box - WPA-PSK Handshake Information Korean GHBoard - 'Component/upload.jsp' Unspecified Arbitrary File Upload Korean GHBoard - 'Component/upload.jsp' Arbitrary File Upload MyPHP Forum 3.0 - 'search.php' Multiple Unspecified SQL Injections MyPHP Forum 3.0 - 'search.php' Multiple SQL Injections Zoph 0.7.2.1 - Unspecified SQL Injection Zoph 0.7.2.1 - SQL Injection Joomla! Component FreiChat 1.0/2.x - Unspecified HTML Injection Joomla! Component FreiChat 1.0/2.x - HTML Injection Bash CGI - Remote Code Execution (Shellshock) (Metasploit) Bash CGI - Remote Command Injection (Shellshock) (Metasploit) PHP < 5.6.2 - 'disable_functions()' Bypass Exploit (Shellshock) PHP < 5.6.2 - 'disable_functions()' Bypass Command Injection (Shellshock) Hyperic HQ Enterprise 4.5.1 - Cross-Site Scripting / Multiple Unspecified Security Vulnerabilities Hyperic HQ Enterprise 4.5.1 - Cross-Site Scripting / Multiple Security Vulnerabilities Atlassian JIRA FishEye 2.5.7 / Crucible 2.5.7 Plugins - XML Parsing Unspecified Security Atlassian JIRA FishEye 2.5.7 / Crucible 2.5.7 Plugins - XML Parsing Security Exploit Netsweeper 4.0.8 - Authentication Bypass Issue Netsweeper 4.0.8 - Authentication Bypass SimpleInvoices invoices Module - Unspecified Customer Field Cross-Site Scripting SimpleInvoices invoices Module - Customer Field Cross-Site Scripting Bugzilla 4.2 - Tabular Reports Unspecified Cross-Site Scripting Bugzilla 4.2 - Tabular Reports Cross-Site Scripting iScripts AutoHoster - 'main_smtp.php' Unspecified Traversal iScripts AutoHoster - 'main_smtp.php' Traversal Exploit Trend Micro - 'CoreServiceShell.exe' Multiple HTTP Issues Trend Micro - 'CoreServiceShell.exe' Multiple HTTP Exploits Sun Secure Global Desktop and Oracle Global Desktop 4.61.915 - Exploit (Shellshock) Sun Secure Global Desktop and Oracle Global Desktop 4.61.915 - Command Injection (Shellshock) NUUO NVRmini 2 3.0.8 - Remote Code Execution (Shellshock) NUUO NVRmini 2 3.0.8 - Remote Command Injection (Shellshock) Squid Analysis Report Generator 2.3.10 - Remote Code Execution	2017-11-16 10:02:26 +00:00
Offensive Security	5924dde297	DB: 2015-03-19 ... 2 new exploits	2015-03-19 09:39:10 +00:00
Offensive Security	a327467416	Updated 03_30_2014	2014-03-30 04:31:18 +00:00