Apple Mac OSX Kernel – no-more-senders Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=567
dos
dos 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Apple Mac OSX – ‘IOBluetoothHCIUserClient’ Arbitrary Kernel Code Execution
Source: https://code.google.com/p/google-security-research/issues/detail?id=569
Apple Mac OSX – IOBluetoothHCIPacketLogUserClient Memory Corruption
Source: https://code.google.com/p/google-security-research/issues/detail?id=572
Apple Mac OSX Kernel – Hypervisor Driver Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=580
Apple Mac OSX – ‘IntelAccelerator::gstqConfigure’ Kernel NULL Dereference
Source: https://code.google.com/p/google-security-research/issues/detail?id=595
Apple Mac OSX – ‘gst_configure’ Kernel Buffer Overflow
Source: https://code.google.com/p/google-security-research/issues/detail?id=596
Apple Mac OSX – io_service_close Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=597
Apple Mac OSX / iOS Kernel – iokit Registry Iterator Manipulation Double-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=598
Apple Mac OSX / iOS Kernel – IOHDIXControllUserClient::clientClose Use-After-Free/Double-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=599
iOS Kernel – IOReportHub Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=603
iOS Kernel – IOHIDEventService Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=604
iOS Kernel – AppleOscarCMA Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=605
iOS Kernel – AppleOscarCompass Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=606
iOS Kernel – AppleOscarAccelerometer Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=607
iOS Kernel – AppleOscarGyro Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=608
Apple Mac OSX / iOS – Multiple Kernel Uninitialized Variable Bugs Leading to Code Execution Vulnerabilities
Source: https://code.google.com/p/google-security-research/issues/detail?id=618
Apple Mac OSX / iOS – Unsandboxable Kernel Code Exection Due to iokit Double Release in IOKit
Source: https://code.google.com/p/google-security-research/issues/detail?id=620
VideoLAN VLC Media Player 2.2.1 – ‘.mp4’ Heap Memory Corruption
#####################################################################################
Foxit Reader 7.2.8.1124 – ‘.PDF’ Parsing Memory Corruption
#####################################################################################
Wireshark – dissect_ber_constrained_bitstring Heap Out-of-Bounds Read
Source: https://code.google.com/p/google-security-research/issues/detail?id=659
Wireshark – ‘nettrace_3gpp_32_423_file_open’ Stack Out-of-Bounds Read
Source: https://code.google.com/p/google-security-research/issues/detail?id=694
Wireshark – hiqnet_display_data Static Out-of-Bounds Read
Source: https://code.google.com/p/google-security-research/issues/detail?id=695
Wireshark – dissect_nhdr_extopt Stack Buffer Overflow
Source: https://code.google.com/p/google-security-research/issues/detail?id=696
Wireshark – ‘iseries_check_file_type’ Stack Out-of-Bounds Read
Source: https://code.google.com/p/google-security-research/issues/detail?id=697
pdfium – opj_j2k_read_mcc ‘libopenjpeg’ Heap Out-of-Bounds Read
Source: https://code.google.com/p/google-security-research/issues/detail?id=624
pdfium – opj_jp2_apply_pclr ‘libopenjpeg’ Heap Out-of-Bounds Read
Source: https://code.google.com/p/google-security-research/issues/detail?id=626
FreeBSD SCTP ICMPv6 – Error Processing
#!/usr/bin/env python
PDF-XChange Viewer 2.5.315.0 – Shading Type 7 Heap Memory Corruption
########################################################################################
CesarFTP 0.99g – XCWD Denial of Service
#!/usr/bin/env python
NetSchedScan 1.0 – Crash (PoC)
#!/usr/bin/env python
Microsoft Office / COM Object – ‘WMALFXGFXDSP.dll’ DLL Planting (MS16-007)
Source: https://code.google.com/p/google-security-research/issues/detail?id=555
Microsoft Windows – devenum.dll!DeviceMoniker::Load() Heap Corruption Buffer Underflow (MS16-007)
Source: https://code.google.com/p/google-security-research/issues/detail?id=594
Grassroots DICOM (GDCM) 2.6.0 and 2.6.1 – ImageRegionReader::ReadIntoBuffer Buffer Overflow
Grassroots DICOM (GDCM) is a C++ library for processing DICOM medical
SNScan 1.05 – Scan Hostname/IP Field Buffer Overflow Crash (PoC)
#!/usr/bin/env python
Apple watchOS 2 – Crash (PoC)
#[+] Title: Apple watchOS - Remote Crash Exploit
Adobe Flash – Use-After-Free When Setting Stage
Source: https://code.google.com/p/google-security-research/issues/detail?id=629
Adobe Flash (Multiple Scripts) – Use-After-Free When Rendering Displays (1)
Source: https://code.google.com/p/google-security-research/issues/detail?id=628
Adobe Flash BlurFilter Processing – Out-of-Bounds Memset
Source: https://code.google.com/p/google-security-research/issues/detail?id=627
KeePass Password Safe Classic 1.29 – Crash (PoC)
# Title : KeePass Password Safe Classic 1.29 - Crash Proof Of Concept
pdfium – CPDF_Function::Call Stack Buffer Overflow
Source: https://code.google.com/p/google-security-research/issues/detail?id=612
pdfium IsFlagSet (v8 memory management) – SIGSEGV
Source: https://code.google.com/p/google-security-research/issues/detail?id=622
pdfium – CPDF_TextObject::CalcPositionData Heap Out-of-Bounds Read
Source: https://code.google.com/p/google-security-research/issues/detail?id=623
pdfium – CPDF_DIBSource::DownSampleScanline32Bit Heap Out-of-Bounds Read
Source: https://code.google.com/p/google-security-research/issues/detail?id=625
Microsoft Internet Explorer 11.0.9600.18124 EdUtil::GetCommonAncestorElement – Denial of Service
EdUtil::GetCommonAncestorElement Remote Crash
AccessDiver 4.301 – Buffer Overflow
[+] Credits: hyp3rlinx
PHP 7.0.0 – Format String
Overview
Wireshark – ‘AirPDcapDecryptWPABroadcastKey’ Heap Out-of-Bounds Read (1)
Source: https://code.google.com/p/google-security-research/issues/detail?id=657