Wireshark – ‘infer_pkt_encap’ Heap Out-of-Bounds Read
Source: https://code.google.com/p/google-security-research/issues/detail?id=658
dos
dos 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Adobe Flash Sound.setTransform – Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=568
Base64 Decoder 1.1.2 – Overwrite (SEH) (PoC)
# Exploit: b64dec SEH OverWrite.
Notepad++ NPPFtp Plugin 0.26.3 – Buffer Overflow
# Title : Notepad ++ NPPFtp Plugin Buffer Overflow
Adobe Flash MovieClip.localToGlobal – Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=570
Adobe Flash MovieClip.attachMovie – Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=571
Adobe Flash TextField.tabIndex Setter – Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=574
Adobe Flash TextField.text Setter – Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=576
Adobe Flash TextField.type Setter – Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=577
Adobe Flash TextField.htmlText Setter – Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=578
Adobe Flash – TextField.Variable Setter Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=579
Adobe Flash – ‘TextField’ Use-After Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=583
Adobe Flash TextField.replaceText – Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=584
Adobe Flash TextField.replaceSel – Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=585
Adobe Flash TextField.setFormat – Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=586
Adobe Flash TextField.thickness Setter – Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=587
Adobe Flash TextField.sharpness Setter – Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=588
Adobe Flash Selection.SetSelection – Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=590
Adobe Flash MovieClip.duplicateMovieClip – Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=591
Adobe Flash MovieClip.startDrag – Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=592
Adobe Flash MovieClip.attachBitmap – Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=593
Google Chrome – Renderer Process to Browser Process Privilege Escalation
Source: https://code.google.com/p/google-security-research/issues/detail?id=664
Apache 2.4.17 – Denial of Service
# Exploit Title: Apache 2.4.17 - Denial of Service
win32k Clipboard Bitmap – Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=533
win32k Desktop and Clipboard – Null Pointer Dereference
Source: https://code.google.com/p/google-security-research/issues/detail?id=534
Microsoft Windows Kernel – ‘win32k!OffsetChildren’ Null Pointer Dereference
Source: https://code.google.com/p/google-security-research/issues/detail?id=544
Adobe Flash GradientFill – Use-After-Frees
Source: https://code.google.com/p/google-security-research/issues/detail?id=557
Adobe Flash MovieClip.lineStyle – Use-After-Frees
Source: https://code.google.com/p/google-security-research/issues/detail?id=558
Adobe Flash TextField.gridFitType Setter – Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=559
Adobe Flash TextField.antiAliasType Setter – Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=560
Wireshark – getRate Stack Out-of-Bounds Read
Source: https://code.google.com/p/google-security-research/issues/detail?id=641
Wireshark – AirPDcapPacketProcess Stack Buffer Overflow
Source: https://code.google.com/p/google-security-research/issues/detail?id=642
Wireshark – find_signature Stack Out-of-Bounds Read
Source: https://code.google.com/p/google-security-research/issues/detail?id=643
Wireshark – dissect_diameter_base_framed_ipv6_prefix Stack Buffer Overflow
Source: https://code.google.com/p/google-security-research/issues/detail?id=644
Wireshark – addresses_equal ‘dissect_rsvp_common’ Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=645
Wireshark – ascend_seek Static Out-of-Bounds Read
Source: https://code.google.com/p/google-security-research/issues/detail?id=646
Wireshark – my_dgt_tbcd_unpack Static Buffer Overflow
Source: https://code.google.com/p/google-security-research/issues/detail?id=649
Wireshark – dissect_nbap_MACdPDU_Size SIGSEGV
Source: https://code.google.com/p/google-security-research/issues/detail?id=652
Wireshark – memcpy ‘get_value / dissect_btatt’ SIGSEGV
Source: https://code.google.com/p/google-security-research/issues/detail?id=653
Wireshark – file_read ‘wtap_read_bytes_or_eof/mp2t_find_next_pcr’ Stack Buffer Overflow
Source: https://code.google.com/p/google-security-research/issues/detail?id=655
Wireshark – dissct_rsl_ipaccess_msg Static Out-of-Bounds Read
Source: https://code.google.com/p/google-security-research/issues/detail?id=660
Wireshark – dissect_zcl_pwr_prof_pwrprofstatersp Static Out-of-Bounds Read
Source: https://code.google.com/p/google-security-research/issues/detail?id=661
Wireshark – wmem_alloc Assertion Failure
Source: https://code.google.com/p/google-security-research/issues/detail?id=662
Wireshark – dissect_tds7_colmetadata_token Stack Buffer Overflow
Source: https://code.google.com/p/google-security-research/issues/detail?id=663
Wireshark – iseries_parse_packet Heap Buffer Overflow
Source: https://code.google.com/p/google-security-research/issues/detail?id=650
Adobe Flash – Type Confusion in Serialization with ObjectEncoder.dynamicPropertyWriter
Source: https://code.google.com/p/google-security-research/issues/detail?id=545