Adobe Flash – Type Confusion in IExternalizable.readExternal When Performing Local Serialization
Source: https://code.google.com/p/google-security-research/issues/detail?id=548
dos
dos 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Avast! – Integer Overflow Verifying numFonts in TTC Header
Source: https://code.google.com/p/google-security-research/issues/detail?id=549
Avast! – Heap Overflow Unpacking MoleBox Archives
Source: https://code.google.com/p/google-security-research/issues/detail?id=552
Avast! – JetDb::Ised4x Performs Unbounded Search on Input
Source: https://code.google.com/p/google-security-research/issues/detail?id=551
Avast! – Out-of-Bounds Write Decrypting PEncrypt Packed executables
Source: https://code.google.com/p/google-security-research/issues/detail?id=554
Rar – CmdExtract::UnstoreFile Integer Truncation Memory Corruption
Source: https://code.google.com/p/google-security-research/issues/detail?id=550
Apple Mac OSX 10.11 – FTS Deep Structure of the FileSystem Buffer Overflow
MacOS X 10.11 FTS Deep structure of the file system Buffer Overflow
Microsoft Internet Explorer 11.0.9600.18097 – COmWindowProxy::SwitchMarkup NULL PTR
IE11 11.0.9600.18097 NULL PTR
WinAsm Studio 5.1.8.8 – Buffer Overflow Crash (PoC)
# Exploit: WinAsm Studio 5.1.8.8 BOF.
Malwarebytes AntiVirus 2.2.0 – Denial of Service (PoC)
#####################################################################################
Gnome Nautilus 3.16 – Denial of Service
Description
Microsoft Windows Kernel – Device Contexts and NtGdiSelectBitmap Use-After-Free (MS15-115)
Source: https://code.google.com/p/google-security-research/issues/detail?id=505
Microsoft Windows – Race Condition DestroySMWP Use-After-Free (MS15-115)
Source: https://code.google.com/p/google-security-research/issues/detail?id=509
Microsoft Windows – Cursor Object Memory Leak (MS15-115)
Source: https://code.google.com/p/google-security-research/issues/detail?id=510
Microsoft Windows – ‘ndis.sys’ IOCTL 0x170034 (ndis!ndisNsiGetIfNameForIfIndex) Pool Buffer Overflow (MS15-117)
Source: https://code.google.com/p/google-security-research/issues/detail?id=516
Audacious 3.7 – ID3 Local Crash (PoC)
# Exploit Title: Audacious 3.7 ID3 Local Crash PoC
Oracle Outside In PDF 8.5.2 – Parsing Memory Corruption (2)
#####################################################################################
Oracle Outside In PDF 8.5.2 – Parsing Memory Corruption (1)
#####################################################################################
Acrobat Reader DC 15.008.20082.15957 – ‘.PDF’ Parsing Memory Corruption
#####################################################################################
Google Chrome – open-vcdiff Out-of-Bounds Read in Browser Process Integer Overflow
Source: https://code.google.com/p/google-security-research/issues/detail?id=513
Sam Spade 1.14 – Decode URL Buffer Overflow Crash (PoC)
#!/usr/bin/env python
SuperScan 4.1 – Windows Enumeration Hostname/IP/URL Field Overflow (SEH)
#!/usr/bin/env python
SuperScan 4.1 – Tools Hostname/IP/URL Field Buffer Overflow
#!/usr/bin/env python
SuperScan 4.1 – Scan Hostname/IP Field Buffer Overflow
#!/usr/bin/env python
Kaspersky AntiVirus – ‘.ZIP’ File Format Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=521
Kaspersky AntiVirus – ‘.DEX’ File Format Memory Corruption
Source: https://code.google.com/p/google-security-research/issues/detail?id=529
Kaspersky AntiVirus – Certificate Handling Directory Traversal
Source: https://code.google.com/p/google-security-research/issues/detail?id=539
Microsoft Windows Kernel – ‘win32k.sys’ Malformed OS/2 Table TTF Font Processing Pool-Based Buffer Overflow (MS15-115)
Source: https://code.google.com/p/google-security-research/issues/detail?id=506
Microsoft Windows Kernel – ‘win32k.sys’ Malformed TrueType Program TTF Font Processing Pool-Based Buffer Overflow (MS15-115)
Source: https://code.google.com/p/google-security-research/issues/detail?id=507
foobar2000 1.3.9 – ‘.asx’ Local Crash (PoC)
# Exploit Title: foobar2000 1.3.9 (.asx) Local Crash PoC
foobar2000 1.3.9 – ‘.pls’ / ‘.m3u’ / ‘.m3u8’ Local Crash (PoC)
# Exploit Title: foobar2000 1.3.9 (.pls; .m3u; .m3u8) Local Crash PoC
Sam Spade 1.14 – Browse URL Buffer Overflow (PoC)
#!/usr/bin/env python
TECO AP-PCLINK 1.094 – ‘.tpc’ File Handling Buffer Overflow (PoC)
# TECO AP-PCLINK 1.094 TPC File Handling Buffer Overflow Vulnerability
TECO TP3-PCLINK 2.1 – ‘.tpc’ Handling Buffer Overflow (PoC)
# TECO TP3-PCLINK 2.1 TPC File Handling Buffer Overflow Vulnerability
TECO SG2 FBD Client 3.51 – ‘.gfb’ Overwrite Buffer Overflow (SEH) (PoC)
# TECO SG2 FBD Client 3.51 SEH Overwrite Buffer Overflow Vulnerability
Sam Spade 1.14 – S-Lang Command Field Overflow (SEH)
#!/usr/bin/env python
TACK 1.07 – Local Stack Buffer Overflow
# Exploit Author: Juan Sacco - http://www.exploitpack.com
FBZX 2.10 – Local Stack Buffer Overflow
# Exploit Author: Juan Sacco - http://www.exploitpack.com
FreeType 2.6.1 – TrueType tt_sbit_decoder_load_bit_aligned Heap Out-of-Bounds Read
Source: https://code.google.com/p/google-security-research/issues/detail?id=614
QNap QVR Client 5.1.0.11290 – Crash (PoC)
#!/usr/bin/env python
FreeType 2.6.1 – TrueType tt_cmap14_validate Parsing Heap Out-of-Bounds Reads
Source: https://code.google.com/p/google-security-research/issues/detail?id=602
Python 3.3 < 3.5 - 'product_setstate()' Out-of-Bounds Read
Title: Python 3.3 - 3.5 product_setstate() Out-of-bounds Read
Python 2.7 – ‘strop.replace()’ Method Integer Overflow
Title: Python 2.7 strop.replace() Integer Overflow
Python 2.7 – ‘array.fromstring’ Method Use-After-Free
Title: Python 2.7 array.fromstring Use After Free
Python 2.7 hotshot Module – ‘pack_string’ Heap Buffer Overflow (PoC)
Title: Python 2.7 hotshot pack_string Heap Buffer Overflow
Samsung – libQjpeg Image Decoding Memory Corruption
Source: https://code.google.com/p/google-security-research/issues/detail?id=495
Samsung Galaxy S6 Samsung Gallery – Bitmap Decoding Crash
Source: https://code.google.com/p/google-security-research/issues/detail?id=497
Samsung Galaxy S6 – libQjpeg DoIntegralUpsample Crash
Source: https://code.google.com/p/google-security-research/issues/detail?id=498
Samsung Galaxy S6 – android.media.process Face Recognition Memory Corruption
Source: https://code.google.com/p/google-security-research/issues/detail?id=499