QQplayer smi File Processing Buffer Overflow Exploit

28 july, 2010

Target: QQplayer 2.3.696.400p1
Impact: Code execution

QQplayer-expl.py

National Vulnerability Database

31 August

CVE-2010-3197

IBM DB2 9.7 before FP2 does not perform the expected access control on the monitor administrative vi ...

CVE-2010-3196

IBM DB2 9.7 before FP2, when AUTO_REVAL is IMMEDIATE, allows remote authenticated users to cause a d ...

CVE-2010-3195

Unspecified vulnerability in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 on Windows S ...

CVE-2010-3194

The DB2DART program in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 allows attackers t ...

CVE-2010-3193

Unspecified vulnerability in the DB2STST program in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 ...

Viruses

03 September

Suspicious.Cloud.5.A

Suspicious.Cloud.5.A is a detection technology designed to detect entirely new malware threats witho ...

Suspicious.Cloud.5.D

Suspicious.Cloud.5.D is a detection technology designed to detect entirely new malware threats witho ...

Trojan.Sasfis!gen2

Trojan.Sasfis!gen2 is a heuristic detection used to detect threats associated with the Trojan.Sasfis ...

W32.Changeup!gen9

W32.Changeup!gen9 is a heuristic detection used to detect threats associated certain threat families ...

02 September

Bloodhound.Exploit.354

Bloodhound.Exploit.354 is a heuristic detection for files attempting to exploit the Apple QuickTime ...

Red Hat

[RHSA-2010:0670-01] Important: kernel security and bug fix update

Red Hat Security Advisory - Important: kernel security and bug fix update

02 september, 2010

[RHSA-2010:0661-01] Important: kernel security update

Red Hat Security Advisory - Important: kernel security update

30 august, 2010

[RHSA-2010:0660-01] Important: kernel security and bug fix update

Red Hat Security Advisory - Important: kernel security and bug fix update

30 august, 2010

PoC

Microsoft Windows XP Indeo Filter DLL Hijacking PoC

Target: Microsoft Windows XP
Impact: Code execution

РоС 31 august, 2010

avast! <= 5.0.594 license files DLL Hijacking Exploit (mfc90loc.dll)

Target: avast! 5.0.594 and previous versions
Impact: Code execution

РоС 26 august, 2010

Windows Live Mail DLL Hijacking Exploit (dwmapi.dll)

Target: Windows Live Mail
Impact: Code execution

РоС 26 august, 2010

Microsoft Power Point 2010 DLL Hijacking PoC (pptimpconv.dll)

Target: Microsoft PowerPoint 2010
Impact: Code execution

РоС 26 august, 2010

Microsoft Windows Ipv4SetEchoRequestCreate() Local Denial of Service PoC

Target: Microsoft Windows Vista/2008/7
Impact: Denial of service

РоС 23 august, 2010

Linux Kernel 64bit Maximum Stack Size Denial of Service PoC

Target: Linux Kernel 2.6.x
Impact: Denial of service

РоС 23 august, 2010

HP OpenView NNM v.7.53 OvJavaLocale Buffer Overflow PoC

Target: HP OpenView NNM v.7.53
Impact: Denial of service

РоС 16 august, 2010

Progitek Visionner Photos v2.0 Denial of Service PoC

Target: Progitek Visionner Photos v2.0
Impact: Denial of service

РоС 16 august, 2010

FathFTP 1.8 (RasIsConnected Method) ActiveX Buffer Overflow PoC (SEH)

Target: FathFTP 1.8
Impact: Code execution

РоС 16 august, 2010

Apple iOS pdf Jailbreak Exploit

Target: Apple iOS
Impact: Priviledge escalation

РоС 13 august, 2010

Mini-stream RM-MP3 Converter/WMDownloader/ASX to MP3 Cnvrtr Stack Buffer Overflow PoC

Target: Mini-stream RM-MP3 Converter/WMDownloader/ASX to MP3 Cnvrtr
Impact: Code execution

РоС 13 august, 2010

Jaangle 0.98e.971 Denial of Service PoC

Target: Jaangle 0.98e.971
Impact: Denial of service

РоС 13 august, 2010

MS Windows win32k.sys Heap Overflow PoC

Target: Microsoft Windows XP, 2003, Vista, 2008, 7
Impact: Denial of service

РоС 07 august, 2010

Avast! Internet Security 5.0 aswFW.sys kernel driver IOCTL Memory Pool Corruption PoC

Target: Avast! Internet Security 5.0
Impact: Denial of service

РоС 06 august, 2010

Xerver 4.32 Source Disclosure and HTTP Authentication Bypass Exploit (Meta)

Target: Xerver 4.32
Impact: Information disclosure

РоС 02 august, 2010

Cisco

Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service Vulnerabilities

Cisco Unified Communications Manager contains two denial of service (DoS) vulnerabilities th ...

02 september, 2010

Cisco Security Advisory: Cisco Unified Presence Denial of Service Vulnerabilities

Cisco Unified Presence contains two denial of service (DoS) vulnerabilities that affect the ...

02 september, 2010

Cisco Security Advisory: Cisco IOS Software TCP Denial of Service Vulnerability

Cisco IOS Software Release, 15.1(2)T is affected by a denial of service (DoS) vulner ...

13 august, 2010

Microsoft

MS10-060: Vulnerabilities in the Microsoft .NET Common Language Runtime and in Microsoft Silverlight Could Allow Remote Code Execution (2265906)

This security update resolves two privately reported vulnerabilities in Microsoft .NET Framework and ...

11 august, 2010

MS10-059: Vulnerabilities in the Tracing Feature for Services Could Allow Elevation of Privilege (982799)

This security update resolves one publicly disclosed vulnerability and one privately reported vulner ...

11 august, 2010

MS10-058: Vulnerabilities in TCP/IP Could Allow Elevation of Privilege (978886)

This security update resolves two privately reported vulnerabilities in Microsoft Windows. The more ...

11 august, 2010

Sun Microsystems

QQplayer smi File Processing Buffer Overflow Exploit

CVE-2010-3197

CVE-2010-3196

CVE-2010-3195

CVE-2010-3194

CVE-2010-3193

Suspicious.Cloud.5.A

Suspicious.Cloud.5.D

Trojan.Sasfis!gen2

W32.Changeup!gen9

Bloodhound.Exploit.354

[RHSA-2010:0670-01] Important: kernel security and bug fix update

[RHSA-2010:0661-01] Important: kernel security update

[RHSA-2010:0660-01] Important: kernel security and bug fix update

Microsoft Windows XP Indeo Filter DLL Hijacking PoC

avast! <= 5.0.594 license files DLL Hijacking Exploit (mfc90loc.dll)

Windows Live Mail DLL Hijacking Exploit (dwmapi.dll)

Microsoft Power Point 2010 DLL Hijacking PoC (pptimpconv.dll)

Microsoft Windows Ipv4SetEchoRequestCreate() Local Denial of Service PoC

Linux Kernel 64bit Maximum Stack Size Denial of Service PoC

HP OpenView NNM v.7.53 OvJavaLocale Buffer Overflow PoC

Progitek Visionner Photos v2.0 Denial of Service PoC

FathFTP 1.8 (RasIsConnected Method) ActiveX Buffer Overflow PoC (SEH)

Apple iOS pdf Jailbreak Exploit

Mini-stream RM-MP3 Converter/WMDownloader/ASX to MP3 Cnvrtr Stack Buffer Overflow PoC

Jaangle 0.98e.971 Denial of Service PoC

MS Windows win32k.sys Heap Overflow PoC

Avast! Internet Security 5.0 aswFW.sys kernel driver IOCTL Memory Pool Corruption PoC

Xerver 4.32 Source Disclosure and HTTP Authentication Bypass Exploit (Meta)

Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service Vulnerabilities

Cisco Security Advisory: Cisco Unified Presence Denial of Service Vulnerabilities

Cisco Security Advisory: Cisco IOS Software TCP Denial of Service Vulnerability

MS10-060: Vulnerabilities in the Microsoft .NET Common Language Runtime and in Microsoft Silverlight Could Allow Remote Code Execution (2265906)

MS10-059: Vulnerabilities in the Tracing Feature for Services Could Allow Elevation of Privilege (982799)

MS10-058: Vulnerabilities in TCP/IP Could Allow Elevation of Privilege (978886)

This Alert covers CVE-2010-0896 for the mail component of the Sun Convergence product

This Alert Covers CVE-2010-0893 for the Mail Component of the Sun Convergence Product

SunOS 5.10_x86: ucode driver patch