Showing 1 - 5 of 5

Files from Sean de Regge

RealNetworks Realplayer QCP Parsing Heap Overflow: Posted Sep 17, 2011; Authored by Sean de Regge, juan vazquez | Site metasploit.com; This Metasploit module exploits a heap overflow in Realplayer when handling a .QCP file. The specific flaw exists within qcpfformat.dll. A static 256 byte buffer is allocated on the heap and user-supplied data from the file is copied within a memory copy loop. This allows a remote attacker to execute arbitrary code running in the context of the web browser via a .QCP file with a specially crafted "fmt" chunk. At this moment this module exploits the flaw on Windows XP IE6, IE7.; tags | exploit, remote, web, overflow, arbitrary; systems | windows, xp; advisories | CVE-2011-2950, OSVDB-74549; MD5 | 6fd55d2d1f45a9927dfae4e3fc454d59; Download | Favorite | Comments (0)

RealNetworks RealPlayer Code Execution: Posted Jan 13, 2011; Authored by Sean de Regge; Proof of concept code that demonstrates the parameter injection bug in Realplayers RecordClip() active-x function and firefox plug-in.; tags | exploit, activex, proof of concept; MD5 | b310641a123029e16de43f8e1c8081c2; Download | Favorite | Comments (0)

iDEFENSE Security Advisory 2007-10-11.1: Posted Oct 12, 2007; Authored by iDefense Labs, Sean de Regge | Site idefense.com; iDefense Security Advisory 10.11.07 - Remote exploitation of multiple integer overflow vulnerabilities in libFLAC, as included with various vendor's software distributions, allows attackers to execute arbitrary code in the context of the currently logged in user. iDefense has confirmed the existence of these vulnerabilities libFLAC 1.2.0, as well as the version of libFLAC included in in the full 5.35 version Winamp. Previous versions of libFLAC may also be vulnerable. The lite version of Winamp does not include support for the FLAC file format, and as such is not vulnerable.; tags | advisory, remote, overflow, arbitrary, vulnerability; advisories | CVE-2007-4619; MD5 | bcc16cceb11c1fb4471c36b4ce403c72; Download | Favorite | Comments (0)

iDEFENSE Security Advisory 2005-01-13.t: Posted Jan 16, 2005; Authored by iDefense Labs, Sean de Regge | Site idefense.com; iDEFENSE Security Advisory 01.13.05 - Remote exploitation of a buffer overflow vulnerability in Apple Computer Inc.'s iTunes music player allows attackers to execute arbitrary code. The problem specifically exists when parsing playlist files that contain long URL file entries.; tags | advisory, remote, overflow, arbitrary; systems | apple; MD5 | 056983d844f8d9a2a2c7c49945c05ae2; Download | Favorite | Comments (0)

Apple Security Advisory 2005-01-11: Posted Jan 12, 2005; Authored by Apple, Sean de Regge | Site apple.com; iTunes 4.7.1 fixes a buffer overflow in the parsing of m3u and pls playlist files that could allow earlier versions of iTunes to crash and execute arbitrary code.; tags | advisory, overflow, arbitrary; advisories | CVE-2005-0043; MD5 | 2edf3a0ba1f554416c7b60ac53bea953; Download | Favorite | Comments (0)

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days