Subscribe via feed.
Archive for December, 2016

OsiriX DICOM Viewer 8.0.1 (dulparse.cc) Remote Memory Corruption

Posted by deepcore under exploit (No Respond)

OsiriX DICOM Viewer version 8.0.1 suffers from a remote memory corruption vulnerability.

ConQuest DICOM Server 1.4.17d Remote Stack Buffer Overflow

Posted by deepcore under exploit (No Respond)

ConQuest DICOM Server version 1.4.17d suffers from a remote stack buffer overflow vulnerability that allows for remote code execution.

DCMTK storescp DICOM storage (C-STORE) SCP Remote Stack Buffer Overflow

Posted by deepcore under exploit (No Respond)

DCMTK storescp DICOM storage (C-STORE) SCP remote stack buffer overflow exploit. This affects versions 3.6.0 and below.

Horos 2.1.0 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

Horos version 2.1.0 suffers from a cross site scripting vulnerability.

Horos 2.1.0 DICOM Medical Image Viewer Remote Memory Overflow

Posted by deepcore under exploit (No Respond)

Horos version 2.1.0 DICOM Medical Image Viewer suffers from a remote memory overflow vulnerability.

Horos 2.1.0 Web Portal Remote Information Disclosure / Directory Traversal

Posted by deepcore under exploit (No Respond)

Horos version 2.1.0 web portal suffers from an information disclosure vulnerability that can allow for directory traversal attacks.

Gstreamer 0.10.x Logic Error

Posted by deepcore under exploit (No Respond)

A vulnerability and a separate logic error exist in the gstreamer 0.10.x player for NSF music files. Combined, they allow for very reliable exploitation and the bypass of 64-bit ASLR, DEP, etc. The reliability is provided by the presence of a turing complete “scripting” inside a music player. Read the homepage link for full analysis. […]

WordPress MailChimp 3.1.5 / 4.0.10 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

WordPress MailChimp versions 3.1.5 and 4.0.10 suffer from a cross site scripting vulnerability.

Adobe Animate 15.2.1.95 Buffer Overflow

Posted by deepcore under exploit (No Respond)

Adobe Animate versions 15.2.1.95 and below suffer from a buffer overflow vulnerability.

Nidesoft MP3 Converter 2.6.18 Buffer Overflow

Posted by deepcore under exploit (No Respond)

Nidesoft MP3 Converter version 2.6.18 SEH local buffer overflow exploit.