Inkra 1504GX DoS
Published:		15.09.2004
Source:		BUGTRAQ
SecurityVulns ID:		4005
Type:		remote
Level:		5/10
Description:		Invalid IP options handling.

Affected:

INKRA : Inkra 1504GX

Original document

felix zhou, Inkra 1504GX DoS vulnerability in conducting IP protocol (15.09.2004)

Discuss:

Read or add your comments to this news (0 comments)

SUS (extended su) format string bug
Published:		15.09.2004
Source:		BUGTRAQ
SecurityVulns ID:		4006
Type:		local
Level:		5/10
Description:		Format string bug on syslog() call.

Affected:

SUS : SUS 2.0

Original document

LSS Security, SUS 2.0.2 local root vulnerability (15.09.2004)

Files:		Sus 2.0.2 local root exploit
Discuss:		Read or add your comments to this news (0 comments)

Microsoft Word WordPerfect filter buffer overflow updated since 15.09.2004
Published:		17.09.2004
Source:		MICROSOFT
SecurityVulns ID:		4003
Type:		client
Level:		6/10
Description:		Buffer overflow on WordPerfect format parsing.

Affected:		MICROSOFT : Office 2000
		MICROSOFT : Office XP
		MICROSOFT : Office 2003
		MICROSOFT : Microsoft Works 2001
		MICROSOFT : Microsoft Works 2002
		MICROSOFT : Microsoft Works 2003
		MICROSOFT : Microsoft Works 2004

Original document		NGSSoftware Insight Security Research Advisory (NISR), Microsoft WordPerfect 5.x Converter Heap Overflow (17.09.2004)
		MICROSOFT, Microsoft Security Bulletin MS04-027 Vulnerability in WordPerfect Converter Could Allow Code Execution (884933) (15.09.2004)

Files:		Microsoft Security Bulletin MS04-027 Vulnerability in WordPerfect Converter Could Allow Code Execution (884933)
Discuss:		Read or add your comments to this news (0 comments)

Windows GDI+ libraries JPEG buffer overflow updated since 15.09.2004
Published:		11.10.2004
Source:		MICROSOFT
SecurityVulns ID:		4004
Type:		library
Level:		8/10
Description:		Buffer overflow in JPEG parsing routines.

Affected:		MICROSOFT : Internet Explorer 6.0
		MICROSOFT : Windows XP
		MICROSOFT : Office XP
		MICROSOFT : Windows 2003 Server
		MICROSOFT : Project 2002
		MICROSOFT : Visio 2002
		BUSYNESSOBJECTS : Crystal Reports 10
		MICROSOFT : Visual Studio .NET 2003
		MICROSOFT : Office 2003
		MICROSOFT : Project 2003
		MICROSOFT : Visio 2003
		MICROSOFT : Visual Studio .NET 2002
		MICROSOFT : .NET Framework version 1.0 SDK
		MICROSOFT : Greetings 2002
		MICROSOFT : Picture It! 7.0
		MICROSOFT : Digital Image Pro 7.0
		MICROSOFT : Digital Image Pro 9
		MICROSOFT : Picture It! 9
		MICROSOFT : Digital Image Suite 9
		MICROSOFT : GDI+
		MICROSOFT : .NET Framework 1.0
		MICROSOFT : .NET Framework 1.1

Original document		SECUNIA, [SA12772] Crystal Reports JPEG Processing Buffer Overflow Vulnerability (11.10.2004)
		CERT, US-CERT Technical Cyber Security Alert TA04-260A -- Microsoft Windows JPEG component buffer overflow (17.09.2004)
		Nick D., Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow (15.09.2004)
		MICROSOFT, Microsoft Security Bulletin MS04-028 Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987) (15.09.2004)

Files:		Windows XP JPEG Buffer Overflow POC
		Example of JPG Exploit & Shellcode
		GDI+ buffer overrun Exploit, Modified by Crypto <crypto@xaker.ru>
		GDIPLUS VULN - MS04-028 - CRASH TEST JPEG
		GDI+ JPEG Remote Exploit
		Microsoft Security Bulletin MS04-028 Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987)
Discuss:		Read or add your comments to this news (0 comments)