|
xloadFlaws
|
|
Hits: 26 |
|
Date added: 10/07/2005 |
|
Three buffer overflows have been discovered in xloadimage during the handling of the image title name. When xloadimage is processing a loaded image, it is creating a new Image object and then writing the processed image to it. At that point, it will also copy the title from the old image to the newly created image. The 'zoom', 'reduce', and 'rotate' functions are using a fixed length buffer to construct the new title name when an image processing is done. Since the title name in a NIFF format is of varying length, and there are insufficient buffer size validations, the buffer can be overflowed. Proof of concept files included. |
|
|
|
|
|
|
notSPIKEfile
|
|
Hits: 26 |
|
Date added: 07/08/2006 |
|
notSPIKEfile is a linux based file format fuzzing tool. It was designed to automate the executing the launching of applications and detection of exceptions caused by fuzzed file formats. |
|
|
|
|
|
|
ShellCode_execve.c
|
|
Hits: 25 |
|
Date added: 11/20/2005 |
|
Simple linux/i386 ShellCode that execute /bin/sh. |
|
|
|
|
|
|
ShellCode_setuid_execve.c
|
|
Hits: 22 |
|
Date added: 12/15/2005 |
|
Simple linux/i386 ShellCode that execute /bin/sh after a setuid(0). |
|
|
|
|
|
|
ShellCode_ImLookingYou.c
|
|
Hits: 17 |
|
Date added: 12/03/2005 |
|
Simple linux/i386 ShellCode that write I'm looking you ... to /dev/tty. |
|
|
|
