MENU

Resources(82)

  • Windows 10 RS2/RS3 GDI data-only exploitation tales (OffensiveCon 2018)

    Nikos Sampanis

    Hello, I'm Nikos Sampanis, a security researcher working at CENSUS. On February 16th, 2018 I presented at OffensiveCon a talk with the title "Windows 10 RS2/RS3 GDI data-only exploitation tales". The presentation focused on a mitigation introduced in the Win32k component of Microsoft Windows to prevent the...

  • Android stagefright ih264d_read_mmco_commands libavc heap overflow

    Anestis Bechtsoudis

    Android provides a media playback engine at the native level called Stagefright that comes built-in with software-based codecs for several popular media formats. Stagefright features for audio and video playback include integration with OpenMAX codecs, session management, time-synchronized rendering, transport...

  • Kamailio SEAS module encode_msg heap buffer overflow

    Stelios Tsampas

    There is a (remotely exploitable) heap overflow vulnerability in Kamailio version 4.3.4 and possibly in previous versions. The vulnerability takes place in the SEAS module

  • Android stagefright libavc ih264d_decode heap overflow

    Anestis Bechtsoudis

    Android provides a media playback engine at the native level called Stagefright that comes built-in with software-based codecs for several popular media formats.CENSUS engineers have discovered that the libavcodec H.264 software decoder invoked by libstagefright has an OOB write heap overflow at the...