Joshua J. Drake

5 exploits Active since Oct 2015
CVE-2015-1538 NOMISEC WORKING POC
Android < 5.1 - Remote Code Execution via MP4 Atom Integer Overflow
Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitrary code via crafted atoms in MP4 data that trigger an unchecked multiplication, aka internal bug 20139950, a related issue to CVE-2015-4496.
205 stars
CVE-2016-5696 NOMISEC MEDIUM WORKING POC
Linux kernel <4.7 - RCE
net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to hijack TCP sessions via a blind in-window attack.
75 stars
CVSS 4.8
CVE-2015-1538 NOMISEC WORKING POC
Android < 5.1 - Remote Code Execution via MP4 Atom Integer Overflow
Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitrary code via crafted atoms in MP4 data that trigger an unchecked multiplication, aka internal bug 20139950, a related issue to CVE-2015-4496.
1 stars
CVE-2015-1538 NOMISEC WORKING POC
Android < 5.1 - Remote Code Execution via MP4 Atom Integer Overflow
Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitrary code via crafted atoms in MP4 data that trigger an unchecked multiplication, aka internal bug 20139950, a related issue to CVE-2015-4496.
CVE-2015-1538 EXPLOITDB python WORKING POC
Android < 5.1 - Remote Code Execution via MP4 Atom Integer Overflow
Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitrary code via crafted atoms in MP4 data that trigger an unchecked multiplication, aka internal bug 20139950, a related issue to CVE-2015-4496.