Karalon - News Update | Network Security Assessment | Vulnerability Assessment | Vulnerability Scanner | Network Security Scanner | Security Assessment

Home Products Downloads News Partners About Us

Karalon News Update
21st July 2007

Traffic File Update July 2007

Traffic IQ Pro is already the most comprehensive testing and validation solution available today for network and inline devices. With its ease of use and extensive library of normal and threat traffic files the product can be used to easily create and replay simple or complex stateful testing scenarios to allow the validation of the configuration of inline network devices such as firewalls, IPS, routers, switches and other critical network systems in a controlled, repeatable and safe way.

Note: Traffic file updates are available to licensed users only.

This update includes the following traffic files:

Application Exploits

Adobe Flash Player Multiple Remote Code Execution (flash_flv_9.0.45.0_exp)
F-PROT Antivirus CHM File Heap Buffer Overflow
HTTP Adobe Flash Player Multiple Remote Code Execution (flv)
HTTP Adobe Flash Player Multiple Remote Code Execution (swf)
HTTP AMX VNC ActiveX Control Buffer Overflow
HTTP Apache Tomcat JSP Example Web Applications Cross Site Scripting
HTTP Firefox Location Hostname Dom Property Cookie Theft
HTTP HP Mercury Quality Center ActiveX ProgColor Overflow
HTTP IE FirefoxURL Protocol Handler Command Injection
HTTP IE Speech API 4 COM Object Buffer Overflow (XP-SP2)
HTTP IE Vector Markup Language Buffer Overflow (MS06-055)
HTTP IE WMF Image Parsing Memory Corruption (MS06-004)
HTTP McAfee Security Center IsOldAppInstalled Buffer Overflow
HTTP McAfee Viruscan McSubMgr.DLL ActiveX Buffer Overflow
HTTP Microsoft Windows Embedded Web Font Buffer Overflow
HTTP Mozilla Firefox URLBar Null Byte File Code Execution
HTTP Mozilla Firefox WYCIWYG URI Cache Zone Bypass
HTTP OpManager (ping.do) Cross-Site Scripting
HTTP OpManager (ReportViewAction.do) Cross-Site Scripting
HTTP OpManager (search.do) Cross-Site Scripting
HTTP OpManager (traceroute.do) Cross-Site Scripting
HTTP RealPlayer SMIL wallclock Stack Overflow
HTTP SAP DB Web Server waHTTP.exe DoS
HTTP SAP DB Web Server waHTTP.exe Overflow (SAP DB 7.4.3)
HTTP SAP DB Web Server waHTTP.exe Overflow (win2k_EN)
HTTP SAP DB Web Server waHTTP.exe Overflow (win2k_RU)
HTTP SAP EnjoySAP KWEdit.DLL ActiveX Control Overflow
HTTP SAP EnjoySAP RFCGUISink.DLL ActiveX Overflow
HTTP Zenturi ProgramChecker ActiveX DebugMsgLog Overflow
HTTP Zenturi ProgramChecker ActiveX Fill Method Overflow
IBM Proventia Sensor Appliance Multiple Input Validation
Microsoft Excel COLINFO Remote Code Execution
Microsoft Excel Sheet Name Remote DoS
Microsoft Excel Style Handling Code Execution (nanika)
Microsoft Excel Style Remote Code Execution (MS06-059)
Microsoft Office Malformed String Parsing Code Execution
Microsoft Office XP Array Index DoS
Microsoft PowerPoint Data Record Remote Code Execution
Microsoft PowerPoint Remote Code Execution (MS06-058)
MS Office Malformed String Parsing Code Execution (MS06-038)
MS Office XP Array Index DoS (MS06-038)
MS Visual Basic for Applications Document Check Overflow
Oracle Rapid Install Web Server Secondary Login Page CSS POC_1
Oracle Rapid Install Web Server Secondary Login Page CSS
PC SOFT WinDEV WDP File Parsing Overflow (EAX.WDP)
PC SOFT WinDEV WDP File Parsing Overflow (EDI.WDP)
PCSoft WinDEV .wdp Project File Handling DoS
SAP Internet Graphics Server PARAMS Cross Site Scripting
Sun Java WebStart JNLP Stack Buffer Overflow
Sun JDK BMP Image Parser Denial of Service
Sun JDK ICC Profile Integer Overflow
Windows Media Player ASX PlayList File Heap Overflow (MS06-078)