bugtraq - Eleytt Research ER-03-2012

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Date: Thu, 08 Mar 2012 19:53:11 +0100
From: "Michal Bucko" <michal.bucko@...ytt.com>
To: bugtraq@...urityfocus.com
Subject: Eleytt Research ER-03-2012

Eleytt Research
www.eleytt.com

Overview:
====================
Michal A. Bucko

Credit:
====================
Anonymous researcher
Michal A. Bucko

Vulnerability Table
===================

Note: All of the vulnerabilities are reported in Holdem Manager Professional,
 poker tracking
software.

1. Holdem Manager 1.11 "Concat" Session Module Memory Corruption
2. Holdem Manager 1.11 Collection Modification Memory Corruption
3. Holdem Manager 1.11 All Hands Function Memory Corruption

Vulnerability Details
=========================
=========================

All three issues have been reported to the vendor who had been 
given additional information regarding the issues. For the 
security of the players, we are not releasing any more details.

We would like to thank Holdem Manager's team for cooperation. 

Eleytt - Company Information
============================

Eleytt Corporation is specialized in penetration testing, vulnerability
development, advanced reverse engineering and exploitation techniques.
Eleytt provides various security-related services: risk assessment,
security policy, security assurance, incident management, web
application security testing, continuous security assurance programs.

DISCLAIMER
==========

This document and all the information it contains are provided "as is",
for educational purposes only, without warranty of any kind, whether
express or implied.

The authors reserve the right not to be responsible for the topicality,
correctness, completeness or quality of the information provided in
this document. Liability claims regarding damage caused by the use of
any information provided, including any kind of information which is
incomplete or incorrect, will therefore be rejected.