Eleytt Research www.eleytt.com Overview: ==================== Michal A. Bucko Credit: ==================== Anonymous researcher Michal A. Bucko Vulnerability Table =================== Note: All of the vulnerabilities are reported in Holdem Manager Professional, poker tracking software. 1. Holdem Manager 1.11 "Concat" Session Module Memory Corruption 2. Holdem Manager 1.11 Collection Modification Memory Corruption 3. Holdem Manager 1.11 All Hands Function Memory Corruption Vulnerability Details ========================= ========================= All three issues have been reported to the vendor who had been given additional information regarding the issues. For the security of the players, we are not releasing any more details. We would like to thank Holdem Manager's team for cooperation. Eleytt - Company Information ============================ Eleytt Corporation is specialized in penetration testing, vulnerability development, advanced reverse engineering and exploitation techniques. Eleytt provides various security-related services: risk assessment, security policy, security assurance, incident management, web application security testing, continuous security assurance programs. DISCLAIMER ========== This document and all the information it contains are provided "as is", for educational purposes only, without warranty of any kind, whether express or implied. The authors reserve the right not to be responsible for the topicality, correctness, completeness or quality of the information provided in this document. Liability claims regarding damage caused by the use of any information provided, including any kind of information which is incomplete or incorrect, will therefore be rejected.