CVE-2004-0566

CVE-2004-0566 describes a remote code execution vulnerability in Internet Explorer caused by an integer overflow in the BMP image handling (imgbmp.cxx). An attacker can exploit this by delivering a malicious BMP with a large bfOffBits value, potentially compromising the affected system when a use...

Microsoft Windows Server 2000 - Utility Manager All-in-One (MS04-019)

Microsoft Windows Server 2000 - Utility Manager All-in-One MS04-019 / COROMPUTER2004 Crpt Utility Manager exploit v2.666 modified by kralor Crpt It gets system language and sets windows names to work on any win2k :P Feel free to add other languages : v2.666: added autonomous allinone remote...

MS Windows 2k Utility Manager (All-In-One) Exploit (MS04-019)

Exploit for unknown platform in category local exploits ============================================================= MS Windows 2k Utility Manager All-In-One Exploit MS04-019 ============================================================= / COROMPUTER2004 Crpt Utility Manager exploit v2.666 modifi...

Microsoft Windows Server 2000 - Utility Manager All-in-One (MS04-019)

/ COROMPUTER2004 Crpt Utility Manager exploit v2.666 modified by kralor Crpt It gets system language and sets windows names to work on any win2k :P Feel free to add other languages : v2.666: added autonomous allinone remote exploitation system ; It can be executed through poor cmd.exe shells like...

Microsoft Windows Server 2000 - POSIX Subsystem Privilege Escalation (MS04-020)

Microsoft Windows Server 2000 - POSIX Subsystem Privilege Escalation MS04-020 / Microsoft Windows POSIX Subsystem Local Privilege Escalation Exploit MS04-020 Tested on windows 2k sp4 CN,NT/XP/2003 NOT TESTED Posixexp.c By bkbll bkbll cnhonker net,bkbll tom com www cnhonker com 2004/07/16 thanks t...

MS Windows 2000 Universal Language Utility Manager Exploit (MS04-019)

Exploit for unknown platform in category local exploits ===================================================================== MS Windows 2000 Universal Language Utility Manager Exploit MS04-019 ===================================================================== / COROMPUTER2004 Crpt Utility...

Microsoft Windows Server 2000 - Universal Language Utility Manager (MS04-019)

Microsoft Windows Server 2000 - Universal Language Utility Manager MS04-019 / COROMPUTER2004 Crpt Utility Manager exploit v1.666 modified by kralor Crpt It gets system language and sets windows names to work on any win2k :P Feel free to add other languages : You know where we are.. COROMPUTER2004...

MS Windows 2K POSIX Subsystem Privilege Escalation Exploit (MS04-020)

Exploit for unknown platform in category local exploits ===================================================================== MS Windows 2K POSIX Subsystem Privilege Escalation Exploit MS04-020 ===================================================================== / Microsoft Windows POSIX Subsyst...

Microsoft Windows Server 2000 - Universal Language Utility Manager (MS04-019)

/ COROMPUTER2004 Crpt Utility Manager exploit v1.666 modified by kralor Crpt It gets system language and sets windows names to work on any win2k :P Feel free to add other languages : You know where we are.. COROMPUTER2004 / / original disclaimer / //by Cesar Cerrudo sqlsecat include struct int id...

CVE-2004-0212

CVE-2004-0212 describes a stack-based buffer overflow in the Windows Task Scheduler (mstask) that affects Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0. The vulnerability occurs in how Task Scheduler handles long parameters in .job files, allowing a remote or local attacker to ex...

CVE-2004-0201

The CVE-2004-0201 entry documents a heap-based buffer overflow in the HTML Help viewer hh.exe used by HTML Help (.chm) on Windows platforms (Windows 98, Me, NT 4.0, 2000, XP, and Server 2003). The vulnerability allows remote code execution via a .CHM file with a large length field, enabling an at...

CVE-2004-0213

Utility Manager in Windows 2000 launches winhlp32.exe while Utility Manager is running with raised privileges, which allows local users to gain system privileges via a "Shatter" style attack that sends a Windows message to cause Utility Manager to launch winhlp32 by directly accessing the context...

CVE-2004-0210

The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow...

CVE-2004-0212

Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, allows local or remote attackers to execute arbitrary code via a .job file containing long parameters, as demonstrated using Internet Explorer and accessing a .job file on an...

CVE-2004-0213

CVE-2004-0213 - Windows 2000 Utility Manager Privilege Elevation : The flaw occurs when Utility Manager launches winhlp32.exe with Local System privileges. A locally authenticated user can exploit a Shatter-style sequence by sending crafted Windows messages to Utility Manager to trigger winhlp32 ...

CVE-2004-0210

CVE-2004-0210 describes a local privilege escalation in the Windows POSIX subsystem affecting Windows NT 4.0 and Windows 2000. The vulnerability is a buffer overflow caused by unchecked message length handling in the POSIX subsystem, enabling a local authenticated user to gain full system privile...

PT-2004-1378 · Microsoft · Winhlp32.Exe +2

Name of the Vulnerable Software and Affected Versions: Windows 2000 Description: The issue allows local users to gain system privileges via a "Shatter" style attack. This is achieved by sending a Windows message to Utility Manager, which launches winhlp32.exe with raised privileges. The attack...

Microsoft Windows Server 2000 - Utility Manager Privilege Escalation (MS04-019)

//by Cesar Cerrudo sqlsec at yahoo.com //Local elevation of priviliges exploit for Windows 2K Utility Manager second one!!!! //Gives you a shell with system privileges //If you have problems try changing Sleep values. include "stdio.h" include "windows.h" int mainint argc, char argv HWND lHandle,...

MS Windows 2000 Utility Manager Privilege Elevation Exploit (MS04-019)

Exploit for unknown platform in category local exploits ====================================================================== MS Windows 2000 Utility Manager Privilege Elevation Exploit MS04-019 ====================================================================== //by Cesar Cerrudo sqlsec at...

Microsoft Windows Server 2000 - Utility Manager Privilege Escalation (MS04-019)

Microsoft Windows Server 2000 - Utility Manager Privilege Escalation MS04-019 //by Cesar Cerrudo sqlsec at yahoo.com //Local elevation of priviliges exploit for Windows 2K Utility Manager second one!!!! //Gives you a shell with system privileges //If you have problems try changing Sleep values...