252 matches found
Sql injection
SQL injection vulnerability in the Call Detail Record Postgres logging engine cdrpgsql in Asterisk 1.4.x before 1.4.15, 1.2.x before 1.2.25, B.x before B.2.3.4, and C.x before C.1.0-beta6 allows remote authenticated users to execute arbitrary SQL commands via 1 ANI and 2 DNIS arguments...
CVE-2007-6170
SQL injection vulnerability in the Call Detail Record Postgres logging engine cdrpgsql in Asterisk 1.4.x before 1.4.15, 1.2.x before 1.2.25, B.x before B.2.3.4, and C.x before C.1.0-beta6 allows remote authenticated users to execute arbitrary SQL commands via 1 ANI and 2 DNIS arguments...
AST-2007-026 - SQL Injection issue in cdr_pgsql
Asterisk Project Security Advisory - AST-2007-026 +------------------------------------------------------------------------+ | Product | Asterisk | |----------------------+-------------------------------------------------| | Summary | SQL Injection issue in cdrpgsql |...
CVE-2007-6170: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Call Detail Record Postgres logging engine cdrpgsql in Asterisk 1.4.x before 1.4.15, 1.2.x before 1.2.25, B.x before B.2.3.4, and C.x before C.1.0-beta6 allows remote authenticated users to execute arbitrary SQL commands via 1 ANI and 2 DNIS arguments...
Analysis of ANI intelligent network horse hung it-vulnerability warning-the black bar safety net
A thorough analysis of MS06014+MS06073+MS07017 intelligent network horse hanging Horse,the article is in breach of that can see,even a little problem,want to is unclear,and so learn again to analyze the next,article is nice,to see the figure you know! Today visit to http://www. fzlyl. cn/, found ...
Microsoft Windows - .ani GDI Remote Privilege Escalation (MS07-017)
Microsoft Windows - .ani GDI Remote Privilege Escalation MS07-017 MS Windows .ANI GDI Remote Elevation of Privilege Exploit MS07-017 https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/3804.zip 04262007-gdiremoteelevationprivilegeexploitms07017principal.zip...
MS Windows Explorer Unspecified .ANI File Denial of Service Exploit
No description provided by source. / MS Windows Explorer Unspecified .ANI File DoS Another .Ani bug that freezes Explorer if you open a folder that contains a crafted file. Tested against Win XP SP2 FR. Have Fun! Coded by Marsu [email protected] / include "stdio.h" include "stdlib.h"...
Microsoft Windows Explorer - '.ANI' File Denial of Service
/ MS Windows Explorer Unspecified .ANI File DoS Another .Ani bug that freezes Explorer if you open a folder that contains a crafted file. Tested against Win XP SP2 FR. Have Fun! Coded by Marsu / include "stdio.h" include "stdlib.h" unsigned char Aniheaders =...
devcode2.txt
/ version 0.5 Copyright c 2007 devcode ^^ D E V C O D E ^^ Windows .ANI LoadAniIcon Stack Overflow For Hardware DEP XP SP2 CVE-2007-1765 Description: A vulnerability has been identified in Microsoft Windows, which could be exploited by remote attackers to take complete control of an affected...
CVE-2007-1867
Buffer overflow in IrfanView 3.99 allows remote attackers to execute arbitrary code via a crafted animated cursor ANI file...
Buffer overflow
Buffer overflow in IrfanView 3.99 allows remote attackers to execute arbitrary code via a crafted animated cursor ANI file...
CVE-2007-1867
CVE-2007-1867 applies to IrfanView 3.99. A buffer overflow in the handling of animated cursor (ANI) files can be triggered by a crafted ANI, allowing remote attackers to execute arbitrary code. The vulnerability is described in both the initial CVE entry and connected records as a stack/heap over...
CVE-2007-1867
Buffer overflow in IrfanView 3.99 allows remote attackers to execute arbitrary code via a crafted animated cursor ANI file...
MS Windows Animated Cursor (.ANI) Universal Exploit Generator
No description provided by source. -------------------------------------------------------------------------------- Info: .ANI RIFF Cursors 2007 universal exploit generator Tested on MS Internet Explorer 6.x-7.x, Windows XP SP2, Windows Vista Author: Yag Kohha 10xnGr33tz 2: Jamikazu, Skylined...
CVE-2007-1867: Undefined Security Weakness
Buffer overflow in IrfanView 3.99 allows remote attackers to execute arbitrary code via a crafted animated cursor ANI file...
Preemptive Protection against Microsoft Windows Animated Cursor Remote Code Execution Vulnerability (MS07-017)
A remote code execution vulnerability has been reported in the animated cursor code in Microsoft Windows. A remote attacker can exploit this vulnerability via a specially crafted ANI file. Animated cursors files ANI allow a series of frames to appear at the mouse pointer location instead of a...
ANI vulnerability third-party patch is broken[attached to the new third-party patches]-vulnerability warning-the black bar safety net
MS Windows Animated Cursor . ANI Remote Exploit eeye patch bypass ..:: jamikazu presents ::.. Windows Animated Cursor Handling Exploit 0day Version3 Works on fully patched Windows Vista I think it is first real remote code execution exploit on vista = Tested on: Windows Vista Enterprise Version 6...
Microsoft Windows - Animated Cursor '.ani' Local Overflow (Hardware DEP)
/ version 0.5 Copyright c 2007 devcode ^^ D E V C O D E ^^ Windows .ANI LoadAniIcon Stack Overflow For Hardware DEP XP SP2 CVE-2007-1765 Description: A vulnerability has been identified in Microsoft Windows, which could be exploited by remote attackers to take complete control of an affected...
Microsoft Windows动画光标ANI格式处理远程代码执行漏洞
Microsoft Internet Explorer是一款流行的WEB浏览器,Microsoft Windows是一款流行的操作系统。 Microsoft Windows在处理畸形的动画图标文件.ani时存在缓冲区溢出问题,远程攻击者可利用此漏洞以 当前用户进程权限执行任意指令。 Microsoft Windows在处理畸形动画光标文件.ani时没有正确地验证ANI头字段中所指定的大小,可导致基 于栈溢出漏洞。攻击者可以构建恶意WEB页或者包含ANI文件的EMAIL消息来触发,就会触发这个溢出,导致...
Microsoft Windows - Animated Cursor .ani Local Overflow (Hardware DEP)
Microsoft Windows - Animated Cursor .ani Local Overflow Hardware DEP / version 0.5 Copyright c 2007 devcode ^^ D E V C O D E ^^ Windows .ANI LoadAniIcon Stack Overflow For Hardware DEP XP SP2 CVE-2007-1765 Description: A vulnerability has been identified in Microsoft Windows, which could be...