AOL桌面工具栏未初始化指针远程代码执行漏洞

Bugtraq ID: 54146 AOL Deskbar是一款桌面工具栏软件。 AOL dnUpdater ActiveX控件存在安全漏洞，允许攻击者以应用程序上下文执行任意代码。 AOL dnUpdater ActiveX控件把部分参数传递给"Init"方法并作为函数指针使用，可被利用在任意内存位置执行任意指令。 0 AOL Deskbar AOL dnUpdater ActiveX Control 厂商解决方案 用户可参考如下供应商提供的升级程序：...

ZDI-12-098 : AOL Products dnUpdater ActiveX Uninitialized Pointer Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-098 : AOL Products dnUpdater ActiveX Uninitialized Pointer Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-098 June 21, 2012 - -- CVE ID: - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P - -- Affected Vendors:...

AOL Products dnUpdater ActiveX Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of America Online's Toolbar, Desktop, IM, and winamp. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific...

Yet Another Hotmail, AOL and Yahoo Password Reset 0Day Vulnerabilities

Yesterday we Reported a 0-Day Vulnerability in Hotmail, which allowed hackers to reset account passwords and lock out the account's real owners. Tamper Data add-on allowed hackers to siphon off the outgoing HTTP request from the browser in real time and then modify the data.When they hit a passwo...

EFF Warns Users About Privacy Issues With New AIM Chat Client

Privacy experts at the EFF are warning users not to upgrade to the new version of the venerable AOL Instant Messenger chat client because of some serious privacy concerns with the application. The main concern is that the new version of AIM automatically logs all user conversations by default, bu...

finch, libpurple, pidgin security update

CentOS Errata and Security Advisory CESA-2011:1821 Updated pidgin packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base...

RedHat Update for pidgin RHSA-2011:1820-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS 4 / 5 : pidgin (CESA-2011:1820)

Updated pidgin packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...

Moderate: Red Hat Security Advisory: pidgin security update

Updated pidgin packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...

XSS Vulnerability on AOL Energy website

XSS Vulnerability on AOL Energy website A non-persistent Cross Site Scripting XSS vulnerability discovered on AOL Energy website. The similar Vulnerability is claimed by few other guys on some forums too. No clue that who found it first, But THN got update from Vansh & Vaibhuv from India...

XSS Vulnerability on AOL Energy website

XSS Vulnerability on AOL Energy website A non-persistent Cross Site Scripting XSS vulnerability discovered on AOL Energy%3C%2Fscript%3E website. The similar Vulnerability is claimed by few other guys on some forums too. No clue that who found it first, But THN got update from Vansh & Vaibhuv from...

Apple Website Hacked by HodLuM

Apple Website Hacked by HodLuM One of the Apple Sub-Domain claimed to be Defaced By HodLuM as shown above. The Deface Link is just an IMAGE uploaded to Apple domain. Hacker use "N00BZ" word for all Hacker including Anonymous , Lulzsec, Turkish hackers, Inj3t0rs and Exploit-DB's. AOL Postmaster...

AOL Postmaster Website hacked by HODLUM

AOL Postmaster Website hacked by HODLUM AOL'spostmaster.aol.com website was hacked Saturday afternoon by someone who goes by the name "HodLuM." The site was slightly defaced with a message from the hacker. "AOL S3RV3RZ ROOT3D BY HODLUM LOLZ!," the message read. AOL finally discovered the hack, an...

AOL Postmaster Website hacked by HODLUM

AOL Postmaster Website hacked byHODLUM AOL'spostmaster.aol.com website was hacked Saturday afternoon by someone who goes by the name "HodLuM." The site was slightly defaced with a message from the hacker. "AOL S3RV3RZ ROOT3D BY HODLUM LOLZ! ," the message read. AOL finally discovered the hack, an...

CentOS Update for finch CESA-2009:1536 centos5 i386

Check for the Version of finch OpenVAS Vulnerability Test CentOS Update for finch CESA-2009:1536 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

CentOS Update for finch CESA-2009:1536 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for finch CESA-2009:1139 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AOL Desktop .RTX File Parsing Buffer Overflow

AOL Desktop is an Internet application suite that integrates a web browser, media player, instant messenger client and document editing. RTX Rich Text Document is a proprietary document format used by AOL for document creation and editing. A remote attacker could exploit this issue via a malforme...

AOL Desktop 9.6 RTX Buffer Overflow

$Id: aoldesktoplinktag.rb 12284 2011-04-08 23:09:31Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

AOL Desktop 9.6 - RTX Buffer Overflow (Metasploit)

$Id: aoldesktoplinktag.rb 12284 2011-04-08 23:09:31Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...