AOL Radio AmpX - ActiveX Control 'ConvertFile()' Remote Buffer Overflow (Metasploit)

$Id: aolampxconvertfile.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

AOL Instant Messenger Away Message Buffer Overflow (CVE-2004-0636)

AOL Instant Messenger AIM is an instant messaging and presence computer program which allows registered users to communicate in real time. AOL Instant Messenger AIM registers itself as the handler of URL scheme aim. There exists a vulnerability in the way AOL Instant Messenger AIM parses an away...

AOL buffer overflow

Buffer overflow on vCard .vcf files parsing...

[Hellcode Research]: AOL 9.5 File Parsing Buffer Overflow Vulnerability

Product: AOL 9.5 Vulnerability: File Parsing Heap-based Buffer Overflow Description: Hellcode Research has discovered a heap overflow vulnerability in AOL 9.5 Opening a malformed vCard file .vcf with AOL 9.5 causes a crash on "waol.exe" Successful exploitation may allow execution of arbitrary cod...

AOL 9.5 Phobos.Playlist Import() Stack-based Buffer Overflow

aolphobosbof.rb AOL 9.5 Phobos.Playlist 'Import' Stack-based Buffer Overflow exploit for the Metasploit Framework Tested successfully on the following platforms: - AOL 9.5 Revision 4337.155 on Internet Explorer 7, Windows XP SP3 Phobos.dll version tested: File Version: 9.5.0.1 ClassID:...

AOL 9.5 - Phobos.Playlist Import() Remote Buffer Overflow (Metasploit)

AOL 9.5 - Phobos.Playlist Import Remote Buffer Overflow Metasploit aolphobosbof.rb AOL 9.5 Phobos.Playlist 'Import' Stack-based Buffer Overflow exploit for the Metasploit Framework Tested successfully on the following platforms: - AOL 9.5 Revision 4337.155 on Internet Explorer 7, Windows XP SP3...

AOL 9.5 Phobos.Playlist 'Import()' Buffer Overflow Exploit (Meta)

Exploit for unknown platform in category remote exploits ================================================================= AOL 9.5 Phobos.Playlist 'Import' Buffer Overflow Exploit Meta ================================================================= aolphobosbof.rb AOL 9.5 Phobos.Playlist 'Impor...

AOL 9.5 - Phobos.Playlist 'Import()' Remote Buffer Overflow (Metasploit)

aolphobosbof.rb AOL 9.5 Phobos.Playlist 'Import' Stack-based Buffer Overflow exploit for the Metasploit Framework Tested successfully on the following platforms: - AOL 9.5 Revision 4337.155 on Internet Explorer 7, Windows XP SP3 Phobos.dll version tested: File Version: 9.5.0.1 ClassID:...

AOL 9.5 - ActiveX Heap Spray

AOL 9.5 - ActiveX Heap Spray AOL 9.5 ActiveX 0day Exploit heap spray + AOL 9.5 ActiveX 0day Exploit heap spray + Author : Dzattacker + Discovered by: Hellcode Research http://www.hellcode.net + Reference: http://www.exploit-db.com/exploits/11190 + Tested on Windows Xp SP3 ,IE7 // win32exec - calc...

AOL 9.5 - ActiveX Heap Spray

AOL 9.5 ActiveX 0day Exploit heap spray + AOL 9.5 ActiveX 0day Exploit heap spray + Author : Dzattacker + Discovered by: Hellcode Research http://www.hellcode.net + Reference: http://www.exploit-db.com/exploits/11190 + Tested on Windows Xp SP3 ,IE7 // win32exec - calc shellcode =...

AOL 9.5 Phobos.Playlist Import() Stack-based Buffer Overflow

This module exploits a stack-based buffer overflow within Phobos.dll of AOL 9.5. By setting an overly long value to 'Import', an attacker can overrun a buffer and execute arbitrary code. NOTE: This ActiveX control is NOT marked safe for scripting or initialization. Module Options msf use...

AOL 9.5 ActiveX Heap Overflow Vulnerability

Product: AOL 9.5 Vulnerability: ActiveX - Heap Overflow Discussion: Vulnerability is in Activex Control "CDDBControl.dll" Sending a string to BindToFile , triggering the vulnerability. Successful exploits allow remote attackers to execute arbitrary code. Debugger Results: fd0.1274: Access violati...

AOL 9.5 - ActiveX Heap Overflow

Product: AOL 9.5 Vulnerability: ActiveX - Heap Overflow Discussion: Vulnerability is in Activex Control "CDDBControl.dll" Sending a string to BindToFile , triggering the vulnerability. Successful exploitation allow remote attackers to execute arbitrary code. Credits: Celil 'karak0rsan' Unuver and...

AOL ActiveX buffer overflow

Buffer overflow in BindToFile method...

AOL 9.5 ActiveX Heap Overflow Vulnerability

Exploit for unknown platform in category remote exploits =========================================== AOL 9.5 ActiveX Heap Overflow Vulnerability =========================================== Product: AOL 9.5 Vulnerability: ActiveX - Heap Overflow Discussion: Vulnerability is in Activex Control...

AOL 9.5 - ActiveX Heap Overflow

AOL 9.5 - ActiveX Heap Overflow Product: AOL 9.5 Vulnerability: ActiveX - Heap Overflow Discussion: Vulnerability is in Activex Control "CDDBControl.dll" Sending a string to BindToFile , triggering the vulnerability. Successful exploitation allow remote attackers to execute arbitrary code. Credit...

AOL 9.5 Heap Overflow

Product: AOL 9.5 Vulnerability: ActiveX - Heap Overflow Discussion: Vulnerability is in Activex Control "CDDBControl.dll" Sending a string to BindToFile , triggering the vulnerability. Successful exploitation allow remote attackers to execute arbitrary code. Credits: Celil 'karak0rsan' Unuver and...

Gracenote CDDBControl - ActiveX Control ViewProfile Method Heap Buffer Overflow (PoC)

Gracenote CDDBControl - ActiveX Control ViewProfile Method Heap Buffer Overflow PoC source: https://www.securityfocus.com/bid/37834/info Gracenote CDDBControl is prone to a stack-based buffer-overflow vulnerability because the application fails to adequately check boundaries on user-supplied inpu...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in editprofile.php in Viscacha 0.8 Gold allow remote authenticated users to inject arbitrary web script or HTML via the 1 skype, 2 yahoo, 3 aol, 4 msn, or 5 jabber parameter in a profile2 action. NOTE: some of these details are obtained from third...

AOL Instant Messenger goaway Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'AOL Instant...