Lucene search
K

180 matches found

Packet Storm
Packet Storm
added 2009/12/21 12:0 a.m.15 views

PlayMeNow M3U Universal Buffer Overflow

!/usr/bin/python Vulnerability: PlayMeNow Malformed M3U Playlist WinXP Universal BoF Product: PlayMeNow - media player. Versions affected: Tested with 7.3 and 7.4 Tested on: Windows XP Pro SP2/3 & Home SP3 Author: loneferret Original Author: Gr33nG0bL1n Reference:...

0.5AI score
Exploits0
Exploit DB
Exploit DB
added 2009/12/19 12:0 a.m.31 views

PlayMeNow (Windows XP Universal) - '.M3U' Playlist Buffer Overflow

!/usr/bin/python Vulnerability: PlayMeNow Malformed M3U Playlist WinXP Universal BoF Product: PlayMeNow - media player. Versions affected: Tested with 7.3 and 7.4 Tested on: Windows XP Pro SP2/3 & Home SP3 Author: loneferret Original Author: Gr33nG0bL1n Reference:...

7.4AI score
Exploits0
exploitpack
exploitpack
added 2009/12/19 12:0 a.m.7 views

PlayMeNow (Windows XP Universal) - .M3U Playlist Buffer Overflow

PlayMeNow Windows XP Universal - .M3U Playlist Buffer Overflow !/usr/bin/python Vulnerability: PlayMeNow Malformed M3U Playlist WinXP Universal BoF Product: PlayMeNow - media player. Versions affected: Tested with 7.3 and 7.4 Tested on: Windows XP Pro SP2/3 & Home SP3 Author: loneferret Original...

0.1AI score
Exploits0
myhack58
myhack58
added 2009/10/26 12:0 a.m.12 views

webshell mention the weight point directory summary-vulnerability warning-the black bar safety net

C:\Documents and Settings\All Users\Start Menu\Programs\ --'look here, can jump, and we from here can get a lot of useful information such as Serv-U path. C:\Documents and Settings\All Users\Application Data\Symantec\pcAnywhere\ --‘see if you can jump to this directory, if the line that is the...

Exploits0
ThreatPost
ThreatPost
added 2009/09/24 5:5 p.m.9 views

Dogrobot Malware Penetrates System Restore on Windows

GENEVA — Cyber crime gangs in China are penetrating the hard disk recovery cards on computers in Internet cafes and using a combination of zero-day flaws, rootkits and ARP spoofing techniques to steal billions of dollars worth of online gaming credentials. According to Microsoft anti-virus...

1.2AI score
Exploits0
myhack58
myhack58
added 2009/09/05 12:0 a.m.21 views

Let the administrator help you restart the machine-vulnerability warning-the black bar safety net

Let the administrator help you restart the machine Sometimes, we go through the database backup a batch to the Startup menu, you want the server on the next restart to run our batch processing. But we, Ah, etc., the server is not restarting, what should I do? Allow administrator to help us restar...

7.8AI score
Exploits0
ThreatPost
ThreatPost
added 2009/04/28 8:20 p.m.10 views

Microsoft battles malware with Windows AutoRun changes

In direct response to Conficker and an increased wave of malware attacks targeting the Windows AutoRun feature, Microsoft today announced significant changes to the way the operating system operates when USB drives are used. The changes, detailed on Redmond’s Security Research & Defense blog, hav...

2.4AI score
Exploits0References3
Saint
Saint
added 2009/04/07 12:0 a.m.23 views

Flash drive/CD autoplay command execution

Added: 04/07/2009 Background This tool allows you to create a USB flash drive which, when inserted into a Windows computer, prompts a user to run a program which creates a command connection. The program is disguised as the "Open Folder" option in the AutoPlay dialog to entice the user to run it...

7.2AI score
Exploits0
Saint
Saint
added 2009/04/07 12:0 a.m.21 views

Flash drive/CD autoplay command execution

Added: 04/07/2009 Background This tool allows you to create a USB flash drive which, when inserted into a Windows computer, prompts a user to run a program which creates a command connection. The program is disguised as the "Open Folder" option in the AutoPlay dialog to entice the user to run it...

7.2AI score
Exploits0
Saint
Saint
added 2009/04/07 12:0 a.m.20 views

Flash drive/CD autoplay command execution

Added: 04/07/2009 Background This tool allows you to create a USB flash drive which, when inserted into a Windows computer, prompts a user to run a program which creates a command connection. The program is disguised as the "Open Folder" option in the AutoPlay dialog to entice the user to run it...

7.2AI score
Exploits0
Saint
Saint
added 2009/04/07 12:0 a.m.20 views

Flash drive/CD autoplay command execution

Added: 04/07/2009 Background This tool allows you to create a USB flash drive which, when inserted into a Windows computer, prompts a user to run a program which creates a command connection. The program is disguised as the "Open Folder" option in the AutoPlay dialog to entice the user to run it...

7.2AI score
Exploits0
ThreatPost
ThreatPost
added 2009/02/26 4:53 p.m.6 views

Patch for Windows AutoRun problem released

More than a month after the US-CERT alerted users to the problems with the instructions for disabling the AutoRun capability in Windows, Microsoft has released a fix for the AutoRun problem. The guidance that Microsoft had given users previously didn’t completely disable the feature, which is use...

1.5AI score
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2009/01/21 8:30 p.m.1 views

CVE-2009-0243

Microsoft Windows does not properly enforce the Autorun and NoDriveTypeAutoRun registry values, which allows physically proximate attackers to execute arbitrary code by 1 inserting CD-ROM media, 2 inserting DVD media, 3 connecting a USB device, and 4 connecting a Firewire device; 5 allows...

9.3CVSS6AI score0.45872EPSS
Exploits0References4
Prion
Prion
added 2009/01/21 8:30 p.m.23 views

Code injection

Microsoft Windows does not properly enforce the Autorun and NoDriveTypeAutoRun registry values, which allows physically proximate attackers to execute arbitrary code by 1 inserting CD-ROM media, 2 inserting DVD media, 3 connecting a USB device, and 4 connecting a Firewire device; 5 allows...

7.2CVSS7.8AI score0.45872EPSS
Exploits0References3
NVD
NVD
added 2009/01/21 8:30 p.m.19 views

CVE-2009-0243

Microsoft Windows does not properly enforce the Autorun and NoDriveTypeAutoRun registry values, which allows physically proximate attackers to execute arbitrary code by 1 inserting CD-ROM media, 2 inserting DVD media, 3 connecting a USB device, and 4 connecting a Firewire device; 5 allows...

7.2CVSS7.2AI score0.01276EPSS
Exploits0References3
Cvelist
Cvelist
added 2009/01/21 8:0 p.m.24 views

CVE-2009-0243

Microsoft Windows does not properly enforce the Autorun and NoDriveTypeAutoRun registry values, which allows physically proximate attackers to execute arbitrary code by 1 inserting CD-ROM media, 2 inserting DVD media, 3 connecting a USB device, and 4 connecting a Firewire device; 5 allows...

7.2AI score0.01276EPSS
Exploits0References3
CVE
CVE
added 2009/01/21 8:0 p.m.63 views

CVE-2009-0243

CVE-2009-0243 describes a Windows Autorun/NoDriveTypeAutoRun enforcement vulnerability. The issue arises from improper validation of Autorun.inf and related registry keys, enabling arbitrary code execution when users insert media (CD/DVD/USB/Firewire) or perform actions like mapping a network dri...

7.2CVSS7.5AI score0.01276EPSS
Exploits0References3Affected Software5
securityvulns
securityvulns
added 2009/01/21 12:0 a.m.64 views

US-CERT Technical Cyber Security Alert TA09-020A -- Microsoft Windows Does Not Disable AutoRun Properly

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA09-020A Microsoft Windows Does Not Disable AutoRun Properly Original release date: January 20, 2009 Last revised: -- Source: US-CERT Systems Affected Microsoft Windows Overview Disabling...

0.5AI score
Exploits0
securityvulns
securityvulns
added 2009/01/21 12:0 a.m.21 views

Microsoft Windows fails to disable autorun

None of documented methods to disable autorun does it completely. This way of distribution is actively used by malware. CERT advises to add next record into registry @ means default value for key. HKEYLOCALMACHINESOFTWAREMicrosoftWindows NTCurrentVersionIniFileMappingAutorun.inf...

4.2AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2009/01/21 12:0 a.m.2 views

PT-2009-2915 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue allows attackers to execute arbitrary code through various means, including inserting CD-ROM or DVD media, connecting a USB or Firewire device, mapping a network drive, ...

7.2CVSS7.2AI score0.01276EPSS
Exploits0References4
Rows per page
Query Builder