75 matches found
Denial of service
The VBA32 AntiRootKit component for Novell Client 2 SP3 before IR5 on Windows allows local users to cause a denial of service bugcheck and BSOD via an IOCTL call for an invalid IOCTL...
CVE-2013-3705
CVE-2013-3705 affects Novell Client 2 SP3 on Windows, specifically the VBA32 AntiRootKit component. The issue is a local DoS via an invalid IOCTL call to the IOCTL handling, potentially causing a bugcheck/BSOD. The vulnerability is described as affecting SP3 prior to IR5; Nessus/Vulnerability fee...
PT-2013-4574
Name of the Vulnerable Software and Affected Versions Novell Client 2 SP3 versions before IR5 Description The issue allows local users to cause a denial of service, resulting in a bugcheck and BSOD, via an IOCTL call for an invalid IOCTL. Recommendations For Novell Client 2 SP3 versions before IR...
CVE-2013-3705: Improper Input Validation
The VBA32 AntiRootKit component for Novell Client 2 SP3 before IR5 on Windows allows local users to cause a denial of service bugcheck and BSOD via an IOCTL call for an invalid IOCTL...
The Windows kernel-EPATHOBJ 0day exploit-vulnerability warning-the black bar safety net
This vulnerability is through the PATHALLOCfor memory pressure of the test broke, the first use of PATHRECpointing to the same user space PATHREC EPATHOBJ::bFlatten it will”spin”for an unlimited linked list traversal. Such as:PathRecord-next = PathRecord; Although it will spin,but it will be by...
Microsoft Windows - Win32k!EPATHOBJ::pprFlattenRec Uninitialized Next Pointer Testcase
Microsoft Windows - Win32k!EPATHOBJ::pprFlattenRec Uninitialized Next Pointer Testcase I'm quite proud of this list cycle trick, here's how to turn it into an arbitrary write. First, we create a watchdog thread that will patch the list atomically when we're ready. This is needed because we can't...
Windows Win32k Pointer Dereferencement PoC (MS10-098)
Exploit for windows platform in category dos / poc / MS10-098 CVE-2010-3944 Microsoft Windows Win32k pointer dereferencement -------------------- Affected Software ------------------------ Microsoft Windows 7 / 2008 -------------------- Consequences ----------------------- An unprivileged user ma...
Windows Win32k Pointer Dereference
/ MS10-098 CVE-2010-3944 Microsoft Windows Win32k pointer dereferencement -------------------- Affected Software ------------------------ Microsoft Windows 7 / 2008 -------------------- Consequences ----------------------- An unprivileged user may be able to cause a bugcheck, or possibly execute...
Microsoft Windows - Win32k Pointer Dereferencement (PoC) (MS10-098)
Microsoft Windows - Win32k Pointer Dereferencement PoC MS10-098 / MS10-098 CVE-2010-3944 Microsoft Windows Win32k pointer dereferencement -------------------- Affected Software ------------------------ Microsoft Windows 7 / 2008 -------------------- Consequences ----------------------- An...
MS Windows win32k!GreStretchBltInternal() Does Not Handle src == dest
Exploit for windows platform in category dos / poc ===================================================================== MS Windows win32k!GreStretchBltInternal Does Not Handle src == dest ===================================================================== Microsoft Windows...
Microsoft Windows - Win32k!GreStretchBltInternal() Does Not Handle src dest
Microsoft Windows - Win32k!GreStretchBltInternal Does Not Handle src dest Microsoft Windows win32k!GreStretchBltInternal does not handle src == dest ---------------------------------------------------------------------------- A bitblt bit block transfer is used to copy one rectangular region of...
Microsoft Windows Microsoft Windows Does Not Handle src == dest
Microsoft Windows win32k!GreStretchBltInternal does not handle src == dest ---------------------------------------------------------------------------- A bitblt bit block transfer is used to copy one rectangular region of screen to another, often performing a raster operation rop of some sort e.g...
Microsoft Windows - Win32k!GreStretchBltInternal() Does Not Handle src == dest
Microsoft Windows win32k!GreStretchBltInternal does not handle src == dest ---------------------------------------------------------------------------- A bitblt bit block transfer is used to copy one rectangular region of screen to another, often performing a raster operation rop of some sort e.g...
Microsoft Windows WRITE_ANDX SMB command handling Kernel DoS
Some days ago i have discovered a DoS in Windows Vista. Here is the advisory with a detailed description about the vulnerability that will help to Microsoft they have been already notified about the bug to correct it as soon as possible, and it will help you if you need to add any rule for your...
