Microsoft Windows fails to properly handle COM objects

Overview Microsoft Windows fails to properly handle COM Objects. This vulnerability may allow a remote unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft COM Microsoft COM is a technology that allows programmers to create reusable software components...

DbbS<=2.0-alpha SQL injection

author: DaBDouB-MoSiKaR Moroccan Security Team site: http://www.dbbs.sup.fr/ greetz to : Moroccan Security Team CiM-TeaM and All Freinds exemple: http://target/topics.php?fid=3&limite=sql inbox:DaBDouB-MoSiKaRatmoroccan-securitydotcom...

CVE-2006-1364

Microsoft w3wp aka w3wp.exe does not properly handle when the AspCompat directive is not used when referencing COM components in ASP.NET, which allows remote attackers to cause a denial of service resource consumption or crash by repeatedly requesting each of several documents that refer to COM...

w3wp-dos.txt

--0-1633069887-1142992701=:20251 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Sorry, if you are receiving multiple copies of it. Just resending as the one that I sent last night has not yet appeared. w3wp remote DoS due to improper reference of STA COM components i...

CVE-2006-1364: Uncontrolled Resource Consumption

Microsoft w3wp aka w3wp.exe does not properly handle when the AspCompat directive is not used when referencing COM components in ASP.NET, which allows remote attackers to cause a denial of service resource consumption or crash by repeatedly requesting each of several documents that refer to COM...

w3wp remote DoS due to improper reference of STA COM components in ASP.NET

Often developers forget to use the “AspCompat” directive which is required while referencing COM components in ASP.NET. Missing AspCompat directive causes general instability and poor performance of the web application, just a simple increase of load on a web server may cause it to crash. After...

ASP.NET w3wp (COM Components) Remote Crash Exploit

Exploit for unknown platform in category dos / poc ================================================== ASP.NET w3wp COM Components Remote Crash Exploit ================================================== // w3wp-dos.c // include "stdafx.h" pragma comment lib,"ws232" include include include include...

Internet Explorer COM object instantiation vulnerability

Added: 02/24/2006 CVE: CVE-2005-1990 BID: 14511 OSVDB: 18612 Background Windows operating systems use the Component Object Model COM to allow various program components to be run within different applications. Problem Improper instantiation of certain COM objects as ActiveX controls by Internet...

Internet Explorer COM object instantiation vulnerability

Added: 02/24/2006 CVE: CVE-2005-1990 BID: 14511 OSVDB: 18612 Background Windows operating systems use the Component Object Model COM to allow various program components to be run within different applications. Problem Improper instantiation of certain COM objects as ActiveX controls by Internet...

Microsoft Internet Explorer does not honor ActiveX kill bit

Overview Internet Explorer fails to properly check the kill bit for ActiveX controls, which may allow a remote attacker to execute arbitrary code on a vulnerable system. Description Microsoft COMMicrosoft COM is a technology that allows programmers to create reusable software components that can ...

CVE-2005-4841

The Outlook Progress Ctl control allows remote attackers to cause a denial of service Internet Explorer crash by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer...

CVE-2005-4845

The Java Plug-in 1.4.203 and 1.4.204 controls, and the 1.4.203 and 1.4.204 redirector controls, allow remote attackers to cause a denial of service Internet Explorer crash by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet...

Without a password to view the martial arts world list statistics user information-bug warning-the black bar safety net

With the 50bang this statistic for some time, the user information can be set freely statistical information is disclosed. But often go to the statistics of the station to see the statistical charts of people who might know a little, just click on the list of those sites, the more information it...

See me for the privilege with a vulnerability to enhance computer control-vulnerability warning-the black bar safety net

Allegedly Windows COM structure there is a security problem, the local orremote attackcan use this vulnerability to elevate privileges or execute arbitrary instructions. AffectedOSand procedures when processing COM structured storage file, the access to the shared memory exists in the way that...

CVE-2005-2831

CVE-2005-2831 affects Microsoft Internet Explorer 5.01, 5.5 and 6 via a Memory Corruption in the COM object instantiation process when a page embeds certain CLSIDs. An attacker could host a malicious page that causes remote code execution by instantiating COM objects not intended for IE, potentia...

CVE-2005-2831

Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet Explorer, aka a variant of t...

CVE-2005-2831: Undefined Security Weakness

Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet Explorer, aka a variant of t...

US-CERT Technical Cyber Security Alert TA05-347A -- Microsoft Internet Explorer Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Technical Cyber Security Alert TA05-347A Microsoft Internet Explorer Vulnerabilities Original release date: December 13, 2005 Last revised: -- Source: US-CERT Systems Affected Microsoft Windows Microsoft Internet Explorer For more complete information...

Microsoft Internet Explorer COM Object Instantiation Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a memory corruption vulnerability that is related to the instantiation of COM objects. COM objects may corrupt system memory and facilitate arbitrary code execution in the context of the currently logged in user on the affected computer...

Detect CIS ports

This detects the CIS ports by connecting to the server and processing the buffer received. CIS COM+ Internet Services are RPC over HTTP tunneling and requires IIS to operate. CIS ports shouldn't be visible on internet but only behind a firewall. If you do not use this service, then disable it as ...