Immunity Canvas: VSPLOIT_MERCURIMAP

Name| vsploitmercurimap ---|--- CVE| CVE-2006-1255 Exploit Pack| CANVAS Description| Mercur Imap 5.0 Remote Buffer Overflow Notes| CVE Name: CVE-2006-1255 VENDOR: Mercur Repeatability: One time Date public: 03/16/2006 CVE Url: https://vulners.com/cve/CVE-2006-1255 CVSS: 10.0...

Microsoft Windows Media Player 7.1 10 - .BMP Heap Overflow (MS06-005) (2)

Microsoft Windows Media Player 7.1 10 - .BMP Heap Overflow MS06-005 2 sploit creater by [email protected] ms06-005 advisory proof of concept heap overflow in wmf.dll @ 0x0035920a denial of service, cuz we can't get this to play nice shamelessly stolen from CANVAS code def intelorderi:...

Immunity Canvas: VSPLOIT_EXCHANGEPOP3

Name| vsploitexchangepop3 ---|--- CVE| CVE-2006-0537 Exploit Pack| CANVAS Description| Exchange pop3 rcpt to overflow Notes| CVE Name: CVE-2006-0537 VENDOR: Kinesphere Repeatability: References: http://www.morx.org/adv.txt CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0537...

CVE-2006-0297

Multiple integer overflows in Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote attackers to execute arbitrary code via the 1 EscapeAttributeValue in jsxml.c for E4X, 2 nsSVGCairoSurface::Init in SVG, and 3...

DEBIAN-CVE-2006-0297

Multiple integer overflows in Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote attackers to execute arbitrary code via the 1 EscapeAttributeValue in jsxml.c for E4X, 2 nsSVGCairoSurface::Init in SVG, and 3...

Integer overflow

Multiple integer overflows in Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote attackers to execute arbitrary code via the 1 EscapeAttributeValue in jsxml.c for E4X, 2 nsSVGCairoSurface::Init in SVG, and 3...

CVE-2006-0297

Multiple integer overflows in Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote attackers to execute arbitrary code via the 1 EscapeAttributeValue in jsxml.c for E4X, 2 nsSVGCairoSurface::Init in SVG, and 3...

CVE-2006-0297

Multiple integer overflows in Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote attackers to execute arbitrary code via the 1 EscapeAttributeValue in jsxml.c for E4X, 2 nsSVGCairoSurface::Init in SVG, and 3...

Integer overflows in E4X, SVG, and Canvas — Mozilla

Georgi Guninski reports integer overflows in the new E4X, SVG, and Canvas features. These lead to memory corruption that is potentially exploitable to run arbitrary code...

Immunity Canvas: SAMIFTP

Name| samiftp ---|--- CVE| CVE-2006-0441 Exploit Pack| CANVAS Description| samiftp Notes| CVE Name: CVE-2006-0441 VENDOR: Karjasoft URL: http://www.securitynull.com/advisories/secnull-11-14-2005-0x2.txt Repeatability: This exploit is non repeatable... CVE Url:...

Immunity Canvas: WMF_SETABORT

Name| wmfsetabort ---|--- CVE| CVE-2005-4560 Exploit Pack| CANVAS Description| WMF SetAbort MS06-001 Notes| CVE Name: CVE-2005-4560 VENDOR: Microsoft MSADV: MS06-001 Repeatability: Infinite MSRC: http://www.microsoft.com/technet/security/bulletin/ms06-001.mspx CVE Url:...

Immunity Canvas: WORLDMAIL

Name| worldmail ---|--- CVE| CVE-2005-4267 Exploit Pack| CANVAS Description| WorldMail Notes| CVE Name: CVE-2005-4267 VENDOR: Qualcomm CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4267 CVSS: 7.5...

Immunity Canvas: CHFNESCAPE

Name| chfnescape ---|--- CVE| CVE-2005-3503 Exploit Pack| CANVAS Description| chfnescape Notes| References: http://lists.suse.com/archive/suse-security-announce/2005-Nov/0002.html CVE Name: CVE-2005-3503 Affected: SuSE Linux 9.0 through 10.0, Suse Linux Desktop 1.0, SLES 9, UnitedLinux 1.0 VENDOR...

Immunity Canvas: STINKY

Name| stinky ---|--- CVE| CVE-2005-3252 Exploit Pack| CANVAS Description| Stinky Notes| CVE Name: CVE-2005-3252 VENDOR: SourceFire Repeatability: Single shot References: http://xforce.iss.net/xforce/alerts/id/207 CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3252 Date public...

Immunity Canvas: STINKY_DEBUG

Name| stinkydebug ---|--- CVE| CVE-2005-3252 Exploit Pack| CANVAS Description| Stinky Debug Notes| CVE Name: CVE-2005-3252 VENDOR: Stinky Repeatability: Single shot References: http://xforce.iss.net/xforce/alerts/id/207 CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3252 Date...

Immunity Canvas: MS05_046

Name| ms05046 ---|--- CVE| CVE-2005-1985 Exploit Pack| CANVAS Description| Microsoft Netware Service RPC Overflow Notes| References: http://www.microsoft.com/technet/security/Bulletin/MS05-046.mspx CVE Name: CVE-2005-1985 VENDOR: Microsoft MSADV: MS05-046 Repeatability: One shot Note: Date public...

Immunity Canvas: LINKSYS_APPLY_CGI

Name| linksysapplycgi ---|--- CVE| CVE-2005-2799 Exploit Pack| CANVAS Description| linksysapplycgi Notes| References: http://www.idefense.com/application/poi/display?id=305&type=vulnerabilities CVE Name: CVE-2005-2799 VENDOR: Linksys Date public: Sep 13, 2005 CVE Url:...

Immunity Canvas: MS05_040

Name| ms05040 ---|--- CVE| CVE-2005-0058 Exploit Pack| CANVAS Description| Windows Telephony Service Overflow Notes| CVE Name: CVE-2005-0058 VENDOR: Microsoft MSADV: MS05-040 MSRC: http://www.microsoft.com/technet/security/Bulletin/MS05-040.mspx Platforms Tested: Windows XP Home/Pro SP1a up2date,...

MS05-039: Vulnerability in Plug and Play Service Could Allow Remote Code Execution (899588) (uncredentialed check)

The remote version of Windows contains a flaw in the function 'PNPQueryResConfList' in the Plug and Play service that may allow an attacker to execute arbitrary code on the remote host with SYSTEM privileges. A series of worms Zotob are known to exploit this vulnerability in the wild. C Tenable...

Immunity Canvas: MAILENABLE

Name| mailenable ---|--- CVE| CVE-2005-2223 Exploit Pack| CANVAS Description| MailEnable SMTP Stack Overflow Notes| CVE Name: CVE-2005-2223 VENDOR: MailEnable Post-exploitaion: Platforms Tested: Windows 2003 Standard edition base & up2date MailEnable 1.72 Windows 2003 Standard edition up2date...