CVE-2007-0612

Multiple ActiveX controls in Microsoft Windows 2000, XP, 2003, and Vista allows remote attackers to cause a denial of service Internet Explorer crash by accessing the bgColor, fgColor, linkColor, alinkColor, vlinkColor, or defaultCharset properties in the 1 giffile, 2 htmlfile, 3 jpegfile, 4...

CVE-2007-0612

CVE-2007-0612 affects multiple Windows ActiveX controls via mshtml.dll (and TriEditDocument.triedit.dll) where accessing bgColor/fgColor/linkColor/alinkColor/vlinkColor/defaultCharset in various file objects triggers a NULL pointer dereference, causing Internet Explorer denial of service (crash)....

Microsoft Internet Explorer 5.0.1 - Multiple ActiveX Controls Denial of Service Vulnerabilities

Microsoft Internet Explorer 5.0.1 - Multiple ActiveX Controls Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/22288/info Microsoft Internet Explorer is prone to multiple denial-of-service vulnerabilities because the application fails to handle exceptional conditions...

Microsoft Internet Explorer 5.0.1 - Multiple ActiveX Controls Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/22288/info Microsoft Internet Explorer is prone to multiple denial-of-service vulnerabilities because the application fails to handle exceptional conditions. These issues are triggered when an attacker entices a victim user to visit a malicious website...

Using Porttunnel do Super springboard-a vulnerability warning-the black bar safety net

PortTunnel heard? Uh, a good port mapping tool Previously had not how to use, just bitter to the even data are put in the www. brinkster. com space, and domestic on this website has been blocked, so can not access,, gas Had to pick up this weapon Because in the cafe can not properly use the http...

CVE-2007-0371

CVE-2007-0371 affects the CCRP BrowseDialog Server ActiveX control (ccrpbds6.dll) within the Common Controls Replacement Project. The vulnerability enables a denial of service resulting in an Internet Explorer 7 crash when a long value is provided to the CCRP_BDc.SelectedFolder property. The conn...

sazcart-rfi.txt

---Hitamputih crew--- Bug Found By : IbnuSina vendor : http://sazcart.com/site Risk : High Greetz : Solpot,permenhack,barbarosa,cah|gemblunkz,fungmen,setiawan,irvian,meteoroid and all member hitamputih crew community bug found on admin/controls/cart.php include$saz'settings''shippingfolder'...

Apple Quicktime HREFTrack Cross-Zone Scripting vulnerability

Overview Web browsers running the Apple QuickTime plugin may allow remote web sites to reference content on the local filesystem. This may allow an attacker to execute script within the security context of the local machine. Description Web browser plugins that allow remote web sites to reference...

sazcart v1.5 (cart.php) Remote File include

---Hitamputih crew--- Bug Found By : IbnuSina vendor : http://sazcart.com/site Risk : High Greetz : Solpot,permenhack,barbarosa,cah|gemblunkz,fungmen,setiawan,irvian,meteoroid and all member hitamputih crew community bug found on admin/controls/cart.php include$saz'settings''shippingfolder'...

Sina UC 2 0 0 6 Activex SendChatRoomOpt Exploit-vulnerability warning-the black bar safety net

Ghost boy: I compile, download address: ! 2007011012544.rar "http://201314.free.fr/attachments/200701/2007011012544.rar" Source: Ph4nt0m ////////////////////////////////////////////////////////////////////////////////////////////////////////////// // Sina UC ActiveX multiple remote stack overflow...

Microsoft Windows SMB Share Hosting Office Files

This plugin connects to the remotely accessible SMB shares and attempts to find office related files such as .doc, .ppt, .xls, .pdf etc. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid23974; scriptversion "$Revision: 1.13 $"; scriptnameenglish:"Microsoft Windows SMB...

WinZip FileView ActiveX controls CreateNewFolderFromName Method Buffer Overflow Vulnerability

WinZip FileView ActiveX controls CreateNewFolderFromName Method Buffer Overflow Vulnerability ------------------------------------------------------------------ SUMMARY: A vulnerability has been identified in Winzip 10.0 Build 6667,May be other version, which could be exploited by remote or local...

WinZIP 10.0 FileView ActiveX Controls Remote Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================================= WinZIP 10.0 FileView ActiveX Controls Remote Overflow Exploit ============================================================= / ---=== winzip-exploit.html XiaoHui : 76693223at163co...

WinZip 10.0 - FileView ActiveX Controls Remote Overflow

WinZip 10.0 - FileView ActiveX Controls Remote Overflow / ---=== winzip-exploit.html XiaoHui : 76693223at163com HomePage: www.nipc.org.cn c 2006 All rights reserved. note:Because of the prior vuln in FileView ActiveX Control,Micorsoft has disabled this ActiveX Controls, To test this vuln,You can...

WinZip 10.0 - FileView ActiveX Controls Remote Overflow

/ ---=== winzip-exploit.html XiaoHui : 76693223at163com HomePage: www.nipc.org.cn c 2006 All rights reserved. note:Because of the prior vuln in FileView ActiveX Control,Micorsoft has disabled this ActiveX Controls, To test this vuln,You can delete the key:...

ProFTPD Controls模块本地缓冲区溢出漏洞

ProFTPD是一款流行的FTP服务程序。 ProFTPD Controls模块存在缓冲区溢出问题，本地攻击者可以利用漏洞提升特权获得ROOT权限。 问题存在于"Controls"模块中，这个是ProFTPD服务器的选项功能，必须在配置文件中激活。Controls是用于与独立运行的ProFTPD守护程序通信的模块。提供管理器实时更改守护进程行为而不需要重新启动守护程序的方法。问题代码在src/ctrls.c中的prctrlsrecvrequest函数中： ---------------------------------------------------- Code from...

CVE-2006-6618

AntiHook 3.0.0.23 - Desktop relies on the Process Environment Block PEB to identify a process, which allows local users to bypass the product's controls on a process by spoofing the 1 ImagePathName, 2 CommandLine, and 3 WindowTitle fields in the PEB...

CVE-2006-6620: Undefined Security Weakness

Comodo Personal Firewall 2.3.6.81 relies on the Process Environment Block PEB to identify a process, which allows local users to bypass the product's controls on a process by spoofing the 1 ImagePathName, 2 CommandLine, and 3 WindowTitle fields in the PEB...

CVE-2006-6441: Undefined Security Weakness

Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows local users to bypass security controls and boot Alchemy via certain alternate boot media, as demonstrated by a USB thumb drive...

Microsoft IE dxtmsft3.dll Multiple ActiveX COM Object DoS

Microsoft Internet Explorer contains a flaw that may allow a remote denial of service. The issue is triggered when a user accesses a malicious web site that contains scripting code calling a number of ActiveX COM objects in the dxtmsft3.dll library, and will result in loss of availability for the...