1264 matches found
Green Dam - URL Processing Buffer Overflow (Metasploit)
$Id: greendamurl.rb 8762 2010-03-10 05:58:01Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
iDefense Security Advisory 03.09.10: Microsoft Excel Sheet Object Type Confusion Vulnerability
iDefense Security Advisory 03.09.10 http://labs.idefense.com/intelligence/vulnerabilities/ Mar 09, 2010 I. BACKGROUND Excel is the spreadsheet application included with Microsoft Corp.'s Office productivity software suite. More information is available at the following website:...
Microsoft Internet Explorer iepeers.dll use-after-free vulnerability
Overview Microsoft Internet Explorer contains a use-after-free vulnerability in the iepeers.dll file, which may allow a remote, unauthenticated attacker to execute arbitrary code. Description Microsoft Internet Explorer provides support for Web Folders and printing through the use of the...
As Memory Protections Advance, Exploits Stay a Step Ahead
SAN FRANCISCO–Despite years of efforts by software security teams at major vendors to harden the operating systems and browsers that are the most common targets of attackers, exploitation of new as well as older vulnerabilities is still simpler than many people might think. Microsoft, Mozilla,...
Apache 2.2.14 mod_isapi - Dangling Pointer Remote SYSTEM
/ Apache 2.2.14 modisapi Dangling Pointer Remote SYSTEM Exploit CVE-2010-0425 ------------------------------------------------------------------------------ Advisory: http://www.senseofsecurity.com.au/advisories/SOS-10-002 Description: pwn-isapi.cpp exploits a dangling pointer vulnerabilty in...
Apache 2.2.14 mod_isapi Dangling Pointer Remote SYSTEM Exploit
No description provided by source. / Apache 2.2.14 modisapi Dangling Pointer Remote SYSTEM Exploit CVE-2010-0425 ------------------------------------------------------------------------------ Advisory: http://www.senseofsecurity.com.au/advisories/SOS-10-002 Description: pwn-isapi.cpp exploits a...
Apache 2.2.14 mod_isapi Remote SYSTEM Exploit
/ Apache 2.2.14 modisapi Dangling Pointer Remote SYSTEM Exploit CVE-2010-0425 ------------------------------------------------------------------------------ Advisory: http://www.senseofsecurity.com.au/advisories/SOS-10-002 Description: pwn-isapi.cpp exploits a dangling pointer vulnerabilty in...
Google Researcher Ships Exploit to Defeat ASLR+DEP
A prominent security researcher has released an exploit that uses a new technique to defeat ALSR + DEP on Microsoft’s Windows operating system. The exploit, released by Google security researcher “SkyLined,” uses the ret-into-libc technique to bypass DEP Data Execution Prevention and launch code...
Internet Exploiter II v3.0 - MS05-20 DHTML memory corruption PoC Exploit
Exploit for unknown platform in category dos / poc ======================================================================== Internet Exploiter II v3.0 - MS05-20 DHTML memory corruption PoC Exploit ======================================================================== Internet Exploiter II versi...
Microsoft IE远程内存破坏漏洞(MS10-002)
BUGTRAQ ID: 37893 CVE ID: CVE-2010-0247 Internet Explorer是Windows操作系统中默认捆绑的web浏览器。 Internet Explorer访问尚未正确初始化或已被删除的对象的方式中存在一个远程执行代码漏洞。攻击者可以通过构建特制的网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 Microsoft Internet Explorer 5.0.1 SP4 临时解决方法：...
Microsoft IE表格布局Col标签缓存更新远程代码执行漏洞（MS10-002）
BUGTRAQ ID: 37891 CVE ID: CVE-2010-0244 Internet Explorer是Windows操作系统中默认捆绑的web浏览器。 在HTML表格容器中使用Col元素的时候，如果在使用表格期间删除了这个元素，则在任意元素失效后会使用表格单元格中的缓存。 攻击者可以通过构建特制的网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。 Microsoft Internet Explorer 8.0 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 SP1 Microsof...
How DEP Can Mitigate IE Zero-Day Attacks
Jonathan Ness of Microsoft’s Security Research and Defense team explains the inner workings of the Data Execution Prevention technology that can help mitigate the targeted attacks exploiting the vulnerability in Internet Explorer right now...
Microsoft: Emergency IE Patch Coming
Microsoft has started dropping broad hints that an emergency patch for Internet Explorer will be released very soon to counter targeted attacks and the publication of exploit code for a “browse and you’re owned” vulnerability in its flagship Web browser. UPDATE: Here is the official confirmation...
Microsoft Internet Explorer HTML object memory corruption vulnerability
Overview An invalid pointer reference within Microsoft Internet Explorer may lead to execution of arbitrary code. Description Microsoft Internet Explorer contains a memory corruption vulnerability, which can result in an invalid pointer being accessed after an object is incorrectly initialized or...
Immunity Canvas: ACROBAT_U3D_MESH
Name| acrobatu3dmesh ---|--- CVE| CVE-2009-3953 Exploit Pack| CANVAS Description| acrobatu3dmesh Notes| CVE Name: CVE-2009-3953 Notes: This exploit works on Windows XP without DEP. DEP defaults to "opt-in" on Windows XP SP2/3. IE8 and modern Firefox will opt-in to DEP, causing this exploit to fai...
Adobe Reader/Acrobat 'newplayer()' JavaScript方法远程代码执行漏洞
Bugraq ID: 37331 CVE ID：CVE-2009-4324 Adobe Reader/Acrobat是一款流行的处理PDF文件的应用程序。 Adobe Reader/Acrobat中的Doc.media.newPlayer方法包含释放后使用漏洞，允许远程未验证用户在目标用户系统上执行任意代码。 Adobe Reader/Acrobat支持JavaScript，Doc.media对象中的newplayer方法包含一个释放后使用漏洞，可导致一个可利用的内存访问冲突。此漏洞已经在网络上积极利用。...
Adobe Acrobat and Reader contain a use-after-free vulnerability in the JavaScript Doc.media.newPlayer method
Overview The Doc.media.newPlayer method in Adobe Acrobat and Reader contains a use-after-free vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Adobe Reader and the Adobe Acrobat family of software are designed to creat...
Jasc Paint Shop Pro v8 Local Buffer Overflow Exploit (UNIVERSAL)
No description provided by source. / Software: Jasc Paint Shop Pro v8 Local Buffer Overflow Exploit UNIVERSAL Bug type: Local buffer overflow Exploitation method: SEH handler overwrite Description: When a crafted .PNG file is oppened a stack buffer overflow occurs because of DEP a SEH handler is...
Jasc Paint Shop Pro v8 Local Buffer Overflow Exploit (UNIVERSAL)
Exploit for unknown platform in category local exploits ================================================================ Jasc Paint Shop Pro v8 Local Buffer Overflow Exploit UNIVERSAL ================================================================ Title: Jasc Paint Shop Pro v8 Local Buffer...
MuPDF pdf_shade4.c multiple stack-based buffer overflows
Description =========== "MuPDF is a lightweight PDF viewer and toolkit written in portable C". It is used in particular by SumatraPDF which is a small open-source PDF viewer for Windows. MuPDF before commit 20091125231942 did not properly handle /Decode arrays in a shading of type 4 to 7, leading...