MuPDF 20091125231942 - pdf_shade4.c Multiple Stack Buffer Overflows

MuPDF 20091125231942 - pdfshade4.c Multiple Stack Buffer Overflows "MuPDF is a lightweight PDF viewer and toolkit written in portable C". It is used in particular by SumatraPDF which is a small open-source PDF viewer for Windows. MuPDF before commit 20091125231942 did not properly handle /Decode...

Microsoft Internet Explorer CSS style element vulnerability

Overview Microsoft Internet Explorer IE does not safely reference CSS style elements. Using a specially crafted HTML page, an attacker can cause IE to crash and potentially execute arbitrary code. Description IE contains a vulnerability in the way it references CSS style elements. Processing a...

Microsoft Acknowledges IE7 Flaw

Microsoft has acknowledged a new unpatched vulnerability in Internet Explorer 6 and 7, and said that the company is investigating methods for fixing the flaw. The company said that although there is public exploit code available for the vulnerability, it has not seen any evidence of ongoing attac...

Serv-U Web Client 9.0.0.5 - Remote Buffer Overflow (2)

Serv-U Web Client 9.0.0.5 - Remote Buffer Overflow 2 / !!!FOR EDUCATIONAL USE ONLY!!! M.Yanagishita Nov 2, 2009 !!!FOR EDUCATIONAL USE ONLY!!! / include include pragma commentlib, "ws232" define Diea ifareturn; char request = "POST / HTTP/1.1\r\nHost: %s\r\nCookie: killmenothing; SULang=de%%2CDE;...

Adobe Ships 29 Patches for Reader and Acrobat

On the same day that Microsoft unleashed a torrent of 34 patches on its customer base, Adobe on Tuesday published patches for 29 vulnerabilities in its Acrobat and Reader products as part of its new quarterly patch release program. The Adobe vulnerabilities patched yesterday include a remote...

Immunity Canvas: MS09_051

Name| ms09051 ---|--- CVE| CVE-2009-0555 Exploit Pack| CANVAS Description| ASFAudiomedia Parsing bug Notes| CVE Name: CVE-2009-0555 VENDOR: Microsoft MSADV: MS09-051 Repeatability: One Shot MSRC: http://www.microsoft.com/technet/security/Bulletin/MS09-051.mspx Note: This is a client-side exploit ...

Adobe Acrobat and Reader contain vulnerabilities in multiple Document Object JavaScript methods

Overview A vulnerability in the way Adobe Acrobat and Reader enforce privileges on JavaScript in PDF files could allow arbitrary files to be written to the local file system of an affected system. Description Adobe Reader and the Adobe Acrobat family of software are designed to create, view, and...

Adobe Warns: Unpatched PDF Vulnerability Under Attack

Adobe has confirmed a critical, unpatched vulnerability in its PDF Reader/Acrobat software is being exploited by malicious attackers. The vulnerability affects Adobe Reader and Acrobat 9.1.3 and earlier versions on Windows, Macintosh and UNIX. Adobe described the in-the wild attacks as limited an...

Adobe Acrobat Reader远程代码执行漏洞

Bugraq ID: 36600 CVE ID： CVE-2009-3459 Adobe Reader是流行的处理PDF文件的应用程序。 Windows, Macintosh和UNIX平下的Adobe Reader和Acrobat 9.1.3及之前版本存在一个严重漏洞，根据报告此漏洞已经被积极利用。攻击目标为windows平台下的Adobe Reader和Acrobat 9.1.3。Windows Vista平台下启用了DEP，Adobe Reader和Acrobat...

HERO SUPER PLAYER 3000 - .m3u Buffer Overflow (PoC)

HERO SUPER PLAYER 3000 - .m3u Buffer Overflow PoC / HERO SUPER PLAYER 3000 .M3U File Buffer Overflow POC by fl0 fl0w / / SOFTWARE INFORMATION The software video player supports almost all formats and disks, you don't need any other software player to play various video files. It can make obscure...

HERO SUPER PLAYER 3000 .M3U File Buffer Overflow POC

Exploit for unknown platform in category dos / poc ==================================================== HERO SUPER PLAYER 3000 .M3U File Buffer Overflow POC ==================================================== / HERO SUPER PLAYER 3000 .M3U File Buffer Overflow POC by fl0 fl0w / / SOFTWARE...

VideoLAN VLC Media Player SMB Module Win32AddConnection Buffer Overflow

Added: 09/11/2009 CVE: CVE-2009-2484 BID: 35500 OSVDB: 55509 Background VLC media player is a media player supporting various audio and video formats for multiple platforms. Problem A stack-based buffer overflow vulnerability in the Win32AddConnection function may allow a remote attacker to execu...

MS Office Word malformed Sprm record buffer overflow

Added: 08/05/2009 CVE: CVE-2009-0565 BID: 35190 OSVDB: 54960 Background Microsoft Office Word is Microsoft's word processing software, released as a component of Microsoft Office suite. Problem A buffer overflow in Microsoft Office Word allows remote command execution when a specially crafted Wor...

Windows x86 null-free bindshell for Windows 5.0-7.0 all service packs

No description provided by source. BITS 32 ; Windows x86 null-free bindshell for Windows 5.0-7.0 all service packs. ; See http://skypher.com/wiki/index.php/Hacking/Shellcode/Bind/NGS. ; Based largely on code and ideas C 2005 by Dafydd Stuttard, NGS Software. ; See...

windows x86 null-free bindshell for Windows 5.0-7.0 all service packs

Exploit for win32 platform in category shellcode ===================================================================== Windows x86 null-free bindshell for Windows 5.0-7.0 all service packs ===================================================================== BITS 32 ; Windows x86 null-free...

Windows x86 null-free bindshell for Windows 5.0-6.0 all service packs

No description provided by source. BITS 32 ; Windows x86 null-free bindshell for Windows 5.0-6.0 all service packs. ; See http://skypher.com/wiki/index.php/Hacking/Shellcode/Bind/NGS. ; Based largely on code and ideas C 2005 by Dafydd Stuttard, NGS Software. ; See...

ms08-0 6 7 The English system attack code, metasploit plug-in code released-vulnerability warning-the black bar safety net

Metasploit attack platform released the latest ms08-0 6 7 attack plug-ins. Adds an initial exploit for MS08-0 6 7, support for XP SP2/SP3 DEP, 2 0 0 3 SP0/SP2 no-DEP. The current XP system better, via the DEP data protection, but 2 0 0 3 system after an attack often crash. Code only forMetasploit...

Green Dam URL Processing Buffer Overflow

This module exploits a stack-based buffer overflow in Green Dam Youth Escort version 3.17 in the way it handles overly long URLs. By setting an overly long URL, an attacker can overrun a buffer and execute arbitrary code. This module uses the .NET DLL memory technique by Alexander Sotirov and Mar...

绿坝 3.17 URL Processing Buffer Overflow Exploit (meta)

No description provided by source. greendamurl.rb Green Dam URL Processing Buffer Overflow exploit for the Metasploit Framework Green Dam Youth Escort 3.17 successfully exploited on the following platforms: - Internet Explorer 6, Windows XP SP2 - Internet Explorer 7, Windows XP SP3 - Internet...

Green Dam 3.17 URL Processing Buffer Overflow Exploit (meta)

Exploit for windows platform in category remote exploits ============================================================ Green Dam 3.17 URL Processing Buffer Overflow Exploit meta ============================================================ greendamurl.rb Green Dam URL Processing Buffer Overflow...