VMware OVF Tool Format String

Added: 03/15/2013 CVE: CVE-2012-3569 BID: 56468 OSVDB: 87117 Background VMware is a suite of products supporting the creation and operation of virtual machines, which are self-contained, independent guest operating systems running within a host operating system. Problem The Windows variants of...

MS13-022 Microsoft Silverlight ScriptObject Unsafe Memory Access

This module exploits a vulnerability in Microsoft Silverlight. The vulnerability exists on the Initialize method from System.Windows.Browser.ScriptObject, which access memory in an unsafe manner. Since it is accessible for untrusted code user controlled it's possible to dereference arbitrary memo...

Microsoft Silverlight - ScriptObject Unsafe Memory Access (MS13-022/MS13-087) (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule EOS def initializeinfo= superupdateinfoinfo, 'Name' = "MS13-022 Microsoft Silverlight ScriptObject Unsafe Memory Access",...

Slideshow: Scenes from CanSecWest 2013

VIEW SLIDESHOW Scenes from CanSecWest 2013 The CanSecWest security conference in Vancouver last week included technical presentations on bypassing ASLR and DEP and the intricacies of Android research, as well as a fascinating talk on the red team exercises Facebook’s security team runs. We put...

CVE-2013-2554

Unspecified vulnerability in Microsoft Windows 7 allows attackers to bypass the ASLR and DEP protection mechanisms via unknown vectors, as demonstrated against Firefox by VUPEN during a Pwn2Own competition at CanSecWest 2013, a different vulnerability than CVE-2013-0787...

Design/Logic Flaw

Unspecified vulnerability in Microsoft Windows 7 allows attackers to bypass the ASLR and DEP protection mechanisms via unknown vectors, as demonstrated against Firefox by VUPEN during a Pwn2Own competition at CanSecWest 2013, a different vulnerability than CVE-2013-0787...

CVE-2013-2554

Unspecified vulnerability in Microsoft Windows 7 allows attackers to bypass the ASLR and DEP protection mechanisms via unknown vectors, as demonstrated against Firefox by VUPEN during a Pwn2Own competition at CanSecWest 2013, a different vulnerability than CVE-2013-0787...

CVE-2013-2554

Technical details for CVE-2013-2554 are not publicly available in the provided documents. Connected Nessus entries reference other CVEs (e.g., CVE-2013-0787) but do not elaborate this CVE.

CVE-2013-2554: Undefined Security Weakness

Unspecified vulnerability in Microsoft Windows 7 allows attackers to bypass the ASLR and DEP protection mechanisms via unknown vectors, as demonstrated against Firefox by VUPEN during a Pwn2Own competition at CanSecWest 2013, a different vulnerability than CVE-2013-0787...

PT-2013-3837

Name of the Vulnerable Software and Affected Versions Microsoft Windows 7 affected versions not specified Description The issue allows attackers to bypass the Address Space Layout Randomization ASLR and Data Execution Prevention DEP protection mechanisms. This was demonstrated against Firefox by...

Firebird Relational Database CNCT Group Number Buffer Overflow

This Metasploit module exploits a vulnerability in Firebird SQL Server. A specially crafted packet can be sent which will overwrite a pointer allowing the attacker to control where data is read from. Shortly, following the controlled read, the pointer is called resulting in code execution. The...

Firebird Relational Database CNCT Group Number Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Firebird Relational Database CNCT Gro...

Firefox, Java, Flash All Taken Down at Pwn2Own

VANCOUVER–Finding and exploiting new vulnerabilities in the major browsers has become a difficult exercise for security researchers, thanks to the exploit mitigations, sandboxes and other protections that Microsoft, Google and Mozilla have added in the last few years. The same has become true of...

Internet Explorer SLayoutRun CParaElement Node Use After Free

Added: 02/28/2013 CVE: CVE-2013-0025 BID: 57830 OSVDB: 90122 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem A vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code in the context of the...

Internet Explorer SLayoutRun CParaElement Node Use After Free

Added: 02/28/2013 CVE: CVE-2013-0025 BID: 57830 OSVDB: 90122 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem A vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code in the context of the...

Adobe Patches Sandbox Escape Vulnerability in Reader and Acrobat

Adobe today released a patch for two vulnerabilities being exploited in the wild that enabled attackers to pull off the first confirmed sandbox escape against Adobe Reader. The vulnerabilities CVE-2013-0640 and CVE-2013-0641 could cause a crash and allow an attacker to remotely run malware on a...

Adobe Reader and Acrobat memory corruption vulnerabilities

Overview Adobe Reader and Acrobat 11.0.01 and earlier, 10.1.5 and earlier, and 9.5.3 and earlier contain memory corruption vulnerabilities. Description The Adobe security bulletin APSB13-07 states:Adobe has released security updates for Adobe Reader and Acrobat XI 11.0.01 and earlier for Windows...

Nuance PDF viewing products contain multiple vulnerabilities

Overview Nuance PDF viewing products contain multiple memory-corruption vulnerabilities, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Nuance provides two similar PDF viewing products called PDF Reader and PDF Viewer Plus. Both of...

Firebird Relational Database CNCT Group Number Buffer Overflow

This module exploits a vulnerability in Firebird SQL Server. A specially crafted packet can be sent which will overwrite a pointer allowing the attacker to control where data is read from. Shortly, following the controlled read, the pointer is called resulting in code execution. The vulnerability...

Firebird - Relational Database CNCT Group Number Buffer Overflow (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Firebird Relational Database CNCT Group Number Buffer Overflow', 'Description' = %q This module exploits a vulnerability in...