Cain Abel 2.7.3 - dagc.dll DLL Loading Arbitrary Code Execution

Cain Abel 2.7.3 - dagc.dll DLL Loading Arbitrary Code Execution // source: https://www.securityfocus.com/bid/46239/info Cain & Abel is prone to an arbitrary-code-execution vulnerability. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a...

Win32k Keyboard Layout Vulnerability

// My koala is staring at you CºgºD // Source: http://reversemode.com/index.php?option=comcontent&task=view&id=71&Itemid=1 include include include define MAGICOFFSET 0x6261 define InitializeUnicodeStrp,s \ p-Length= wcslens2; \ p-MaximumLength = wcslens2+2; \ p-Buffer = s; \ declspecnaked HKL...

Microsoft Windows Backup Manager Insecure Library Loading (MS11-001; CVE-2010-3145)

The Windows Backup Manager sdclt.exe allows users to restore a computer's system files to an earlier point in time. A remote attacker could convince a user to open a legitimate Windows Backup Catalog file .wbcat that is located in the same network directory as a specially crafted DLL file. Then,...

Ace Video Workshop 1.2.0.0 - 'ir50_lcs.dll' DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/45675/info Ace Video Workshop is prone to an arbitrary-code-execution vulnerability. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a special...

Microsoft Windows Movie Maker Could Allow Remote Code Execution Vulnerability (2424434)

This host is missing a critical security update according to Microsoft Bulletin MS10-093. OpenVAS Vulnerability Test $Id: secpodms10-093.nasl 5361 2017-02-20 11:57:13Z cfi $ Microsoft Windows Movie Maker Could Allow Remote Code Execution Vulnerability 2424434 Authors: Veerendra GG Updated By:...

MS10-095: Vulnerability in Microsoft Windows Could Allow Remote Code Execution (2385678)

The remote Windows host contains a version of Windows BranchCache that incorrectly restricts the path used for loading external libraries. If an attacker can trick a user on the affected system into opening a specially crafted file eg, .eml and .rss Windows Live Mail or .wpost Microsoft Live Writ...

Microsoft Windows BranchCache DLL Loading Arbitrary Code Execution Vulnerability

Description Microsoft Windows is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable system to open a file from a network share location that contains a specially crafted Dynamic Link Library D...

PowerDVD 5.0.1107 - 'trigger.dll' DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/44193/info PowerDVD is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a...

e2eSoft VCam - DLL Loading Arbitrary Code Execution

source: https://www.securityfocus.com/bid/44051/info e2eSoft VCam is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a...

NetStumbler 0.4 - mfc71esn.dll DLL Loading Arbitrary Code Execution

NetStumbler 0.4 - mfc71esn.dll DLL Loading Arbitrary Code Execution // source: https://www.securityfocus.com/bid/43913/info NetStumbler is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable...

Dupehunter Professional 9.0.0.3911 - 'Fwpuclnt.dll' DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/43863/info Dupehunter Professional is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location...

GreenBrowser - RSRC32.dll DLL Loading Arbitrary Code Execution

GreenBrowser - RSRC32.dll DLL Loading Arbitrary Code Execution // source: https://www.securityfocus.com/bid/43414/info GreenBrowser is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable...

UltraVNC 1.0.8.2 - DLL Loading Arbitrary Code Execution

UltraVNC 1.0.8.2 - DLL Loading Arbitrary Code Execution // source: https://www.securityfocus.com/bid/42846/info UltraVNC is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to op...

UltraVNC 1.0.8.2 - DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/42846/info UltraVNC is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a...

CVE-2010-1117

Heap-based buffer overflow in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to discover the base address of a Windows .dll file, and possibly have unspecified other impact, via unknown vectors, as demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 20...

CVE-2010-1117

Heap-based buffer overflow in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to discover the base address of a Windows .dll file, and possibly have unspecified other impact, via unknown vectors, as demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 20...

Energizer DUO USB battery charger software allows unauthorized remote system access

Overview The software available for the Energizer DUO USB battery charger contains a backdoor that allows unauthorized remote system access. Description Energizer DUO is a USB battery charger. An optional Windows application that allows the user to view the battery charging status has been...

NameLess the back door of technical analysis full-contact-vulnerability warning-the black bar safety net

NameLess's name should be heard of it, estimated there are quite a lot of people used it, personally think that this back door is very classic, we'll simply look at about it description: there is only one DLL file, usually do not start in the mouth,can be a reverse connection back door program...

Design/Logic Flaw

The Windows Print Spooler in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows remote authenticated users to gain privileges via a crafted RPC message that triggers loading of a DLL file from an arbitrary directory, aka "Print Spoole...

CVE-2009-0230

The Windows Print Spooler in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows remote authenticated users to gain privileges via a crafted RPC message that triggers loading of a DLL file from an arbitrary directory, aka "Print Spoole...