MS15-009: Description of the security update for JScript9.dll in Internet Explorer: February 10, 2015

Resolves vulnerabilities in Internet Explorer that could allow remote code execution if a user views a specially crafted webpage.SummaryThis article describes the cumulative security update for JScript9.dll in Internet Explorer that is dated February 10, 2015. This security update resolves an iss...

T Mobile Internet Manager - DLL Hijacking (mfc71enudll)

Document Title: =============== T Mobile Internet Manager - DLL Hijacking mfc71enudll References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1434 Video: https://www.youtube.com/watch?v=C3PjVOxWvvw Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1427 Release Date:...

T Mobile Internet Manager - DLL Hijacking (mfc71enudll)

Document Title: =============== T Mobile Internet Manager - DLL Hijacking mfc71enudll References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1434 Video: https://www.youtube.com/watch?v=C3PjVOxWvvw Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1427 Release Date:...

Oracle MySQL Multiple Unspecified vulnerabilities-04 (Feb 2015) - Windows

Oracle MySQL is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Stack overflow

Stack-based buffer overflow in an unspecified DLL file in a DTM development kit in Schneider Electric Unity Pro, SoMachine, SoMove, SoMove Lite, Modbus Communication Library 2.2.6 and earlier, CANopen Communication Library 1.0.2 and earlier, EtherNet/IP Communication Library 1.0.0 and earlier, EM...

X360 VideoPlayer ActiveX Control 2.6 - Full ASLR & DEP Bypass Exploit

Exploit for windows platform in category remote exploits !-- Exploit Title: X360 VideoPlayer ActiveX Control RCE Full ASLR & DEP Bypass Author: Rh0 Date: Jan 30 2015 Affected Software: X360 VideoPlayer ActiveX Control 2.6 VideoPlayer.ocx Vulnerability: Buffer Overflow in Data Section Tested on:...

Schneider Electric Patches Buffer Overflow in ICS Products

There is a remotely exploitable buffer overflow in a handful of software products from Schneider Electric that could allow an attacker to execute arbitrary code on vulnerable machines. The vulnerability lies in a DLL that’s installed with a Device Type Manager that is part of several Schneider...

T-Mobile Internet Manager - DLL Hijacking (mfc71enu.dll)

Document Title: =============== T-Mobile Internet Manager - DLL Hijacking mfc71enu.dll References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1427 Release Date: ============= 2015-01-29 Vulnerability Laboratory ID VL-ID: ==================================== 142...

T-Mobile Internet Manager - DLL Hijacking (mfc71enu.dll)

Document Title: =============== T-Mobile Internet Manager - DLL Hijacking mfc71enu.dll References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1427 Release Date: ============= 2015-01-29 Vulnerability Laboratory ID VL-ID: ==================================== 142...

Adobe Flash Player Memory Corruption (APSB15-01: CVE-2015-0306)

A memory corruption vulnerability has been identified in Adobe Flash Player and Air. The vulnerability is due to an error in the player that fails to properly validate input of dll files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

Design/Logic Flaw

The client in iPass Open Mobile before 2.4.5 on Windows allows remote authenticated users to execute arbitrary code via a DLL pathname in a crafted Unicode string that is improperly handled by a subprocess reached through a named pipe, as demonstrated by a UNC share pathname...

Sysmon v2.0 - System Activity Monitor for Windows

System Monitor Sysmon is a Windows system service and device driver that, once installed on a system, remains resident across system reboots to monitor and log system activity to the Windows event log. It provides detailed information about process creations, network connections, and changes to...

Grinder - System to Automate the Fuzzing of Web Browsers

Grinder is a system to automate the fuzzing of web browsers and the management of a large number of crashes. Grinder Nodes provide an automated way to fuzz a browser, and generate useful crash information such as call stacks with symbol information as well as logging information which can be used...

IPass Control Pipe Remote Command Execution

This module exploits a vulnerability in the IPass Client service. This service provides a named pipe which can be accessed by the user group BUILTIN\Users. This pipe can be abused to force the service to load a DLL from a SMB share. Module Options msf use exploit/windows/smb/ipass/pipeexec msf...

Samsung SmartViewer BackupToAvi 3.0 - Remote Code Execution

Samsung SmartViewer BackupToAvi 3.0 - Remote Code Execution var payloadlength = 15000; var arg1=1; var arg2=1; var arg3=1; //blank strings var junk = ""; var buf1 = ""; var buf2 = ""; //offset to SE is 156, initial analysis using metasploit cyclic pattern for i=0; i...

iExplorer 3.6.3 - DLL Hijacking Exploit itunesmobiledevice.dll

Document Title: =============== iExplorer 3.6.3 - DLL Hijacking Exploit itunesmobiledevice.dll References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1415 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9600 CVE-ID: ======= CVE-2014-9600 Release Date:...

iExplorer 3.6.3 - DLL Hijacking Exploit itunesmobiledevice.dll

Document Title: =============== iExplorer 3.6.3 - DLL Hijacking Exploit itunesmobiledevice.dll References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1415 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9600 CVE-ID: ======= CVE-2014-9600 Release Date:...

CVE-2014-9600

Untrusted search path vulnerability in Macroplant iExplorer 3.6.3.0 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse itunesmobiledevice.dll...

Design/Logic Flaw

Untrusted search path vulnerability in Macroplant iExplorer 3.6.3.0 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse itunesmobiledevice.dll...

CVE-2014-9600

CVE-2014-9600 — Macroplant iExplorer 3.6.3.0 suffers from an untrusted search path vulnerability that enables local users to execute arbitrary code via the Trojan horse itunesmobiledevice.dll, enabling DLL hijacking. The root cause is loading a malicious DLL due to an improperly trusted search pa...