Cain & Abel 4.9.24 - RDP Buffer Overflow (Metasploit)

$Id: cainabel4918rdp.rb 11127 2010-11-24 19:35:38Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Fedora 12 : freetype-2.3.11-6.fc12 (2010-15785)

Mon Oct 4 2010 Marek Kasik 2.3.11-6 - Add freetype-2.3.11-CVE-2010-2805.patch Fix comparison. - Add freetype-2.3.11-CVE-2010-2806.patch Protect against negative stringsize. Fix comparison. - Add freetype-2.3.11-CVE-2010-2808.patch Check the total length of collected POST segments. - Add...

CVE-2010-3160

Untrusted search path vulnerability in Archive Decoder 1.23 and earlier allows local users to gain privileges via a Trojan horse executable file in the current working directory...

Design/Logic Flaw

Untrusted search path vulnerability in Archive Decoder 1.23 and earlier allows local users to gain privileges via a Trojan horse executable file in the current working directory...

CVE-2010-3160

Archive Decoder ≤1.23 is affected by an untrusted search path vulnerability that allows local users to gain privileges by placing a Trojan horse executable in the current working directory. The issue arises from insecure loading of executables during file extraction. Affected product is Archive D...

CVE-2010-3160

Untrusted search path vulnerability in Archive Decoder 1.23 and earlier allows local users to gain privileges via a Trojan horse executable file in the current working directory...

CVE-2010-3160: Undefined Security Weakness

Untrusted search path vulnerability in Archive Decoder 1.23 and earlier allows local users to gain privileges via a Trojan horse executable file in the current working directory...

PT-2010-4605

Name of the Vulnerable Software and Affected Versions Archive Decoder versions 1.23 and earlier Description The issue allows local users to gain privileges via a Trojan horse executable file in the current working directory. This is due to an untrusted search path vulnerability. Recommendations F...

Archive Decoder may insecurely load executable files

Overview Archive Decoder may use unsafe methods for determining how to load executables .exe. Archive Decoder is a file extraction software that supports multiple file en extracting files. Archive Decoder contains an issue with the file search path, which may insecurely load executables. Makoto...

JVN#68536660: Archive Decoder may insecurely load executable files

Archive Decoder is a file extraction software that supports multiple file formats. Archive Decoder loads certain executables .exe when extracting files. Archive Decoder contains an issue with the file search path, which may insecurely load executables. Impact An attacker may execute arbitrary cod...

ASP.NET Padding Oracle Vulnerability (MS10-070)

Exploit for windows platform in category remote exploits =============================================== ASP.NET Padding Oracle Vulnerability MS10-070 =============================================== Source: http://blog.mindedsecurity.com/2010/10/breaking-net-encryption-with-or-without.html...

PT-2010-1005

Name of the Vulnerable Software and Affected Versions FFmpeg version 0.6 Description The issue is related to an integer overflow in the vorbis residue decode internal function in the Vorbis decoder. This could potentially have unspecified impact and allows for remote attack vectors, related to th...

PT-2010-1004

Name of the Vulnerable Software and Affected Versions FFmpeg versions 0.6.1 and earlier Description The issue is related to the Vorbis decoder in FFmpeg, where a crafted .ogg file can cause a denial of service, leading to an application crash. This is due to a problem in the vorbis floor0 decode...

libmikmod: arbitrary code execution via crafted Impulse Tracker or Ultratracker files

Multiple heap-based buffer overflows in INMOD.DLL aka the Module Decoder Plug-in in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file. NOTE: some of these details ar...

libmikmod: arbitrary code execution via crafted Impulse Tracker or Ultratracker files

Heap-based buffer overflow in INMOD.DLL aka the Module Decoder Plug-in in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via an Ultratracker file...

Month Of Abysssec Undisclosed Bugs - Microsoft MPEG Layer-3

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-24-microsoft-mpeg-layer-3-audio-decoder-division-by-zero/ http://www.exploit-db.com/sploits/moaub-24-mp3-exploit.zip ''' ''' Title : Microsoft...

Microsoft MPEG Layer-3 Audio Decoder Division

Exploit for windows platform in category dos / poc ============================================= Microsoft MPEG Layer-3 Audio Decoder Division ============================================= Title : Microsoft MPEG Layer-3 Audio Decoder Division By Zero Version : l3codeca.acm 1-9-0-306 XP SP2 ñ XP...

Microsoft MPEG Layer-3 Audio Decoder - Division By Zero

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-24-microsoft-mpeg-layer-3-audio-decoder-division-by-zero/...

Microsoft MPEG Layer-3 Remote Command Execution Exploit

Exploit for windows platform in category remote exploits ======================================================= Microsoft MPEG Layer-3 Remote Command Execution Exploit ======================================================= Title : Microsoft MPEG Layer-3 Audio Decoder Division By Zero Version :...

Mthree Development MP3 To Wav Decoder Denial Of Service

Exploit Title: Mthree Development MP3 to WAV Decoder .mp3 DoS Date: 10 / 8 / 2010 Author: Oh Yaw Theng Credit : ZAC0034m!n Software Link: http://www.mthreedev.com/setupmp3towav.exe Tested on: Windows XP SP 2 CVE : N / A Description : Create the malicious .mp3 file , open up using Mthree , after...