Mass Downloader - Malformed Executable Denial of Service

// source: https://www.securityfocus.com/bid/31406/info Mass Downloader is prone to a remote denial-of-service vulnerability. Exploiting this issue allows remote attackers to crash the application and trigger denial-of-service conditions, denying further service to legitimate users. Given the...

Mass Downloader - Malformed Executable Denial of Service

Mass Downloader - Malformed Executable Denial of Service // source: https://www.securityfocus.com/bid/31406/info Mass Downloader is prone to a remote denial-of-service vulnerability. Exploiting this issue allows remote attackers to crash the application and trigger denial-of-service conditions,...

Orbit Downloader URL Unicode conversion buffer overflow

Added: 07/07/2008 CVE: CVE-2008-1602 BID: 28541 OSVDB: 44036 Background Orbit Downloader is a download manager supporting various protocols. Problem A buffer overflow vulnerability during Unicode conversion in the download failure notification message allows command execution when Orbit Downloade...

Orbit Downloader URL Unicode conversion buffer overflow

Added: 07/07/2008 CVE: CVE-2008-1602 BID: 28541 OSVDB: 44036 Background Orbit Downloader is a download manager supporting various protocols. Problem A buffer overflow vulnerability during Unicode conversion in the download failure notification message allows command execution when Orbit Downloade...

Orbit Downloader URL Unicode conversion buffer overflow

Added: 07/07/2008 CVE: CVE-2008-1602 BID: 28541 OSVDB: 44036 Background Orbit Downloader is a download manager supporting various protocols. Problem A buffer overflow vulnerability during Unicode conversion in the download failure notification message allows command execution when Orbit Downloade...

MS Internet Explorer .ANI files handling Downloader Exploit (MS05-002)

No description provided by source. / Modified by Vertygo aka Ivanm [email protected] all credits goes to houseofdabus Berend-Jan Wever and to milw0rm/ / Added string.h /str0ke / / HOD-ms05002-ani-expl.c: 2005-01-10: PUBLIC v.0.2 Copyright c 2004-2005 houseofdabus. MS05-002 Microsoft Internet Explore...

Orbit Downloader URL Unicode conversion buffer overflow

Added: 07/07/2008 CVE: CVE-2008-1602 BID: 28541 OSVDB: 44036 Background Orbit Downloader is a download manager supporting various protocols. Problem A buffer overflow vulnerability during Unicode conversion in the download failure notification message allows command execution when Orbit Downloade...

Eznet v3.5.0 Remote Stack Overflow and Denial of Service Exploit

No description provided by source. !/usr/bin/perl -w Stack Overflow in eZnet.exe - Remote Exploit Will download a trojan from any address which you provide on the target system, then will execute the trojan. For this exploit I have tried several strategies to increase reliability and performance:...

C6 Messenger Installation Url Downloader ActiveX code execution

It's possible to download and execute file. Vulnerability is used in-the-wild for hidden trojan code installation...

Orbit Downloader URL处理栈溢出漏洞

BUGTRAQ ID: 28541 CVECAN ID: CVE-2008-1602 Orbit Downloader是用于从视频共享网站下载流媒体的下载管理器。 Orbit downloader没有正确地将URL ASCII字符串转换为Unicode，如果用户从特制的URL下载了文件的话就可能导致执行任意指令。 如果Orbit无法下载文件的话，就会在通知区域弹出气球控制： /----------- .text:004A56D0 sub4A56D0 proc near ; CODE XREF: sub42AAC0+321 p .text:004A56D0 ; sub439610+321 ...

Stack overflow

Stack-based buffer overflow in Orbit downloader 2.6.3 and 2.6.4 allows remote attackers to execute arbitrary code via a long download URL, which is not properly handled during Unicode conversion for a balloon notification after a download has failed...

CVE-2008-1602

Stack-based buffer overflow in Orbit downloader 2.6.3 and 2.6.4 allows remote attackers to execute arbitrary code via a long download URL, which is not properly handled during Unicode conversion for a balloon notification after a download has failed...

CVE-2008-1602

Stack-based buffer overflow in Orbit downloader 2.6.3 and 2.6.4 allows remote attackers to execute arbitrary code via a long download URL, which is not properly handled during Unicode conversion for a balloon notification after a download has failed...

CVE-2008-1602

CVE-2008-1602 – Orbit Downloader Unicode conversion overflow : A stack-based buffer overflow in Orbit Downloader (versions 2.6.3 and 2.6.4) occurs when processing a long download URL during Unicode conversion for the failure balloon notification, allowing remote code execution. The root cause is ...

CVE-2008-1602: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Orbit downloader 2.6.3 and 2.6.4 allows remote attackers to execute arbitrary code via a long download URL, which is not properly handled during Unicode conversion for a balloon notification after a download has failed...

CORE-2008-0314 - Orbit Downloader "Download failed" buffer overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Orbit Downloader "Download failed" buffer overflow Advisory Information Title: Orbit Downloader "Download failed" buffer overflow Advisory ID: CORE-2008-0314 Advisory...

Orbit Downloader "Download failed" buffer overflow

Orbit Downloader "Download failed" buffer overflow Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs-research Advisory Information Title: Orbit Downloader "Download failed" buffer overflow Advisory ID: CORE-2008-0314 Advisory URL:...

Orbit Downloader URL Unicode Conversion Overflow

This module exploits a stack-based buffer overflow in Orbit Downloader. The vulnerability is due to Orbit converting a URL ascii string to unicode in an insecure way with MultiByteToWideChar. The vulnerability is exploited with a specially crafted metalink file that should be opened with Orbit...

CVE-2007-2975

The admin console in Ignite Realtime Openfire 3.3.0 and earlier formerly Wildfire does not properly specify a filter mapping in web.xml, which allows remote attackers to gain privileges and execute arbitrary code by accessing functionality that is exposed through DWR, as demonstrated using the...

McAfee Security Center IsOldAppInstalled - ActiveX Buffer Overflow

/ McAfee Security Center IsOldAppInstalled ActiveX Buffer Overflow Vulnerability Peel the frame from axis,Thanks Test on Windows2000 and dll version Mcsubmgr.dll 6.0.0.15 Greetz to OYXin, sowhat, Winny Thomas and 0x557 team / include include include FILE fp = NULL; char file = "McAfeeexploit.html...