HP Openview NNM 7.53 Invalid DB Error Code Vulnerability

Exploit for unknown platform in category dos / poc ======================================================== HP Openview NNM 7.53 Invalid DB Error Code Vulnerability ======================================================== Title: HP Openview NNM 7.53 Invalid DB Error Code Vulnerability CVE-ID:...

MS Bracing For Malware Attacks From Embedded Fonts

Heads up to all Microsoft Windows users: If you’re running Windows 2000, Windows XP or Windows Server 2003, stop what you’re doing and immediately download and apply the MS09-065 update released earlier this week. Security researchers say it’s only a matter of time — days not weeks — before...

Microsoft Windows 2000-2008 Embedded OpenType Font Engine Remote

Exploit for unknown platform in category dos / poc =============================================================================== Microsoft Windows 2000-2008 Embedded OpenType Font Engine Remote Code Execution =============================================================================== Title:...

Microsoft Windows 2000-2008 Embedded OpenType Font Engine Remote Code Execution

No description provided by source. $Id: ms09065eotinteger.rb 7470 2009-11-11 23:48:53Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

Microsoft Windows Server 2000 2008 - Embedded OpenType Font Engine Remote Code Execution (MS09-065) (Metasploit)

Microsoft Windows Server 2000 2008 - Embedded OpenType Font Engine Remote Code Execution MS09-065 Metasploit $Id: ms09065eotinteger.rb 7470 2009-11-11 23:48:53Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the...

Microsoft Windows EOT Font Table Directory Integer Overflow

This module exploits an integer overflow flaw in the Microsoft Windows Embedded OpenType font parsing code located in win32k.sys. Since the kernel itself parses embedded web fonts, it is possible to trigger a BSoD from a normal web page when viewed with Internet Explorer. This module requires...

Code injection

win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not correctly parse font code during construction of a directory-entry table, which allows remote attackers to execute arbitrary code via a crafted Embedded OpenType EOT font, aka "Win32k EOT Parsing...

PT-2009-4921 · Microsoft · Windows Server 2003 +3

Name of the Vulnerable Software and Affected Versions: Windows 2000 SP4 Windows XP SP2 Windows XP SP3 Windows Server 2003 SP2 Description: A remote code execution issue exists due to the improper parsing of font code when building a table of directory entries. This allows remote attackers to...

Microsoft Security Bulletin MS09-065 - Critical Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Remote Code Execution (969947)

Microsoft Security Bulletin MS09-065 - Critical Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Remote Code Execution 969947 Published: November 10, 2009 Version: 1.0 General Information Executive Summary This security update resolves several privately reported vulnerabilities in the...

CVE-2009-2824

Multiple buffer overflows in Apple Type Services ATS in Apple Mac OS X 10.5.8 allow remote attackers to execute arbitrary code via a crafted embedded font in a document...

Buffer overflow

Multiple buffer overflows in Apple Type Services ATS in Apple Mac OS X 10.5.8 allow remote attackers to execute arbitrary code via a crafted embedded font in a document...

CVE-2009-2824

Multiple buffer overflows in Apple Type Services ATS in Apple Mac OS X 10.5.8 allow remote attackers to execute arbitrary code via a crafted embedded font in a document...

CVE-2009-2824

CVE-2009-2824 affects Apple Type Services (ATS) in Mac OS X 10.5.8. The vulnerability arises from multiple buffer overflows in ATS when handling embedded fonts in documents, enabling remote attackers to execute arbitrary code. The exploit vector is a crafted embedded font within a document. The i...

Scan of Internet Uncovers Thousands of Vulnerable Embedded Devices

Researchers scanning the internet for vulnerable embedded devices have found nearly 21,000 routers, webcams and VoIP products open to remote attack, due to the fact that their administrative interfaces are publicly viewable from anywhere on the internet and their owners have failed to change the...

jetty 6.x - 7.x xss, information disclosure, injection

Exploit for jsp platform in category web applications ====================================================== jetty 6.x - 7.x xss, information disclosure, injection ====================================================== Jetty 6.x and 7.x Multiple Vulnerabilities Name Multiple Vulnerabilities in...

Ubicom Embedded Web Server Detection

Binary data 5201.prm...

Adobe Flash Player JPG Embedded SWF Processing Heap Overflow (CVE-2007-6242)

Adobe Flash Player is a multimedia and application player. Flash Player runs the Shockware Flash SWF files, which contains multimedia content including vector and raster graphics, video, audio, and scripts. Flash Player is made available as a plug-in for a wide range of web browser applications...

Fedora Core 11 FEDORA-2009-8815 (neon)

The remote host is missing an update to neon announced via advisory FEDORA-2009-8815. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Microsoft Windows Server 2003 OpenType Font Engine DoS Vulnerability

Windows Server 2003 operating system is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2009-3020

win32k.sys in Microsoft Windows Server 2003 SP2 allows remote attackers to cause a denial of service system crash by referencing a crafted .eot file in the src descriptor of an @font-face Cascading Style Sheets CSS rule in an HTML document, possibly related to the Embedded OpenType EOT Font Engin...