CVE-2010-4701

Heap-based buffer overflow in the CDrawPoly::Serialize function in fxscover.exe in Microsoft Windows Fax Services Cover Page Editor 5.2 r2 in Windows XP Professional SP3, Server 2003 R2 Enterprise Edition SP2, and Windows 7 Professional allows remote attackers to execute arbitrary code via a long...

Microsoft Windows Fax Services Cover Page Editor Heap Buffer Overflow (CVE-2010-3974; CVE-2010-4701)

A heap buffer overflow vulnerability has been discovered in Microsoft Windows Fax Services. The Windows Fax Service is a component that allows a Windows system to act as a Fax server. One of the tools within this fax suite is the Fax Console, which allows a user to monitor the sending and receivi...

Microsoft Windows Fax Services Cover Page Editor (.cov) Memory Corrup

Exploit for windows platform in category dos / poc !load ./winext/msec.dll ... 20d4.2728: C++ EH exception - code e06d7363 first chance 20d4.2728: Access violation - code c0000005 first chance First chance exceptions are reported before any exception handling. This exception may be expected and...

Microsoft Windows Fax Services Cover Page Editor - .cov Memory Corruption

Microsoft Windows Fax Services Cover Page Editor - .cov Memory Corruption !load ./winext/msec.dll ... 20d4.2728: C++ EH exception - code e06d7363 first chance 20d4.2728: Access violation - code c0000005 first chance First chance exceptions are reported before any exception handling. This exceptio...

Microsoft Windows Fax Services Cover Page Editor Memory Corruption

!load ./winext/msec.dll ... 20d4.2728: C++ EH exception - code e06d7363 first chance 20d4.2728: Access violation - code c0000005 first chance First chance exceptions are reported before any exception handling. This exception may be expected and handled. eax=00c6f118 ebx=00c6f118 ecx=41414141...

Microsoft Windows Fax Services Cover Page Editor - '.cov' Memory Corruption

!load ./winext/msec.dll ... 20d4.2728: C++ EH exception - code e06d7363 first chance 20d4.2728: Access violation - code c0000005 first chance First chance exceptions are reported before any exception handling. This exception may be expected and handled. eax=00c6f118 ebx=00c6f118 ecx=41414141...

Microsoft Windows Fax Cover Page Editor Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. The issue affects the Windows Fax Cover Page Editor component fxscover.exe. An attacker can exploit this issue by enticing an unsuspecting user into opening a specially crafted Fax Cover Page file. Successfully...

Anonymous Launches Fax-Based Attack on WikiLeaks Opponents

"Operation Payback" is evolving, as attackers have initiated a fax-based campaign against companies that severed ties with WikiLeaks. Hacktivists from the group "Anonymous" are urging members to send faxes to Amazon, MasterCard, PayPal, Visa, Tableau Software, and Moneybookers. This action aims t...

Anti-Phishing Group Targeting Fax-Based Scams

The heyday of faxing may have passed twenty years ago, but scam artists haven’t given up on the old technology, especially when it comes to wheedling personally identifiable information out of unsuspecting office workers. Now a leading anti-phishing group is tackling the problem of fax based...

APWG Fax Back Phishing Education Program

In an effort to respond to a growing public threat by offline phishers that conduct various scams via fax, the Anti-phishing Working Group APWG has partnered with the Internal Revenue Service IRS to create the APWG Fax Back Phishing Education Program. This program is designed to provide...

IT-Grundschutz M4.036: Sperren bestimmter Faxempfänger-Rufnummerne

IT-Grundschutz M4.036: Sperren bestimmter Faxempfänger-Rufnummerne. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94201 Diese Prüfung bezieht sich auf die 10...

DEBIAN-CVE-2010-0441

Asterisk Open Source 1.6.0.x before 1.6.0.22, 1.6.1.x before 1.6.1.14, and 1.6.2.x before 1.6.2.2, and Business Edition C.3 before C.3.3.2, allows remote attackers to cause a denial of service daemon crash via an SIP T.38 negotiation with an SDP FaxMaxDatagram field that is 1 missing, 2 modified ...

SLES10: Security update for kdegraphics3

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: kdegraphics3 kdegraphics3-devel kdegraphics3-extra kdegraphics3-fax kdegraphics3-pdf kdegraphics3-postscript More details may also be found by searching for...

SLES9: Security update for kdegraphics3-fax

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: kdegraphics3-fax More details may also be found by searching for keyword 5015464 within the SuSE Enterprise Server 9 patch database linked in the references...

SLES9: Security update for kdegraphics3-fax

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: kdegraphics3-fax More details may also be found by searching for keyword 5015464 within the SuSE Enterprise Server 9 patch database at...

Symantec Fax Viewer Control v10 (DCCFAXVW.DLL) remote buffer overflow exploit

!-- Symantec Fax Viewer Control v10 DCCFAXVW.DLL remote buffer overflow exploit IE7 by Nine:Situations:Group::trotzkista site: http://retrogod.altervista.org/ tested against: Symantec WinFax Pro 10.03 Internet Explorer 7, XP SP3 some details: CLSID: C05A1FBC-1413-11D1-B05F-00805F4945F6 Progid:...

Symantec WinFax Pro 'DCCFAXVW.DLL'堆缓冲区溢出漏洞

Symantec WinFax Pro是一款传真管理软件。 Symantec WinFax Pro包含的ActiveX控件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 问题包含在DCCFAXVW.DLL提供的控件中，由于对AppendFax方法缺少正确边界检查，构建恶意WEB页，诱使用户打开，可导致以应用程序权限执行任意指令。 Symantec WinFax Pro 10.03 目前没有解决方案提供： http://www.symantec.com/ !-- Symantec Fax Viewer Control v10 DCCFAXVW.DLL remote...

Symantec Fax Viewer Control 10 (DCCFAXVW.DLL) Remote BOF Exploit

No description provided by source. !-- Symantec Fax Viewer Control v10 DCCFAXVW.DLL remote buffer overflow exploit IE7 by Nine:Situations:Group::trotzkista site: http://retrogod.altervista.org/ tested against: Symantec WinFax Pro 10.03 Internet Explorer 7, XP SP3 some details: CLSID:...

Symantec Fax Viewer Control ActiveX Control AppendFax Overflow

The version of the Symantec Fax Viewer Control ActiveX control, a component included with Symantec Winfax Pro and installed on the remote Windows host, reportedly contains a stack-based buffer overflow that can be triggered by calling the 'AppendFax' method with an overly long argument. If an...

Symantec WinFax Pro 10.03 Buffer Overflow

// win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var scode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" + "%u4948%u4949%u4949%u4949%u4949%u4949%u5a51%u436a" + "%u3058%u3142%u4250%u6b41%u4142%u4253%u4232%u3241" +...