CVE-2010-1249: Improper Control of Generation of Code

Buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed ExternName 0x23 record, aka "Excel Memory Corruption Vulnerability," a...

CVE-2010-1253: Improper Control of Generation of Code

Microsoft Office Excel 2002 SP3, 2007 SP1, and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML File Format Converter for Mac; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2; allows remote attackers to execute arbitrary code via an Excel file wi...

CVE-2010-1250: Improper Control of Generation of Code

Heap-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with malformed 1 EDG 0x88 and 2 Publisher 0x89 records, aka "Excel EDG Memory...

CVE-2010-1254: Undefined Security Weakness

The installation for Microsoft Open XML File Format Converter for Mac sets insecure ACLs for the /Applications folder, which allows local users to execute arbitrary code by replacing the executable with a Trojan Horse, aka "Mac Office Open XML Permissions Vulnerability."...

CVE-2010-0822: Improper Control of Generation of Code

Stack-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with a crafted OBJ 0x5D record, aka "Excel Object Stack Overflow Vulnerability."...

IDEAL Migration 4.5.1 - Local Buffer Overflow (Metasploit)

IDEAL Migration 4.5.1 - Local Buffer Overflow Metasploit This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

IDEAL Migration 4.5.1 - Local Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'IDEAL Migration...

Destiny Media Player 1.61 - PLS .m3u Buffer Overflow (Metasploit)

$Id: destinymediaplayer16.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Serenity Audio Player Buffer Overflow Exploit

New Ticket: Serenity Audio Player Buffer Overflow Meta Exploit Title: Serenity Audio Player Buffer Overflow Meta Date: April 26, 2010 Author: Blake Version: 3.2.3 Tested on: Windows XP SP3 This file is part of the Metasploit Framework and may be subject to redistribution and commercial...

Mandriva Linux Security Advisory : clamav (MDVSA-2010:082-1)

Multiple vulnerabilities has been found and corrected in clamav : ClamAV before 0.96 does not properly handle the 1 CAB and 2 7z file formats, which allows remote attackers to bypass virus detection via a crafted archive that is compatible with standard archive utilities CVE-2010-0098. The...

Winamp 5.572 whatsnew.txt SEH (meta)

No description provided by source. Title: Winamp 5.572 whatsnew.txt SEH MSF Author: Blake Published: 2010-04-15 Tested on Windows XP SP3 This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for...

Adobe Reader CFF Heap-Based Overflow (APSB10-09; CVE-2010-1241)

Portable Document Format PDF is an open file format created by Adobe Systems. A heap-based overflow vulnerability has been reported in Adobe Reader. The vulnerability is due to the way Adobe Reader and Acrobat parse a malformed PDF file. A remote attacker could trigger this issue via a specially...

KenWard's Zipper v1.400 Buffer Overflow - Method 2

Exploit for windows platform in category local exploits ================================================== KenWard's Zipper v1.400 Buffer Overflow - Method 2 ================================================== !/usr/bin/python KenWard's Zipper v1.400 File Name Buffer Overflow Coded by sinn3r...

KenWards Zipper 1.400 - Local Buffer Overflow (2)

KenWards Zipper 1.400 - Local Buffer Overflow 2 !/usr/bin/python KenWard's Zipper v1.400 File Name Buffer Overflow Coded by sinn3r x90.sinneratgmaild0tcom Tested on: Windows XP SP3 ENG Reference: http://www.exploit-db.com/exploits/11834 Big thanks to mrme, and corelanc0d3r. greetz to all the...

VariCAD 2010-2.05 EN (DWB File) Stack Buffer Overflow

This module exploits a stack-based buffer overflow in VariCAD 2010-2.05 EN. An attacker must send the file to victim and the victim must open the file. Module Options msf use exploit/windows/fileformat/varicad/dwb msf undefineddwb show actions ...actions... msf undefineddwb set ACTION msf...

UPX Compressed PE Executable Files (CVE-2005-2920)

ClamAV AntiVirus is an open source product that provides anti-virus scanning utilities and an anti-virus library. The product is capable of decoding several archive formats in order to scan their internal items for viruses. One of such archive formats is the UPX Ultimate Packer for eXecutables fi...

Remote code execution

Microsoft Office Excel 2007 SP1 and SP2; Office 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2; and Office SharePoint Server 2007 SP1 and SP2 do not validate ZIP headers...

Format string

Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Microsoft Office Excel DbOrParamQry Record Parsing...

CVE-2010-0258: Access of Resource Using Incompatible Type

Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 do not properly parse the Excel file...

CVE-2010-0264: Improper Control of Generation of Code

Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Microsoft Office Excel DbOrParamQry Record Parsing...