Microsoft IE 6&7 Crash Exploit

Securitylab.ir Application Info: Name: Microsoft IE Version: 6 & 7 Tested on : XPSP1/SP2/SP3 Vulnerability Info: Type: Crash Risk: Medium Vulnerability: IE.html scriptdocument.createElement"html".outerHTML/script Discoverd By: Pouya Daneshmand Website: http://securitylab.ir Contacts:...

Firefox Gets Browser Boost From IE Attacks

Mozilla yesterday reported a “huge increase” in downloads of Firefox in Germany after that country’s computer security agency urged users of Microsoft’s Internet Explorer to dump the browser and run a rival instead. Read the full article. Computerworld...

Tips For Managing The IE Aurora Attack

Here are some steps Microsoft and other security firms recommend you can take now to help defend yourself against the IE Aurora attacks. Read the full article. Dark Reading...

Code to mitigate IE event zero-day (CVE-2010-0249)

Here's a mitigation for the CVE-2010-0249 IE createEventObject srcElement zero-day. Quite simply, it just disables the createEventObject method by mangling its name in memory. If anyone knows an important web application that uses createEventObject, please respond to the mailing list. Use this co...

Attacks Continuing Against IE Flaw as Microsoft Preps Patch

Microsoft officials said on Sunday that they are continuing to investigate the attacks that are exploiting the unpatched flaw in Internet Explorer, but that the attacks right now are limited to specifically targeted activity against enterprise networks. The company said that it doesn’t look like...

Operation Aurora: the attack on Google code exposure-vulnerability warning-the black bar safety net

TechWeb's DarkReading published an article that revealed iDefense has already recovered before the release of the Adobe PDF vulnerability cause Google is to attack the statement, admitted McAfee said the IE vulnerability is the disaster source. The article also gives a link to the open source...

PHP-Fusion Teams Structure Infusion Addon SQL Injection Vulnerability

Exploit for php platform in category web applications Date: 16-1-2010 Author: Saif El-Sherei Software Link: http://www.php-fusion.co.uk/infusions/addondb/view.php?addonid=120 Version: PHP-fusion 7.01..03, TeamStructure Infusionall versions Tested on: Firefox 3.0.15, , IE 8 Info: Plugin that allow...

AwingSoft Winds3D Player 3.5 SceneURL Download and Execute

$Id: awingsoftwinds3dsceneurl.rb 7724 2009-12-06 05:50:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2009-3671

CVE-2009-3671 concerns Microsoft Internet Explorer 8. The issue is a memory handling vulnerability where an object that is either not properly initialized or has been deleted is accessed, causing memory corruption and enabling remote code execution. The vulnerability is described as Uninitialized...

Microsoft IE PDF文件信息泄露漏洞

BUGTRAQ ID: 37117 CVECAN ID: CVE-2009-4073 Internet Explorer是Windows操作系统中默认捆绑的WEB浏览器。 Internet Explorer中的打印功能允许远程攻击者发现本地路径名和用户名。在使用Internet Explorer以PDF形式打印本地保存的网页时，从本地网页所生成的PDF文档的dc:title中可能泄露文件路径的前63个字节。 Microsoft Internet Explorer 8.0 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer...

Researchers Say IE Exploit Code 'Unreliable'

Researchers have released code that can compromise Microsoft’s Internet Explorer browser, but the software is not as reliable as first thought. Read the full article. Computerworld...

Internet Explorer Unsafe Scripting Misconfiguration

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Internet Explorer...

Autodesk IDrop ActiveX Control Heap Memory Corruption

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Autodesk IDrop ActiveX Control Heap Memory Corruption', 'Description' = %q This module exploits a heap-based memory corruption...

CVE-2009-4074

CVE-2009-4074 affects Internet Explorer 8’s XSS Filter (response-changing mechanism) enabling cross-site scripting on sites with no inherent vulnerabilities. Connected MS release MS10-002 documents a cumulative IE update to fix vulnerabilities that could allow remote code execution when viewing c...

Experts at PDC Ponder IE 9 Security

Researchers, analysts and experts weighed in on what they believe will be the security features of IE9 at the PDC Developer’s Conference. Read the full article. eWEEK...

Adobe AcroPDF.dll Denial Of Service

Adobe browser document ActiveX DoS vulnerablity File: AcroPDF.dll Affected version : 7.0.5 . Later versions are also effected Description: RegKey Safe for Script: True RegKey Safe for Init: True POC: Create a HTML file with following Code and test it on IE Test Exploit page targetFile = "C:\Progr...

CVE-2009-2510

Technical details for CVE-2009-2510 are not publicly provided in the connected documents. Please monitor for updates.

EMC ApplicationXtender (KeyWorks) ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in the KeyWorks KeyHelp ActiveX Control KeyHelp.ocx 1.2.3120.0. This ActiveX Control comes bundled with EMC's Documentation ApplicationXtender 5.4. This module requires Metasploit: https://metasploit.com/download Current source:...

Rookie Academy of crack Session cookie method-vulnerability warning-the black bar safety net

The so-called session cookies, is a platform in you after a successful login, a cookie that indicates you have passed verification, but with the General cookie is different, he will not be there on your hard drive, that is to say: before you leave the browser, it will disappear, which means: the...

Security expert: do not ignore the URL vulnerability-vulnerability warning-the black bar safety net

Some time ago, the public security organs cracked a network company program theft cases, the analysis a bit, the main problem still lies in URL vulnerability. To test whether the presence of the URL vulnerabilities, the most simple method is in the Request. QueryString added to a’, as shown in th...