Internet Explorer iepeers.dll use-after-free vulnerability

Added: 04/02/2010 CVE: CVE-2010-0806 BID: 38615 OSVDB: 62810 Background The iepeers.dll component of Internet Explorer provides support for Web Folders and printing. Problem A vulnerability in iepeers.dll allows a specially crafted web page to cause a pointer to be used after it has been freed,...

Internet Explorer iepeers.dll use-after-free vulnerability

Added: 04/02/2010 CVE: CVE-2010-0806 BID: 38615 OSVDB: 62810 Background The iepeers.dll component of Internet Explorer provides support for Web Folders and printing. Problem A vulnerability in iepeers.dll allows a specially crafted web page to cause a pointer to be used after it has been freed,...

Internet Explorer 7.0 0day Vulnerability

No description provided by source. Founded By: Unknown Published By: K4mr4nstatyahoodotcom Special Thanks: N.S.T Security Team Red Dragon & Securitylab.ir script language="javascript" ifnavigator.userAgent.toLowerCase.indexOf"msie 7"==-1location.replace"about:blank"; function sleepmilliseconds va...

AOL 9.5 Phobos.Playlist Import() Stack-based Buffer Overflow

aolphobosbof.rb AOL 9.5 Phobos.Playlist 'Import' Stack-based Buffer Overflow exploit for the Metasploit Framework Tested successfully on the following platforms: - AOL 9.5 Revision 4337.155 on Internet Explorer 7, Windows XP SP3 Phobos.dll version tested: File Version: 9.5.0.1 ClassID:...

AOL 9.5 - Phobos.Playlist Import() Remote Buffer Overflow (Metasploit)

AOL 9.5 - Phobos.Playlist Import Remote Buffer Overflow Metasploit aolphobosbof.rb AOL 9.5 Phobos.Playlist 'Import' Stack-based Buffer Overflow exploit for the Metasploit Framework Tested successfully on the following platforms: - AOL 9.5 Revision 4337.155 on Internet Explorer 7, Windows XP SP3...

AOL 9.5 Phobos.Playlist 'Import()' Buffer Overflow Exploit (Meta)

Exploit for unknown platform in category remote exploits ================================================================= AOL 9.5 Phobos.Playlist 'Import' Buffer Overflow Exploit Meta ================================================================= aolphobosbof.rb AOL 9.5 Phobos.Playlist 'Impor...

AOL 9.5 ActiveX 0day Exploit (heap spray)

Exploit for unknown platform in category remote exploits ========================================= AOL 9.5 ActiveX 0day Exploit heap spray ========================================= AOL 9.5 ActiveX 0day Exploit heap spray + AOL 9.5 ActiveX 0day Exploit heap spray + Author : Dzattacker + Tested on...

AOL 9.5 - ActiveX Heap Spray

AOL 9.5 ActiveX 0day Exploit heap spray + AOL 9.5 ActiveX 0day Exploit heap spray + Author : Dzattacker + Discovered by: Hellcode Research http://www.hellcode.net + Reference: http://www.exploit-db.com/exploits/11190 + Tested on Windows Xp SP3 ,IE7 // win32exec - calc shellcode =...

Oracle Document Capture 10g ActiveX Control Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Oracle Document...

Cross site scripting

Redmine 0.8.7 and earlier uses the title tag before defining the character encoding in a meta tag, which allows remote attackers to conduct cross-site scripting XSS attacks and inject arbitrary script via UTF-7 encoded values in the title parameter to a new issue page, which may be interpreted as...

Redmine <= 0.8.7 UTF-7 XSS Vulnerability

No description provided by source. Redmine = 0.8.7 UTF-7 XSS Vulnerability Discovered by: p0deje http://p0deje.blogspot.com Application: http://www.redmine.org/wiki/redmine/Download SA: - Date: 01.12.2009 Versions affected: = 0.8.7 Vulnerability: Cross-site Scripting Platform: Ruby Ruby On Rails...

Symantec AeXNSConsoleUtilities RunCmd buffer overflow

Added: 11/27/2009 CVE: CVE-2009-3033 BID: 37092 OSVDB: 60496 Background Symantec Altiris Deployment Solution provides tools to deploy software on desktops and servers. Problem A buffer overflow vulnerability in the AeXNSConsoleUtilities ActiveX control allows command execution when a user loads a...

EMC ApplicationXtender (KeyWorks) ActiveX Control Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' class Metasploit3 'EMC...

Microsoft DirectShow (msvidctl.dll) MPEG-2 Memory Corruption

msvidctlmpeg2.rb Microsoft DirectShow msvidctl.dll MPEG-2 Memory Corruption exploit for the Metasploit Framework Tested successfully on the following platforms fully patched 06/07/09: - Internet Explorer 6, Windows XP SP2 - Internet Explorer 7, Windows XP SP3 Original exploit was found in-the-wil...

Microsoft Whale Intelligent Application Gateway ActiveX Control Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Microsoft Whale...

Internet Explorer 7 Uninitialized Memory Corruption Vulnerability

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Internet Explorer...

SAP AG SAPgui EAI WebViewer3D Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'SAP AG SAPgui EAI...

Creative Software AutoUpdate Engine ActiveX Control Buffer Overflow

$Id: creativesoftwarecachefolder.rb This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Electronic Arts SnoopyCtrl ActiveX Control Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' class Metasploit3 'Electron...

CVE-2009-4040

Cross-site scripting XSS vulnerability in phpMyFAQ before 2.0.17 and 2.5.x before 2.5.2, when used with Internet Explorer 6 or 7, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to the search page...