Safari 4.0.5 parent.close() Memory Corruption exploit (w/ASLR and DEP bypass)

No description provided by source. Download: http://www.exploit-db.com/sploits/safariparentclosesintsov.zip Unzip and run START.htm This exploit use JIT-SPRAY for DEP and ASLR bypass. jit-shellcode: system"notepad" 0day.html - use 0x09090101 address for CALL JITed shellcode. START.htm - iff.htm -...

Apple Safari 4.0.5 - parent.close() Memory Corruption (ASLR + DEP Bypass)

Apple Safari 4.0.5 - parent.close Memory Corruption ASLR + DEP Bypass Download: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/12614.zip safariparentclosesintsov.zip Unzip and run START.htm This exploit use JIT-SPRAY for DEP and ASLR bypass. jit-shellcode:...

Apple Safari 4.0.5 - 'parent.close()' Memory Corruption (ASLR + DEP Bypass)

Download: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/12614.zip safariparentclosesintsov.zip Unzip and run START.htm This exploit use JIT-SPRAY for DEP and ASLR bypass. jit-shellcode: system"notepad" 0day.html - use 0x09090101 address for CALL JITed shellcode...

Update Protection against Mozilla Firefox JIT escape Function Memory Corruption

A memory corruption vulnerability exists in Mozilla Firefox, a web browser developed by Mozilla Foundation. This flaw is due to the way Mozilla Firefox handles JIT Just-in-Time escape Function calls. A remote attacker can exploit this vulnerability by enticing a target user to open a malicious we...

JITed egg-hunter stage-0 shellcode

Exploit for win32 platform in category shellcode ================================== JITed egg-hunter stage-0 shellcode ================================== // JITed egg-hunter stage-0 shellcode // Permanent DEP bypass // // By Alexey Sintsov // email protected // email protected // // DSecRG -...

SAP GUI 7.10 - WebViewer3D Active-X JIT-Spray

SAP GUI 7.10 - WebViewer3D Active-X JIT-Spray SAP GUI version 7.10 WebViewer3D Active-X JIT-Spray exploit Author: Alexey Sintsov Homepage: http://www.dsec.ru/ https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/11661.zip...

SAP GUI version 7.10 WebViewer3D Active-X JIT-Spray Exploit

Exploit for unknown platform in category remote exploits =========================================================== SAP GUI version 7.10 WebViewer3D Active-X JIT-Spray Exploit =========================================================== SAP GUI version 7.10 WebViewer3D Active-X JIT-Spray exploit...

SAP GUI version 7.10 WebViewer3D Active-X JIT-Spray Exploit

No description provided by source. SAP GUI version 7.10 WebViewer3D Active-X JIT-Spray exploit Author: Alexey Sintsov Homepage: http://www.dsec.ru/ http://www.exploit-db.com/sploits/11661.zip...

SAP GUI 7.10 - WebViewer3D Active-X JIT-Spray

SAP GUI version 7.10 WebViewer3D Active-X JIT-Spray exploit Author: Alexey Sintsov Homepage: http://www.dsec.ru/ https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/11661.zip...

Immunity Canvas: AURORA_FLASH

Name| auroraflash ---|--- CVE| CVE-2010-0249 Exploit Pack| CANVAS Description| Aurora vulnerability with ActionScript JIT spraying for IE8 and Windows 7 Notes| CVE Name: CVE-2010-0249 VENDOR: Microsoft VersionsAffected: Repeatability: References: MS10-002 CVE Url: Date public: 01/21/2001 CVSS: 9....

Mozilla Foundation Security Advisory 2009-41

Mozilla Foundation Security Advisory 2009-41 Title: Corrupt JIT state after deep return from native function Impact: Critical Announced: July 16, 2009 Reporter: zbyte Products: Firefox 3.5 Fixed in: Firefox 3.5.1 Description Firefox user zbyte reported a crash that we determined could result in a...

FreeBSD : mozilla -- corrupt JIT state after deep return from native function (c1ef9b33-72a6-11de-82ea-0030843d3802)

Mozilla Project reports : Firefox user zbyte reported a crash that we determined could result in an exploitable memory corruption problem. In certain cases after a return from a native function, such as escape, the Just-in-Time JIT compiler could get into a corrupt state. This could be exploited ...

Firefox 3.5.x < 3.5.1 Multiple Vulnerabilities

Firefox 3.5 is installed on the remote host. This version is potentially affected by multiple flaws : - It may be possible to crash the browser or potentially execute arbitrary code by using a flash object that presents a slow script dialog. MFSA 2009-35 - In certain cases after a return from a...

Corrupt JIT state after deep return from native function — Mozilla

Firefox user zbyte reported a crash that we determined could result in an exploitable memory corruption problem. In certain cases after a return from a native function, such as escape, the Just-in-Time JIT compiler could get into a corrupt state. This could be exploited by an attacker to run...

mozilla -- corrupt JIT state after deep return from native function

Mozilla Project reports: Firefox user zbyte reported a crash that we determined could result in an exploitable memory corruption problem. In certain cases after a return from a native function, such as escape, the Just-in-Time JIT compiler could get into a corrupt state. This could be exploited b...

CVE-2009-2477

js/src/jstracer.cpp in the Just-in-time JIT JavaScript compiler aka TraceMonkey in Mozilla Firefox 3.5 before 3.5.1 allows remote attackers to execute arbitrary code via certain use of the escape function that triggers access to uninitialized memory locations, as originally demonstrated by a...

Design/Logic Flaw

js/src/jstracer.cpp in the Just-in-time JIT JavaScript compiler aka TraceMonkey in Mozilla Firefox 3.5 before 3.5.1 allows remote attackers to execute arbitrary code via certain use of the escape function that triggers access to uninitialized memory locations, as originally demonstrated by a...

CVE-2009-2477

js/src/jstracer.cpp in the Just-in-time JIT JavaScript compiler aka TraceMonkey in Mozilla Firefox 3.5 before 3.5.1 allows remote attackers to execute arbitrary code via certain use of the escape function that triggers access to uninitialized memory locations, as originally demonstrated by a...

CVE-2009-2477

A memory corruption vulnerability exists in the Just-in-time (JIT) JavaScript compiler (TraceMonkey) of Mozilla Firefox 3.5 before version 3.5.1 . The flaw is caused by the way the browser handles JIT escape Function calls, specifically within the js/src/jstracer.cpp component, allowing certain u...

Fedora 11 : webkitgtk-1.1.8-1.fc11 (2009-6166)

"WebKitGTK+ 1.1.8 contains many bug-fixes and updates including spell-checking support, enhanced error reporting, lots of ATK enhancements, support for copying images to the clipboard, and a new printing API since 1.1.5 that allows applications better control and monitoring of the printing proces...