Windows Live Messenger ViewProfile()方式调用远程溢出漏洞

BUGTRAQ ID: 37680 Windows Live Messenger是非常流行的即时通讯聊天工具。 MSN所安装的msgsc.dll Activex控件没有正确地验证提交给ViewProfile方式的参数，用户受骗访问了恶意网页并向该方式传送超长参数就可以触发缓冲区溢出，导致msnmsgr.exe进程崩溃。 Microsoft Windows Live Messenger 2009 临时解决方法： 为clsid B69003B3-C55E-4B48-836C-BC5946FC3B28设置kill-bit。 厂商补丁： Microsoft ---------...

Todoo Forum 2.0 Cross Site Scripting

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ============================================================================== » Note : Tribute to the martyrs of...

Egreetings 1.0 Database Disclosure

======================================================================== ====== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ======================================================================== ====== » Note : Tribute to the martyrs...

ABB Forums 1.1 Database Disclosure

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ============================================================================== » ABB v1.1 Forum Remote Database...

Windows Live Messenger 2009 ActiveX DoS Vulnerability

No description provided by source. Product: Windows Live Messenger 2009 Build 14.0.8089.726 Vulnerability: ActiveX - Denial of Service Discussion: Vulnerability is in Activex Controlmsgsc.14.0.8089.726.dll Sending a string to ViewProfile , cause a crash on msnmsgr.exe must be signed in Msn...

Windows Live Messenger 2009 Denial Of Service

Product: Windows Live Messenger 2009 Build 14.0.8089.726 Vulnerability: ActiveX - Denial of Service Discussion: Vulnerability is in Activex Controlmsgsc.14.0.8089.726.dll Sending a string to ViewProfile , cause a crash on msnmsgr.exe must be signed in Msn Messenger account for triggerin the...

Microsoft Windows Live Messenger 2009 - ActiveX Denial of Service

Product: Windows Live Messenger 2009 Build 14.0.8089.726 Vulnerability: ActiveX - Denial of Service Discussion: Vulnerability is in Activex Controlmsgsc.14.0.8089.726.dll Sending a string to ViewProfile , cause a crash on msnmsgr.exe must be signed in Msn Messenger account for triggerin the...

Microsoft Windows Live Messenger DoS

Crash on ActiveX ViewProfile method...

[HACKATTACK Advisory 080110] Windows Live Messenger 2009 ActiveX DoS Vulnerability

Product: Windows Live Messenger 2009 Build 14.0.8089.726 Vulnerability: ActiveX - Denial of Service Discussion: Vulnerability is in Activex Controlmsgsc.14.0.8089.726.dll Sending a string to ViewProfile , cause a crash on msnmsgr.exe must be signed in Msn Messenger account for triggerin the...

Windows Live Messenger 2009 ActiveX DoS Vulnerability

Exploit for unknown platform in category dos / poc ===================================================== Windows Live Messenger 2009 ActiveX DoS Vulnerability ===================================================== Product: Windows Live Messenger 2009 Build 14.0.8089.726 Vulnerability: ActiveX -...

Microsoft Windows Live Messenger 2009 - ActiveX Denial of Service

Microsoft Windows Live Messenger 2009 - ActiveX Denial of Service Product: Windows Live Messenger 2009 Build 14.0.8089.726 Vulnerability: ActiveX - Denial of Service Discussion: Vulnerability is in Activex Controlmsgsc.14.0.8089.726.dll Sending a string to ViewProfile , cause a crash on msnmsgr.e...

CentOS 5 : xen (CESA-2009:0003)

Updated xen packages that resolve several security issues and a bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The xen packages contain the Xen tools and management daemons needed to manage...

LineWeb Local File Inclusion / SQL Injection

LineWeb it's a web-app to manage Lineage 2 private severs, a very known mmorpg, and allows to do action such as: Main Features: - Register - Login - Quick Login Function - Quick statistics function server status, game server status, online players - Statistics login server status, game server...

Live TV Script SQL Injection

? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: Live TV script suffer from remote sql injection Vendor: livetvscript.com ? Software: Live TV script - ? author: R3d-D3v!L ? TEAM: ArAB!AN !NFORMAT!ON SeCuR!TY ? contact: N/A - ? Date: 3.Jan.2010 ? T!ME:...

Live TV Script SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================== Live TV Script SQL Injection Vulnerability ========================================== ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: Live TV script...

Live TV Script - SQL Injection

? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: Live TV script suffer from remote sql injection Vendor: livetvscript.com ? Software: Live TV script - ? author: R3d-D3v!L ? TEAM: ArAB!AN !NFORMAT!ON SeCuR!TY ? contact: N/A - ? Date: 3.Jan.2010 ? T!ME:...

Live TV Script - SQL Injection

Live TV Script - SQL Injection ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: Live TV script suffer from remote sql injection Vendor: livetvscript.com ? Software: Live TV script - ? author: R3d-D3v!L ? TEAM: ArAB!AN !NFORMAT!ON SeCuR!TY ? contact: N/A ...

Joomla Countries SQL Injection

Joomla Component comcountries SQL Injection Vulnerability Author : FL0RiX Name : comcountries Greez : Deep-Power, PyskE,Septemb0x,KaCaK Bug Type : SQL Injection Infection : Admin login bilgileri alinabilir. Demo Vuln. : http://www.gocvg.com/index.php?option=comcountries&locat=SQL INJ. Bug Fix...

Live Help 2.6.0 Final Cross Site Scripting

======================================================================================== | Title : Live Help 2.6.0 Final Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total alerts...

StarDevelop Live Help 2.6 - 'SERVER' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/37558/info Stardevelop Live Help is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of...