Microsoft Office ClickOnce Unsafe Object Package Handling Vulnerability(MS12-005)

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

MS12-005 Microsoft Office ClickOnce Unsafe Object Package Handling Vulnerability

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' require 'rex/zip' class Metasploit3...

MS12-005 Microsoft Office ClickOnce Unsafe Object Package Handling

Exploit for windows platform in category local exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Microsoft Office - ClickOnce Unsafe Object Package Handling (MS12-005) (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' require 'rex/zip' class Metasploit3...

MS12-005 Microsoft Office ClickOnce Unsafe Object Package Handling Vulnerability

This module exploits a vulnerability found in Microsoft Office's ClickOnce feature. When handling a Macro document, the application fails to recognize certain file extensions as dangerous executables, which can be used to bypass the warning message. This can allow attackers to trick victims into...

PT-2012-1533 · Modplug · Libmodplug

Name of the Vulnerable Software and Affected Versions: libmodplug versions prior to 0.8.8.3 Description: The issue is related to multiple stack-based buffer overflows in the abc new macro and abc new umacro functions, which can be triggered by a crafted ABC file. This can cause a denial of servic...

multimedia macro allows execution of arbitrary scripts

The multimedia macro in confluence embeds a swf without the 'allowScriptAccess' attribute set to 'none'. This allows the embedded user submitted swf to execute arbitrary javascript on the page, constituting an XSS vulnerability. The multimedia tag is bundled in with the base product and not an...

multimedia macro allows execution of arbitrary scripts

The multimedia macro in confluence embeds a swf without the 'allowScriptAccess' attribute set to 'none'. This allows the embedded user submitted swf to execute arbitrary javascript on the page, constituting an XSS vulnerability. The multimedia tag is bundled in with the base product and not an...

multimedia macro allows execution of arbitrary scripts

The multimedia macro in confluence embeds a swf without the 'allowScriptAccess' attribute set to 'none'. This allows the embedded user submitted swf to execute arbitrary javascript on the page, constituting an XSS vulnerability. The multimedia tag is bundled in with the base product and not an...

Concept/Laroux

1995/6 The mid ’90s marked the dawn of macro viruses written into software like word processors and spreadsheet programs. WM.Concept, a 1995 virus was shipped with Microsoft Word for Mac CD ROMs. The virus was largely harmless and merely displayed a ‘1’ message box on infected PCs and Macs. Larou...

admin/dev/usermacros.jsp lacks an XSRF token to add and remove user macros from Confluence.

admin/dev/usermacros.jsp does not require a csrf token to add and remove user macros from Confluence. This could allow an attacker to introduce a malicious user macro with 'bad' html and or javascript into a confluence instance through a csrf attack on an admin user...

Pitrinec MacroToolworks 7.5 Buffer Overflow

Title: ====== Pitrinec MacroToolworks 7.5 - Buffer Overflow Vulnerability Date: ===== 2012-03-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=466 VL-ID: ===== 466 Introduction: ============= Macro Toolworks is powerful all-in-one Windows automation macro software. It...

Macro Toolworks 7.5 - Local Buffer Overflow

Macro Toolworks 7.5 - Local Buffer Overflow source: https://www.securityfocus.com/bid/52351/info Macro Toolworks is prone to a local buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Local attackers can exploit this issue to run arbitrary co...

Macro Toolworks 7.5 - Local Buffer Overflow

source: https://www.securityfocus.com/bid/52351/info Macro Toolworks is prone to a local buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Local attackers can exploit this issue to run arbitrary code with elevated privileges. Failed exploit...

Pitrinec Macro Toolwork 7.5 - Buffer Overflow Vulnerability

Document Title: =============== Pitrinec Macro Toolwork 7.5 - Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=466 Release Date: ============= 2012-03-07 Vulnerability Laboratory ID VL-ID: ====================================...

Pitrinec Macro Toolwork 7.5 - Buffer Overflow Vulnerability

Document Title: =============== Pitrinec Macro Toolwork 7.5 - Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=466 Release Date: ============= 2012-03-07 Vulnerability Laboratory ID VL-ID: ====================================...

Microsoft Windows - Assembly Execution (MS12-005)

Microsoft Windows - Assembly Execution MS12-005 Exploit Title: MS12-005 : Microsoft Windows Assembly Execution Vulnerability Date: 1/14/2012 Author: Byoungyoung Lee, http://exploitshop.wordpress.com Version: Windows 7 32bit, fully patched until Jan 2012 Tested on: Windows 7 32bit CVE :...

Microsoft Windows - Assembly Execution (MS12-005)

Exploit Title: MS12-005 : Microsoft Windows Assembly Execution Vulnerability Date: 1/14/2012 Author: Byoungyoung Lee, http://exploitshop.wordpress.com Version: Windows 7 32bit, fully patched until Jan 2012 Tested on: Windows 7 32bit CVE : CVE-2012-0013 PoC:...

kernel: xen: off-by-one shift in x86_64 __addr_ok()

Off-by-one error in the addrok macro in Xen 3.3 and earlier allows local 64 bit PV guest administrators to cause a denial of service host crash via unspecified hypercalls that ignore virtual-address bits...

OpenOffice.org Xterm Spawn

Some friends asked me some tips for how to make a locked down machine that doesn't allow the user to execute anything from the GUI and doesn't have a terminal emulator installed into starting a terminal, using an allowed application, OpenOffice. The below is hardly a security vulnerability unless...