Novell GroupWise Messenger HTTP POST Request Invalid Memory Access (CVE-2006-4511)

Novell GroupWise Messenger is a corporate instant messaging solution targeted towards medium to large enterprise organizations. It facilitates secure communications and policy-based management through Novell's eDirectory product suite. The product is based on a client-server model where messaging...

AOL Instant Messenger Away Message Buffer Overflow (CVE-2004-0636)

AOL Instant Messenger AIM is an instant messaging and presence computer program which allows registered users to communicate in real time. AOL Instant Messenger AIM registers itself as the handler of URL scheme aim. There exists a vulnerability in the way AOL Instant Messenger AIM parses an away...

Yahoo Messenger YMailAttach ActiveX Control Buffer Overflow (CVE-2006-6603)

Yahoo! Messenger is a instant messaging communicating application developed by Yahoo! Inc. When a user registers a Yahoo! user account, it is bundled with the Yahoo! Mail service, which is a web-based email service. Users can use a web browser to read, send and maintain their email messages. The...

Pidgin / Adium messenger multiple security vulnerabilities

Memory corruption on SLP MSN messages parsing. Multiple DoS conditions...

BigAnt Messenger Server USV Command Buffer Overflow

Added: 02/09/2010 BID: 37520 OSVDB: 61386 Background BigAnt Messenger Server offers secure instant messaging, file transfer, voip, video chat, web conferencing and more. Problem BigAnt server version 2.52 and earlier are vulnerable to a remote, unauthenticated buffer overflow attack. The...

BigAnt Messenger Server USV Command Buffer Overflow

Added: 02/09/2010 BID: 37520 OSVDB: 61386 Background BigAnt Messenger Server offers secure instant messaging, file transfer, voip, video chat, web conferencing and more. Problem BigAnt server version 2.52 and earlier are vulnerable to a remote, unauthenticated buffer overflow attack. The...

BigAnt Messenger Server USV Command Buffer Overflow

Added: 02/09/2010 BID: 37520 OSVDB: 61386 Background BigAnt Messenger Server offers secure instant messaging, file transfer, voip, video chat, web conferencing and more. Problem BigAnt server version 2.52 and earlier are vulnerable to a remote, unauthenticated buffer overflow attack. The...

DJ Legend Heap Overflow Proof Of Concept

!/usr/bin/perl DJ Legend .m3u / .pls File Local Heap Overflow Poc www.djlegend.net/ Found By : SkuLL-HacKeR Msn : [email protected] EAX 45454545 ESP 0012EF6C EBP 00DA50F8 ASCII "C:\Program Files\DJ Legend Trial\SkuLL-HacKeR.m3u" ESI 0012EFD8 EDI 014143F8 EBP 00000000 ESI 02CD7102 EIP 7C90EAF...

Windows Live Messenger 2009 Active-X Heap Overflow

Aouther : SarBoT511 [email protected] Exploits title :Windows Live Messenger 2009 ActiveX Heap Overflow PoC downloads :http://download.live.com/ Date : 2010/01/21 tested on :windows 7 & Vista & Xp sp3 Windows Live Messenger SkyDrive 2009 targetFile = "C:\Program Files\Windows Live...

Windows Live Messenger 2009 ActiveX Heap Overflow PoC

No description provided by source. Aouther : SarBoT511 [email protected] Exploits title :Windows Live Messenger 2009 ActiveX Heap Overflow PoC tested on :windows 7 & Vista & Xp sp3 Windows Live Messenger SkyDrive 2009 html object classid='clsid:C2828995-4A83-4100-A212-3024BA117356' id='target'...

Windows Live Messenger 2009 ActiveX Heap Overflow PoC

Exploit for unknown platform in category dos / poc ===================================================== Windows Live Messenger 2009 ActiveX Heap Overflow PoC ===================================================== Aouther : SarBoT511 Exploits title :Windows Live Messenger 2009 ActiveX Heap Overflo...

Microsoft Windows Live Messenger 2009 - ActiveX Heap Overflow (PoC)

Microsoft Windows Live Messenger 2009 - ActiveX Heap Overflow PoC Aouther : SarBoT511 [email protected] Exploits title :Windows Live Messenger 2009 ActiveX Heap Overflow PoC tested on :windows 7 & Vista & Xp sp3 Windows Live Messenger SkyDrive 2009 targetFile = "C:\Program Files\Windows Live...

Microsoft Windows Live Messenger 2009 - ActiveX Heap Overflow (PoC)

Aouther : SarBoT511 [email protected] Exploits title :Windows Live Messenger 2009 ActiveX Heap Overflow PoC tested on :windows 7 & Vista & Xp sp3 Windows Live Messenger SkyDrive 2009 targetFile = "C:\Program Files\Windows Live SkyDrive\Microsoft.Live.Folders.RichUpload.3.dll" prototype = "Property...

CVE-2010-0278

A certain ActiveX control in msgsc.14.0.8089.726.dll in Microsoft Windows Live Messenger 2009 build 14.0.8089.726 on Windows Vista and Windows 7 allows remote attackers to cause a denial of service msnmsgr.exe crash by calling the ViewProfile method with a crafted argument during an MSN Messenger...

Session fixation

A certain ActiveX control in msgsc.14.0.8089.726.dll in Microsoft Windows Live Messenger 2009 build 14.0.8089.726 on Windows Vista and Windows 7 allows remote attackers to cause a denial of service msnmsgr.exe crash by calling the ViewProfile method with a crafted argument during an MSN Messenger...

CVE-2010-0278

The CVE-2010-0278 entry covers a vulnerability in an ActiveX control (msgsc.14.0.8089.726.dll) used by Microsoft Windows Live Messenger 2009 (build 14.0.8089.726) on Windows Vista/7. The flaw is triggered by calling the ViewProfile method with a crafted argument during an MSN Messenger session, c...

CVE-2010-0278

A certain ActiveX control in msgsc.14.0.8089.726.dll in Microsoft Windows Live Messenger 2009 build 14.0.8089.726 on Windows Vista and Windows 7 allows remote attackers to cause a denial of service msnmsgr.exe crash by calling the ViewProfile method with a crafted argument during an MSN Messenger...

Windows Live Messenger ViewProfile()方式调用远程溢出漏洞

BUGTRAQ ID: 37680 Windows Live Messenger是非常流行的即时通讯聊天工具。 MSN所安装的msgsc.dll Activex控件没有正确地验证提交给ViewProfile方式的参数，用户受骗访问了恶意网页并向该方式传送超长参数就可以触发缓冲区溢出，导致msnmsgr.exe进程崩溃。 Microsoft Windows Live Messenger 2009 临时解决方法： 为clsid B69003B3-C55E-4B48-836C-BC5946FC3B28设置kill-bit。 厂商补丁： Microsoft ---------...

Windows Live Messenger 2009 ActiveX DoS Vulnerability

No description provided by source. Product: Windows Live Messenger 2009 Build 14.0.8089.726 Vulnerability: ActiveX - Denial of Service Discussion: Vulnerability is in Activex Controlmsgsc.14.0.8089.726.dll Sending a string to ViewProfile , cause a crash on msnmsgr.exe must be signed in Msn...

Windows Live Messenger 2009 Denial Of Service

Product: Windows Live Messenger 2009 Build 14.0.8089.726 Vulnerability: ActiveX - Denial of Service Discussion: Vulnerability is in Activex Controlmsgsc.14.0.8089.726.dll Sending a string to ViewProfile , cause a crash on msnmsgr.exe must be signed in Msn Messenger account for triggerin the...