1602 matches found
Demo of the Microsoft DLL Hijacking Exploit
In this video, the folks at Offensive Security demonstrated exactly how the Windows DLL-hijacking vulnerability can exploited using Metasploit and a benign PowerPoint slide...
Microsoft Power Point 2010 DLL Hijacking (pptimpconv.dll) Exploit
Exploit for windows platform in category local exploits ================================================================= Microsoft Power Point 2010 DLL Hijacking pptimpconv.dll Exploit ================================================================= / Exploit Title: Microsoft PowerPoint 2010 DL...
Microsoft PowerPoint 2010 - 'pptimpconv.dll' DLL Hijacking
/ Exploit Title: Microsoft PowerPoint 2010 DLL Hijacking Exploit pptimpconv.dll Date: 24/08/2010 Author: TheLeader Email: gsog2009 a7 hotmail d0t com Software Link: http://office.microsoft.com/en-us/powerpoint/ Version: 14.0.4760.1000 Tested on: Windows 7 x86 6.1.7600 Compile and rename to...
Microsoft PowerPoint 2010 - pptimpconv.dll DLL Hijacking
Microsoft PowerPoint 2010 - pptimpconv.dll DLL Hijacking / Exploit Title: Microsoft PowerPoint 2010 DLL Hijacking Exploit pptimpconv.dll Date: 24/08/2010 Author: TheLeader Email: gsog2009 a7 hotmail d0t com Software Link: http://office.microsoft.com/en-us/powerpoint/ Version: 14.0.4760.1000 Teste...
OpenOffice.Org: Integer truncation error by parsing specially-crafted Microsoft PowerPoint document
simpress.bin in the Impress module in OpenOffice.org OOo 2.x and 3.x before 3.3 does not properly handle integer values associated with dictionary property items, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PowerPoi...
OpenOffice.org: Heap-based buffer overflow by parsing specially-crafted Microsoft PowerPoint document
Integer overflow in simpress.bin in the Impress module in OpenOffice.org OOo 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via crafted polygons in a PowerPoint document that triggers a heap-based buffer overflow...
openoffice.org -- Multiple vulnerabilities
OpenOffice.org Security Team reports: Fixed in OpenOffice.org 3.3 CVE-2010-2935 / CVE-2010-2936: Security Vulnerability in OpenOffice.org related to PowerPoint document processing CVE-2010-3450: Security Vulnerability in OpenOffice.org related to Extensions and filter package files CVE-2010-3451 ...
Security Update for Microsoft Office PowerPoint 2003 (KB982157)
A security vulnerability exists in Microsoft PowerPoint 2003 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Microsoft Windows COM Object Validation Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to open a malicious Excel, PowerPoint, Publisher, Visio, Wordpad, or Word file. Successful exploits would allow the attacker to execute arbitrary code in the...
MS10-004 Microsoft PowerPoint Viewer TextBytesAtom Stack Buffer Overflow
This module exploits a stack buffer overflow vulnerability in the handling of the TextBytesAtom records by Microsoft PowerPoint Viewer. According to Microsoft, the PowerPoint Viewer distributed with Office 2003 SP3 and earlier, as well as Office 2004 for Mac, are vulnerable. NOTE: The vulnerable...
Microsoft PowerPoint Viewer TextBytesAtom Stack Buffer Overflow
$Id: ms10004textbytesatom.rb 9299 2010-05-14 02:43:55Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
CORE-2009-0813: Windows Movie Maker and Microsoft Producer IsValidWMToolsStream() Heap Overflow
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Windows Movie Maker and Microsoft Producer IsValidWMToolsStream Heap Overflow 1. Advisory Information Title: Windows Movie Maker and Microsoft Producer...
Windows Movie Maker and Microsoft Producer IsValidWMToolsStream() Heap Overflow
Advisory ID Internal CORE-2009-0813 1. Advisory Information Title: Windows Movie Maker and Microsoft Producer IsValidWMToolsStream Heap Overflow Advisory Id: CORE-2009-0813 Advisory URL:http://www.coresecurity.com/content/movie-maker-heap-overflow Date published: 2010-03-09 Date of last update:...
Microsoft PowerPoint PPT File Parsing Memory Corruption (CVE-2006-3656)
There exists a memory corruption vulnerability in Microsoft PowerPoint. The flaw is caused due to an insufficient checks of a malformed record contained within a PowerPoint file. An attacker can exploit this vulnerability to inject and execute arbitrary code in the security context of the current...
Microsoft Office PowerPoint Viewer TextBytesAtom Record Buffer Overflow
Added: 03/04/2010 CVE: CVE-2010-0033 BID: 38107 OSVDB: 62241 Background Microsoft PowerPoint Viewer 2003 is a free tool which allows viewing of Microsoft PowerPoint presentations without requiring Microsoft PowerPoint itself. Problem A stack overflow vulnerability in the handling of TextBytesAtom...
Microsoft Office PowerPoint Viewer TextBytesAtom Record Buffer Overflow
Added: 03/04/2010 CVE: CVE-2010-0033 BID: 38107 OSVDB: 62241 Background Microsoft PowerPoint Viewer 2003 is a free tool which allows viewing of Microsoft PowerPoint presentations without requiring Microsoft PowerPoint itself. Problem A stack overflow vulnerability in the handling of TextBytesAtom...
Microsoft Office PowerPoint Viewer TextBytesAtom Record Buffer Overflow
Added: 03/04/2010 CVE: CVE-2010-0033 BID: 38107 OSVDB: 62241 Background Microsoft PowerPoint Viewer 2003 is a free tool which allows viewing of Microsoft PowerPoint presentations without requiring Microsoft PowerPoint itself. Problem A stack overflow vulnerability in the handling of TextBytesAtom...
Microsoft Office PowerPoint Viewer TextBytesAtom Record Buffer Overflow
Added: 03/04/2010 CVE: CVE-2010-0033 BID: 38107 OSVDB: 62241 Background Microsoft PowerPoint Viewer 2003 is a free tool which allows viewing of Microsoft PowerPoint presentations without requiring Microsoft PowerPoint itself. Problem A stack overflow vulnerability in the handling of TextBytesAtom...
Microsoft PowerPoint文件路径解析栈溢出漏洞（MS10-004）
BUGTRAQ ID: 38099 CVE ID: CVE-2010-0029 Microsoft PowerPoint是微软Office套件中的文档演示工具。 PowerPoint在解析PPT文件中的超长文件路径字段时存在栈溢出漏洞，用户受骗打开恶意文件就可能导致执行任意代码。成功利用此漏洞的攻击者便可完全控制受影响的系统。 Microsoft PowerPoint 2002 SP3 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS10-004）以及相应补丁: MS10-004：Vulnerabilities in Microsof...
Microsoft PowerPoint LinkedSlideAtom堆溢出漏洞（MS10-004）
BUGTRAQ ID: 38101 CVE ID: CVE-2010-0030 Microsoft PowerPoint是微软Office套件中的文档演示工具。 PowerPoint处理特制PPT文件的方式中存在一个堆溢出漏洞，成功利用此漏洞的攻击者可完全控制受影响的系统。 在解析两个相关的PowerPoint记录类型期间会出现这个漏洞。第一个记录类型LinkedSlideAtom用于指定不同幻灯片的协作信息，该记录中的一个字段用于指定文件中所出现的某些记录的数目。负责填充用于存储记录数组的代码在将元素储存到数组中时没有执行任何边界检查，这可能导致堆溢出。 Microsoft...