FreeBSD : rar -- password prompt buffer overflow vulnerability (94234e00-be8a-11db-b2ec-000c6ec775d9)

iDefense reports : Remote exploitation of a stack based buffer overflow vulnerability in RARLabs Unrar may allow an attacker to execute arbitrary code with the privileges of the user opening the archive. Unrar is prone to a stack based buffer overflow when processing specially crafted password...

Internet Explorer IMJPCKSI COM对象实例化内存破坏漏洞（MS07-016）

Internet Explorer是微软发表的非常流行的WEB浏览器。 Internet Explorer使用某些Imjpcksid.dll的COM对象作为ActiveX控件。攻击者可能通过构建特制网页来利用此漏洞，如果用户查看了该网页，则可能允许远程执行代码。成功利用此漏洞的攻击者可以完全控制受影响的系统。 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 Microsoft Internet Explorer 5.0.1 SP4...

Tencent QQ QQzone WebCtrl Activex空指针引用漏洞

QQ是由Tencent公司开发的一个IM软件，在中国有着非常广泛的用户。幻影旅团的axis发现了一个QQZone的activex漏洞。在使用WebCtrl 方法时，将引用一个空指针，造成ie崩溃。由于该activex没有标记为safe，故会出现安全提示。 在\Tencent\QQ\QZone\TWebCtrl.dll中，使用Navigate方法时，将造成一个空指针引用 051024C0 8B4424 04 MOV EAX,DWORD PTR SS:ESP+4 051024C4 8B5424 08 MOV EDX,DWORD PTR SS:ESP+8 051024C8 6A 00 PUSH...

Windows Vista语音识别命令执行漏洞

Windows Vista是微软公司开发的最新的操作系统。 Windows Vista内置的语音识别功能存在安全问题，远程攻击者可以利用漏洞在目标用户机器上执行任意命令。 在Vista上起用了语音识别功能及正确配置后，攻击者可以利用音频文件对系统发布类似“copy”, “delete”, ”shutdown”等命令，不过如果用户在电脑前面，也会听到这些命令的发布。不过使用语音命令不能绕过UAC提示来执行类似建立用户等特权功能。 Microsoft Windows Vista Ultimate Microsoft Windows Vista Home Premium Microsoft...

rar -- password prompt buffer overflow vulnerability

iDefense reports: Remote exploitation of a stack based buffer overflow vulnerability in RARLabs Unrar may allow an attacker to execute arbitrary code with the privileges of the user opening the archive. Unrar is prone to a stack based buffer overflow when processing specially crafted password...

Malicious XDG Desktop File

This module creates a malicious XDG Desktop .desktop file. On most modern systems, desktop files are not trusted by default. The user will receive a warning prompt that the file is not trusted when running the file, but may choose to run the file anyway. The default file manager applications in...

Hacking tricks of how to register a DLL or OCX file-vulnerability warning-the black bar safety net

大家 注册 DLL 或 OCX 的 方法 应该 用 Regsvr32.exe with much more everyone will certainly think in the running to write a long list of things it is annoying! Here I introduce a kind of trouble a convenient“whole life”approach. This method as long as the right-click you want to register or unregister the OCX ...

Multiple mobile phones bluetooth DoS

Flood with ussp-push messages causes user interface blocking by multiple download prompt messages...

Hacking tricks build antivirus search within a folder-bug warning-the black bar safety net

Since installing the antivirus software and then each time they open there hack tool folder, it will frequently pop-up alarm window, and one missed to press“OK”, the hard to accumulate the program will be“gone with the wind”. Several times down, my“memory food”has almost disappeared lazy to do, i...

Microsoft Visual Studio “WMI Object Broker”控件代码执行漏洞（MS06-073）

Microsoft Visual Studio是微软公司的开发工具套件系列产品，是一个基本完整的开发工具集，包括了软件整个生命周期中所需要的大部分工具。 Visual Studio的"WMI Object Broker"控件在例程的创建和处理上存在漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意恶意代码。 Visual Studio所捆绑的WMI Object Broker ActiveX控件允许创建系统上已有的ActiveX控件例程。以这种方式创建的ActiveX对象会绕过ActiveX安全限制，如忽略kill bit和safe for...

CVE-2006-6169

Heap-based buffer overflow in the askoutfilename function in openfile.c for GnuPG gpg 1.4 and 2.0, when running interactively, might allow attackers to execute arbitrary code via messages with "C-escape" expansions, which cause the makeprintablestring function to return a longer string than...

CVE-2006-6169

Heap-based buffer overflow in the askoutfilename function in openfile.c for GnuPG gpg 1.4 and 2.0, when running interactively, might allow attackers to execute arbitrary code via messages with "C-escape" expansions, which cause the makeprintablestring function to return a longer string than...

CVE-2006-6169

Heap-based buffer overflow in the askoutfilename function in openfile.c for GnuPG gpg 1.4 and 2.0, when running interactively, might allow attackers to execute arbitrary code via messages with "C-escape" expansions, which cause the makeprintablestring function to return a longer string than...

Microsoft XML核心服务XMLHTTP控件内存破坏漏洞（MS06-071）

Microsoft XML核心服务（MSXML）允许使用JScript、VBScript和Microsoft Visual Studio 6.0的用户构建可与其他符合XML 1.0标准的应用程序相互操作的XML应用。 在Microsoft XML Core Services的XMLHTTP 4.0...

Internet Explorer窗口加载竞争条件地址栏欺骗漏洞(MS06-021)

如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： 配置Internet Explorer在运行活动脚本之前要求提示，或在Internet和本地intranet安全区中禁用活动脚本。 将Internet和本地intranet安全区设置为“高”以在运行ActiveX控件和活动脚本之前要求提示。 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS06-021）以及相应补丁: MS06-021：Cumulative Security Update for Internet Explorer 916281...

Microsoft XML核心服务信息泄露漏洞（MS06-061）

Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft XML核心服务中的XMLHTTP ActiveX控件没有正确地解析HTTP服务器端重定向，远程攻击者可能利用此漏洞非授权访问用户信息。 攻击者可以通过构建特制网页来利用此漏洞，如果用户访问该网页或单击特制电子邮件中的链接，就可能导致信息泄露。成功利用这个漏洞的攻击者可能以在客户端浏览Web用户的权限访问其他域的内容。不过，要利用此漏洞，需要进行用户交互。 Microsoft Office 2003 Service Pack 2 Microsoft Office 2003 Service Pack 1...

We do not pay much attention to the super command! - Vulnerability warning-the black bar safety net

View the system uptime: In the CMD the following input: systeminfo CMD interface to modify In the CMD the following input: prompt hack Defense Run the Add/Remove Programs In the CMD the following to enter: appwiz. cpl Run the INternet properties: In the CMD the following to enter: inetcpl. cpl 当然...

VBS script in system security in eight the clever application-vulnerability warning-the black bar safety net

VBS script virus a large number of popular brings us to the VBS function with a new understanding, now everyone on the it also began to pay attention to it. VBS code in local is by the Windows Script HostWSHinterpreter execution. VBS script to perform without the WSH, the WSH is Microsoft offers ...

Hidden system accounts Madona-vulnerability warning-the black bar safety net

When hacking a host, will find ways to protect their“fruits of Labor”, and therefore in the broiler on the left all sorts of backdoors for a long time was the control broiler,of which the most used is the account hidden technique. In broilers on the establishment of a hidden account, to prepare f...

RealVNC Server does not validate client authentication method

Overview The RealVNC Server fails to properly authenticate clients. This may allow a remote attacker to bypass authentication and gain access to the VNC server. Description TheVirtual Network ComputingVNC Protocol According to RealVNC, "The VNC protocol is a simple protocol for remote access to...