VUPEN Security Research - Microsoft Internet Explorer "Col" Element Remote Heap Overflow (MS12-037 / CVE-2012-1876)

VUPEN Security Research - Microsoft Internet Explorer "Col" Element Remote Heap Overflow MS12-037 / CVE-2012-1876 Website : http://www.vupen.com/english/research.php Twitter : http://twitter.com/vupen I. BACKGROUND --------------------- "Microsoft Internet Explorer is a web browser developed by...

Microsoft IIS 7.5 remote heap buffer overflow

No description provided by source. |=-----------------------------------------------------------------------=| |=-------------= The Art of Exploitation =-----------------=| |=-----------------------------------------------------------------------=| |=-------------------= Exploiting MS11-004...

Oracle Hyperion Strategic Finance 12.x - Tidestone Formula One WorkBook OLE Control TTF16.ocx Remote Heap Overflow

Oracle Hyperion Strategic Finance 12.x - Tidestone Formula One WorkBook OLE Control TTF16.ocx Remote Heap Overflow var finalsize = 1200; var final = ''; var heap = null; var curr = 0; function x heap = new heapLib.ie0x20000; var heapspray = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u494...

Oracle Hyperion Strategic Finance 12.x Tidestone Formula One WorkBook

Exploit for windows platform in category remote exploits var finalsize = 1200; var final = ''; var heap = null; var curr = 0; function x heap = new heapLib.ie0x20000; var heapspray = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949" + //add Administrator, user: sun, pass: tzu...

WellinTech Kingview 6.53 Remote Heap Overflow

Overview This advisory is a follow-up to ICS-ALERT-11-011-01 WellinTech Kingview Buffer Overflow, published on the ICS-CERT Web site on January 11, 2011. Independent security researcher Dillon Beresford reported a heap overflow vulnerability in WellinTech KingView V6.53, which may allow a remote,...

Notepad++ NppFTP Plugin - 'LIST' Remote Heap Overflow (PoC)

Notepad++ NppFTP plugin LIST command Remote Heap Overflow PoC Date: 17.08.2011 Author: 0in Maksymilian Motyl Mail: 0in dot email /at\ gmail \dot/ com Software Link: http://notepad-plus-plus.org/ Vulnerable plugin: http://sourceforge.net/projects/nppftp/ Version: Tested on nppftp 0.2.3.0 and 0.2.4...

Nitro PDF Reader 1.4.0 - Heap Memory Corruption (PoC)

Nitro PDF Reader 1.4.0 - Heap Memory Corruption PoC Nitro PDF Reader 1.4.0 Remote Heap Memory Corruption / DoS PoC Vendor: Nitro PDF, Inc., Nitro PDF Pty Ltd. Product web page: http://www.nitroreader.com Affected version: 1.4.0.11 Summary: Nitro PDF Reader, free, fast, powerfull and secure. Creat...

Microsoft Windows Server 2003 - AD BROWSER ELECTION Remote Heap Overflow

Microsoft Windows Server 2003 - AD BROWSER ELECTION Remote Heap Overflow MS Windows Server 2003 AD Pre-Auth BROWSER ELECTION Remote Heap Overflow Release date: 2011-02-14 Author: Cupidon-3005 Greet: Winny Thomas, Laurent Gaffie, h07 Bug: Heap Overflow Remote Exploitability: Unlikely Local...

Automated Solutions Modbus/TCP OPC Server - Remote Heap Corruption (PoC)

!/usr/bin/python asmb-heap.py Automated Solutions Modbus/TCP OPC Server Remote Heap Corruption PoC Jeremy Brown 0xjbrown41-gmail-com Jan 2011 A specially crafted length field in a MODBUS packet header can trigger heap corruption. 00408312 | 8B5424 3C MOV EDX,DWORD PTR SS:ESP+3C - move length into...

Automated Solutions ModbusTCP OPC Server - Remote Heap Corruption (PoC)

Automated Solutions ModbusTCP OPC Server - Remote Heap Corruption PoC !/usr/bin/python asmb-heap.py Automated Solutions Modbus/TCP OPC Server Remote Heap Corruption PoC Jeremy Brown 0xjbrown41-gmail-com Jan 2011 A specially crafted length field in a MODBUS packet header can trigger heap corruptio...

Automated Solutions Modbus/TCP OPC Server Remote Heap Corruption PoC

!/usr/bin/python asmb-heap.py Automated Solutions Modbus/TCP OPC Server Remote Heap Corruption PoC Jeremy Brown 0xjbrown41-gmail-com Jan 2011 A specially crafted length field in a MODBUS packet header can trigger heap corruption. 00408312 | 8B5424 3C MOV EDX,DWORD PTR SS:ESP+3C - move length into...

WellinTech KingView 6.53 remote heap overflow vulnerability

Overview WellinTech KingView 6.53 contains a remote heap overflow vulnerability in the HistorySrv process which may allow a remote, unauthenticated attacker to execute arbitrary code. Description According to WellinTech's website: "King V iew software is a high-pormance production which can be us...

Novell ZENworks Handheld Management ZfHIPCND.exe Unspecified Buffer Overflow

A vulnerability exists in the server ZfHIPCND.exe, which handles the data received on TCP port 2400. An attacker can overflow a buffer on a heap belonging to the server and possibly execute arbitrary code with SYSTEM privileges. Authentication is not required to exploit this vulnerability. C...

Microsoft Windows Common Control Library Remote Heap Buffer Overflow Vulnerability

Description Microsoft Windows Common Control Library is prone to a remote heap-based buffer-overflow vulnerability because the library fails to perform adequate boundary-checks on user-supplied data. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted web...

XnView 1.97.4 - .MBM File Remote Heap Buffer Overflow

XnView 1.97.4 - .MBM File Remote Heap Buffer Overflow source: https://www.securityfocus.com/bid/40852/info XnView is prone to a remote heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input. Attackers may leverage this iss...

Microsoft Excel EDG and Publisher Record Parsing Remote Heap Buffer Overflow Vulnerability

Description Microsoft Excel is prone to a remote heap-based buffer-overflow vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Excel '.xls' file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the...

Bigant Messenger 2.52 - AntCore.dll RegisterCom() Remote Heap Overflow

Bigant Messenger 2.52 - AntCore.dll RegisterCom Remote Heap Overflow !/usr/bin/python Bigant Messenger = v2.52 - AntCore.dll RegisterCom Remote 0day Heap Overflow Exploit Found by: Steven Seeley - mrme AT corelan.be - http://net-ninja.net/ Homepage: http://www.bigantsoft.com/ Download:...

Liquid XML Studio 2010 <= v8.061970 - OpenFile() Remote Heap Overflow

Exploit for unknown platform in category remote exploits ====================================================================================================== Liquid XML Studio 2010 !-- |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / /...

Microsoft Excel MDXTUPLE Record Remote Heap Buffer Overflow Vulnerability

Description Microsoft Excel is prone to a remote heap-based buffer-overflow vulnerability. Attackers can exploit this issue by enticing victims into opening a specially crafted Excel '.xls' file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user...

J. River Media Jukebox 12 - .mp3 Remote Heap Buffer Overflow

J. River Media Jukebox 12 - .mp3 Remote Heap Buffer Overflow source: https://www.securityfocus.com/bid/38566/info J. River Media Jukebox is prone to a remote heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input. Attacker...