CVE-2005-0820

CVE-2005-0820 affects Microsoft Office InfoPath 2003 SP1. The issue arises from sensitive data in the Manifest.xsf file of a custom .xsn form, enabling access to printer and network information, database name, username/password, and internal web server name. The connected records show a CVSSv2 ba...

CVE-2005-0820: Undefined Security Weakness

Microsoft Office InfoPath 2003 SP1 includes sensitive information in the Manifest.xsf file in a custom .xsn form, which allows attackers to obtain printer and network information, obtain the database name, username, and password, or obtain the internal web server name...

CVE-2005-0738

CVE-2005-0738 affects Microsoft Exchange Server 2003 SP1. The vulnerability is a stack consumption issue in the Information Store (Store.exe) caused by processing folders with deeply nested subfolders, leading to a denial-of-service (hang) due to a large number of recursive calls. This is the exp...

CVE-2005-0738: Uncontrolled Resource Consumption

Stack consumption vulnerability in Microsoft Exchange Server 2003 SP1 allows users to cause a denial of service hang by deleting or moving a folder with deeply nested subfolders, which causes Microsoft Exchange Information Store service Store.exe to hang as a result of a large number of recursive...

CVE-2004-1597

The CVE-2004-1597 entry documents a denial-of-service condition affecting RIM BlackBerry 7230 devices running BlackBerry OS 3.7 SP1. The vulnerability arises when processing a calendar message with an excessively long Location field, which triggers a watchdog during message storage and can lead t...

CVE-2004-1597: Undefined Security Weakness

RIM Blackberry 7230 running RIM Blackberry OS 3.7 SP1 allows remote attackers to cause a denial of service device reboot and possibly data corruption via a calendar message with a long Location field, which triggers a watchdog while the message is being stored...

CVE-2004-1623: Undefined Security Weakness

The WAV file property handler in Windows XP SP1 allows remote attackers to cause a denial of service infinite loop in Explorer via a WAV file with an invalid file header whose fmt chunk length is set to 0xFFFFFFFF...

CVE-2004-1527: Undefined Security Weakness

Microsoft Internet Explorer 6.0 SP1 does not properly handle certain character strings in the Path attribute, which can cause it to modify cookies in other domains when the attacker's domain name is within the target's domain name or when wildcard DNS is being used, which allows remote attackers ...

CVE-2004-1623

The WAV file property handler in Windows XP SP1 allows remote attackers to cause a denial of service infinite loop in Explorer via a WAV file with an invalid file header whose fmt chunk length is set to 0xFFFFFFFF...

CVE-2004-1597

RIM Blackberry 7230 running RIM Blackberry OS 3.7 SP1 allows remote attackers to cause a denial of service device reboot and possibly data corruption via a calendar message with a long Location field, which triggers a watchdog while the message is being stored...

windows/XP-sp1 portshell on port 58821 116 bytes

Exploit for win32 platform in category shellcode ================================================ windows/XP-sp1 portshell on port 58821 116 bytes ================================================ / 116 bytes bindcode hardcoded for Windows XP SP1 / / but you can change the address if you want / / ...

CVE-2004-0199

CVE-2004-0199 is a real vulnerability affecting the Help and Support Center in Windows XP and Windows Server 2003 SP1/64-Bit variants. The flaw arises from improper validation of HCP URLs (hcp://), enabling remote code execution when a user visits a crafted page or HTML e-mail that triggers the D...

CVE-2004-0199: Undefined Security Weakness

Help and Support Center in Microsoft Windows XP and Windows Server 2003 SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code, as demonstrated using certain hcp:// URLs that access the DVD Upgrade capability dvdupgrd.htm...

CVE-2003-0907

The CVE-2003-0907 issue is a remote-code-execution vulnerability in Windows XP SP1 Help and Support Center (HSC) caused by improper validation of hcp:// URLs. An attacker could lure a user to visit a malicious site or open a malicious email to execute arbitrary code in the user’s context (often i...

CVE-2003-0907: Improper Neutralization of Argument Delimiters in a Command

Help and Support Center in Microsoft Windows XP SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code via quotation marks in an hcp:// URL, which are not quoted when constructing the argument list to HelpCtr.exe...

CVE-2003-0906: Undefined Security Weakness

Buffer overflow in the rendering for 1 Windows Metafile WMF or 2 Enhanced Metafile EMF image formats in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, and XP SP1 allows remote attackers to execute arbitrary code via a malformed WMF or EMF image...

Ipswitch WS_FTP Server 4.0.2 - ALLO Remote Buffer Overflow

/ Ipswitch WSFTP Server pragma commentlib, "ws232.lib" include include include include const char tempfile = "ttt"; define ALLOSTRING "ALLO 18446744073709551615" / Assume all addresses = this address to be invalid addresses. If the exploit doesn't work, try changing it to a larger value, eg...

[Full-Disclosure] DreamFTP Server 1.02 Buffer Overflow

SP Research Labs Advisory x09 -------------------------------------------- DreamFTP 1.02 Buffer Overflow -------------------------------------------- Vendor Home Page: http://www.bolintech.com/ Date Released - 2.6.2004 --------------------------------------------------- Product Description from t...

CVE-2003-0815

Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and read arbitrary files by 1 modifying the createTextRange method and using CreateLink, as demonstrated using LinkillerSaveRef, LinkillerJPU, and Linkiller, or 2 modifying the createRange method and using the...

CVE-2003-0815: Undefined Security Weakness

Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and read arbitrary files by 1 modifying the createTextRange method and using CreateLink, as demonstrated using LinkillerSaveRef, LinkillerJPU, and Linkiller, or 2 modifying the createRange method and using the...