CVE-2009-4210: Improper Control of Generation of Code

The Indeo codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via crafted media content...

Easy RM To MP3 Converter 2.7.3.700 Buffer Overflow

!/usr/bin/perl Easy RM to MP3 Converter 2.7.3.700 .m3u File WinXP Sp2 Buffer Overflow Exploit Author: Vinod Sharma Download : http://www.rm-to-mp3.net/EasyRMtoMP3Converter.exe Tested : Windows XP SP2 En Thanks to exploit-db Originally published at :...

Microsoft Windows IAS服务远程内存破坏漏洞（MS09-071）

BUGTRAQ ID: 37197 CVE ID: CVE-2009-2505 Microsoft Windows是微软发布的非常流行的操作系统。 由于在处理受保护可扩展认证协议（PEAP）认证尝试时内存中错误的拷贝了服务器所接收到的消息，导致Internet认证服务的PEAP实现中存在内存破坏漏洞。成功利用这个漏洞的攻击者可以完全控制受影响的系统。 Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 临时解决方法： 在Internet认证服务服务器上使用非MS-CHAP v2的PEAP的认证协议。 厂商补丁：...

Easy RM to MP3 Converter 2.7.3.700 - Local Buffer Overflow

!/usr/bin/perl Easy RM to MP3 Converter 2.7.3.700 .m3u File WinXP Sp2 Buffer Overflow Exploit Author: Vinod Sharma Download : http://www.rm-to-mp3.net/EasyRMtoMP3Converter.exe Tested : Windows XP SP2 En Thanks to exploit-db Originally published at :...

Xenorate 2.50 - .xpl Universal Local Buffer Overflow (SEH) (1)

Xenorate 2.50 - .xpl Universal Local Buffer Overflow SEH 1 !/usr/bin/perl =gnk ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

Xenorate 2.50(.xpl) universal Local Buffer Overflow Exploit (SEH) (meta)

Exploit for unknown platform in category local exploits ======================================================================== Xenorate 2.50.xpl universal Local Buffer Overflow Exploit SEH meta ======================================================================== Title: Xenorate 2.50.xpl...

Memory corruption

The Internet Authentication Service IAS in Microsoft Windows Vista SP2 and Server 2008 SP2 does not properly validate MS-CHAP v2 Protected Extensible Authentication Protocol PEAP authentication requests, which allows remote attackers to execute arbitrary code via crafted structures in a malformed...

CVE-2009-2505

CVE-2009-2505 is a remote code execution flaw in Internet Authentication Service (IAS) on Windows Vista SP2 and Windows Server 2008 SP2, caused by improper validation during MS-CHAP v2 over PEAP. The vulnerability stems from incorrect memory handling when processing PEAP authentication requests, ...

CVE-2009-2505: Improper Authentication

The Internet Authentication Service IAS in Microsoft Windows Vista SP2 and Server 2008 SP2 does not properly validate MS-CHAP v2 Protected Extensible Authentication Protocol PEAP authentication requests, which allows remote attackers to execute arbitrary code via crafted structures in a malformed...

CVE-2009-2508: Undefined Security Weakness

The single sign-on implementation in Active Directory Federation Services ADFS in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly remove credentials at the end of a network session, which allows physically proximate attackers to obtain the credentials of a previou...

CVE-2009-2509: Improper Input Validation

Active Directory Federation Services ADFS in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly validate headers in HTTP requests, which allows remote authenticated users to execute arbitrary code via a crafted request to an IIS web server, aka "Remote Code Execution...

Eureka Email 2.2q ERR Remote Buffer Overflow Exploit (meta)

No description provided by source. class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::Remote::TcpServer include Msf::Exploit::Egghunter def initializeinfo = superupdateinfoinfo, 'Name' = 'Eureka Email 2.2q ERR Remote Buffer Overflow Exploit', 'Description' = %q This...

CVE-2009-3675: Undefined Security Weakness

LSASS.exe in the Local Security Authority Subsystem Service LSASS in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote authenticated users to cause a denial of service CPU consumption via a malformed ISAKMP request over IPsec, aka "Local Security Authority Subsystem...

[Backports-security-announce] Security Update for Shibboleth packages

Russ Allbery uploaded new packages for xmltooling, opensaml2, shibboleth-sp2, and shibboleth-sp which fixed the following security problems: CVE-2009-3300 The Shibboleth software includes code to perform arbitrary redirections and generates forms containing arbitrary destinations in certain cases...

Microsoft IIS 5.0 IDQ Path Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Microsoft II...

Microsoft Services MS06-066 nwwks.dll

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Microsoft...

HP LoadRunner 9.0 ActiveX Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'HP LoadRunne...

Microsoft DirectShow (msvidctl.dll) MPEG-2 Memory Corruption

msvidctlmpeg2.rb Microsoft DirectShow msvidctl.dll MPEG-2 Memory Corruption exploit for the Metasploit Framework Tested successfully on the following platforms fully patched 06/07/09: - Internet Explorer 6, Windows XP SP2 - Internet Explorer 7, Windows XP SP3 Original exploit was found in-the-wil...

Microsoft Services MS06-066 nwapi32.dll

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Microsoft...

Microsoft Visual Basic VBP Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Microsoft Visual...