XnView 1.90.3 - .xpm Local Buffer Overflow

XnView 1.90.3 - .xpm Local Buffer Overflow / XnView 1.90.3 .XPM File Buffer Overflow XnView is vulnerable to a buffer overflow while processing a crafted XPM File. It fails to check the length of the arguments passed to the defined array which leads to code execution. This exploit runs calc.exe o...

Photofiltre Studio v8.1.1 (.TIF File) Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits =================================================================== Photofiltre Studio v8.1.1 .TIF File Local Buffer Overflow Exploit =================================================================== / Photofiltre Studio v8.1.1 .TIF File...

Foxit Reader 2.0 (PDF) Remote Denial of Service Exploit

No description provided by source. / Created Friday, April 20 2007 Moderator of http://igniteds.net Foxit Reader 2.0 for Windows Remote dos exploit created by n00b Foxit pdf viewer is prone to a dos exploit by opening a malformed pdf document it is possible...

PhotoFiltre Studio 8.1.1 - .tif Local Buffer Overflow

PhotoFiltre Studio 8.1.1 - .tif Local Buffer Overflow / Photofiltre Studio v8.1.1 .TIF File Buffer Overflow Photofiltre is vulnerable to an unspecified buffer overflow when processing a crafted .TIF file. This exploit just beeps useless but incredibly noisy!!. Tested against Win XP SP2 FR. Have...

PhotoFiltre Studio 8.1.1 - '.tif' Local Buffer Overflow

/ Photofiltre Studio v8.1.1 .TIF File Buffer Overflow Photofiltre is vulnerable to an unspecified buffer overflow when processing a crafted .TIF file. This exploit just beeps useless but incredibly noisy!!. Tested against Win XP SP2 FR. Have Fun! Coded and discovered by Marsu / include "stdio.h"...

nctaudio.txt

/ ------------------------------------------------------------------------------------------------- PoC 79 Exes's / IE NCTAudioFile2.AudioFile ActiveX Remote Stack Overfl0w Auther: InTeL Original Advisory: http://secunia.com/secuniaresearch/ Attack Vector: EIP smash Type: Remote Malicious webpage...

MS07-029 Microsoft DNS RPC Service extractQuotedChar() Overflow (TCP)

This module exploits a stack buffer overflow in the RPC interface of the Microsoft DNS service. The vulnerability is triggered when a long zone name parameter is supplied that contains escaped octal strings. This module is capable of bypassing NX/DEP protection on Windows 2003 SP1/SP2. Module...

CVE-2007-1204

Stack-based buffer overflow in the Universal Plug and Play UPnP service in Microsoft Windows XP SP2 allows remote attackers on the same subnet to execute arbitrary code via crafted HTTP headers in request or notification messages, which trigger memory corruption...

CVE-2007-1204

Stack-based buffer overflow in the Universal Plug and Play UPnP service in Microsoft Windows XP SP2 allows remote attackers on the same subnet to execute arbitrary code via crafted HTTP headers in request or notification messages, which trigger memory corruption...

CVE-2007-1204

The CVE-2007-1204 issue affects Microsoft Windows XP SP2 with the UPnP service. It is a stack-based buffer overflow triggered by specially crafted HTTP headers in UPnP requests/notifications, allowing a remote attacker on the same subnet to execute arbitrary code in the context of the vulnerable ...

irfanview399-ani.txt

/ IrfanView 3.99 .ANI File Buffer Overflow Multiple Targets and port bind shell Old Target: Windows XP Sp2 FR New targets: Windows XP SP2 Portuguese Call ESP Addr Windows XP SP2 English Call ESP Addr Greetz: Ricardo Fiorelli, Marsu make this possible.. nice job!, Str0ke , Sekure.org guys! / inclu...

msani-cursor.txt

/ .ANI exploit tested on Windows XP SP2 - Portuguese Shellcode port bind 13579 JMP ESP Addr - ntdll.dll Greetz: Marsu, Devcode, Str0ke, Dave, Sekure.org guys, Sauna. Exploit coded listen sauna hits Featuring Luiz Zanardo's gigs "Minoide -\x52\x49\x46\x46\x00\x04\x00\x41" @...

Ipswitch WS_FTP 5.05 Server Manager Local Site Buffer Overflow Exploit

No description provided by source. / Ipswitch WSFTP 5.05 Server Manager Local Site Buffer Overflow ...

iDefense Security Advisory 04.10.07: Microsoft Windows Universal Plug and Play Memory Corruption Vulnerability

Microsoft Windows Universal Plug and Play Memory Corruption Vulnerability iDefense Security Advisory 04.10.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 10, 2007 I. BACKGROUND Universal Plug and Play UPnP is a group of network protocols that work together to enable devices to...

CVE-2007-1204: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the Universal Plug and Play UPnP service in Microsoft Windows XP SP2 allows remote attackers on the same subnet to execute arbitrary code via crafted HTTP headers in request or notification messages, which trigger memory corruption...

CVE-2007-0939: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Microsoft Content Management Server MCMS 2001 SP1 and 2002 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving HTML redirection queries, aka "Cross-site Scripting and Spoofing Vulnerability."...

Microsoft Windows - Animated Cursor '.ani' Local Overflow

/ .ANI exploit tested on Windows XP SP2 - Portuguese Shellcode port bind 13579 JMP ESP Addr - ntdll.dll Greetz: Marsu, Devcode, Str0ke, Dave, Sekure.org guys, Sauna. Exploit coded listen sauna hits Featuring Luiz Zanardo's gigs "Minoide - \x52\x49\x46\x46\x00\x04\x00\x41" @...

IrfanView 3.99 - '.ani' Local Buffer Overflow (2)

/ IrfanView 3.99 .ANI File Buffer Overflow Multiple Targets and port bind shell Old Target: Windows XP Sp2 FR New targets: Windows XP SP2 Portuguese Call ESP Addr Windows XP SP2 English Call ESP Addr Greetz: Ricardo Fiorelli, Marsu make this possible.. nice job!, Str0ke , Sekure.org guys! / inclu...

MS Windows Explorer Unspecified .ANI File Denial of Service Exploit

Exploit for unknown platform in category dos / poc =================================================================== MS Windows Explorer Unspecified .ANI File Denial of Service Exploit =================================================================== / MS Windows Explorer Unspecified .ANI Fil...

Microsoft Windows Explorer - .ANI File Denial of Service

Microsoft Windows Explorer - .ANI File Denial of Service / MS Windows Explorer Unspecified .ANI File DoS Another .Ani bug that freezes Explorer if you open a folder that contains a crafted file. Tested against Win XP SP2 FR. Have Fun! Coded by Marsu / include "stdio.h" include "stdlib.h" unsigned...