Microsoft Windows Explorer - '.ANI' File Denial of Service

/ MS Windows Explorer Unspecified .ANI File DoS Another .Ani bug that freezes Explorer if you open a folder that contains a crafted file. Tested against Win XP SP2 FR. Have Fun! Coded by Marsu / include "stdio.h" include "stdlib.h" unsigned char Aniheaders =...

[Full-disclosure] AOL Nullsoft Winamp LIBSNDFILE.DLL Remote Memory Corruption (Off By Zero)

AOL Nullsoft Winamp LIBSNDFILE.DLL Remote Memory Corruption Off By Zero by Piotr Bania [email protected] http://www.piotrbania.com Severity: Critical - Possible remote code execution. Software affected: Tested on AOL Nullsoft Winamp v5.33 x86 Feb 13 2007 on Windows XP SP1/SP2. There exist a...

CVE-2007-1215: Undefined Security Weakness

Buffer overflow in the Graphics Device Interface GDI in Microsoft Windows 2000 SP4; XP SP2; Server 2003 Gold, SP1, and SP2; and Vista allows local users to gain privileges via certain "color-related parameters" in crafted images...

CVE-2007-1211: Undefined Security Weakness

Unspecified kernel GDI functions in Microsoft Windows 2000 SP4; XP SP2; and Server 2003 Gold, SP1, and SP2 allows user-assisted remote attackers to cause a denial of service possibly persistent restart via a crafted Windows Metafile WMF image that causes an invalid dereference of an offset in a...

CVE-2006-5586: Undefined Security Weakness

The Graphics Rendering Engine in Microsoft Windows 2000 SP4 and XP SP2 allows local users to gain privileges via "invalid application window sizes" in layered application windows, aka the "GDI Invalid Window Size Elevation of Privilege Vulnerability."...

ANI vulnerability third-party patch is broken[attached to the new third-party patches]-vulnerability warning-the black bar safety net

MS Windows Animated Cursor . ANI Remote Exploit eeye patch bypass ..:: jamikazu presents ::.. Windows Animated Cursor Handling Exploit 0day Version3 Works on fully patched Windows Vista I think it is first real remote code execution exploit on vista = Tested on: Windows Vista Enterprise Version 6...

Computer Associates BrightStor ARCserve Backup MediaSVR.EXE 191缓冲区溢出漏洞

Computer Associates BrightStor ARCserve Backup是一款企业级的备份解决方案。 Computer Associates BrightStor ARCserve Backup处理XDR过程的RPC数据存在设计错误，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 Mediasvr.exe导入的多个DLL在处理使用XDR过程的RPC数据时存在设计错误。4个来自RPC报文的字节作为特殊地址处理（xdrhandlet data会经过多次位移动和字节反转），最后装载到ECX中，在NULL字节后至少8字节NULL的191 0xbf过程成为可利用条件：...

Microsoft Windows - Animated Cursor .ani Local Overflow (Hardware DEP)

Microsoft Windows - Animated Cursor .ani Local Overflow Hardware DEP / version 0.5 Copyright c 2007 devcode ^^ D E V C O D E ^^ Windows .ANI LoadAniIcon Stack Overflow For Hardware DEP XP SP2 CVE-2007-1765 Description: A vulnerability has been identified in Microsoft Windows, which could be...

Microsoft Windows - Animated Cursor '.ani' Universal Generator

-------------------------------------------------------------------------------- Info: .ANI RIFF Cursors 2007 universal exploit generator Tested on MS Internet Explorer 6.x-7.x, Windows XP SP2, Windows Vista Author: Yag Kohha 10xnGr33tz 2: Jamikazu, Skylined pretty good t-short on BH07 Europe -...

irfanview-ani.txt

/ IrfanView 3.99 .ANI File Buffer Overflow IrfanView is vulnerable to a buffer overflow when opening a crafted .ani file. The overflow occurs while it is creating a snapshot of the file. This exploit launches calc.exe. Tested against Win XP SP2 FR. Have Fun! Coded and discovered by Marsu Note: th...

Ipswitch WS_FTP 5.05 Server Manager Local Site Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ====================================================================== Ipswitch WSFTP 5.05 Server Manager Local Site Buffer Overflow Exploit ====================================================================== / Ipswitch WSFTP 5.05 Server...

IrfanView 3.99 (.ANI File) Local Buffer Overflow Exploit

No description provided by source. / IrfanView 3.99 .ANI File Buffer Overflow IrfanView is vulnerable to a buffer overflow when opening a crafted .ani file. The overflow occurs while it is creating a snapshot of the file. This exploit launches calc.exe. Tested against Win XP SP2 FR. Have Fun! Cod...

IrfanView 3.99 - .ani Local Buffer Overflow (1)

IrfanView 3.99 - .ani Local Buffer Overflow 1 / IrfanView 3.99 .ANI File Buffer Overflow IrfanView is vulnerable to a buffer overflow when opening a crafted .ani file. The overflow occurs while it is creating a snapshot of the file. This exploit launches calc.exe. Tested against Win XP SP2 FR. Ha...

Ipswitch WS_FTP 5.05 - Server Manager Local Site Buffer Overflow

/ Ipswitch WSFTP 5.05 Server Manager Local Site Buffer Overflow There's a buffer overflow in iftpmgr.exe that can be triggered by registering a long site command. The result is then saved in the registry and every time the group is checked the bug appears. This exploit launches calc.exe. Tested...

IrfanView 3.99 - '.ani' Local Buffer Overflow (1)

/ IrfanView 3.99 .ANI File Buffer Overflow IrfanView is vulnerable to a buffer overflow when opening a crafted .ani file. The overflow occurs while it is creating a snapshot of the file. This exploit launches calc.exe. Tested against Win XP SP2 FR. Have Fun! Coded and discovered by Marsu Note: th...

Microsoft Windows - Animated Cursor '.ani' Local Buffer Overflow

/ MS Windows .ANI File Local Buffer Overflow Credits go to Trirat Puttaraksa cause his PoC inspired this source. devcode's exploit didnt work for me, so I made my own. This exploit launches calc.exe on a lot of app Word, Winamp, etc.... Turn off DEP to get it work on Explorer. Tested against Win ...

MS Windows XP/Vista Animated Cursor (.ANI) Remote Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================================== MS Windows XP/Vista Animated Cursor .ANI Remote Overflow Exploit ================================================================== Windows Animated Cursor Handling Exploit...

Microsoft Windows XPVista - Animated Cursor .ani Remote Overflow

Microsoft Windows XPVista - Animated Cursor .ani Remote Overflow ..:: jamikazu presents ::.. Windows Animated Cursor Handling Exploit 0day Works on fully patched Windows Vista I think it is first real remote code execution exploit on vista = Tested on: Windows Vista Enterprise Version 6.0 Build...

IPSwitch IMail Server 8.20 - IMAPD Remote Buffer Overflow

IPSwitch IMail Server 8.20 - IMAPD Remote Buffer Overflow / Dreatica-FXP crew ---------------------------------------- Target : Ipswitch IMAIL Server IMAPD 7.13 - 8.20 exploit Site : http://www.ipswitch.com Found by : iDEFENSE Security...

Microsoft Windows XP/Vista - Animated Cursor '.ani' Remote Overflow

..:: jamikazu presents ::.. Windows Animated Cursor Handling Exploit 0day Works on fully patched Windows Vista I think it is first real remote code execution exploit on vista = Tested on: Windows Vista Enterprise Version 6.0 Build 6000 default installation and UAC enabled Windows Vista Ultimate...