Mitsubishi MC-WorkX 8.02 - ActiveX Control 'IcoLaunch' File Execution

Mitsubishi MC-WorkX Suite Insecure ActiveX Control IcoLaunch This proof of concept will launch an arbritrary executable when the Login Client button is clicked. An attacker could use this to have the victim launch malicious code from a remote share. Calc is used in this example...

Ofilter Player 1.2.0.1 Buffer Overflow Vulnerability

Ofilter Player version 1.2.0.1 SEH based buffer overflow exploit. Exploit Title : Ofilter Player Version 1.2.0.1 - skin1.ini - SEH Based Buffer Overflow PoC Date : 12-09-2013 Exploit Author : gunslinger Author Homepage : http://www.cr0security.com Software Link :...

Ofilter Player 1.2.0.1 Buffer Overflow

Exploit Title : Ofilter Player Version 1.2.0.1 - skin1.ini - SEH Based Buffer Overflow PoC Date : 12-09-2013 Exploit Author : gunslinger Author Homepage : http://www.cr0security.com Software Link : http://download.cnet.com/Ofilter-Player/3000-21394-78232.html Price : Free to try; $19.99 to buy...

Windows Crafted Theme File Handling Vulnerability

Added: 09/12/2013 CVE: CVE-2013-0810 BID: 62176 OSVDB: 97136 Background Microsoft Windows themes are a combination of personalization settings that change how the user's desktop looks and sounds. A theme could specify user settings such as the desktop background, window border color, sounds, and...

Target Longlife Media Player 2.0.2.0 - '.wav' Crash (PoC)

Exploit Title : Target Longlife Media Player Version 2.0.2.0 - .wav - Crash POC Date : 11-09-2013 Exploit Author : gunslinger - http://www.cr0security.com Software Link : http://download.cnet.com/Target-Longlife-Media-Player/3000-21394-10417975.html Version : 2.0.2.0 Probably old version of...

CVE-2013-3851

Microsoft Office 2003 SP3 and 2007 SP3, Word 2003 SP3 and 2007 SP3, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Office document, aka "Word Memory Corruption Vulnerability."...

CVE-2013-3870

Double free vulnerability in Microsoft Outlook 2007 SP3 and 2010 SP1 and SP2 allows remote attackers to execute arbitrary code by including many nested S/MIME certificates in an e-mail message, aka "Message Certificate Vulnerability."...

CVE-2013-3848

Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service memory...

CVE-2013-3856

Microsoft Word 2003 SP3 and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Office document, aka "Word Memory Corruption Vulnerability."...

CVE-2013-1341

CVE-2013-1341 affects the Windows kernel component win32k.sys (kernel-mode drivers) and allows local privilege escalation via a crafted application on several Windows families. Affected: Windows XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8. Root cause: ...

CVE-2013-3137

CVE-2013-3137 affects Microsoft FrontPage 2003 SP3. The issue arises from how FrontPage parses DTDs in XML inside FrontPage documents, causing an information-disclosure vulnerability. Remote attackers could obtain sensitive information by crafting a FrontPage document. Microsoft issued MS13-078 w...

CVE-2013-3853

CVE-2013-3853 affects Microsoft Office 2007 SP3 and Word 2007 SP3. It enables remote code execution or a denial of service (memory corruption) via a crafted Office document, known as the Word Memory Corruption Vulnerability; this is a separate issue from CVE-2013-3854. CVE-2013-3853 is tracked wi...

CVE-2013-3863

CVE-2013-3863 is the Windows OLE Property Vulnerability affecting Windows XP SP2/SP3 and Windows Server 2003 SP2. The issue arises from parsing crafted OLE objects in files, enabling remote code execution without user interaction (contrary to some variants that require a user action, the core des...

CVE-2013-3856

CVE-2013-3856 affects Microsoft Word 2003 SP3 and Word Viewer. A memory corruption flaw in crafted Office documents allows remote code execution or a denial of service. Affected products are Word 2003 SP3 and Word Viewer; the vulnerability is addressed by Microsoft MS13-072 (security update). The...

CVE-2013-3854

CVE-2013-3854 affects Microsoft Office 2007 SP3 and Word 2007 SP3. The vulnerability is described as memory corruption in Word that can be triggered by a crafted Office document, enabling remote code execution or, per the description, a denial of service. The CVSSv2 base score is 9.3 (HIGH) with ...

CVE-2013-3855

Microsoft Word 2003 SP3 and 2007 SP3, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Office document, aka "Word Memory Corruption Vulnerability."...

CVE-2013-3863

Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allow remote attackers to execute arbitrary code via a crafted OLE object in a file, aka "OLE Property Vulnerability."...

CVE-2013-3856: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Word 2003 SP3 and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Office document, aka "Word Memory Corruption Vulnerability."...

PT-2013-2085

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Portal Server 2003 SP3 Microsoft SharePoint Server 2007 SP3 Microsoft SharePoint Server 2010 SP1 Microsoft SharePoint Server 2010 SP2 Microsoft SharePoint Server 2013 Description A denial of service issue exists due to...

PT-2013-4167

Name of the Vulnerable Software and Affected Versions Microsoft FrontPage version 2003 SP3 Description The issue allows remote attackers to obtain sensitive information via crafted XML data in a FrontPage document. This is due to the improper parsing of DTDs. Recommendations For Microsoft FrontPa...