CVE-2010-3973

The WMITools ActiveX control in WBEMSingleView.ocx 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted argument to the AddContextRef method, possibly an untrusted pointer dereference,...

Microsoft Internet Explorer CSS Import Use-After-Free Code Execution

Added: 12/22/2010 CVE: CVE-2010-3971 BID: 45246 OSVDB: 69796 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Cascading Style Sheets CSS is a simple mechanism for adding style to web documents. Problem Microsoft Internet Explorer is...

PT-2010-4132

Name of the Vulnerable Software and Affected Versions SAP Crystal Reports 2008 SP3 Fix Pack 3.2 Description The issue is related to a heap-based buffer overflow in the CrystalReports12.CrystalPrintControl.1 ActiveX control, which is located in PrintControl.dll version 12.3.2.753. This allows remo...

CVE-2010-2590: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the CrystalReports12.CrystalPrintControl.1 ActiveX control in PrintControl.dll 12.3.2.753 in SAP Crystal Reports 2008 SP3 Fix Pack 3.2 allows remote attackers to execute arbitrary code via a long ServerResourceVersion property value...

MP3 CD Converter Professional BoF (SEH)

Exploit for windows platform in category local exploits !/usr/bin/python Python File Created BY C4SS!0 G0MES http://www.invasao.com.br email protected +Exploit Titule: Exploit Buffer Overflow MP3 CD Converter ProfessionalSEH +Date: 12/20/2010 +Author: C4SS!0 G0M3S +Software Link:...

Accmeware MP3 Cut 5.0.9 DoS PoC

Exploit for windows platform in category dos / poc Exploit Title: Accmeware MP3 Cut 5.0.9 DoS PoC Date: 12/20/2010 Author: 0v3r Software Link: http://www.mp3-cutter-splitter.com/Files/MCSetup.exe Version: 5.0.9 Tested on: Windows XP SP3 EN VirtualBxox CVE: N/A The application crashes when trys to...

Word Splash Pro <= 9.5 Buffer Overflow

No description provided by source. Exploit Title: Word Splash Pro = 9.5 Buffer Overflow -EggHunter- Software Link: http://www.chronasoft.com/software/wordsplashpro Version: = 9.5 Tested on: Win XP SP3 French Date: 20/12/2010 Author: h1ch4m Email: [email protected] Home: Net-Effects.blogspot.com Gree...

MP3 CD Converter Professional Buffer Overflow

!/usr/bin/python Python File Created BY C4SS!0 G0MES http://www.invasao.com.br [email protected] +Exploit Titule: Exploit Buffer Overflow MP3 CD Converter ProfessionalSEH +Date: 12/20/2010 +Author: C4SS!0 G0M3S +Software Link: http://www.mp3-cd-converter.com/mp3cdconverter.exe +Version: 5.0.3...

Word Splash Pro 9.5 - Local Buffer Overflow

Word Splash Pro 9.5 - Local Buffer Overflow Exploit Title: Word Splash Pro Word list-Import then click on Word List Builder button my $file = "1.wsl"; my $size = 4112; my $nseh = "\xeb\x06\x90\x90"; jump 6 bytes my $seh = pack'V', 0x01de44dc; pop pop ret from CRDE2000.DLL my $egg = "w00tw00t"; my...

Word Splash Pro <= 9.5 Buffer Overflow

Exploit for windows platform in category local exploits Exploit Title: Word Splash Pro Word list-Import then click on Word List Builder button my $file = "1.wsl"; my $size = 4112; my $nseh = "\xeb\x06\x90\x90"; jump 6 bytes my $seh = pack'V', 0x01de44dc; pop pop ret from CRDE2000.DLL my $egg =...

MP3 CD Converter Professional - Local Buffer Overflow (SEH)

MP3 CD Converter Professional - Local Buffer Overflow SEH !/usr/bin/python Python File Created BY C4SS!0 G0MES http://www.invasao.com.br [email protected] +Exploit Titule: Exploit Buffer Overflow MP3 CD Converter ProfessionalSEH +Date: 12/20/2010 +Author: C4SS!0 G0M3S +Software Link:...

Accmeware MP3 Joiner Pro 5.0.9 - Denial of Service (PoC)

Accmeware MP3 Joiner Pro 5.0.9 - Denial of Service PoC Exploit Title: Accmeware MP3 Joiner Pro 5.0.9 DoS PoC Date: 12/20/2010 Author: 0v3r Software Link: http://www.mp3-joiner.net/Files/MJPSetup.exe Version: 5.0.9 Tested on: Windows XP SP3 EN VirtualBxox CVE: N/A The application crashes when trys...

Word Splash Pro 9.5 Buffer Overflow

Exploit Title: Word Splash Pro Word list-Import then click on Word List Builder button my $file = "1.wsl"; my $size = 4112; my $nseh = "\xeb\x06\x90\x90"; jump 6 bytes my $seh = pack'V', 0x01de44dc; pop pop ret from CRDE2000.DLL my $egg = "w00tw00t"; my $egghunter =...

MP3 CD Converter Professional - Local Buffer Overflow (SEH)

!/usr/bin/python Python File Created BY C4SS!0 G0MES http://www.invasao.com.br [email protected] +Exploit Titule: Exploit Buffer Overflow MP3 CD Converter ProfessionalSEH +Date: 12/20/2010 +Author: C4SS!0 G0M3S +Software Link: http://www.mp3-cd-converter.com/mp3cdconverter.exe +Version: 5.0.3...

ViRobot Desktop 5.5 and Server 3.5 <=2008.8.1.1 Privilege Escalation

Exploit for windows platform in category local exploits Hauri ViRobot Desktop 5.5 & ViRobot Server 3.5 VRsecos.sys =2008.8.1.1 Local Kernel Mode Privilege Escalation Vulnerability AUTHOR MJ0011 EMAIL thdecoder$126.com VULNERABLE PRODUCTS Hauri ViRobot Desktop 5.5 and below Hauri ViRobot Server 3....

ViRobot Desktop 5.5 / Server 3.5 Privilege Escalation

Hauri ViRobot Desktop 5.5 & ViRobot Server 3.5 VRsecos.sys =2008.8.1.1 Local Kernel Mode Privilege Escalation Vulnerability AUTHOR MJ0011 EMAIL thdecoder$126.com VULNERABLE PRODUCTS Hauri ViRobot Desktop 5.5 and below Hauri ViRobot Server 3.5 and below DETAILS: VRsecos.sys create a device called...

ViRobot Desktop 5.5 and Server 3.5 < 2008.8.1.1 - Local Privilege Escalation

Hauri ViRobot Desktop 5.5 & ViRobot Server 3.5 VRsecos.sys =2008.8.1.1 Local Kernel Mode Privilege Escalation Vulnerability AUTHOR MJ0011 EMAIL thdecoder$126.com VULNERABLE PRODUCTS Hauri ViRobot Desktop 5.5 and below Hauri ViRobot Server 3.5 and below DETAILS: VRsecos.sys create a device called...

CVE-2010-3947

Heap-based buffer overflow in the TIFF image converter in the graphics filters in Microsoft Office XP SP3, Office Converter Pack, and Works 9 allows remote attackers to execute arbitrary code via a crafted TIFF image in an Office document, aka "TIFF Image Converter Heap Overflow Vulnerability."...

CVE-2010-3955

pubconv.dll aka the Publisher Converter DLL in Microsoft Publisher 2002 SP3 does not properly perform array indexing, which allows remote attackers to execute arbitrary code via a crafted Publisher file that uses an old file format, aka "Array Indexing Memory Corruption Vulnerability."...

CVE-2010-3955: Improper Control of Generation of Code

pubconv.dll aka the Publisher Converter DLL in Microsoft Publisher 2002 SP3 does not properly perform array indexing, which allows remote attackers to execute arbitrary code via a crafted Publisher file that uses an old file format, aka "Array Indexing Memory Corruption Vulnerability."...