CVE-2010-3946: Undefined Security Weakness

Integer overflow in the PICT image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted PICT image in an Office document, aka "PICT Image Converter Integer Overflow Vulnerability."...

Digital Audio Editor 7.6.0.237 Local Crash PoC

Exploit for windows platform in category dos / poc Exploit Title: Digital Audio Editor 7.6.0.237 Local Crash PoC Software Link: http://www.audioeditor.us/dae/index.htm Tested on: Win XP SP3 Date: 15-12-2010 Author: h1ch4m Email: email protected my $file= "1.cda"; my $junk = "\x41" x 1000;...

Altarsoft Audio Converter 1.1 Buffer Overflow Exploit (SEH)

Exploit for windows platform in category local exploits Exploit Title: Exploit Buffer Overflow Altarsoft Audio Converter 1.1SEH Date: 16/12/2010 Author: C4SS!0 G0M3S Software Link: http://www.altarsoft.com/downloads/AltarsoftAudioConverter.exe Version: 111 Tested on: WIN-XP SP3 PT-BR CVE: N/A...

CVE-2010-3950: Improper Restriction of Operations within the Bounds of a Memory Buffer

The TIFF image converter in the graphics filters in Microsoft Office XP SP3, Office Converter Pack, and Works 9 does not properly convert data, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted TIFF image in an Office document, ak...

CVE-2010-3952: Improper Restriction of Operations within the Bounds of a Memory Buffer

The FlashPix image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via a crafted FlashPix image in an Office document, aka "FlashPix Image Converter Heap...

Easy DVD Creator Local Crash PoC

Exploit for windows platform in category dos / poc Exploit Title: Easy DVD Creator Local Crash PoC Software Link: http://www.divxtodvd.net/dvd-creator.htm Tested on: Win XP SP3 Date: 15-12-2010 Author: h1ch4m Email: email protected my $file= "1.avi"; my $junk = "\x41" x 1000; open$FILE,"$file";...

PT-2010-5191

Name of the Vulnerable Software and Affected Versions Microsoft Publisher 2002 SP3 Description The issue allows remote attackers to execute arbitrary code via a crafted Publisher file that uses an old file format. A remote code execution vulnerability exists in the way that Microsoft Publisher...

Altarsoft Audio Converter 1.1 Buffer Overflow

Exploit Title: Exploit Buffer Overflow Altarsoft Audio Converter 1.1SEH Date: 16/12/2010 Author: C4SS!0 G0M3S Software Link: http://www.altarsoft.com/downloads/AltarsoftAudioConverter.exe Version: 111 Tested on: WIN-XP SP3 PT-BR CVE: N/A Created By C4SS!0 G0M3S E-MAIL [email protected] Home:...

PT-2010-5185

Name of the Vulnerable Software and Affected Versions Microsoft Office XP SP3 Microsoft Office Converter Pack Microsoft Works 9 Description A heap-based buffer overflow exists in the TIFF image converter of the graphics filters, allowing remote attackers to execute arbitrary code via a crafted TI...

PT-2010-5189

Name of the Vulnerable Software and Affected Versions Microsoft Office XP SP3 Microsoft Office Converter Pack Description A remote code execution issue exists in the way Microsoft Office parses specially crafted FlashPix image files. This could allow remote code execution if a user opens an Offic...

CVE-2010-2569: Improper Control of Generation of Code

pubconv.dll aka the Publisher Converter DLL in Microsoft Publisher 2002 SP3, 2003 SP3, and 2007 SP2 does not properly handle an unspecified size field in certain older file formats, which allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via a...

CVE-2010-2571: Improper Input Validation

Array index error in pubconv.dll aka the Publisher Converter DLL in Microsoft Publisher 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher 97 file, aka "Memory Corruption Due To Invalid Index Into Array in Pubconv.dll Vulnerability."...

PT-2010-5186

Name of the Vulnerable Software and Affected Versions Microsoft Office XP SP3 Microsoft Office Converter Pack Description A buffer overflow issue exists in the TIFF image converter within the graphics filters of the affected software, allowing remote attackers to execute arbitrary code through a...

PT-2010-5184

Name of the Vulnerable Software and Affected Versions Microsoft Office XP SP3 Microsoft Office 2003 SP3 Microsoft Office Converter Pack Description The issue is related to an integer overflow in the PICT image converter, allowing remote attackers to execute arbitrary code via a crafted PICT image...

CVE-2010-3949: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the TIFF image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted TIFF image in an Office document, aka "TIFF Image Converter Buffer Overflow Vulnerability."...

CVE-2010-3945: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the CGM image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted CGM image in an Office document, aka "CGM Image Converter Buffer Overrun Vulnerability."...

CVE-2010-3963: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Routing and Remote Access NDProxy component in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, related to the Routing and Remote Access service RRAS and improper copying from user mode to th...

Aesop GIF Creator 2.1 - .aep Local Buffer Overflow

Aesop GIF Creator 2.1 - .aep Local Buffer Overflow !/usr/bin/python Exploit Title: Aesop GIF Creator = v2.1 .aep Buffer Overflow Exploit Date: 12/15/2010 Author: xsploitedsec URL: http://www.x-sploited.com/ Contact: xsploitedsec at x-sploited.com Software Link:...

PT-2010-5188

Name of the Vulnerable Software and Affected Versions Microsoft Office XP SP3 Microsoft Office Converter Pack Description A remote code execution issue exists in the way Microsoft Office parses specially crafted FlashPix image files. This could allow remote code execution if a user opens an Offic...

CVE-2010-3951: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the FlashPix image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted FlashPix image in an Office document, aka "FlashPix Image Converter Buffer Overflow Vulnerability."...