FileZilla FTP Client 3.3.0.1 DLL Hijacking Exploit

Exploit for windows platform in category local exploits ================================================== FileZilla FTP Client 3.3.0.1 DLL Hijacking Exploit ================================================== / Exploit Title: FileZilla FTP Client 3.3.0.1 DLL Hijacking Exploit...

PT-2010-4263

Name of the Vulnerable Software and Affected Versions Microsoft Word versions 2002 SP3 Office 2004 for Mac Description A remote code execution issue exists due to an improper boundary check when parsing a specially crafted Word file. This allows attackers to execute arbitrary code, potentially...

PT-2010-4670

Name of the Vulnerable Software and Affected Versions Microsoft Excel version 2002 SP3 Description A remote code execution issue exists due to improper validation of formula information in Microsoft Excel, allowing attackers to execute arbitrary code via a crafted Excel document. This vulnerabili...

CVE-2010-3221: Improper Control of Generation of Code

Microsoft Word 2002 SP3 and 2003 SP3, Office 2004 for Mac, and Word Viewer do not properly handle a malformed record during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Parsing Vulnerability."...

CVE-2010-2748: Improper Control of Generation of Code

Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly check an unspecified boundary during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Boundary Check Vulnerability."...

CVE-2010-3220: Improper Control of Generation of Code

Unspecified vulnerability in Microsoft Word 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory corruption, aka "Word Parsing Vulnerability."...

CVE-2010-3219: Improper Control of Generation of Code

Array index vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory corruption, aka "Word Index Parsing Vulnerability."...

CVE-2010-2741: Undefined Security Weakness

The OpenType Font OTF format driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 performs an incorrect integer calculation during font processing, which allows local users to gain privileges via a crafted application, aka "OpenType Font Validation Vulnerability."...

CVE-2010-3217: Undefined Security Weakness

Double free vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via a Word document with crafted List Format Override LFO records, aka "Word Pointer Vulnerability."...

AASync v2.2.1.0 (Win32) Stack Buffer Overflow (LIST)

$Id: aasynclistreply.rb 10660 2010-10-12 18:39:21Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2010-3239: Improper Input Validation

Microsoft Excel 2002 SP3 does not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Extra Out of Boundary Record Parsing Vulnerability."...

PT-2010-4262

Name of the Vulnerable Software and Affected Versions Microsoft Word versions 2002 SP3 Office 2004 for Mac Description A remote code execution issue exists due to improper handling of an uninitialized pointer during the parsing of a Word document. This allows attackers to execute arbitrary code v...

Disk Pulse Server v2.2.34 Remote Buffer Overflow Exploit

Exploit for windows platform in category remote exploits ======================================================== Disk Pulse Server v2.2.34 Remote Buffer Overflow Exploit ======================================================== !/usr/bin/python Exploit Title: Disk Pulse Server v2.2.34 Remote Buff...

CVE-2010-3236: Improper Input Validation

Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Out Of Bounds Array Vulnerability."...

CVE-2010-3238: Improper Input Validation

Microsoft Excel 2002 SP3 and 2003 SP3, and Office 2004 for Mac, does not properly validate binary file-format information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Negative Future Function Vulnerability."...

CVE-2010-3242: Improper Input Validation

Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Ghost Record Type Parsing Vulnerability."...

CVE-2010-3222: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the Remote Procedure Call Subsystem RPCSS in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted LPC message that requests an LRPC connection from an LPC server to a client, aka "LPC Message Buffer Overrun...

Lecteur Windows media 11.0.5721.5145 DLL Hijacking Exploit

Exploit for windows platform in category local exploits ========================================================== Lecteur Windows media 11.0.5721.5145 DLL Hijacking Exploit ========================================================== / Exploit Title: Lecteur Windows media 11.0.5721.5145 DLL...

CVE-2010-3234: Improper Input Validation

Microsoft Excel 2002 SP3 does not properly validate formula information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Formula Substream Memory Corruption Vulnerability."...

CVE-2010-2750: Improper Control of Generation of Code

Array index error in Microsoft Word 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory corruption, aka "Word Index Vulnerability."...