PT-2010-4655

Name of the Vulnerable Software and Affected Versions Microsoft Word version 2002 SP3 Description A double free vulnerability in Microsoft Word allows remote attackers to execute arbitrary code via a Word document with crafted List Format Override LFO records. This issue exists in the way that...

Notepad++ 5.8.2 DLL Hijacking

=================================================== Notepad++ 5.8.2 DLL Hijacking Exploit libtidy.dll =================================================== / Notepad++ 5.8.2 DLL Hijacking Exploit libtidy.dll Author : anT!-Tr0J4n Greetz : Dev-PoinT.com inj3ct0r.com All Dev-poinT members and my frien...

CVE-2010-3235: Improper Input Validation

Microsoft Excel 2002 SP3 does not properly validate formula information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Formula Biff Record Vulnerability."...

CVE-2010-3218: Improper Control of Generation of Code

Heap-based buffer overflow in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via malformed records in a Word document, aka "Word Heap Overflow Vulnerability."...

System Boost Elite 2.6.4.2 DLL Hijacking

=================================================== system Boost Elite 2.6.4.2 DLL Hijacking Exploit framedyn.dll =================================================== / system Boost Elite 2.6.4.2 DLL Hijacking Exploit framedyn.dll Author : anT!-Tr0J4n Greetz : Dev-PoinT.com inj3ct0r.com All...

CVE-2010-3240: Improper Input Validation

Microsoft Excel 2002 SP3 and 2007 SP2; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Real Time Data Array...

CVE-2010-3237: Improper Input Validation

Microsoft Excel 2002 SP3 and Office 2004 for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Merge Cell Record Pointer Vulnerability."...

Mozilla Firefox 3.5.10/3.6.6 - 'WMP' Memory Corruption Using Popups

Source: http://code.google.com/p/skylined/issues/detail?id=21 Exploit Title: Firefox 3.5.10 & 3.6.6 WMP Memory Corruption Using Popups Date: 2010-10-13 Author: berendjanwever Version: FF 3.5.10 & 3.6.6 with WMP 10 & 11 Tested on: Windows XP sp3 function go var oWMP = document.getElementById"WMP";...

FTPGetter Standard v3.55.0.05 Stack Buffer Overflow (PWD)

This module exploits a buffer overflow in FTPGetter Standard v3.55.0.05 ftp client. When processing the response on a PWD command, a stack based buffer overflow occurs. This leads to arbitrary code execution when a structured exception handler gets overwritten. Module Options msf use...

AASync v2.2.1.0 (Win32) Stack Buffer Overflow (LIST)

This module exploits a stack buffer overflow in AASync v2.2.1.0, triggered when processing the response on a LIST command. During the overflow, a structured exception handler record gets overwritten. Module Options msf use exploit/windows/ftp/aasync/listreply msf undefinedlistreply show actions...

Disk Pulse Server 2.2.34 - Remote Buffer Overflow

Disk Pulse Server 2.2.34 - Remote Buffer Overflow !/usr/bin/python Exploit Title: Disk Pulse Server v2.2.34 Remote Buffer Overflow Exploit Date: 10/11/2010 Author: xsploited security URL: http://www.x-sploited.com/ Contact: xsploitedsecurity at gmail.com Software Link:...

Gekko Manager FTP Client Stack Buffer Overflow

This module exploits a buffer overflow in Gekko Manager ftp client, triggered when processing the response received after sending a LIST request. If this response contains a long filename, a buffer overflow occurs, overwriting a structured exception handler. Module Options msf use...

Microsoft Word Index Value Handling (CVE-2010-2750) Remote Code Execution Vulnerability

Description Microsoft Word is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Word file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the...

Disk Pulse Server 2.2.34 - Remote Buffer Overflow

!/usr/bin/python Exploit Title: Disk Pulse Server v2.2.34 Remote Buffer Overflow Exploit Date: 10/11/2010 Author: xsploited security URL: http://www.x-sploited.com/ Contact: xsploitedsecurity at gmail.com Software Link: http://www.diskpulse.com/setups/diskpulsesrvsetupv2.2.34.exe Version: v2.2.34...

e2eSoft VCam - DLL Loading Arbitrary Code Execution

source: https://www.securityfocus.com/bid/44051/info e2eSoft VCam is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a...

Notepad++ 5.8.2 - 'libtidy.dll' DLL Loading Arbitrary Code Execution

source: https://www.securityfocus.com/bid/44052/info Notepad++ is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a...

Microsoft Windows Live Mail 2009 (Build 14.0.8089.0726) DLL Hijacking

Exploit for windows platform in category local exploits / ========================================================================================== Microsoft Windows Live Mail 2009 Build 14.0.8089.0726 DLL Hijacking Exploit dwmapi.dll...

Mozilla Firefox 3.6.10 DLL Hijacking Exploit (lPK.dll)

Exploit for windows platform in category local exploits ====================================================== Mozilla Firefox 3.6.10 DLL Hijacking Exploit lPK.dll ====================================================== / Exploit Title: Mozilla Firefox 3.6.10 DLL Hijacking Exploit lPK.dll Date:...

Adobe Dreamweaver CS4 - v10.0 Build 4117 DLL Hijacking (mfc80esn.dll)

Exploit for windows platform in category local exploits / ============================================================================ Adobe Dreamweaver CS4 - v10.0 Build 4117 DLL Hijacking Exploit mfc80esn.dll ============================================================================= $ Progra...

HP Data Protector Manager v6.11 / NULL Pointer Dereference Remote Denial of Service Vulnerabilities

=============================== HP Data Protector Manager v6.11 =============================== Bug: NULL Pointer Dereference Remote Denial of Service Vulnerabilities Software: http://www.hp.com Date: 06/10/2010 Author: Pepelux - pepeluxATenye-secDOTcom http://www.enye-sec.org -...