Triologic Media Player 8 Universal Unicode Buffer Overflow

Exploit Title: Triologic Media Player 8 .m3u Local Universal Unicode Buffer Overflow SEH Date: August 17, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Software Link: http://download.cnet.com/Triologic-Media-Player/3000-21394-10691520.html Version: 8 Tested on: Windows XP SP3 En...

A-PDF WAV To MP3 Convertyer 1.0.0 Stack Buffer Overflow

Exploit Title: A-PDF WAV to MP3 Converter 1.0.0 .m3u Stack Buffer Overflow Author: d4rk-h4ck3r Date: 2010-07-17 Software Link: http://www.brothersoft.com/a-pdf-wav-to-mp3-converter-394393.html Greetz 2 : PASSEWORD , KAiSER-J , sec4ever , tli7a , All Tun!Sian h4ck3rz Spacial thanks 2 : MadjiX el...

Microsoft Word RTF解析引擎远程内存破坏漏洞（MS10-056）

BUGTRAQ ID: 42132 CVE ID: CVE-2010-1901 Word是微软Office套件中的文字处理工具。 在处理包含有某些控制字的RTF文档时，RTF解析引擎可能错误的从RTF文件读取值，导致内存破坏。成功利用此漏洞的攻击者可以获得与本地用户相同的权限。 Microsoft Office 2008 for Mac Microsoft Office 2004 for Mac Microsoft Word 2007 SP2 Microsoft Word 2003 SP3 Microsoft Word 2002 SP3 临时解决方法： 以纯文本格式阅读电子邮件。...

Easy FTP Server 1.7.0.11 XRMD Buffer Overflow

Exploit Title: Easy FTP Server v1.7.0.11 'XRMD' Command Buffer Overflow Post Auth Date: August 12, 2010 Author: Glafkos Charalambous Software Link: Version: 1.7.0.11 Tested on: Windows XP SP3 En import socket import sys if lensys.argv != 3: print "Usage: ./easyftpXRMD.py " sys.exit1 target =...

A-PDF WAV to MP3 Converter 1.0.0 (.m3u) Stack Buffer Overflow

Exploit for windows platform in category local exploits ============================================================= A-PDF WAV to MP3 Converter 1.0.0 .m3u Stack Buffer Overflow ============================================================= Exploit Title: A-PDF WAV to MP3 Converter 1.0.0 .m3u Stac...

A-PDF WAV to MP3 Converter 1.0.0 - .m3u Local Stack Buffer Overflow

A-PDF WAV to MP3 Converter 1.0.0 - .m3u Local Stack Buffer Overflow Exploit Title: A-PDF WAV to MP3 Converter 1.0.0 .m3u Stack Buffer Overflow Author: d4rk-h4ck3r Date: 2010-07-17 Software Link: http://www.brothersoft.com/a-pdf-wav-to-mp3-converter-394393.html Greetz 2 : PASSEWORD , KAiSER-J ,...

Triologic Media Player 8 (.m3u) Universal Unicode Buffer Overflow (SEH)

Exploit for windows platform in category local exploits ======================================================================= Triologic Media Player 8 .m3u Universal Unicode Buffer Overflow SEH ======================================================================= Exploit Title: Triologic Medi...

Microsoft Word sprmCMajority记录解析栈溢出漏洞（MS10-056）

BUGTRAQ ID: 42136 CVE ID: CVE-2010-1900 Word是微软Office套件中的文字处理工具。 在解析Word文档中的sprmCMajority记录时，由于处理sprmCMajority sprm组没有对参数执行检查，攻击者可以控制写入到栈缓冲区中的数据数量，触发栈溢出。成功利用此漏洞的攻击者可完全控制受影响的系统。 Microsoft Office 2008 for Mac Microsoft Office 2004 for Mac Microsoft Word 2007 SP2 Microsoft Word 2003 SP3 Microsoft Wo...

A-PDF WAV to MP3 Converter 1.0.0 - '.m3u' Local Stack Buffer Overflow

Exploit Title: A-PDF WAV to MP3 Converter 1.0.0 .m3u Stack Buffer Overflow Author: d4rk-h4ck3r Date: 2010-07-17 Software Link: http://www.brothersoft.com/a-pdf-wav-to-mp3-converter-394393.html Greetz 2 : PASSEWORD , KAiSER-J , sec4ever , tli7a , All Tun!Sian h4ck3rz Spacial thanks 2 : MadjiX el...

Triologic Media Player 8 - '.m3u' Universal Unicode Local Buffer Overflow (SEH)

Exploit Title: Triologic Media Player 8 .m3u Local Universal Unicode Buffer Overflow SEH Date: August 17, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Software Link: http://download.cnet.com/Triologic-Media-Player/3000-21394-10691520.html Version: 8 Tested on: Windows XP SP3 En...

MUSE v4.9.0.006 (.m3u) Local Buffer Overflow Exploit

Exploit for windows platform in category local exploits ==================================================== MUSE v4.9.0.006 .m3u Local Buffer Overflow Exploit ==================================================== Exploit Title: MUSE v4.9.0.006 .m3u Local Buffer Overflow Exploit Date: August 17,...

MUSE 4.9.0.006 - '.pls' Universal Local Buffer Overflow (SEH)

Exploit Title: MUSE v4.9.0.006 .pls Local Universal Buffer Overflow SEH Date: August 17, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Software Link: http://download.cnet.com/MUSE/3000-21404-42511.html Version: 4.9.0.006 Tested on: Windows XP SP3 En payload = "\x41" 1376 payload +=...

Rosoft media player 4.4.4 SEH Buffer Overflow

Exploit for windows platform in category local exploits ============================================= Rosoft media player 4.4.4 SEH Buffer Overflow ============================================= !/usr/bin/python Title: Rosoft media player 4.4.4 SEH buffer overflow Date: August 15, 2010 Author:...

Rosoft Media Player 4.4.4 - Local Buffer Overflow (SEH) (2)

!/usr/bin/python Title: Rosoft media player 4.4.4 SEH buffer overflow Date: August 15, 2010 Author: dijital1 Original Advisory: http://www.exploit-db.com/exploits/14601 - abhishek lyall Platform: Windows XP SP3 EN Professional - VMware Greetz to: Corelan Security Team, Exploit-db, OffSec...

Xion Player 1.0.125 - Local Stack Buffer Overflow

Xion Player 1.0.125 - Local Stack Buffer Overflow !/usr/bin/python Title: Xion 1.0.125 Stack Buffer Overflow Date: August 13, 2010 Author: corelanc0d3r and dijital1 Grtz to dijital1 : I had a lot of fun working with you on this one ! : Grtz to dookie2000ca : Original Advisory:...

Xion Player 1.0.125 - Local Stack Buffer Overflow

!/usr/bin/python Title: Xion 1.0.125 Stack Buffer Overflow Date: August 13, 2010 Author: corelanc0d3r and dijital1 Grtz to dijital1 : I had a lot of fun working with you on this one ! : Grtz to dookie2000ca : Original Advisory: http://www.exploit-db.com/exploits/14517 hadji samir Platform: Window...

Easy FTP 1.7.0.11 Buffer Overflow

Exploit Title: Easy FTP Server v1.7.0.11 NLST , NLST -al, APPE, RETR , SIZE and XCWD Commands Remote Buffer Overflow Exploit Date: 10/8/2010 Author: Rabih Mohsen Software Link:http://code.google.com/p/easyftpsvr/downloads/detail?name=easyftp-server-1.7.0.11-cn.zip Version: 1.7.0.11 Tested on:...

Easy FTP Server v1.7.0.11 Multiple Commands Buffer Overflow Exploit

Exploit for windows platform in category remote exploits =================================================================== Easy FTP Server v1.7.0.11 Multiple Commands Buffer Overflow Exploit =================================================================== Note: RNFR, DELE, RMD, STOR commands...

Windows win32k.sys驱动用户输入验证本地权限提升漏洞（MS10-048）

BUGTRAQ ID: 42210 CVE ID: CVE-2010-1896 Microsoft Windows是微软发布的非常流行的操作系统。 Windows中的win32k.sys内核驱动没有正确地验证用户态输入，本地用户可以通过执行恶意应用程序导致执行任意内核态代码。 Microsoft Windows XP SP3 Microsoft Windows XP Pro x64版SP2 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft Windows Server 2008 SP2 Microsoft...

Windows win32k.sys驱动用户池溢出本地权限提升漏洞（MS10-048）

BUGTRAQ ID: 42245 CVE ID: CVE-2010-1895 Microsoft Windows是微软发布的非常流行的操作系统。 Windows中的win32k.sys内核驱动在从用户态进行拷贝时没有正确地分配内存，导致权限提升。成功利用这个漏洞的攻击者可以执行任意内核态代码。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 Microsoft Windows XP SP3 Microsoft Windows XP Pro x64版SP2 Microsoft Windows Server 2003 SP2 厂商补丁： Microsoft...