CVE-2010-1245: Improper Control of Generation of Code

Unspecified vulnerability in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed SxView 0xB0 record, aka "Excel Record Memory Corruption...

VUPlayer 2.49 .M3U Universal Buffer Overflow With DEP Bypass

!/usr/bin/env python VUPlayer =2.49 .M3u Universal buffer overflow exploit w/ DEP bypass Author: mrme Download: http://vuplayer.com/ Tested on Wind0ws XP SP3 /noexecute=alwayson Greetz: Corelan Security Team http://www.corelan.be:8800/index.php/security/corelan-team-members/ DEP AlwaysOn bypass...

CVE-2010-0824: Improper Control of Generation of Code

Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed WOPT 0x80B record, aka "Excel Record Memory Corruption Vulnerability," a different vulnerability than CVE-2010-0821 and...

CVE-2010-1247: Improper Control of Generation of Code

Unspecified vulnerability in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel file with a malformed RTD 0x813 record that triggers heap corruption, aka "Excel Memory Corruption Vulnerability," a different vulnerability than CVE-2010-0823 and...

CVE-2010-1249: Improper Control of Generation of Code

Buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed ExternName 0x23 record, aka "Excel Memory Corruption Vulnerability," a...

CVE-2010-1252: Improper Control of Generation of Code

Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Excel file, aka "Excel String Variable Vulnerability."...

CVE-2010-1251: Improper Control of Generation of Code

Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Excel file, aka "Excel Record Stack Corruption Vulnerability."...

CVE-2010-1257: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the toStaticHTML API, as used in Microsoft Office InfoPath 2003 SP3, 2007 SP1, and 2007 SP2; Office SharePoint Server 2007 SP1 and SP2; SharePoint Services 3.0 SP1 and SP2; and Internet Explorer 8 allows remote attackers to inject arbitrary web script or...

CVE-2010-1253: Improper Control of Generation of Code

Microsoft Office Excel 2002 SP3, 2007 SP1, and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML File Format Converter for Mac; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2; allows remote attackers to execute arbitrary code via an Excel file wi...

CVE-2010-0822: Improper Control of Generation of Code

Stack-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with a crafted OBJ 0x5D record, aka "Excel Object Stack Overflow Vulnerability."...

CVE-2010-1248: Improper Control of Generation of Code

Buffer overflow in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed HFPicture 0x866 record, aka "Excel HFPicture Memory Corruption Vulnerability."...

CVE-2010-1246: Improper Control of Generation of Code

Stack-based buffer overflow in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel file with a malformed RTD 0x813 record, aka "Excel RTD Memory Corruption Vulnerability."...

Audio Converter 8.1 0day Stack Buffer Overflow PoC exploit

Exploit for windows platform in category local exploits ========================================================== Audio Converter 8.1 0day Stack Buffer Overflow PoC exploit ========================================================== Exploit Title : Audio Converter 8.1 0day Stack Buffer Overflow P...

Audio Converter 8.1 - Local Stack Buffer Overflow

Audio Converter 8.1 - Local Stack Buffer Overflow Exploit Title : Audio Converter 8.1 0day Stack Buffer Overflow PoC exploit Date : 16/05/2010 Author : Sud0 Bug found by : chap0 Software Link : http://download.cnet.com/Audio-Converter/3000-21404-10045287.html Version : 8.1 OS : Windows Tested on ...

Easy CD-DA Recorder 2007 - Local Buffer Overflow (SEH)

Easy CD-DA Recorder 2007 - Local Buffer Overflow SEH Exploit Title : Easy CD-DA Recorder 2007 SEH Buffer Overflow Date : June 7, 2010 Author : chap0 http://www.seek-truth.net Software Link : http://download.cnet.com/Easy-CD-DA-Recorder/3000-26464-10059726.html Tested on : Windows XP SP3 En Type o...

Audio Converter 8.1 - Local Stack Buffer Overflow ROP/WPM

Exploit Title : Audio Converter 8.1 0day Stack Buffer Overflow PoC exploit ROP/WPM Date : 07/06/2010 Author : Sud0 Bug found by : chap0 Software Link : http://download.cnet.com/Audio-Converter/3000-21404-10045287.html Version : 8.1 OS : Windows Tested on : XP SP3 En VirtualBox Type of vuln : SEH...

VUPlayer 2.49 - '.m3u' File Universal Buffer Overflow (DEP Bypass) (1)

!/usr/bin/env python VUPlayer =2.49 .M3u Universal buffer overflow exploit w/ DEP bypass Author: mrme Download: http://vuplayer.com/ Tested on Wind0ws XP SP3 /noexecute=alwayson Greetz: Corelan Security Team http://www.corelan.be:8800/index.php/security/corelan-team-members/ DEP AlwaysOn bypass...

XFTP 3.0 Build 0239 Long filename Buffer Overflow

Exploit for windows platform in category remote exploits ================================================= XFTP 3.0 Build 0239 Long filename Buffer Overflow ================================================= !/usr/bin/python import socket import sys """...

ZipExplorer 7.0 - '.zar' Denial of Service

!/usr/bin/python Title: ZipExplorer 7.0 .zar DoS Advisory: http://www.corelan.be:8800/advisories.php?id=10-045 Author: TecR0c - http://tecninja.net/blog Found by: TecR0c - http://twitter.com/TecR0c Date: June 1st, 2010 Download: http://home.online.no/arnholm/org/exe/ZipX70sh.exe Platform: Windows...

IP2location.dll 1.0.0.1 - Function Initialize() Local Buffer Overflow

IP2location.dll 1.0.0.1 - Function Initialize Local Buffer Overflow IP2Location.dll v1.0.0.1 Initialize Buffer Overflow by sinn3r / IP2Location.dll v1.0.0.1 Initialize Buffer Overflow Vulnerable version : v1.0.0.1 checksum: d86933ab58720c384bdc081d33684f7d patched version : v1.0.0.1 checksum:...