CVE-2009-2506: Undefined Security Weakness

Integer overflow in the text converters in Microsoft Office Word 2002 SP3 and 2003 SP3; Works 8.5; Office Converter Pack; and WordPad in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a DOC file with an invalid number of property names ...

Eureka Email 2.2q ERR Remote Buffer Overflow Exploit (meta)

No description provided by source. class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::Remote::TcpServer include Msf::Exploit::Egghunter def initializeinfo = superupdateinfoinfo, 'Name' = 'Eureka Email 2.2q ERR Remote Buffer Overflow Exploit', 'Description' = %q This...

HTML Help Workshop 4.74 (hhp Project File) BOF Exploit (Meta)

Exploit for unknown platform in category local exploits ========================================================================= HTML Help Workshop 4.74 hhp Project File Buffer Overflow Exploit Meta ========================================================================= Title: HTML Help Worksh...

HTML Help Workshop 4.74 - '.hhp' Local Buffer Overflow (Metasploit)

require 'msf/core' class Metasploit3 'HTML Help Workshop 4.74 hhp Project File Buffer Overflow Exploit', 'Description' = %q This module exploits a stack overflow in HTML Help Workshop 4.74 By creating a specially crafted hhp file, an an attacker may be able to execute arbitrary code. , 'License' ...

M3U To ASX-WPL 1.1 (m3u Playlist file) Buffer Overflow Exploit

No description provided by source. exploit.py M3U To ASX-WPL 1.1 m3u Playlist file Buffer Overflow Exploit By: Encrypt3d.M!Nd http://m1nd3d.wordpress.com/ SEH Overwrite method - you can use simple jmp esp accourding to my calculations EIP Would Change after 1378 bytes.it may be diffrent on other...

M3U To ASX-WPL 1.1 - .m3u Local Buffer Overflow

M3U To ASX-WPL 1.1 - .m3u Local Buffer Overflow exploit.py M3U To ASX-WPL 1.1 m3u Playlist file Buffer Overflow Exploit By: Encrypt3d.M!Nd http://m1nd3d.wordpress.com/ SEH Overwrite method - you can use simple jmp esp accourding to my calculations EIP Would Change after 1378 bytes.it may be...

Audacity 1.2.6 (gro File) Buffer overflow Exploit

Exploit for unknown platform in category local exploits ================================================= Audacity 1.2.6 gro File Buffer overflow Exploit ================================================= Title: Audacity 1.2.6 gro File Buffer overflow Exploit CVE-ID: OSVDB-ID: Author: Encrypt3d.M!...

M3U To ASX-WPL 1.1 - '.m3u' Local Buffer Overflow

exploit.py M3U To ASX-WPL 1.1 m3u Playlist file Buffer Overflow Exploit By: Encrypt3d.M!Nd http://m1nd3d.wordpress.com/ SEH Overwrite method - you can use simple jmp esp accourding to my calculations EIP Would Change after 1378 bytes.it may be diffrent on other systems. ns = "\xeb\x15\x90\x90" sh...

Microsoft HTML Help Workshop 4.74 - '.hhp' Local Buffer Overflow (1)

exploit.py HTML Help Workshop 4.74 hhp Project File Buffer Overflow Exploit By: Encrypt3d.M!nd http://m1nd3d.wordpress.com/ Based on: http://www.milw0rm.com/exploits/7727 Well, I've tested SKD Exploit on Win 7 and didn't work.I Think it's Shellhunter compatibility problem. so i wrote this and use...

Jasc Paint Shop Pro v8 Local Buffer Overflow Exploit (UNIVERSAL)

Exploit for unknown platform in category local exploits ================================================================ Jasc Paint Shop Pro v8 Local Buffer Overflow Exploit UNIVERSAL ================================================================ Title: Jasc Paint Shop Pro v8 Local Buffer...

Jasc Paint Shop Pro 8 Buffer Overflow

/ Software: Jasc Paint Shop Pro v8 Local Buffer Overflow Exploit UNIVERSAL Bug type: Local buffer overflow Exploitation method: SEH handler overwrite Description: When a crafted .PNG file is oppened a stack buffer overflow occurs because of DEP a SEH handler is overwriten and I overwriten his...

Adobe Illustrator CS4 (V14.0.0) Encapsulated Postscript (.eps) Overlong DSC Comment Buffer Overflow Exploit

?php / Adobe Illustrator CS4 V14.0.0 Encapsulated Postscript .eps overlong DSC Comment Buffer Overflow Exploit by Nine:Situations:Group::pyrokinesis site: http://retrogod.altervista.org/ An overlong string as DSC comment more than 42000 bytes results in a direct EIP overwrite. Exception is...

Jasc Paint Shop Pro 8 - Local Universal Buffer Overflow

Jasc Paint Shop Pro 8 - Local Universal Buffer Overflow / Software: Jasc Paint Shop Pro v8 Local Buffer Overflow Exploit UNIVERSAL Bug type: Local buffer overflow Exploitation method: SEH handler overwrite Description: When a crafted .PNG file is oppened a stack buffer overflow occurs because of...

Jasc Paint Shop Pro 8 - Local Universal Buffer Overflow

/ Software: Jasc Paint Shop Pro v8 Local Buffer Overflow Exploit UNIVERSAL Bug type: Local buffer overflow Exploitation method: SEH handler overwrite Description: When a crafted .PNG file is oppened a stack buffer overflow occurs because of DEP a SEH handler is overwriten and I overwriten his...

Adobe Illustrator CS4 Buffer Overflow

?php / Adobe Illustrator CS4 V14.0.0 Encapsulated Postscript .eps overlong DSC Comment Buffer Overflow Exploit by Nine:Situations:Group::pyrokinesis site: http://retrogod.altervista.org/ An overlong string as DSC comment more than 42000 bytes results in a direct EIP overwrite. Exception is...

Adobe Illustrator CS4 14.0.0 - Encapsulated Postscript .eps Local Buffer Overflow

Adobe Illustrator CS4 14.0.0 - Encapsulated Postscript .eps Local Buffer Overflow ?php / Adobe Illustrator CS4 V14.0.0 Encapsulated Postscript .eps overlong DSC Comment Buffer Overflow Exploit by Nine:Situations:Group::pyrokinesis site: http://retrogod.altervista.org/ An overlong string as DSC...

Adobe Illustrator CS4 14.0.0 - Encapsulated Postscript '.eps' Local Buffer Overflow

?php / Adobe Illustrator CS4 V14.0.0 Encapsulated Postscript .eps overlong DSC Comment Buffer Overflow Exploit by Nine:Situations:Group::pyrokinesis site: http://retrogod.altervista.org/ An overlong string as DSC comment more than 42000 bytes results in a direct EIP overwrite. Exception is...

Golden FTP 4.30 File Deletion

Exploit Title: Golden FTP Server File Deletion Vulnerability Date: 18.11.2009 Author: sharpe Software Link: http://www.goldenftpserver.com/download.html Version: 4.30 Free and Professional Tested on: Windows XP SP3 CVE : if exists Code : http://blog.sat0ri.com/?p=292 --- sat0ri - sudden...

Golden FTP Server 4.30 File Deletion Vulnerability

No description provided by source. Exploit Title: Golden FTP Server File Deletion Vulnerability Date: 18.11.2009 Author: sharpe Software Link: http://www.goldenftpserver.com/download.html Version: 4.30 Free and Professional Tested on: Windows XP SP3 CVE : if exists Code :...

Golden FTP Server 4.30 File Deletion Vulnerability

Exploit for unknown platform in category remote exploits ================================================== Golden FTP Server 4.30 File Deletion Vulnerability ================================================== Title: Golden FTP Server 4.30 File Deletion Vulnerability CVE-ID: OSVDB-ID: Author:...