Google Chrome Browser (ChromeHTML://) Remote Parameter Injection

No description provided by source. !-- Google Chrome Browser ChromeHTML:// remote parameter injection POC by Nine:Situations:Group::bellick&strawdog Site: http://retrogod.altervista.org/ tested against: Internet Explorer 8 beta 2, Google Chrome 1.0.154.36, Microsoft Windows XP SP3 List of command...

SAWStudio 3.9i - .prf Local Buffer Overflow (PoC)

SAWStudio 3.9i - .prf Local Buffer Overflow PoC SAWStudio 3.9i prf file Buffer overflow Poc By:Encrypt3d.M!nd Greetz:-=Mizo=-,L!0N,El Mariachi,MiNi SpIder,GGY,and all my friends when you import Prefernces File "prf file" contain long characters an overflow will occure,and the registers will be ju...

SAWStudio 3.9i (prf File) Local Buffer Overflow PoC

Exploit for unknown platform in category dos / poc =================================================== SAWStudio 3.9i prf File Local Buffer Overflow PoC =================================================== SAWStudio 3.9i prf file Buffer overflow Poc By:Encrypt3d.M!nd Greetz:-=Mizo=-,L!0N,El...

SAWStudio 3.9i - '.prf' Local Buffer Overflow (PoC)

SAWStudio 3.9i prf file Buffer overflow Poc By:Encrypt3d.M!nd Greetz:-=Mizo=-,L!0N,El Mariachi,MiNi SpIder,GGY,and all my friends when you import Prefernces File "prf file" contain long characters an overflow will occure,and the registers will be just like this: EAX:41414141 ECX:00000000...

Google Chrome - ChromeHTML: Remote Parameter Injection

Google Chrome - ChromeHTML: Remote Parameter Injection click me milw0rm.com 2008-12-23...

CoolPlayer 2.19 (Skin File) Local Buffer Overflow Exploit (py)

No description provided by source. CoolPlayer Skin Buffer Overflow maybe all versions are affected : By:Encrypt3d.M!nd Orginal Exploit: by r0ut3r http://www.milw0rm.com/exploits/7536 i've test it on my boxwinxp sp3 and didn't work so i've re-wrote the exploit and this is workin tested: Windows xp...

Google Chrome - 'ChromeHTML://' Remote Parameter Injection

click me milw0rm.com 2008-12-23...

CoolPlayer 2.19 (Skin File) Local Buffer Overflow Exploit (py)

Exploit for unknown platform in category local exploits ============================================================== CoolPlayer 2.19 Skin File Local Buffer Overflow Exploit py ============================================================== CoolPlayer Skin Buffer Overflow maybe all versions are...

CoolPlayer 2.19 - '.Skin' Local Buffer Overflow

CoolPlayer Skin Buffer Overflow maybe all versions are affected : By:Encrypt3d.M!nd Orginal Exploit: by r0ut3r http://www.milw0rm.com/exploits/7536 i've test it on my boxwinxp sp3 and didn't work so i've re-wrote the exploit and this is workin tested: Windows xp sp3 patched version...

CoolPlayer 2.19 - .Skin Local Buffer Overflow (Python)

CoolPlayer 2.19 - .Skin Local Buffer Overflow Python CoolPlayer Skin Buffer Overflow maybe all versions are affected : By:Encrypt3d.M!nd Orginal Exploit: by r0ut3r http://www.milw0rm.com/exploits/7536 i've test it on my boxwinxp sp3 and didn't work so i've re-wrote the exploit and this is workin...

Microsoft Excel TXO and OBJ record parsing memory corruption

Added: 12/18/2008 CVE: CVE-2008-4265 BID: 32618 OSVDB: 50556 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem A memory corruption vulnerability allows command execution when a user opens an Excel...

Microsoft Internet Explorer - XML Parsing Buffer Overflow (1)

x // windows/exec - 148 bytes // http://www.metasploit.com // Encoder: x86/shikataganai // EXITFUNC=process, CMD=calc.exe var shellcode =...

MS Internet Explorer XML Parsing Remote Buffer Overflow Exploit 0day

No description provided by source. // ksOSe 12/10/2008 - tested on winxp sp3, explorer 7.0.5730.13 // windows/exec - 141 bytes // http://www.metasploit.com // EXITFUNC=seh, CMD=C:\WINDOWS\system32\calc.exe http://sebug.net/paper/poc/2008-iesploit.tar.gz...

Format string

Microsoft Office Excel 2000 SP3 allows remote attackers to execute arbitrary code via a crafted Excel spreadsheet that contains a malformed object, which triggers memory corruption during the loading of records from this spreadsheet, aka "File Format Parsing Vulnerability."...

CVE-2008-4265

CVE-2008-4265 affects Microsoft Office Excel 2000 SP3, where parsing certain TXO/OBJ records can trigger a memory corruption vulnerability that permits remote code execution when a specially crafted Excel file is opened. The root cause is memory corruption during loading of records from the sprea...

CVE-2008-4265: Undefined Security Weakness

Microsoft Office Excel 2000 SP3 allows remote attackers to execute arbitrary code via a crafted Excel spreadsheet that contains a malformed object, which triggers memory corruption during the loading of records from this spreadsheet, aka "File Format Parsing Vulnerability."...

CVE-2008-4030: Undefined Security Weakness

Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1 allow remote attackers to execute arbitrary code via crafted control...

CVE-2008-4253: Undefined Security Weakness

The FlexGrid ActiveX control in Microsoft Visual Basic 6.0, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, Office FrontPage 2002 SP3, and Office Project 2003 SP3 does not properly handle errors during access to incorrectly initialized objects, which allows remote attackers to execute arbitrary code v...

CVE-2008-4024: Improper Control of Generation of Code

Microsoft Office Word 2000 SP3 and 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code via a Word document with a crafted lcbPlcfBkfSdt field in the File Information Block FIB, which bypasses an initialization step and triggers an "arbitrary free," aka "Word Memory...

Microsoft Internet Explorer - XML Parsing Remote Buffer Overflow

Microsoft Internet Explorer - XML Parsing Remote Buffer Overflow // ksOSe 12/10/2008 - tested on winxp sp3, explorer 7.0.5730.13 // windows/exec - 141 bytes // http://www.metasploit.com // EXITFUNC=seh, CMD=C:\WINDOWS\system32\calc.exe...