Remote site run as local file via Windows URL shortcut — Mozilla

Mozilla community member Geoff reported that URL shortcut files on Windows for example, saved IE favorites could be interpreted as if they were in the local file context when opened by Firefox, although the referenced remote content would be downloaded and displayed. Scripts loaded from the remot...

Think of a comparison XX run the EXE file method-vulnerability warning-the black bar safety net

From the Internet under the software compression package,usually comes with a readme. txt or sn. txt or the like,which contains some of the software description of the serial number or something,and generally in running the software before clicking the check out instructions,but we know. lnk file...

Simple, make a hidden program to“jump”out-vulnerability warning-the black bar safety net

Perform one software, double-click its main program. If this software is in a very deep in a folder, we'll have one layer have to open the folder, find the“hidden”in the depths of the program. For convenience, we will provide these programs on the desktop create a shortcut, but because of the...

Make your own simple download-vulnerability warning-the black bar safety net

Now the popular online much download We to use a simple command to make a lifetime offree to killthe download. The first method: 1. Download a tftp software,set the directory to download the Trojan set the directory inside the 2,The new batch file Enter the download command @echo off @tftp-i...

inetconnCrash.txt

DEFAULT BASEURL= InternetShortcut...

Secunia Research: Microsoft Internet Explorer Keyboard Shortcut Processing Vulnerability

====================================================================== Secunia Research 13/12/2005 Microsoft Internet Explorer Keyboard Shortcut Processing Vulnerability ====================================================================== Table of Contents Affected...

CVE-2005-2118

Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote user-assisted attackers to execute arbitrary commands via a crafted shortcut .lnk file with long font properties that lead to a buffer overflow when the user views the file's properties using Windows...

CVE-2005-2118

Summary (CVE-2005-2118 / CVE-2005-2122) : Both vulnerabilities stem from how Windows Shell handles .lnk shortcut files, enabling remote code execution through crafted shortcuts or properties. Affected products include Windows 2000 SP4, XP SP1/SP2, and Windows Server 2003. The issues differ in the...

CVE-2005-2122

CVE-2005-2122 corresponds to a Windows Shell buffer overflow in the handling of .lnk shortcut files, enabling remote code execution when a user opens a specially crafted shortcut or properties dialog. The issue affects Windows 2000 SP4, XP SP1/SP2, and Windows Server 2003, and is part of the MS05...

Microsoft Windows Malicious Shortcut Handling Remote Code Execution Variant Vulnerability

Description Microsoft Windows is prone to a remote code execution vulnerability when handling a malicious shortcut .lnk file. An attacker can exploit this issue by crafting a malicious file and placing it on a Web site or sending it to a user through email followed by enticing them to open it and...

Microsoft Windows Malicious Shortcut Handling Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code execution vulnerability when handling a malicious shortcut .lnk file. An attacker can exploit this issue by crafting a malicious file and placing it on a Web site or sending it to a user through email followed by enticing them to open it and...

Microsoft Windows Shell fails to handle shortcut files properly

Overview Microsoft Windows Shell does not properly handle some shortcut files and may permit arbitrary code execution when a specially-crafted file is opened. Description Microsoft Windows supports files that point to another file, called "shortcut" files. These files have the .lnk extension, and...

Microsoft Windows XP/2000/2003 - Keyboard Event Privilege Escalation

// source: https://www.securityfocus.com/bid/14743/info Microsoft Windows is prone to a privilege escalation weakness. This issue is due to a design error when desktop applications handle keyboard events sent through the keybdevent function. The specific issue is that programs may send keyboard...

Microsoft Windows XP20002003 - Keyboard Event Privilege Escalation

Microsoft Windows XP20002003 - Keyboard Event Privilege Escalation // source: https://www.securityfocus.com/bid/14743/info Microsoft Windows is prone to a privilege escalation weakness. This issue is due to a design error when desktop applications handle keyboard events sent through the keybdeven...

CVE-2004-2291

CVE-2004-2291 affects Microsoft Windows Internet Explorer 5.5 and 6.0. A remote attacker can run arbitrary code by delivering an embedded script that uses Shell Helper objects and a shortcut (link) to trigger the target script. No exploitation details are provided in the connected documents. No r...

iDEFENSE Security Advisory 04.26.05: Citrix Program Neighborhood Agent Arbitrary Shortcut Creation Vulnerability

Citrix Program Neighborhood Agent Arbitrary Shortcut Creation Vulnerability iDEFENSE Security Advisory 04.26.05 www.idefense.com/application/poi/display?id=237&type=vulnerabilities April 26, 2005 I. BACKGROUND Citrix Program Neighborhood Agent is a part of the Citrix Presentation Server Client an...

[SA14372] ArGoSoft FTP Server "SITE COPY" Shortcuts Security Issue

TITLE: ArGoSoft FTP Server "SITE COPY" Shortcuts Security Issue SECUNIA ADVISORY ID: SA14372 VERIFY ADVISORY: http://secunia.com/advisories/14372/ CRITICAL: Less critical IMPACT: Unknown WHERE: From remote SOFTWARE: ArGoSoft FTP Server 1.4.x http://secunia.com/product/2260/ DESCRIPTION: Cirpian...

CVE-2002-2275

Fortres 101 4.1 allows local users to bypass Fortres by pressing the Windows and "F" key together for 30 seconds, which opens multiple windows and eventually causes explorer.exe to crash, which then opens an unrestricted explorer.exe...

Microsoft Windows Media Player creates URL shortcut that may contain HTML code in known location in Local Computer Zone

Overview There is a vulnerability in the creation of Internet shortcuts in Windows Media Player version 6.4 and 7. This vulnerability may allow attackers to execute arbitrary commands when a victim views a malicious web page. Description Windows Media Player versions 6.4 and 7 create Internet...

CVE-1999-1294

The vulnerability concerns the Office Shortcut Bar (OSB) in Windows 3.51 . The OSB enables backup and restore permissions, and these permissions are inherited by programs (e.g., File Manager) launched from the Shortcut Bar. As a result, local users could read folders for which they do not have pe...