Oracle Outside-In JP2 - File Parsing Heap Overflow

Application: Oracle Outside-In JP2 File Parsing Heap Overflow Version: The vulnerabilities are reported in versions 8.3.5 and 8.3.7. Exploitation: Remote code execution Secunia Number: SA49936 PRL: 2012-24 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/...

Get Ready for Microsoft 13 updates for August Patch Tuesday

Get Ready for Microsoft 13 updates for August Patch Tuesday Microsoft has announced that it will release 13 bulletins to address 22 vulnerabilities in Windows, Office, Internet Explorer, .NET and Visual Studio on its next Patch Tuesday. Another "critical" bulletin affects Windows server operating...

The Shellcoder's Handbook : 1st & 2nd Edition Download

Shellcoder's Programming Uncovered Kris Kaspersky ISBN-10: 193176946X Product Description How hackers, viruses, and worms attack computers from the Internet and exploit security holes in software is explained in this outline of antivirus software, patches, and firewalls that try in vain to...

Google Ditching Windows Over Security Makes Little Sense

The Financial Times is reporting that Google is phasing out the internal use of Microsoft’s Windows operating system because of security concerns. The report, which is short on solid sourcing, quotes Google’s employees as saying the company is steering people towards using Apple’s Mac or the Linu...

Windows Access Control Demystified

Hello everybody, We have constructed a logical model of Windows XP access control, in a declarative but executable Datalog format. We have built a scanner that reads access-control configuration information from the Windows registry, file system, and service control manager database, and feeds ra...

Windows Unquoted Service Path Privilege Escalation

This module exploits a logic flaw due to how the lpApplicationName parameter is handled. When the lpApplicationName contains a space, the file name is ambiguous. Take this file path as example: C:\program files\hello.exe; The Windows API will try to interpret this as two possible paths:...