CVE-2009-2495

The Active Template Library ATL in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1 does not properly enforce string termination, which allows remote attackers to obtain sensitive information via a crafted HTML...

CVE-2009-2495

The Active Template Library ATL in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1 does not properly enforce string termination, which allows remote attackers to obtain sensitive information via a crafted HTML...

CVE-2009-0901

CVE-2009-0901 describes a remote code execution vulnerability in Microsoft Active Template Library (ATL) used by Visual Studio and Windows components. The issue arises when ATL headers mishandle uninitialized VARIANTs, allowing a specially crafted stream to trigger VariantClear on an uninitialize...

PT-2009-3491

Name of the Vulnerable Software and Affected Versions Microsoft Visual Studio .NET versions 2003 SP1 through 2008 Microsoft Visual C++ versions 2005 SP1 through 2008 SP1 Windows versions 2000 SP4 through XP SP3, Server 2003 SP2, Vista Gold through SP2, and Server 2008 Gold through SP2 Description...

PT-2009-4900

Name of the Vulnerable Software and Affected Versions Microsoft Visual Studio .NET versions 2003 SP1 through 2008 SP1 Microsoft Visual C++ versions 2005 SP1 through 2008 SP1 Windows versions prior to Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold...

Microsoft Visual Studio ATL COM对象远程代码执行漏洞

Bugraq ID: 35828 CVE ID：CVE-2009-2493 Microsoft Visual Studio是一款微软公司的开发工具套件系列产品。 Microsoft活动模版库ATL处理数据流对象实例化时ATL头存在错误，远程攻击者可以利用漏洞绕过IE等Kill-bits安全策略，并导致任意代码执行。 此漏洞只影响安装了使用Visual Studio ATL的组件和控件的系统。如果组件或控件使用ATL，不安全使用OleLoadFromStream允许任意对象实例化，可绕过相关的安全策略，如 Internet Explorer的Kill...

Microsoft Visual Studio ATL NULL字符串信息泄漏漏洞

Bugraq ID: 35830 CVE ID：CVE-2009-2495 Microsoft Visual Studio是一款微软公司的开发工具套件系列产品。 Microsoft活动模版库ATL存在一个错误，远程攻击者可以利用漏洞获得敏感信息。 Microsoft活动模版库ATL读取字符串时没有使用终止NULL字符，攻击者可以操作这个字符串读取额外的数据而获取内存中的敏感信息。此漏洞只影响安装了使用Visual Studio ATL的组件和控件的系统。攻击者成功利用此漏洞允许运行恶意组件或控件来获得敏感信息，把用户数据转向到第三方或访问受影响系统上的任意数据。 Microsoft...

Microsoft Visual Studio ATL 'VariantClear()'远程代码执行漏洞

Bugraq ID: 35832 CVE ID：CVE-2009-0901 CNCVE ID：CNCVE-20090901 Microsoft Visual Studio是一款微软公司的开发工具套件系列产品。 Microsoft活动模版库ATL处理ATL头字段存在问题，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 ATL头字段存在的一个错误允许攻击者对未正确初始化的VARIANT进行VariantClear调用，基于此攻击者可以提供破坏的流触发错误处理过程中来调用VariantClear而控制整个流程。此漏洞只影响安装了使用Visual Studio...

Millenium MP3 Studio 1.0 .mpf File Local Stack Overflow Exploit #2

No description provided by source. + Vulnerability : .mpf File Local Stack Overflow Exploit SEH 2 + Product : Millenium MP3 Studio + Versions affected : v1.0 + Download : http://www.software112.com/products/mp3-millennium+download.html + Method : seh + Tested on : Windows XP SP3 En + Written by :...

PT-2009-4902

Name of the Vulnerable Software and Affected Versions Microsoft Visual Studio .NET versions 2003 SP1 through 2008 SP1 Visual C++ versions 2005 SP1 through 2008 SP1 Description The issue is related to the Active Template Library ATL in Microsoft Visual Studio, which does not properly enforce strin...

Microsoft Security Bulletin MS09-035 - Moderate Vulnerabilities in Visual Studio Active Template Library Could Allow Remote Code Execution (969706)

Microsoft Security Bulletin MS09-035 - Moderate Vulnerabilities in Visual Studio Active Template Library Could Allow Remote Code Execution 969706 Published: July 28, 2009 Version: 1.0 General Information Executive Summary This security update addresses several privately reported vulnerabilities i...

Microsoft Visual Studio Active Template Library COM Object Remote Code Execution Vulnerability

Description Microsoft Visual Studio is prone to a remote code-execution vulnerability in the Active Template Library ATL. Remote attackers can exploit this issue to execute arbitrary code with the privileges of the user running an application built against the affected library. Failed exploit...

Millenium MP3 Studio 1.0 Stack Overflow

Vulnerability : .mpf File Local Stack Overflow Exploit SEH 2 + Product : Millenium MP3 Studio + Versions affected : v1.0 + Download : http://www.software112.com/products/mp3-millennium+download.html + Method : seh + Tested on : Windows XP SP3 En + Written by : corelanc0d3r...

MP3 Studio 1.0 - .mpf .m3u Local Stack Overflow (SEH)

MP3 Studio 1.0 - .mpf .m3u Local Stack Overflow SEH + Vulnerability : .mpf /.m3u File Local Stack Overflow Exploit SEH 1 + Product : Millenium MP3 Studio + Versions affected : v1.0 + Download : http://www.software112.com/products/mp3-millennium+download.html + Method : / + Tested on : Windows XP...

MP3 Studio 1.0 - '.mpf' Local Buffer Overflow (SEH)

!/usr/bin/perl MP3 Studio v1.0 mpf File Local BOF Exploit SEH Exploited by: Koshi Download: http://www.software112.com/products/mp3-millennium+download.html Based on PoC/findings by HACK4LOVE http://milw0rm.com/exploits/9277 Tested on WinXP SP3 I've used addresses from "xuadio.dll", which is...

MP3 Studio 1.0 (.mpf /.m3u File) Local Stack Overflow Exploit (SEH)

Exploit for unknown platform in category local exploits =================================================================== MP3 Studio 1.0 .mpf /.m3u File Local Stack Overflow Exploit SEH =================================================================== + Vulnerability : .mpf /.m3u File Local...

MP3 Studio 1.0 Stack Overflow

!/usr/bin/perl Found By :: HACK4LOVE MP3 Studio v 1.0 .mpf /.m3u File Local Stack Overflow PoC http://www.software112.com/products/mp3-millennium+download.html Thanks for SkuLL-HacKeR and all WwW.Sec-ArT.CoM/cc team EAX 00000000 ECX 41414141 EDX 7C9037D8 ntdll.7C9037D8 EBX 00000000 ESP 00134970 E...

MP3 Studio 1.0 - .mpf Local Buffer Overflow (SEH)

MP3 Studio 1.0 - .mpf Local Buffer Overflow SEH !/usr/bin/perl MP3 Studio v1.0 mpf File Local BOF Exploit SEH Exploited by: Koshi Download: http://www.software112.com/products/mp3-millennium+download.html Based on PoC/findings by HACK4LOVE http://milw0rm.com/exploits/9277 Tested on WinXP SP3 I've...

Microsoft Visual Studio ATL 'VariantClear()' Remote Code Execution Vulnerability

Description Microsoft Visual Studio is prone to a remote code-execution vulnerability in the Active Template Library ATL. Remote attackers can exploit this issue to execute arbitrary code with the privileges of the user running an application built with the affected library. Technologies Affected...

MP3 Studio 1.0 (.mpf /.m3u File) Local Stack Overflow PoC

No description provided by source. !/usr/bin/perl Found By :: HACK4LOVE MP3 Studio v 1.0 .mpf /.m3u File Local Stack Overflow PoC http://www.software112.com/products/mp3-millennium+download.html Thanks for SkuLL-HacKeR and all WwW.Sec-ArT.CoM/cc team EAX 00000000 ECX 41414141 EDX 7C9037D8...