ps-ppl-bypass

Process Explorer vulnerable driver PPL Bypass While it is well known that old versions before 17.x of SysInternals Process Explorer drivers PSEXP152.sys are vulnerable and can be abused to open full access process handles to PPL processes IOCTL: 0x8335003c, newer versions 17.x upward are still...

CVE-2005-2679

Buffer overflow in Sysinternals Process Explorer 9.23, and other versions before 9.25, allows local users to execute arbitrary code via a long CompanyName field in the VersionInfo information in a running process...

Sysinternals Process Explorer DLL Hijack

/ Exploit Title: Sysinternals Process Explorer DLL Hijacking on x86 Windows systems wow64cpu.dll Date: 27 Aug 2010 Author: miom Software Link: http://technet.microsoft.com/sysinternals/bb896653.aspx Version: Process Explorer v12.04 Tested on: Windows XP SP3 x86 This exploit targets x86 Windows...

CVE-2005-2679

CVE-2005-2679 describes a local buffer overflow in Sysinternals Process Explorer 9.23 and earlier than 9.25. The vulnerability arises from a long CompanyName field in the VersionInfo of a running process, allowing local users to execute arbitrary code. Affected product: Sysinternals Process Explo...

[SA16525] Process Explorer "CompanyName" Buffer Overflow

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...