CVE-2009-2506

The CVE-2009-2506 issue is a memory corruption/heap overflow vulnerability in WordPad and Office text converters when parsing the DocumentSummaryInformation stream of a specially crafted Word 97 DOC file. A remote attacker could execute arbitrary code with the privileges of the logged-on user by ...

Microsoft Security Bulletin MS09-069 - Important Vulnerability in Local Security Authority Subsystem Service Could Allow Denial of Service (974392)

Microsoft Security Bulletin MS09-069 - Important Vulnerability in Local Security Authority Subsystem Service Could Allow Denial of Service 974392 Published: December 08, 2009 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in...

Microsoft Security Advisory (954157) Security Enhancements for the Indeo Codec

Microsoft Security Advisory 954157 Security Enhancements for the Indeo Codec Published: December 08, 2009 Version: 1.0 General Information Executive Summary Microsoft is announcing the availability of an update that provides security mitigations to the Indeo codec on supported editions of Microso...

WordPad and Office Text Converters Remote Code Execution Vulnerability (975539)

This host is missing a critical security update according to Microsoft Bulletin MS09-073. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Protected Extensible Authentication Protocol Authentication Bypass Vulnerability

Description The implementation of the Protected Extensible Authentication Protocol PEAP used by Microsoft's Internet Authentication System is prone to an authentication-bypass vulnerability. Successful exploits would allow an attacker to gain unauthorized access to network resources. Technologies...

MS09-073: Vulnerability in WordPad and Office Text Converters Could Allow Remote Code Execution (975539)

The remote host contains a vulnerable version of Microsoft WordPad, Office, or Office Converter Pack. Opening a specially crafted Word 97 file can result in the execution of arbitrary code. A remote attacker could exploit this by tricking a user into opening a malicious Word file. C Tenable Netwo...

HTML Help Workshop 4.74 (hhp) Buffer Overflow Exploit (Universal)

No description provided by source. Exploit Title: HTML Help Workshop 4.74 hhp Buffer Overflow Exploit Universal Date: 2009-12-05 Author: Dzattacker Software Link: http://www.microsoft.com/downloads/details.aspx?FamilyID=00535334-c8a6-452f-9aa0-d597d16580cc&displaylang=en Version: 4.74 Tested on: ...

HTML Help Workshop 4.74 (hhp) Buffer Overflow Exploit (Universal)

Exploit for unknown platform in category local exploits ================================================================= HTML Help Workshop 4.74 hhp Buffer Overflow Exploit Universal ================================================================= Exploit Title: HTML Help Workshop 4.74 hhp Buff...

InterSystems Cache UtilConfigHome.csp Argument Buffer Overflow

This module exploits a stack buffer overflow in InterSystems Cache 2009.1. By sending a specially crafted GET request, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework...

PuTTy.exe <= v0.53 Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ class Metasploit3 'PuTTy.exe %q This module exploi...

GAMSoft TelSrv 1.5 Username Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'GAMSoft TelS...

Microsoft Plug and Play Service Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Microsoft Pl...

PSO Proxy v0.91 Stack Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ class Metasploit3 'PSO Proxy v0.91 Stack Overflow'...

Mercury/32 v4.01a IMAP RENAME Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Mercury/32...

Trend Micro OfficeScan Remote Stack Overflow

require 'msf/core' require 'metasm' class Metasploit3 'Trend Micro OfficeScan Remote Stack Overflow', 'Description' = %q This module exploits a stack overflow in Trend Micro OfficeScan cgiChkMasterPwd.exe running with SYSTEM privileges. , 'Author' = 'toto' , 'License' = MSFLICENSE, 'Version' =...

HP OpenView Network Node Manager CGI Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'HP OpenView...

Microsoft Server Service NetpwPathCanonicalize Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Microsoft...

Microsoft Private Communications Transport Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Microsoft...

Yahoo! Messenger 8.1.0.249 ActiveX Control Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Yahoo!...

Ipswitch IMail IMAP SEARCH Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Ipswitch IMa...