Sunbelt Kerio Personal Firewall 4.3.426 - CreateRemoteThread Denial of Service

Sunbelt Kerio Personal Firewall 4.3.426 - CreateRemoteThread Denial of Service source: https://www.securityfocus.com/bid/18996/info Sunbelt Kerio Personal Firewall is prone to a denial-of-service vulnerability. This issue can occur when a program calls the 'CreateRemoteThread' Windows API call...

Sunbelt Kerio Personal Firewall 4.3.426 - CreateRemoteThread Denial of Service

source: https://www.securityfocus.com/bid/18996/info Sunbelt Kerio Personal Firewall is prone to a denial-of-service vulnerability. This issue can occur when a program calls the 'CreateRemoteThread' Windows API call. Exploitation of this vulnerability could cause the firewall application to crash...

win32 WinExec Command Parameter 104+ bytes

win32 WinExec Command Parameter 104+ bytes. Shellcode exploit for win32 platform ; ; relocateable dynamic runtime assembly code example using hash lookup ; ; WinExec with ExitThread ; 104 bytes ; ; for testing: ; ; ml /c /coff /Cp wexec2.asm ; link /subsystem:windows /section:.text,w wexec2.obj ;...

iDEFENSE Security Advisory 11.15.05: Multiple Vendor Insecure Call to CreateProcess() Vulnerability

Multiple Vendor Insecure Call to CreateProcess Vulnerability iDEFENSE Security Advisory 11.15.05 www.idefense.com/application/poi/display?id=340&type=vulnerabilities November 15, 2005 I. BACKGROUND The Microsoft Windows API includes the CreateProcess function as a means to create a new process an...

MS Windows CSRSS Local Privilege Escalation Exploit (MS05-018)

Exploit for unknown platform in category local exploits ============================================================== MS Windows CSRSS Local Privilege Escalation Exploit MS05-018 ============================================================== include include include pragma comment...

Kaspersky AntiVirus - 'klif.sys' Local Privilege Escalation

/ Added NOSTRICT to 1 on line 2 /str0ke ! milw0rm.com / define NOSTRICT 1 include undef STRICT PUCHAR pCodeBase=PUCHAR0xBE9372C0; PDWORD pJmpAddress=PDWORD0xBE9372B0; PUCHAR pKAVRets=PUCHAR0xBE935087,PUCHAR0xBE935046; PUCHAR pKAVRet; unsigned char code=0x68,0x00,0x02,0x00,0x00, //push 0x200...

CVE-2004-0207

"Shatter" style vulnerability in the Window Management application programming interface API for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to gain privileges by using certain API functions to change properties of privileged programs...

CVE-2004-0207

CVE-2004-0207 is a local privilege-elevation vulnerability in the Windows Window Management APIs (SetWindowLong/SetWindowLongPtr) that could let a logged-on user change properties of higher-privileged processes and gain full control of the system. Affected Windows platforms include Windows 98, NT...

ICQ 2003a protection bypass

By making Contact List windos active via Windows API it's possible to access contact list without password...

Kaspersky Antivirus DoS

Title: Kaspersky Antivirus DoS Author: ZARAZA Affected: Kaspersky Antivirus 4.0.9.0 Server and Workstation version on Windows NT 4.0 and Windows 2000. Vendor: Kaspersky Lab Date: January, 30 2003 Risk: Average Exploitable: Yes Remote: Yes for server versions Vendor Notified: January, 30 2003 I...

Microsoft Windows XP2000NT 4.0 - Window Message Subsystem Design Error (7)

Microsoft Windows XP2000NT 4.0 - Window Message Subsystem Design Error 7 source: https://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely...

Microsoft Windows XP2000NT 4.0 - Window Message Subsystem Design Error (5)

Microsoft Windows XP2000NT 4.0 - Window Message Subsystem Design Error 5 // source: https://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely...

Microsoft Windows XP/2000/NT 4.0 - Window Message Subsystem Design Error (8)

source: https://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely affects almost every Win32 window-based application. Attackers with local...

Windows Unquoted Service Path Privilege Escalation

This module exploits a logic flaw due to how the lpApplicationName parameter is handled. When the lpApplicationName contains a space, the file name is ambiguous. Take this file path as example: C:\program files\hello.exe; The Windows API will try to interpret this as two possible paths:...

SHGetPathFromIDList.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Windows Api SHGetPathFromIDList Buffer Overflow To all those people who sent email to us asking for more information about the SHGetPathFromIDList Windows Api overflow. Here is a more specific description about the problem. All Structure lengths, or...