RealNetworks RealPlayer IVR File Processing Multiple Code Execute Vulnerabilities

RealNetworks RealPlayer IVR File Processing Multiple Code Execute Vulnerabilities 2009.February.05 Fortinet's FortiGuard Global Security Research Team Discovers Two Vulnerabilities in RealNetworks RealPlayer. Summary: ======== Two code execute vulnerabilities exist in RealNetworks RealPlayer 11...

Winace 2.2 - Malformed Filename Remote Denial of Service

source: https://www.securityfocus.com/bid/33049/info Winace is prone to a denial-of-service vulnerability. Attackers can exploit this issue to crash Windows Explorer, denying service to legitimate users. Given the nature of this issue, attackers may also be able to run arbitrary code, but this ha...

Winace 2.2 - Malformed Filename Remote Denial of Service

Winace 2.2 - Malformed Filename Remote Denial of Service source: https://www.securityfocus.com/bid/33049/info Winace is prone to a denial-of-service vulnerability. Attackers can exploit this issue to crash Windows Explorer, denying service to legitimate users. Given the nature of this issue,...

Windows search-ms protocol handler command execution vulnerability

Added: 12/11/2008 CVE: CVE-2008-4269 BID: 32652 OSVDB: 50566 Background The search-ms protocol allows applications to query the Windows Search index. Problem A vulnerability in Windows allows command execution when a user follows a specially crafted search-ms URL which passes arbitrary arguments ...

Windows search-ms protocol handler command execution vulnerability

Added: 12/11/2008 CVE: CVE-2008-4269 BID: 32652 OSVDB: 50566 Background The search-ms protocol allows applications to query the Windows Search index. Problem A vulnerability in Windows allows command execution when a user follows a specially crafted search-ms URL which passes arbitrary arguments ...

PT-2008-5549 · Microsoft · Windows Server 2008 +3

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: The issue concerns a remote code execution vulnerability in Windows Explorer. It allows an attacker to construct a malicious web page that includes a call to the search-ms...

CVE-2008-4269: Undefined Security Weakness

The search-ms protocol handler in Windows Explorer in Microsoft Windows Vista Gold and SP1 and Server 2008 uses untrusted parameter data obtained from incorrect parsing, which allows remote attackers to execute arbitrary code via a crafted HTML document, aka "Windows Search Parsing Vulnerability....

PT-2008-5548 · Microsoft · Windows Server 2008 +3

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: A remote code execution issue exists due to improper memory handling during the saving of a search file. This allows attackers to execute arbitrary code via a crafted...

Workaround for Microsoft Windows Saved Search Remote Code Execution Vulnerability (MS08-075)

A remote code execution vulnerability was reported in the way Windows Explorer saves specially crafted search files. Windows Search is a standard component of Windows Vista that allows instant search capabilities for most common file and data types. Windows Search has XML-based files that save...

DoS vulnerability in Total Commander

Здравствуйте 3APA3A! Сообщаю вам о найденной мною ещё 31.08.2006 Denial of Service уязвимости в Total Commander. Которая связана с уязвимостью в IE6 найденной Mr.Niega. Файловый менеджер Total Commander в некоторых случаях использует Windows Explorer, который в свою очередь использует IE. Что...

Microsoft Windows Explorer buffer overflow

Buffer overflow during right-click on .url file with oversized mhtml://mid: URL. Vulnerability can be used for hidden malware installation...

Microsoft Windows - InternalOpenColorProfile Heap Overflow (PoC) (MS08-046)

EMRSETICMPROFILEA Heap Overflow DOS By Ac!dDrop related to MS08-046 Tested on windows Xp professional Sp2 mscms.dll 5.1.2600.2709 gdi32.dll 5.1.2600.2818 Causes Windows explorer and Internet explorer to crash. You can run arbitary code...

CVE-2008-4323

CVE-2008-4323 affects Windows XP SP3: Windows Explorer may crash (DoS) when handling a specially crafted .ZIP file. The vulnerability is described as user-assisted (not remote) and affects Explorer functionality, with no details on a patch or workaround provided in the connected documents. No add...

EUVD-2008-4304

Windows Explorer in Microsoft Windows XP SP3 allows user-assisted attackers to cause a denial of service application crash via a crafted .ZIP file...

CVE-2008-4323: Undefined Security Weakness

Windows Explorer in Microsoft Windows XP SP3 allows user-assisted attackers to cause a denial of service application crash via a crafted .ZIP file...

Microsoft Windows Explorer - .zip Denial of Service

Microsoft Windows Explorer - .zip Denial of Service Sucessfully tested on Microsoft Windows Xp Pro sp3 English. If you open with Winzip sometimes the exeption doesen't occur. Just right click the file and explorer will crash. |--- CMP BYTE PTR DS:EDX+EAX-1,2E ESP 0007E328 EBP 0007E358 Access...

K-Lite Mega Codec Pack 3.5.7.0 Local Windows Explorer DoS PoC

No description provided by source. K-Lite Mega Codec Pack based Local Windows Explorer DOS PoC. Version:3.5.7.0 "vsfilter.dll"Version 1.0.1.4 that comes bundled with the above Codec Pack crashes when we try to use,select or even highlight the attached "Test7.flv" file in Windows Explorer,causing...

K-Lite Mega Codec Pack 3.5.7.0 Local Windows Explorer DoS PoC

Exploit for unknown platform in category dos / poc ============================================================= K-Lite Mega Codec Pack 3.5.7.0 Local Windows Explorer DoS PoC ============================================================= K-Lite Mega Codec Pack based Local Windows Explorer DOS PoC...

K-Lite Mega Codec Pack 3.5.7.0 - Local Windows Explorer Denial of Service (PoC)

K-Lite Mega Codec Pack based Local Windows Explorer DOS PoC. Version:3.5.7.0 "vsfilter.dll"Version 1.0.1.4 that comes bundled with the above Codec Pack crashes when we try to use,select or even highlight the attached "Test7.flv" file in Windows Explorer,causing Explorer to Crash. Greetz fly out t...

K-Lite Mega Codec Pack 3.5.7.0 - Local Windows Explorer Denial of Service (PoC)

K-Lite Mega Codec Pack 3.5.7.0 - Local Windows Explorer Denial of Service PoC K-Lite Mega Codec Pack based Local Windows Explorer DOS PoC. Version:3.5.7.0 "vsfilter.dll"Version 1.0.1.4 that comes bundled with the above Codec Pack crashes when we try to use,select or even highlight the attached...