NGS00288 Patch Notification: Windows Remote Desktop Memory Corruption Leading to RCE on XP SP3

High Risk Vulnerability in Microsoft Windows Remote Desktop 17 August 2012 Edward Torkington of NCC Group has discovered a High risk vulnerability in Microsoft Windows Remote Desktop Impact: Remote Code Execution Versions affected: Windows XP SP3 An updated version of the software has been releas...

Trojan Poison Ivy 2.3.2 - Critical Null Pointer Vulnerability

Document Title: =============== Trojan Poison Ivy 2.3.2 - Critical Null Pointer Vulnerability Release Date: ============= 2011-08-08 Vulnerability Laboratory ID VL-ID: ==================================== 113 Product & Service Introduction: =============================== Poison Ivy is an advance...

UltraFXP v1.07 - Stack Buffer Overflow Vulnerability

Document Title: =============== UltraFXP v1.07 - Stack Buffer Overflow Vulnerability Release Date: ============= 2011-06-19 Vulnerability Laboratory ID VL-ID: ==================================== 162 Product & Service Introduction: =============================== FTP-Client / FXP-Client...

Microsoft Remote Desktop Client Insecure Library Loading (MS11-017; CVE-2011-0029)

The Remote Desktop feature in Windows enables access to all of the programs, resources, and accessories on a user's computer from another Windows-based computer. Once connected, Remote Desktop gives mouse and keyboard control over the computer while showing everything that is happening on the...

Juniper VPN Client rdesktop Click Hack

Juniper VPN client rdesktop clickhack ================================ discovered by [email protected] PRODUCT: Juniper VPN client + Windows remote desktop or console access VERSION AFFECTED: Win Vista/7 + Juniper VPN client all versions EXPOSURE: Remote code execution SYSTEM privileges SYNOPSIS...

SIDVault 2.0e Windows Remote Buffer Overflow Exploit

Exploit for windows platform in category remote exploits ==================================================== SIDVault 2.0e Windows Remote Buffer Overflow Exploit ==================================================== !/usr/bin/python $ ./sidvault.py 192.168.1.131 SIDVault 2.0e Windows Remote Buffe...

CVE-2009-0087

Unspecified vulnerability in the Word 6 text converter in WordPad in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and the Word 6 text converter in Microsoft Office Word 2000 SP3 and 2002 SP3; allows remote attackers to execute arbitrary code via a crafted Word 6 file...

Type confusion

Mozilla Firefox before 2.0.0.5, when run on Windows, allows remote attackers to bypass file type checks and possibly execute programs via a 1 file:/// or 2 resource: URI with a dangerous extension, followed by a NULL byte %00 and a safer extension, which causes Firefox to treat the requested file...

CVE-2007-3062

Cross-site scripting XSS vulnerability in HP System Management Homepage SMH before 2.1.2 running on Linux and Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...