javascript: links in Thunderbird launch Internet Explorer — Mozilla

Clicking on javascript: links in Thunderbird launched the default handler for that scheme registered with the OS. On the Windows operating system Internet Explorer is the default handler for the javascript: scheme even when Firefox is the default browser...

EEYE: Windows ANI File Parsing Buffer Overflow

Windows ANI File Parsing Buffer Overflow Systems Affected: Windows Me Windows 2000 Windows XP SP1 and earlier Windows 2003 Overview: eEye Digital Security has discovered a vulnerability in USER32.DLL's handling of Windows animated cursor .ani files that will allow a remote attacker to reliably...

[Full-Disclosure] [AppSecInc Team SHATTER Security Advisory] Microsoft Windows Improper Token Validation

Microsoft Windows Improper Token Validation AppSecInc Team SHATTER Security Advisory http://www.appsecinc.com/resources/alerts/general/06-0001.html January 10, 2005 Credit: This vulnerability was discovered and researched by Cesar Cerrudo of Application Security, Inc. Risk Level: High Summary: A...

VulnCheck KEV: CVE-2004-0839

Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and the AnchorClick behavior, popup windows, and drag-and-drop capabilities to drop the program in the local startup folder...

Multiple Vulnerabilities in Web Forums Server

CHT Security Research Center-2004 http://www.CyberSpy.Org Turkey Software: Web Forums Server Web Site: http://www.minihttpserver.net Affected Versions: 1.6,2.0 Power Packcurrent Description: Web Forums Server is "all in one" Web Server for Microsoft Windows Operating Systems. Web Forums Server ha...

win xp/2000/2003 Connect Back shellcode for Overflow Exploit 275 bytes

win xp/2000/2003 Connect Back shellcode for Overflow exploit 275 bytes. Shellcode exploit for win32 platform / ----------------------------------------------------------------------- connectbackv32.c - Connect Back shellcode for Overflow exploit Copyright C 2000-2004 HUC All Rights Reserved. Auth...

win xp/2000/2003 Download File and Exec 241 bytes

win xp/2000/2003 Download File and Exec 241 bytes. Shellcode exploit for win32 platform / ----------------------------------------------------------------------- downloadurlv31.c - Download file and exec shellcode for Overflow exploit Copyright C 2000-2004 HUC All Rights Reserved. Author : lion :...

MS04-029: Vulnerability in RPC Runtime Library Could Allow Information Disclosure and Denial of Service (873350)

The remote Windows operating system contains a bug in RPC Runtime Library. RPC is a protocol used by Windows to provide an inter-process communication mechanism that allows a program running on one system to access services on another one. A bug affecting the implementation of this protocol could...

Icecast 2.0.1 (Win32) - Remote Code Execution (1)

/ by Luigi Auriemma Shellcode add-on by Delikon www.Delikon.de Because of all the forbidden bytes in a http get request i had to use a very small shellcode, which was blown up by Msf::Encoder::PexAlphaNum. Great encoder. -------------------------------------------------------------------------...

AOL Instant Messenger AIM - 'Away' Message Remote (2)

/ CAN-2004-0636 / / AIM Away Message Buffer Overflow Exploit Exploit by John Bissell A.K.A. HighT1mes Exploit: ======== drizzit.c Vulnerable Software: ==================== - AIM 5.5.3588 - AIM 5.5.3590 Beta - AIM 5.5.3591 - AIM 5.5.3595 and a couple others versions... If you want to try other...

Cerbere HTTP Proxy Server Host: Header Remote DoS

The remote host is running Cerbere Proxy Server, a HTTP/FTP proxy server for Windows operating systems. It is reported that versions up to and including 1.2 are vulnerable to a remote denial of service in the 'Host:' HTTP field processing. An attacker may craft a malicious HTTP request with a lar...

IBM DB2 - Universal Database Information Disclosure

IBM DB2 - Universal Database Information Disclosure source: https://www.securityfocus.com/bid/11402/info An information disclosure vulnerability has been reported in IBM DB2. This vulnerability only exists when DB2 is installed on Microsoft Windows operating systems. This is due to a Windows...

IBM DB2 Semaphore Signaling - Denial of Service

source: https://www.securityfocus.com/bid/11403/info A denial of service vulnerability has been reported in IBM DB2. This vulnerability is reported to only exist when DB2 is installed on Microsoft Windows operating systems. This issue is due to a failure of the application to properly ensure that...

IBM DB2 Semaphore Signaling - Denial of Service

IBM DB2 Semaphore Signaling - Denial of Service source: https://www.securityfocus.com/bid/11403/info A denial of service vulnerability has been reported in IBM DB2. This vulnerability is reported to only exist when DB2 is installed on Microsoft Windows operating systems. This issue is due to a...

IBM DB2 - Universal Database Information Disclosure

source: https://www.securityfocus.com/bid/11402/info An information disclosure vulnerability has been reported in IBM DB2. This vulnerability only exists when DB2 is installed on Microsoft Windows operating systems. This is due to a Windows permissions issue related to shared memory sections,...

[Full-Disclosure] Microsoft's Explorer and Internet Explorer long share name buffer overflow.

Microsoft Explorer and Internet Explorer Long Share Name Buffer Overflow. Author: Rodrigo Gutierrez [email protected] Affected: MS Internet Explorer, MS Explorer explorer.exe Windows XPAll, Windows 2000All, Windows 98All, Windows meAll Not Tested: Windows 2003 Vendor Status: i notified the...

Symantec Norton AntiVirus 2002 - Nested File Manual Scan Bypass

Symantec Norton AntiVirus 2002 - Nested File Manual Scan Bypass source: https://www.securityfocus.com/bid/10164/info A vulnerability has been reported in Symantec Norton AntiVirus 2002 that may potentially cause deeply nested files with specific names to bypass manual scanning. This could permit...

Symantec Norton AntiVirus 2002 - Nested File Manual Scan Bypass

source: https://www.securityfocus.com/bid/10164/info A vulnerability has been reported in Symantec Norton AntiVirus 2002 that may potentially cause deeply nested files with specific names to bypass manual scanning. This could permit malicious executable content to bypass scanning by the software...

PT-2004-1176 · Microsoft · Windows Xp

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP version SP1 Description: The issue concerns the Help and Support Center in Microsoft Windows XP, which fails to properly validate HCP URLs. This allows remote attackers to execute arbitrary code by using quotation marks i...

US-CERT Technical Cyber Security Alert TA04-104A -- Multiple Vulnerabilities in Microsoft Products

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Multiple Vulnerabilities in Microsoft Products Original release date: April 13, 2004 Last revised: -- Source: US-CERT Systems Affected Microsoft Windows Operating Systems Microsoft Windows Remote Procedure Call RPC and Distributed Component Object Mod...