4892 matches found
MSN Messenger (Linux) - .png Image Buffer Overflow
MSN Messenger Linux - .png Image Buffer Overflow / Remember g++ k /str0ke / / MSN Messenger PNG Image Buffer Overflow Download Shellcoded Exploit Bug discoveried by Core Security Technologies www.coresecurity.com Exploit coded By ATmaCA Copyright ©2002-2005 AtmacaSoft Inc. All Rights Reserved. We...
MSN Messenger PNG Image Buffer Overflow Download Shellcoded Expl
Exploit for unknown platform in category remote exploits =================================================================== MSN Messenger PNG Image Buffer Overflow Download Shellcoded Exploit =================================================================== / MSN Messenger PNG Image Buffer...
MS05-007: Vulnerability in Windows Could Allow Information Disclosure (888302)
The remote version of Windows contains a flaw that could allow an attacker to cause it to disclose information over the use of a named pipe through a NULL session. An attacker may exploit this flaw to gain more knowledge about the remote host. C Tenable Network Security, Inc. include"compat.inc";...
CVE-2005-0047
Windows 2000, XP, and Server 2003 does not properly "validate the use of memory regions" for COM structured storage files, which allows attackers to execute arbitrary code, aka the "COM Structured Storage Vulnerability."...
Local buffer-overflow in W32Dasm 8.93
Luigi Auriemma Application: W32Dasm was http://www.expage.com/page/w32dasm Versions: = 8.93 8.94??? Platforms: Windows Bug: buffer-overflow Exploitation: local Date: 24 Jan 2005 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction 2 Bug 3 The Code 4...
CVE-2004-1306
Heap-based buffer overflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote attackers to execute arbitrary code via a crafted .hlp file...
EEYE: Windows ANI File Parsing Buffer Overflow
Windows ANI File Parsing Buffer Overflow Systems Affected: Windows Me Windows 2000 Windows XP SP1 and earlier Windows 2003 Overview: eEye Digital Security has discovered a vulnerability in USER32.DLL's handling of Windows animated cursor .ani files that will allow a remote attacker to reliably...
MS05-003: Indexing Service Code Execution (871250)
The remote host contains a version of the Indexing Service that may allow an attacker to execute arbitrary code on the remote host by constructing a malicious query. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid16125; scriptversion"1.37"; scriptcvsdate"Date:...
CVE-2004-1306
Heap-based buffer overflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote attackers to execute arbitrary code via a crafted .hlp file...
CVE-2004-2070
The Altiris Client Service for Windows 5.6 SP1 Hotfix E 5.6.181 allows local users to execute arbitrary commands by opening the AClient tray icon and using the View Log File option, a different vulnerability than CVE-2005-1590...
Working Resources BadBlue 2.55 - MFCISAPICommand Remote Buffer Overflow (1)
// source: https://www.securityfocus.com/bid/12673/info A remote buffer overflow vulnerability affects Working Resources BadBlue. This issue is due to a failure of the application to securely copy GET request parameters into finite process buffers. An attacker may leverage this issue to execute...
Microsoft Windows XP/2000/2003 - 'winhlp32' Phrase Heap Overflow
source: https://www.securityfocus.com/bid/12092/info Microsoft Windows is prone to a heap-based buffer overflow vulnerability. This issue exists in 'winhlp32.exe' and is exposed when a malformed phrase compressed Windows Help file .hlp is processed by the program. Successful exploitation may allo...
Microsoft Windows LSASS Connection Validation Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege escalation vulnerability through LSASS Local Security Authority Subsystem Service. The vulnerability appears to be due to an error in the implementation of an enhanced access control feature. Attackers can exploit this vulnerability to...
Limited buffer-overflow and arbitrary memory access in Star Wars Battlefront 1.11
Luigi Auriemma Application: Star Wars Battlefront http://www.lucasarts.com/games/swbattlefront/ Versions: = 1.11 Platforms: Windows Xbox and Playstation 2 have not been tested Bugs: A limited buffer-overflow in nickname B crash caused by arbitrary memory access Exploitation: remote, versus server...
MS04-031: Vulnerability NetDDE Could Allow Code Execution (841533) (uncredentialed check)
The remote version of Windows is affected by a vulnerability in Network Dynamic Data Exchange NetDDE. An attacker may exploit this flaw to execute arbitrary code on the remote host with the SYSTEM privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid15572;...
CVE-2004-0208
The Virtual DOS Machine VDM subsystem of Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to access kernel memory and gain privileges via a malicious program that modified some system structures in a way that is not properly validated by privileged...
YahooPOPs 1.6 - SMTP Port Buffer Overflow
YahooPOPs 1.6 - SMTP Port Buffer Overflow / YahooPOPS v1.6 and prior SMTP port buffer overflow exploit v0.1 Exploit code by class101 at DFind.kd-team.com Bind a shellcode to the port 101. Thanx to Behrang [email protected] for the bug discovery Thanx to HDMoore and Metasploit.com for...
[Full-Disclosure] EEYE: Windows Shell ZIP File Decompression DUNZIP32.DLL Buffer Overflow Vulnerability
Windows Shell ZIP File Decompression DUNZIP32.DLL Buffer Overflow Vulnerability Release Date: October 12, 2004 Date Reported: August 2, 2004 Severity: High Code Execution Vendor: Microsoft Systems Affected: Windows XP SP1 and earlier Windows Me Overview: eEye Digital Security has discovered a...
Microsoft Windows contains buffer overflow in processing of WMF and EMF image files
Overview A vulnerability in the way the Microsoft Windows Graphics Rendering Engine processes certain types of image files could allow an attacker to execute arbitrary code on a vulnerable system. Description The Microsoft Windows Graphics Rendering Engine supports a number of image formats...
Microsoft Windows contains vulnerability in Window Management API
Overview A vulnerability in the Microsoft Windows window application programming interfaces APIs could allow a local attacker to gain elevated privileges on a vulnerable system. Description Microsoft Windows contains a vulnerability in the window management application programming interface API...