Microsoft WinVerifyTrust Signature Validation Vulnerability (2893294)

This host is missing an critical security update according to Microsoft Bulletin MS13-098. OpenVAS Vulnerability Test $Id: secpodms13-098.nasl 6104 2017-05-11 09:03:48Z teissa $ Microsoft WinVerifyTrust Signature Validation Vulnerability 2893294 Authors: Shashi Kiran N Copyright: Copyright C 2013...

CVE-2013-3878: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the LRPC client in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges by operating an LRPC server that sends a crafted LPC port message, aka "LRPC Client Buffer Overrun Vulnerability."...

CVE-2013-3899: Improper Input Validation

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate addresses, which allows local users to gain privileges via a crafted application, aka "Win32k Memory Corruption Vulnerability."...

MS Windows Scripting Runtime Object Library RCE Vulnerability (2909158)

This host is missing an critical security update according to Microsoft Bulletin MS13-099. OpenVAS Vulnerability Test $Id: secpodms13-099.nasl 33665 2013-12-11 08:15:24Z dec$ MS Windows Scripting Runtime Object Library RCE Vulnerability 2909158 Authors: Shakeel Copyright: Copyright C 2013 SecPod,...

December 2013 Microsoft Patch Tuesday Security Updates

One zero-day down, one to go. As expected, Microsoft did today patch a zero-day in its GDI+ graphics component MS13-096 reported more than a month ago after exploits were spotted in the wild. The fix was one of 11 security bulletins—five critical—released as part of the December 2013 Patch Tuesda...

PT-2013-4710

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Description The issue allows local users to gain privileges by operating an LRPC server that sends a crafted LPC port message. An elevation of privilege...

PT-2013-4727

Name of the Vulnerable Software and Affected Versions Windows XP versions SP2 through SP3 Windows Server 2003 version SP2 Description The issue is related to the Win32k.sys kernel-mode driver, which does not properly validate addresses in memory. This allows a local user to potentially gain...

GOM Player 2.2.53.5169 Buffer Overflow

!/usr/bin/perl Exploit Title: GOM Player 2.2.53.5169 - SEH Buffer Overflow .reg Date: 11-26-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software/Version: GOM Player 2.2.53.5169 Vendor Site: http://player.gomlab.com/eng/ Vulnerable Software Link:...

MS13-101: Description of the security update for Windows kernel-mode drivers: December 10, 2013

None None...

Microsoft Windows Kernel 'Win32k.sys' CVE-2013-3899 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of the affected...

Microsoft Windows Local Procedure Call CVE-2013-3878 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that affects the Local Procedure Call LPC component. A local attacker can exploit this issue to execute arbitrary code with elevated privileges. Successful exploits will result in the complete compromise of...

GOM Player 2.2.53.5169 - .reg Local Buffer Overflow (SEH)

GOM Player 2.2.53.5169 - .reg Local Buffer Overflow SEH !/usr/bin/perl Exploit Title: GOM Player 2.2.53.5169 - SEH Buffer Overflow .reg Date: 11-26-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software/Version: GOM Player 2.2.53.5169 Vendor Site:...

SNES9x ReRecording Emulator DLL Hijacking

Exploit Title: SNES9x ReRecording Emulator codecmpeg.dll - DLL Hijacking Vulnerability Date: 7 Desember 2013 Author: DevilScreaM Software Link: http://www.softpedia.com/dyn-postdownload.php?p=238598&t=4&i=1 Version: 1.x.x Vendor : http://www.snes9x.com/ Tested : Windows XP / Windows 7 gcc -shared...

GOM Player 2.2.53.5169 - '.reg' Local Buffer Overflow (SEH)

!/usr/bin/perl Exploit Title: GOM Player 2.2.53.5169 - SEH Buffer Overflow .reg Date: 11-26-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software/Version: GOM Player 2.2.53.5169 Vendor Site: http://player.gomlab.com/eng/ Vulnerable Software Link:...

TIFF Zero Day Patch Among December 2013 Microsoft updates

Microsoft will, next week, patch a zero-day vulnerability in its GDI+ graphics component being exploited in targeted attacks in the Middle East and Asia. The zero day has sat unpatched since it was made public Nov. 5; Microsoft did release a FixIt tool as a temporary mitigation. The patch is one ...

Steinberg MyMp3PRO 5.0 DEP Bypass With ROP

!/usr/bin/ruby Vendor: http://cjcity.ru/soft/35-8.html Software link: http://cjcity.ru/2/downloader.php?id=00000000559 print ''' Steinberg MyMp3PRO v5.0 DEP Bypass with ROP Version: 5.0 Build 5.1.0.21 Date found: 04.12.2013 Exploit Author: metacom Tested on:XP-Sp3-EN ''' sleep3 junk="\x41" 1044 R...

Steinberg MyMp3PRO 5.0 SEH Buffer Overflow

!/usr/bin/ruby Vendor: http://cjcity.ru/soft/35-8.html Software link: http://cjcity.ru/2/downloader.php?id=00000000559 print ''' Steinberg MyMp3PRO v5.0 SEH Buffer Overflow Version: 5.0 Build 5.1.0.21 Date found: 04.12.2013 Exploit Author: metacom Tested on:XP-Sp3-EN ''' sleep3 junk="\x41" 1056...

Microsoft Windows NDPROXY Local SYSTEM Privilege Escalation

NDPROXY Local SYSTEM privilege escalation http://www.offensive-security.com Tested on Windows XP SP3 http://www.offensive-security.com/vulndev/ndproxy-local-system-exploit-cve-2013-5065/ Original crash ... null pointer dereference Access violation - code c0000005 !!! second chance !!! 00000038 ??...

Hex Workshop 6.7 DLL Hijack

/ Exploit Title: Hex Workshop v 6.7 mfc100trk.dll - DLL Hijacking Vulnerability // Date: 29.11.2013 // Exploit Author: Akin Tosunlar / Ozgur Yurdusev // Software Link: http://www.download.com/Hex-Workshop/3000-23524-10004918.html?part=dl-HexWorksh&subj=dl&tag=button // Version: 6.7 Probably old...

Steinberg MyMp3PRO 5.0 Buffer Overflow

!/usr/bin/ruby Vendor: http://cjcity.ru/soft/35-8.html Software link: http://cjcity.ru/2/downloader.php?id=00000000559 print ''' Steinberg MyMp3PRO v5.0 Buffer Overflow Version: 5.0 Build 5.1.0.21 Date found: 04.12.2013 Exploit Author: metacom Tested on:XP-Sp3-EN ''' sleep3 junk="\x41" 1044...