235 matches found
CVE-2010-1098
The ANI parser in Microsoft Windows before 7 on the x86 platform, as used in Internet Explorer and other applications, allows remote attackers to cause a denial of service memory and CPU consumption via a crafted biClrUsed value in the BITMAPINFO header of a .ANI file...
Code injection
The ANI parser in Microsoft Windows before 7 on the x86 platform, as used in Internet Explorer and other applications, allows remote attackers to cause a denial of service memory and CPU consumption via a crafted biClrUsed value in the BITMAPINFO header of a .ANI file...
CVE-2010-1098
The CVE-2010-1098 entry describes a denial-of-service flaw in the ANI parser found in Microsoft Windows prior to 7 on x86, used by Internet Explorer and other apps. A crafted biClrUsed value in the BITMAPINFO header of a .ANI file can cause memory and CPU exhaustion, leading to a DoS condition. A...
CVE-2010-1098
The ANI parser in Microsoft Windows before 7 on the x86 platform, as used in Internet Explorer and other applications, allows remote attackers to cause a denial of service memory and CPU consumption via a crafted biClrUsed value in the BITMAPINFO header of a .ANI file...
PT-2010-2814 · Microsoft · Windows +1
Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to 7 Description: The issue allows remote attackers to cause a denial of service, consuming memory and CPU, via a crafted biClrUsed value in the BITMAPINFO header of a .ANI file. This is related to the ANI...
Microsoft Windows .ani文件tagBITMAPINFOHEADER拒绝服务漏洞
BUGTRAQ ID: 38579 Microsoft Windows是微软发布的非常流行的操作系统。 ANI文件将动画光标的每一帧存储为文件中的打包位图，每个位图的BITMAPINFOHEADER中的每个DWORD biClrUsed成员都可能导致Windows API函数分配任意数量的字节，并向新分配的内存中拷贝进同样数量的数据。由于代码没有检查是否有上述数量的数据可用，这可能导致拷贝操作读过为ANI文件所分配内存的边界。 如果很小的ANI文件对biClrUsed指定了很大的值，内存拷贝操作就可能越界，进入未分配的内存区。IE等应用程序使用这些Windows...
Microsoft Windows XPVista - .ani tagBITMAPINFOHEADER Denial of Service
Microsoft Windows XPVista - .ani tagBITMAPINFOHEADER Denial of Service source: https://www.securityfocus.com/bid/38579/info Microsoft Windows is prone to a remote denial-of-service vulnerability when processing '.ani' files. Successful exploits will cause the vulnerable applications that use the...
Microsoft Windows XP/Vista - '.ani tagBITMAPINFOHEADER' Denial of Service
source: https://www.securityfocus.com/bid/38579/info Microsoft Windows is prone to a remote denial-of-service vulnerability when processing '.ani' files. Successful exploits will cause the vulnerable applications that use the affected APIs to crash or become unresponsive, denying service to...
MS Internet Explorer .ANI files handling Downloader Exploit (MS05-002)
No description provided by source. / Modified by Vertygo aka Ivanm [email protected] all credits goes to houseofdabus Berend-Jan Wever and to milw0rm/ / Added string.h /str0ke / / HOD-ms05002-ani-expl.c: 2005-01-10: PUBLIC v.0.2 Copyright c 2004-2005 houseofdabus. MS05-002 Microsoft Internet Explore...
MS Internet Explorer .ANI Remote Stack Overflow (0.2)
No description provided by source. !-- Changed location of InternetExploiter3.2.ani to point to sploits directory /str0ke -- HTML!-- ,sSSSs, Ss, Internet Exploiter 3 v0.2 SS" YS' 'Ss. .ANI stackoverflow PoC exploit iS' ,SS" Copyright C 2003, 2004 by Berend-Jan Wever. YS, .ss ,sY"...
Sql injection
SQL injection vulnerability in the Call Detail Record Postgres logging engine cdrpgsql in Asterisk 1.4.x before 1.4.15, 1.2.x before 1.2.25, B.x before B.2.3.4, and C.x before C.1.0-beta6 allows remote authenticated users to execute arbitrary SQL commands via 1 ANI and 2 DNIS arguments...
CVE-2007-6170
SQL injection vulnerability in the Call Detail Record Postgres logging engine cdrpgsql in Asterisk 1.4.x before 1.4.15, 1.2.x before 1.2.25, B.x before B.2.3.4, and C.x before C.1.0-beta6 allows remote authenticated users to execute arbitrary SQL commands via 1 ANI and 2 DNIS arguments...
AST-2007-026 - SQL Injection issue in cdr_pgsql
Asterisk Project Security Advisory - AST-2007-026 +------------------------------------------------------------------------+ | Product | Asterisk | |----------------------+-------------------------------------------------| | Summary | SQL Injection issue in cdrpgsql |...
Analysis of ANI intelligent network horse hung it-vulnerability warning-the black bar safety net
A thorough analysis of MS06014+MS06073+MS07017 intelligent network horse hanging Horse,the article is in breach of that can see,even a little problem,want to is unclear,and so learn again to analyze the next,article is nice,to see the figure you know! Today visit to http://www. fzlyl. cn/, found ...
Microsoft Windows - .ani GDI Remote Privilege Escalation (MS07-017)
Microsoft Windows - .ani GDI Remote Privilege Escalation MS07-017 MS Windows .ANI GDI Remote Elevation of Privilege Exploit MS07-017 https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/3804.zip 04262007-gdiremoteelevationprivilegeexploitms07017principal.zip...
MS Windows Explorer Unspecified .ANI File Denial of Service Exploit
No description provided by source. / MS Windows Explorer Unspecified .ANI File DoS Another .Ani bug that freezes Explorer if you open a folder that contains a crafted file. Tested against Win XP SP2 FR. Have Fun! Coded by Marsu [email protected] / include "stdio.h" include "stdlib.h"...
Microsoft Windows Explorer - '.ANI' File Denial of Service
/ MS Windows Explorer Unspecified .ANI File DoS Another .Ani bug that freezes Explorer if you open a folder that contains a crafted file. Tested against Win XP SP2 FR. Have Fun! Coded by Marsu / include "stdio.h" include "stdlib.h" unsigned char Aniheaders =...
devcode2.txt
/ version 0.5 Copyright c 2007 devcode ^^ D E V C O D E ^^ Windows .ANI LoadAniIcon Stack Overflow For Hardware DEP XP SP2 CVE-2007-1765 Description: A vulnerability has been identified in Microsoft Windows, which could be exploited by remote attackers to take complete control of an affected...