621 matches found
Immunity Canvas: ANI_CURSOR
Name| anicursor ---|--- CVE| CVE-2007-0038 Exploit Pack| CANVAS Description| Windows Animated Cursor Overflow MS07-017 Notes| References: http://www.determina.com/security.research/vulnerabilities/ani-header.html CVE Name: CVE-2007-0038 VENDOR: Microsoft MSADV: MS07-017 VersionsAffected:...
CVE-2007-0038
A stack-based buffer overflow exists in the animated cursor code of Microsoft Windows 2000 SP4 through Vista . The vulnerability is triggered by providing a large length value in the second (or later) anih block of a RIFF .ANI, .cur, or .ico file , leading to memory corruption when processing cur...
VulnCheck KEV: CVE-2007-1765
Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service persistent reboot via a malformed ANI file, which results in memory corruption when processing cursors, animated cursors, and icons, a similar issue...
Microsoft Security Advisory (935423) Vulnerability in Windows Animated Cursor Handling
Microsoft Security Advisory 935423 Vulnerability in Windows Animated Cursor Handling Published: March 29, 2007 Microsoft is investigating new public reports of attacks exploiting a vulnerability in the way Microsoft Windows handles animated cursor .ani files. In order for this attack to be carrie...
CVE-2007-0038: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service persistent reboot via a large length value in the second or later anih block of a RIFF .ANI, cur, or .ico file, which...
Microsoft Windows animated cursor stack buffer overflow
Overview Microsoft Windows contains a stack buffer overflow in the handling of animated cursor files. This vulnerability may allow a remote attacker to execute arbitrary code or cause a denial-of-service condition. Description Animated cursor files .ani contain animated graphics for icons and...
CVE-2006-6541
Animated Smiley Generator is affected by a PHP remote file inclusion issue in signer/final.php, exploitable via a URL in the smiley parameter. The vulnerability arises in warez distributions; vendor-disputed claim suggests legitimate developer-provided software may be unaffected. Affected version...
CVE-2006-6541: Undefined Security Weakness
PHP remote file inclusion vulnerability in signer/final.php in warez distributions of Animated Smiley Generator allows remote attackers to execute arbitrary PHP code via a URL in the smiley parameter. NOTE: the vendor disputes this issue, stating that only Warez versions of Animated Smiley...
asg-rfi.txt
LiderHack.Org & Trtekforum.com script name : Animated Smiley Generator Version : All script sites : http://smileygenerator.us Dork : "Smileygenerator" Risk : High Found By : St@rExT Vulnerable file :final.php Error code : require"$smiley/cmd.php"; Exploit:...
Animated Smiley Generator File Include Vul.
LiderHack.Org & Trtekforum.com script name : Animated Smiley Generator Version : All script sites : http://smileygenerator.us Dork : "Smileygenerator" Risk : High Found By : St@rExT Vulnerable file :final.php Error code : require"$smiley/cmd.php"; Exploit:...
CVE-2005-0416
The Windows Animated Cursor ANI capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allows remote attackers to execute arbitrary code via the AnimationHeaderBlock length field, which leads to a stack-based buffer overflow...
CVE-2005-0416
The Windows Animated Cursor ANI capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allows remote attackers to execute arbitrary code via the AnimationHeaderBlock length field, which leads to a stack-based buffer overflow...
CVE-2005-0416: Undefined Security Weakness
The Windows Animated Cursor ANI capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allows remote attackers to execute arbitrary code via the AnimationHeaderBlock length field, which leads to a stack-based buffer overflow...
Microsoft Windows kernel vulnerable to a denial-of-service condition via animated cursor (.ani) frame number
Overview A vulnerability exists in the way the Microsoft Window's kernel processes animated cursor .ani files with a frame number set to zero. Exploitation of this vulnerability may allow a remote attacker to cause a denial-of-service condition. Description A vulnerability exists in the way the...
Microsoft Windows kernel vulnerable to denial-of-service condition via animated cursor (.ani) rate number
Overview A vulnerability exists in the way the Microsoft Windows kernel processes animated cursor .ani files with a rate number set to zero. Exploitation of this vulnerability may allow a remote attacker to cause a denial-of-service condition. Description A vulnerability exists in the way the...
CVE-2004-1305
The Windows Animated Cursor ANI capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via 1 the frame number set to zero, which causes an invalid memory address to be used and leads to a kernel crash, or 2...
CVE-2004-1305: Undefined Security Weakness
The Windows Animated Cursor ANI capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via 1 the frame number set to zero, which causes an invalid memory address to be used and leads to a kernel crash, or 2...
CVE-2004-0999
zgv 5.5.3 allows remote attackers to cause a denial of service application crash via segmentation fault via crafted multiple-image animated GIF images...