AOL 9.5 - Phobos.Playlist 'Import()' Remote Buffer Overflow (Metasploit)

aolphobosbof.rb AOL 9.5 Phobos.Playlist 'Import' Stack-based Buffer Overflow exploit for the Metasploit Framework Tested successfully on the following platforms: - AOL 9.5 Revision 4337.155 on Internet Explorer 7, Windows XP SP3 Phobos.dll version tested: File Version: 9.5.0.1 ClassID:...

AOL 9.5 - ActiveX Heap Spray

AOL 9.5 - ActiveX Heap Spray AOL 9.5 ActiveX 0day Exploit heap spray + AOL 9.5 ActiveX 0day Exploit heap spray + Author : Dzattacker + Discovered by: Hellcode Research http://www.hellcode.net + Reference: http://www.exploit-db.com/exploits/11190 + Tested on Windows Xp SP3 ,IE7 // win32exec - calc...

AOL 9.5 - ActiveX Heap Spray

AOL 9.5 ActiveX 0day Exploit heap spray + AOL 9.5 ActiveX 0day Exploit heap spray + Author : Dzattacker + Discovered by: Hellcode Research http://www.hellcode.net + Reference: http://www.exploit-db.com/exploits/11190 + Tested on Windows Xp SP3 ,IE7 // win32exec - calc shellcode =...

AOL 9.5 ActiveX Heap Overflow Vulnerability

Product: AOL 9.5 Vulnerability: ActiveX - Heap Overflow Discussion: Vulnerability is in Activex Control "CDDBControl.dll" Sending a string to BindToFile , triggering the vulnerability. Successful exploits allow remote attackers to execute arbitrary code. Debugger Results: fd0.1274: Access violati...

AOL 9.5 - ActiveX Heap Overflow

Product: AOL 9.5 Vulnerability: ActiveX - Heap Overflow Discussion: Vulnerability is in Activex Control "CDDBControl.dll" Sending a string to BindToFile , triggering the vulnerability. Successful exploitation allow remote attackers to execute arbitrary code. Credits: Celil 'karak0rsan' Unuver and...

AOL ActiveX buffer overflow

Buffer overflow in BindToFile method...

AOL 9.5 Heap Overflow

Product: AOL 9.5 Vulnerability: ActiveX - Heap Overflow Discussion: Vulnerability is in Activex Control "CDDBControl.dll" Sending a string to BindToFile , triggering the vulnerability. Successful exploitation allow remote attackers to execute arbitrary code. Credits: Celil 'karak0rsan' Unuver and...

AOL 9.5 - ActiveX Heap Overflow

AOL 9.5 - ActiveX Heap Overflow Product: AOL 9.5 Vulnerability: ActiveX - Heap Overflow Discussion: Vulnerability is in Activex Control "CDDBControl.dll" Sending a string to BindToFile , triggering the vulnerability. Successful exploitation allow remote attackers to execute arbitrary code. Credit...

AOL 9.5 ActiveX Heap Overflow Vulnerability

Exploit for unknown platform in category remote exploits =========================================== AOL 9.5 ActiveX Heap Overflow Vulnerability =========================================== Product: AOL 9.5 Vulnerability: ActiveX - Heap Overflow Discussion: Vulnerability is in Activex Control...

Gracenote CDDBControl - ActiveX Control ViewProfile Method Heap Buffer Overflow (PoC)

Gracenote CDDBControl - ActiveX Control ViewProfile Method Heap Buffer Overflow PoC source: https://www.securityfocus.com/bid/37834/info Gracenote CDDBControl is prone to a stack-based buffer-overflow vulnerability because the application fails to adequately check boundaries on user-supplied inpu...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in editprofile.php in Viscacha 0.8 Gold allow remote authenticated users to inject arbitrary web script or HTML via the 1 skype, 2 yahoo, 3 aol, 4 msn, or 5 jabber parameter in a profile2 action. NOTE: some of these details are obtained from third...

AOL Instant Messenger goaway Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'AOL Instant...

AIM Triton 1.0.4 CSeq Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'AIM Triton...

AOL Radio AmpX ActiveX Control ConvertFile() Buffer Overflow

require 'msf/core' class Metasploit3 'AOL Radio AmpX ActiveX Control ConvertFile Buffer Overflow', 'Description' = %q This module exploits a stack-based buffer overflow in AOL IWinAmpActiveX class AmpX.dll version 2.4.0.6 installed via AOL Radio website. By setting an overly long value to...

CentOS 4 / 5 : pidgin (CESA-2009:1536)

Updated pidgin packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on multiple...

RHEL 4 / 5 : pidgin (RHSA-2009:1536)

Updated pidgin packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on multiple...

AOL AIM sipXtapi.dll多个堆溢出漏洞

BUGTRAQ ID: 36849 AOL Instant Messenger是一款在线即时聊天工具。 AIM的SIP协议实现库（sipXtapi.dll）在解析RTCP发送方报告报文和RTP头时存在堆溢出漏洞。如果攻击者诱骗用户接受了视频聊天会话并向客户端发送了设置有畸形Extension Length值的RTP头或发送了恶意报文的话，就可以触发这些溢出，导致在客户端机器上执行任意指令。 AOL Instant Messenger 6.8 厂商补丁： AOL --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Moderate: Red Hat Security Advisory: pidgin security update

Updated pidgin packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on multiple...

AOL AIM 'sipXtapi.dll' Multiple Buffer Overflow Vulnerabilities

AOL AIM is affected by multiple buffer overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied data. Successful exploits may allow attackers to execute arbitrary code with the privileges of the user running the software or cause an application crash. C Tenab...

America Online (AOL) Detection (Windows SMB Login)

Detects the installed version of America Online AOL on Windows. The script logs in via smb, searches for America Online in the registry and gets the install location and extract version from the file. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a...