CVE-2014-0295

CVE-2014-0295 affects Microsoft .NET Framework 2.0 SP2 and 3.5.1 due to VsaVb7rt.dll not implementing ASLR, enabling remote code execution via a crafted website. Public sources note exploitation in the wild (Feb 2014). Kaspersky and OpenVAS entries corroborate that ASLR bypass is the core issue i...

CVE-2014-0295

VsaVb7rt.dll in Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not implement the ASLR protection mechanism, which makes it easier for remote attackers to execute arbitrary code via a crafted web site, as exploited in the wild in February 2014, aka "VSAVB7RT ASLR Vulnerability."...

VulnCheck KEV: CVE-2014-0295

VsaVb7rt.dll in Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not implement the ASLR protection mechanism, which makes it easier for remote attackers to execute arbitrary code via a crafted web site, as exploited in the wild in February 2014, aka "VSAVB7RT ASLR Vulnerability."...

Microsoft .NET Framework CVE-2014-0295 ASLR Security Bypass Vulnerability

Description Microsoft .NET Framework is prone to a security-bypass vulnerability. An attacker can leverage this issue to bypass certain security restrictions and execute arbitrary code by exploiting another vulnerability in the application. Technologies Affected Avaya Aura Conferencing 6.0 SP1...

Adrenalin Player 2.2.5.3 - .m3u Local Buffer Overflow (SEH) (ASLR + DEP Bypass)

Adrenalin Player 2.2.5.3 - .m3u Local Buffer Overflow SEH ASLR + DEP Bypass !/usr/bin env ruby Exploit Title: Adrenalin Player 2.2.5.3 .m3u SEH-Buffer Overflow ASLR+DEP Bypass Date: 3/2/2014 Exploit Author: Muhamad Fadzil Ramli Vendor HomePage:...

Adrenalin Player 2.2.5.3 - '.m3u' Local Buffer Overflow (SEH) (ASLR + DEP Bypass)

!/usr/bin env ruby Exploit Title: Adrenalin Player 2.2.5.3 .m3u SEH-Buffer Overflow ASLR+DEP Bypass Date: 3/2/2014 Exploit Author: Muhamad Fadzil Ramli Vendor HomePage: http://software.naver.com/software/summary.nhn?softwareId=MFS100099 Software Link:...

MS12-027 - Office 2010 DEP/ASLR Bypass Exploit

This module target Office 2010. The DEP/ASLR bypass on Office 2010 is done with article written by Anonymous. The ROP chain uses "msgr3en.dll", which will load after about 400 pages got load. This file is part of the Metasploit Framework and may be subject to redistribution and commercial...

CVE-2014-0492

Adobe Flash Player before 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows and Mac OS X and before 11.2.202.335 on Linux, Adobe AIR before 4.0.0.1390, Adobe AIR SDK before 4.0.0.1390, and Adobe AIR SDK & Compiler before 4.0.0.1390 allow attackers to defeat the ASLR protection...

CVE-2014-0492

Adobe Flash Player before 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows and Mac OS X and before 11.2.202.335 on Linux, Adobe AIR before 4.0.0.1390, Adobe AIR SDK before 4.0.0.1390, and Adobe AIR SDK & Compiler before 4.0.0.1390 allow attackers to defeat the ASLR protection...

Design/Logic Flaw

Adobe Flash Player before 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows and Mac OS X and before 11.2.202.335 on Linux, Adobe AIR before 4.0.0.1390, Adobe AIR SDK before 4.0.0.1390, and Adobe AIR SDK & Compiler before 4.0.0.1390 allow attackers to defeat the ASLR protection...

CVE-2014-0492

Adobe Flash Player before 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows and Mac OS X and before 11.2.202.335 on Linux, Adobe AIR before 4.0.0.1390, Adobe AIR SDK before 4.0.0.1390, and Adobe AIR SDK & Compiler before 4.0.0.1390 allow attackers to defeat the ASLR protection...

CVE-2014-0492

CVE-2014-0492 affects Adobe Flash Player and Adobe AIR components. The issue stems from an “address leak” that defeats ASLR, impacting Flash Player prior to 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows/Mac, and prior to 11.2.202.335 on Linux, as well as Adobe AIR before 4.0.0.13...

CVE-2013-5057

hxds.dll in Microsoft Office 2007 SP3 and 2010 SP1 and SP2 does not implement the ASLR protection mechanism, which makes it easier for remote attackers to execute arbitrary code via a crafted COM component on a web site that is visited with Internet Explorer, as exploited in the wild in December...

Design/Logic Flaw

hxds.dll in Microsoft Office 2007 SP3 and 2010 SP1 and SP2 does not implement the ASLR protection mechanism, which makes it easier for remote attackers to execute arbitrary code via a crafted COM component on a web site that is visited with Internet Explorer, as exploited in the wild in December...

CVE-2013-5057

The CVE-2013-5057 issue affects hxds.dll in Microsoft Office 2007 SP3 and Office 2010 SP1/SP2. The root cause is that hxds.dll does not implement ASLR, enabling remote attackers to execute arbitrary code via a crafted COM component on a web site viewed with Internet Explorer; this was observed in...

Microsoft Office Shared Component Security Bypass Vulnerability (2905238)

This host is missing an important security update according to Microsoft Bulletin MS13-106. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2013-5057

hxds.dll in Microsoft Office 2007 SP3 and 2010 SP1 and SP2 does not implement the ASLR protection mechanism, which makes it easier for remote attackers to execute arbitrary code via a crafted COM component on a web site that is visited with Internet Explorer, as exploited in the wild in December...

Microsoft Office Shared Component Security Bypass Vulnerability (2905238)

This host is missing an important security update according to Microsoft Bulletin MS13-106. OpenVAS Vulnerability Test $Id: secpodms13-106.nasl 6086 2017-05-09 09:03:30Z teissa $ Microsoft Office Shared Component Security Bypass Vulnerability 2905238 Authors: Antu Sanadi Copyright: Copyright C 20...

December 2013 Microsoft Patch Tuesday Security Updates

One zero-day down, one to go. As expected, Microsoft did today patch a zero-day in its GDI+ graphics component MS13-096 reported more than a month ago after exploits were spotted in the wild. The fix was one of 11 security bulletins—five critical—released as part of the December 2013 Patch Tuesda...

VulnCheck KEV: CVE-2013-5057

hxds.dll in Microsoft Office 2007 SP3 and 2010 SP1 and SP2 does not implement the ASLR protection mechanism, which makes it easier for remote attackers to execute arbitrary code via a crafted COM component on a web site that is visited with Internet Explorer, as exploited in the wild in...