Microsoft Windows EOT Font Table Directory Integer Overflow

$Id: ms09065eotinteger.rb 7470 2009-11-11 23:48:53Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

Avast aswRdr.sys Kernel Pool Corruption and Local Privilege Escalation

http://www.efblog.net/2009/11/avast-aswrdrsys-kernel-pool-corruption.html =============Avast aswRdr.sys Kernel Pool Corruption and Local Privilege Escalation================ Authors: Giuseppe 'Evilcry' Bonfa' AbdulAziz Hariri E-Mail: evilcry AT GMAIL DOT COM Website: http://evilcry.netsons.org...

Kaspersky Anti-Virus 2010 <= 9.0.0.463 pointer dereference vulnerability

/ Program : Kaspersky Anti-Virus 2010 9.0.0.463 Homepage : http://www.kaspersky.com Discovery : 2009/09/29 Author Contacted : 2009/10/01 Patch Updated : 2009/11/16 Found by : Heurs This Advisory : Heurs Contact : [email protected] //----- Application description The most trusted virus and...

Microsoft Windows 2000-2008 Embedded OpenType Font Engine Remote Code Execution

No description provided by source. $Id: ms09065eotinteger.rb 7470 2009-11-11 23:48:53Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

Microsoft Windows EOT Font Table Directory Integer Overflow

This module exploits an integer overflow flaw in the Microsoft Windows Embedded OpenType font parsing code located in win32k.sys. Since the kernel itself parses embedded web fonts, it is possible to trigger a BSoD from a normal web page when viewed with Internet Explorer. Module Options msf use...

NSFOCUS SA2009-03 : Windows Kernel Malformed PE File Remote DoS Vulnerability

NSFOCUS Security Advisory SA2009-03 Windows Kernel Malformed PE File Remote DoS Vulnerability Release Date: 2009-10-16 CVE ID: CVE-2009-2516 http://www.nsfocus.com/en/advisories/0903.html Affected system: ============== Microsoft Windows XP Microsoft Windows 2000 Microsoft Windows 2003 Microsoft...

Avast 4.8.1351.0 Privilege Escalation

Source: https://www.evilfingers.com/advisory/Advisory/AvastaswMon2.syskernelmemorycorruptionandLocalPrivilegeEscalation.php -----------Avast aswMon2.sys kernel memory corruption and Local Privilege Escalation--------- Author: Giuseppe 'Evilcry' Bonfa' E-Mail: evilcry AT GMAIL DOT COM Website:...

Avast aswMon2.sys kernel memory corruption and Local Privilege Escalation.

Source: https://www.evilfingers.com/advisory/Advisory/AvastaswMon2.syskernelmemorycorruptionandLocalPrivilegeEscalation.php -----------Avast aswMon2.sys kernel memory corruption and Local Privilege Escalation--------- Author: Giuseppe 'Evilcry' Bonfa' E-Mail: evilcry AT GMAIL DOT COMbr Website:...

Windows Vista/7 SMB2.0 Negotiate Protocol Request Remote BSOD VULNERABILITY

No description provided by source. ============================================= - Release date: September 7th, 2009 - Discovered by: Laurent Gaffié - Severity: Medium/High ============================================= I. VULNERABILITY ------------------------- Windows Vista/7 : SMB2.0 NEGOTIATE...

Lame Windows Vista / 7 / 2k8 SMB 2.0 Blue Screen Of Death

\n"; $host = $argv1; $payload = "\x00\x00\x00\x90". "\xff\x53\x4d\x42". "\x72\x00\x00\x00". "\x00\x18\x53\xc8". "\x00\x26". "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xfe". "\x00\x00\x00\x00\x00\x6d\x00\x02\x50\x43\x20\x4e\x45\x54"...

Multiple RDP Connections BSOD DOS

Creating multiple RDP connection at the same time causes Windows to Blue Screen. Here is the Proof of Concept code. for /L i in 1,1,20 do mstsc /v:127.0.0.i It does work on Windows 7 and some Vista installations. -Tim Medin...

TheGreenBow VPN Client tgbvpn.sys Local DoS Exploit

No description provided by source. Author: Giuseppe 'Evilcry' Bonfa' E-Mail: evilcry AT GMAIL DOT COM Website: http://evilcry.netsons.org http://evilcodecave.blogspot.com http://evilcodecave.wordpress.com http://evilfingers.com http://malwareAnalytics.com under construction Release Date: 15/08/20...

TheGreenBow VPN Client tgbvpn.sys Local DoS Exploit

Exploit for unknown platform in category dos / poc =================================================== TheGreenBow VPN Client tgbvpn.sys Local DoS Exploit =================================================== Author: Giuseppe 'Evilcry' Bonfa' Release Date: 15/08/2009...

TheGreenBow VPN Client - tgbvpn.sys Local Denial of Service

TheGreenBow VPN Client - tgbvpn.sys Local Denial of Service Author: Giuseppe 'Evilcry' Bonfa' E-Mail: evilcry AT GMAIL DOT COM Website: http://evilcry.netsons.org http://evilcodecave.blogspot.com http://evilcodecave.wordpress.com http://evilfingers.com http://malwareAnalytics.com under constructi...

TheGreenBow VPN Client - 'tgbvpn.sys' Local Denial of Service

Author: Giuseppe 'Evilcry' Bonfa' E-Mail: evilcry AT GMAIL DOT COM Website: http://evilcry.netsons.org http://evilcodecave.blogspot.com http://evilcodecave.wordpress.com http://evilfingers.com http://malwareAnalytics.com under construction Release Date: 15/08/2009...

TheGreenBow VPN Denial Of Service

Original Advisory Link: https://www.evilfingers.com/advisory/Advisory/TheGreenBowVPNClienttgbvpn.sysDoS.php ++++++++++++++++++++++++++++++++++++++++++++++++++++ -----------TheGreenBow VPN Client tgbvpn.sys DoS and Potential Local Privilege Escalation--------- Author: Giuseppe 'Evilcry' Bonfa'...

MS Windows 2003 (EOT File) BSOD Crash Exploit

No description provided by source. MS Windows 2003 EOT File BSOD Crash Exploit author: webDEViL http://milw0rm.com/sploits/2009-wwbsod.zip http://sebug.net/local/2009-exploits/0908-exploits/2009-wwbsod.zip...

MS Windows 2003 (EOT File) BSOD Crash Exploit

Exploit for unknown platform in category dos / poc ============================================= MS Windows 2003 EOT File BSOD Crash Exploit ============================================= MS Windows 2003 EOT File BSOD Crash Exploit author: webDEViL http://inj3ct0r.com/sploits/6962.zip 0day.today...

WINDOWS 7 RC 7100 GDI驱动Win32k.sys内核D.O.S漏洞

Win32k.sys是WINDOWS的GDI驱动程序，包含大量复杂的图形界面处理，由于其中大量代码是从WIN3.1中修改过来，因此成了WINDOWS漏洞多发之地。 这个漏洞主要是因为Windows 7 在其NtUserGetDc/NtUserGetDcEx函数中（也许不仅仅是这两个函数）不正确地使用了共享临界锁，导致了任何权限下的GDI程序可以引发内核BSOD，从而进行DOS攻击. =============== 在WINDOWS VISTA中，在这两个函数进入前，会调用UserEnterUserCirtSec，进入临界区，同时会将gptiCurrent设置为当前线程的WIN32THRE...

PGP Desktop 9.0.6 Denial Of Service - ZeroDay

--------------------------------------------------- Advisory: PGP Desktop 9.0.6 Denial Of Service Vulnerability. Version Affected: PGP Desktop 9.0.6 Build 6060 other version could be affected Component Affected: PGPwded.sys Release Date: Release Date. 23 December ,2008 Description: PGP Desktop 's...