385 matches found
IrfanView 3.99 - .ani Local Buffer Overflow (1)
IrfanView 3.99 - .ani Local Buffer Overflow 1 / IrfanView 3.99 .ANI File Buffer Overflow IrfanView is vulnerable to a buffer overflow when opening a crafted .ani file. The overflow occurs while it is creating a snapshot of the file. This exploit launches calc.exe. Tested against Win XP SP2 FR. Ha...
MS Windows Animated Cursor (.ANI) Local Buffer Overflow Exploit
No description provided by source. / MS Windows .ANI File Local Buffer Overflow Credits go to Trirat Puttaraksa cause his PoC inspired this source. devcode's exploit didnt work for me, so I made my own. This exploit launches calc.exe on a lot of app Word, Winamp, etc.... Turn off DEP to get it wo...
Microsoft Windows - Animated Cursor .ani Local Buffer Overflow
Microsoft Windows - Animated Cursor .ani Local Buffer Overflow / MS Windows .ANI File Local Buffer Overflow Credits go to Trirat Puttaraksa cause his PoC inspired this source. devcode's exploit didnt work for me, so I made my own. This exploit launches calc.exe on a lot of app Word, Winamp, etc...
Microsoft Windows - Animated Cursor '.ani' Local Buffer Overflow
/ MS Windows .ANI File Local Buffer Overflow Credits go to Trirat Puttaraksa cause his PoC inspired this source. devcode's exploit didnt work for me, so I made my own. This exploit launches calc.exe on a lot of app Word, Winamp, etc.... Turn off DEP to get it work on Explorer. Tested against Win ...
Ipswitch WS_FTP 5.05 - Server Manager Local Site Buffer Overflow
/ Ipswitch WSFTP 5.05 Server Manager Local Site Buffer Overflow There's a buffer overflow in iftpmgr.exe that can be triggered by registering a long site command. The result is then saved in the registry and every time the group is checked the bug appears. This exploit launches calc.exe. Tested...
IrfanView 3.99 - '.ani' Local Buffer Overflow (1)
/ IrfanView 3.99 .ANI File Buffer Overflow IrfanView is vulnerable to a buffer overflow when opening a crafted .ani file. The overflow occurs while it is creating a snapshot of the file. This exploit launches calc.exe. Tested against Win XP SP2 FR. Have Fun! Coded and discovered by Marsu Note: th...
Ipswitch WS_FTP 5.05 - Server Manager Local Site Buffer Overflow
Ipswitch WSFTP 5.05 - Server Manager Local Site Buffer Overflow / Ipswitch WSFTP 5.05 Server Manager Local Site Buffer Overflow There's a buffer overflow in iftpmgr.exe that can be triggered by registering a long site command. The result is then saved in the registry and every time the group is...
MS Windows XP/Vista Animated Cursor (.ANI) Remote Overflow Exploit
No description provided by source. ..:: jamikazu presents ::.. Windows Animated Cursor Handling Exploit 0day Works on fully patched Windows Vista I think it is first real remote code execution exploit on vista = Tested on: Windows Vista Enterprise Version 6.0 Build 6000 default installation and U...
MS Windows XP Animated Cursor (.ANI) Remote Overflow Exploit 2
No description provided by source. Microsoft ANI Buffer Overflow Exploit Author: Trirat Puttaraksa http://sf-freedom.blogspot.com Tested on: Windows XP SP2 fully patched + IE 6 SP2 For educational purpose only There are many confuses about this vulnerability. Someone said that this could not be...
IrfanView 3.99 (.ANI File) Local Buffer Overflow Exploit
Exploit for unknown platform in category local exploits ======================================================== IrfanView 3.99 .ANI File Local Buffer Overflow Exploit ======================================================== / IrfanView 3.99 .ANI File Buffer Overflow IrfanView is vulnerable to a...
irfanview-ani.txt
/ IrfanView 3.99 .ANI File Buffer Overflow IrfanView is vulnerable to a buffer overflow when opening a crafted .ani file. The overflow occurs while it is creating a snapshot of the file. This exploit launches calc.exe. Tested against Win XP SP2 FR. Have Fun! Coded and discovered by Marsu Note: th...
Microsoft Windows XPVista - Animated Cursor .ani Remote Overflow
Microsoft Windows XPVista - Animated Cursor .ani Remote Overflow ..:: jamikazu presents ::.. Windows Animated Cursor Handling Exploit 0day Works on fully patched Windows Vista I think it is first real remote code execution exploit on vista = Tested on: Windows Vista Enterprise Version 6.0 Build...
Microsoft Windows XP/Vista - Animated Cursor '.ani' Remote Overflow
..:: jamikazu presents ::.. Windows Animated Cursor Handling Exploit 0day Works on fully patched Windows Vista I think it is first real remote code execution exploit on vista = Tested on: Windows Vista Enterprise Version 6.0 Build 6000 default installation and UAC enabled Windows Vista Ultimate...
MS Internet Explorer Recordset Double Free Memory Exploit (MS07-009)
No description provided by source. HTML !-- Microsoft Internet Explorer ADODB.Recordset Double Free Memory Exploit ms07-009. Review: This code exploit "double free error" in msado15.dll NextRecordset function. As a result of double freeing of same string, rewriting of Heap Control Block ...
ms07-009-sploit.txt
//------------------Replace with your code-----------------------// var Shellcode =...
Microsoft Internet Explorer - Recordset Double-Free Memory (MS07-009)
//------------------Replace with your code-----------------------// var Shellcode =...
newsreactor-2.txt
/ NewsReactor 20070220 Article Grabbing Remote Buffer Overflow Exploit 2 Check the other advisory for technical details. This exploit connects to your newsgroups provider and posts a crafted article. Ask your victim to grab it to trigger the bug and execute calc.exe. Return address should work on...
newsreactor-1.txt
/ NewsReactor 20070220 Article Grabbing Remote Buffer Overflow Exploit 1 There is remote buffer overflow in NewsReactor 20070220 that can be triggered by grabbing articles that contain an overly long file name. To exploit, convince someone to set his newsgroup server to your ip:119 and ask him to...