ClamAV CHM File Handling Integer Overflow (CVE-2005-2450)

Clam AntiVirus is an open source product that provides anti-virus scanning utilities and an anti-virus library. The product is capable of decoding several file formats in order to be able to scan them for viruses. One of such formats is the Microsoft compiled help files, as known as CHM. There...

Microsoft Help Files (.CHM): 'Locked File' Feature Bypass

No description provided by source. Changes made with Windows XP introduced additional origin validation for files downloaded from the Internet when saved to an NTFS volume. This 'feature' is present in Windows XP, Vista and 7. When a user downloads a .CHM file using Internet Explorer or another...

Microsoft Windows CHM files protection bypass

It's possible to bypass CHM file locking protection for file downloaded from Internet...

Microsoft Help Files (.CHM): 'Locked File' Feature Bypass

, , . .' '. ', . , '. , ., , / / / ==/ / / / / / / | Y Y / /| / /||| / / /.-. / /:wq x.0 '=.|w|.=' ='"=. Microsoft Help Files .CHM: 'Locked File' Bypass Versions Affected: Windows XP, Windows Vista, Windows 7 pdf: http://www.security-assessment.com/files/advisories/WindowsLockedHelpFiles.pdf...

Microsoft Windows XP2000 - Help File Relative Path Remote Command Execution

Microsoft Windows XP2000 - Help File Relative Path Remote Command Execution source: https://www.securityfocus.com/bid/38661/info Microsoft Windows is prone to a remote command-execution vulnerability because it opens help files from unsafe locations. An attacker could exploit this issue by entici...

CA Products AV Engine CHM File Handling Denial of Service (CVE-2007-3875)

CA provides an anti-virus engine that is shared among multiple applications and products. The anti-virus engine is capable of scanning files stored in numerous archive format. One of these archive formats is the Microsoft compiled help files, as known as CHM. There exists a denial of service...

Microsoft Windows itss.dll CHM File Handling Heap Corruption (CVE-2006-2297)

Microsoft Windows operating systems contain numerous libraries that facilitate the processing of the many file formats that are recognized by standard Windows installations. One such file format is the Microsoft compiled help files, known as CHM. A vulnerability exists in the Microsoft Windows...

Microsoft HTML Help Compiler (hhc.exe) - Buffer Overflow (PoC)

Microsoft’s HTML Help Compiler hhc.exe is free tool to build Microsoft Compiled HTML Help .chm files. It is included within HTML Help Workshop and Visual Studio. The executable, hhc.exe, does not properly check the length of user-supplied command line arguments. It is possible to gain control of...

ClamAV AntiVirus CHM File Handling Denial of Service (CVE-2008-1389)

ClamAV AntiVirus is an open source product that provides anti-virus scanning utilities and an anti-virus library. The product is capable of handling Microsoft compiled help files, as known as CHM, to scan their internal items for viruses. A Denial of Service vulnerability exists in the ClamAV...

[SECURITY] Fedora 11 Update: chmsee-1.0.1-12.fc11

A gtk2 chm document viewer. It uses chmlib to extract files. It uses gecko to display pages. It supports displaying multilingual pages due to gecko. It features bookmarks and tabs. The tabs could be used to jump inside the chm file conveniently. Its UI is clean and handy, also is well localized. ...

Microsoft showHelp (MS04-023; CVE-2003-1041)

An HTML Help URI provides a link to a compiled help file .chm. When a user references this link, Windows will access the resource. To launch the Help URI with the local HTML Help Windows application, the method showHelp can be used. There is a vulnerability in the way Microsoft's HTML help system...

Mac OS X 10.5.7 (.CHM File) Local Finder.app Denial of Service Exploit

No description provided by source. !/usr/bin/env python import os; print """ Mac OS X 10.5.7 Local Finder.app DoS .CHM By: DrIDE and s0kket Greets to offsec Tested on OS X 10.5.7 This will most likely kill more than this version. \n"""; fname = rawinput" Enter the filename you would like to...

Mac OS X 10.5.7 .CHM Denial Of Service

!/usr/bin/env python import os; print """ Mac OS X 10.5.7 Local Finder.app DoS .CHM By: DrIDE and s0kket Greets to offsec Tested on OS X 10.5.7 This will most likely kill more than this version. \n"""; fname = rawinput" Enter the filename you would like to create:"; print " Creating Evil .CHM...

Mac OS X 10.5.7 (.CHM File) Local Finder.app Denial of Service Exploit

Exploit for unknown platform in category dos / poc ====================================================================== Mac OS X 10.5.7 .CHM File Local Finder.app Denial of Service Exploit ====================================================================== !/usr/bin/env python import os; pri...

[SECURITY] Fedora 11 Update: chmsee-1.0.1-10.fc11

A gtk2 chm document viewer. It uses chmlib to extract files. It uses gecko to display pages. It supports displaying multilingual pages due to gecko. It features bookmarks and tabs. The tabs could be used to jump inside the chm file conveniently. Its UI is clean and handy, also is well localized. ...

FlyHelp - .CHM Local Buffer Overflow (PoC)

FlyHelp - .CHM Local Buffer Overflow PoC / flyhelp.cpp FlyHelp .CHM File Buffer Overflo POC fl0 fl0w http://www.sploitz.10001mb.com / / C:\Documents and Settings\Stefan\Desktop\New Folder1flyhelp.exe C:\Documents and Settings\Stefan\Desktop\New Folder1flyhelp.exe -file test FlyHelp .CHM File Buff...

FlyHelp Buffer Overflow

/ flyhelp.cpp FlyHelp .CHM File Buffer Overflo POC fl0 fl0w http://www.sploitz.10001mb.com / / C:\Documents and Settings\Stefan\Desktop\New Folder1flyhelp.exe C:\Documents and Settings\Stefan\Desktop\New Folder1flyhelp.exe -file test FlyHelp .CHM File Buffer Overflo POC Usage is flyhelp.exe -file...

FlyHelp (.CHM File) Local Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ============================================= FlyHelp .CHM File Local Buffer Overflow PoC ============================================= / flyhelp.cpp FlyHelp .CHM File Buffer Overflo POC fl0 fl0w / / C:\Documents and Settings\Stefan\Desktop\New...

FlyHelp (.CHM File) Local Buffer Overflow PoC

No description provided by source. / Name flyhelp.cpp FlyHelp .CHM File Buffer Overflo POC Credits fl0 fl0w Website http://www.sploitz.10001mb.com / / DEMO C:\Documents and Settings\Stefan\Desktop\New Folder1flyhelp.exe C:\Documents and Settings\Stefan\Desktop\New Folder1flyhelp.exe -file test...

FlyHelp - '.CHM' Local Buffer Overflow (PoC)

/ flyhelp.cpp FlyHelp .CHM File Buffer Overflo POC fl0 fl0w http://www.sploitz.10001mb.com / / C:\Documents and Settings\Stefan\Desktop\New Folder1flyhelp.exe C:\Documents and Settings\Stefan\Desktop\New Folder1flyhelp.exe -file test FlyHelp .CHM File Buffer Overflo POC Usage is flyhelp.exe -file...