Microsoft Windows 2000多个COM对象实例化内存破坏漏洞

Microsoft Windows是微软发布的非常流行的操作系统。 在Windows 2000上当Internet Explorer试图将ciodm.dll、MyInfo.dll、msdxm.ocx、Creator.dll（Media player 9）COM对象实例化为ActiveX控件时，就可能破坏系统内存，导致拒绝服务或执行任意代码。 Microsoft Internet Explorer 6.0 SP1 - Microsoft Windows 2000 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Microsoft Internet Explorer多个COM对象颜色属性拒绝服务漏洞

Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer在处理多个COM对象（dxtmsft.dll/dxtmsft3.dll）的颜色属性输入方式时，如果将颜色属性设置为超长字符串的话，就会导致Internet Explorer崩溃。 Microsoft Internet Explorer 6.0 SP1 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.microsoft.com/windows/ie/default.asp ===============...

Microsoft IE CHTSKDIC.DLL COM对象实例化拒绝服务漏洞

Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer在试图将CHTSKDIC.DLL（Microsoft IME）COM对象实例化为ActiveX控件时可能会破坏系统内存，导致拒绝服务。 Microsoft Internet Explorer 6.0 SP2 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Microsoft IE IMSKDIC.DLL COM对象实例化拒绝服务漏洞

Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer在试图将IMSKDIC.DLL（Microsoft IME）COM对象实例化为ActiveX控件时可能会破坏系统内存，导致拒绝服务。 Microsoft Internet Explorer 6.0 SP2 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Microsoft Windows Shell COM对象处理远程代码执行漏洞（MS06-015）

Microsoft Windows是微软发布的非常流行的操作系统。 Windows资源管理器处理COM对象的方式存在远程代码执行漏洞，成功利用这个漏洞的攻击者可以完全控制受影响系统。 攻击者必须诱骗用户访问强制到远程文件服务器连接的站点，然后这个远程文件服务器就可以导致Windows资源管理器失效，可能允许代码执行。 Microsoft Windows XP SP2 Microsoft Windows XP SP1 Microsoft Windows Server 2003 SP1 Microsoft Windows Server 2003 Microsoft Windows ME...

Internet Explorer COM Object Heap Overflow Download Exec Exp

No description provided by source. / ----------------------------------------------------------------------- daxctle2.c - Internet Explorer COM Object Heap Overflow Download Exec Exploit !!! 0day !!! Public Version !!! Copyright C 2006 XSec All Rights Reserved. Author : nop : nopxsec.org :...

Internet Explorer VML Rect Fill Method Buffer Overflow (MS06-055; CVE-2006-4868)

Microsoft Internet Explorer is the most widely used Internet browser. Microsoft Internet Explorer fails to handle Vector Markup Language VML tags. VML is a set of XML tags for drawing vector graphics. A remote attacker may trigger this vulnerability to execute arbitrary code on the target system...

Microsoft Internet Explorer - COM Object Remote Heap Overflow

Microsoft Internet Explorer - COM Object Remote Heap Overflow / ----------------------------------------------------------------------- daxctle2.c - Internet Explorer COM Object Heap Overflow Download Exec Exploit !!! 0day !!! Public Version !!! Copyright C 2006 XSec All Rights Reserved. Author :...

Microsoft Internet Explorer - COM Object Remote Heap Overflow

/ ----------------------------------------------------------------------- daxctle2.c - Internet Explorer COM Object Heap Overflow Download Exec Exploit !!! 0day !!! Public Version !!! Copyright C 2006 XSec All Rights Reserved. Author : nop : nopxsec.org : http://www.xsec.org : Tested : Windows 20...

Microsoft Internet Explorer - Multiple COM Object Color Property Denial of Service Vulnerabilities

Microsoft Internet Explorer - Multiple COM Object Color Property Denial of Service Vulnerabilities var i =0; var Objects = new Array // CLSID: 3A04D93B-1EDD-4f3f-A375-A03EC19572C4 // Info: MaskFilter // ProgID: DXImageTransform.Microsoft.MaskFilter.1 // InprocServer32: C:\WINNT\system32\dxtmsft.d...

Microsoft Internet Explorer - Multiple COM Object Color Property Denial of Service Vulnerabilities

var i =0; var Objects = new Array // CLSID: 3A04D93B-1EDD-4f3f-A375-A03EC19572C4 // Info: MaskFilter // ProgID: DXImageTransform.Microsoft.MaskFilter.1 // InprocServer32: C:\WINNT\system32\dxtmsft.dll "DXImageTransform.Microsoft.MaskFilter.1", // CLSID: 421516C1-3CF8-11D2-952A-00C04FA34F05 // Inf...

Microsoft Windows Server 2000 - Multiple COM Object Instantiation Code Execution Vulnerabilities

source: https://www.securityfocus.com/bid/19636/info Microsoft Windows 2000 is prone to multiple memory-corruption vulnerabilities that are related to the instantiation of COM objects. These issues may be remotely triggered through Internet Explorer. The vulnerabilities arise because of the way...

MS Internet Explorer Multiple COM Object Color Property DoS

No description provided by source. !-- // Internet Explorer Multiple COM Object Color Property DoS Vulnerability // tested on Windows 2000 SP4/XP SP2 // http://www.xsec.org // nop nopxsec.org --! html head title/title /head /body script var i =0; var Objects = new Array // CLSID:...

Microsoft Internet Explorer 6 - Multiple COM Object Color Property Denial of Service Vulnerabilities

Microsoft Internet Explorer 6 - Multiple COM Object Color Property Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/19640/info Microsoft Internet Explorer is prone to multiple denial-of-service vulnerabilities that occur when instantiating COM objects. The vulnerabiliti...

MS Internet Explorer Multiple COM Object Color Property DoS

Exploit for unknown platform in category dos / poc =========================================================== MS Internet Explorer Multiple COM Object Color Property DoS =========================================================== var i =0; var Objects = new Array // CLSID:...

Microsoft Windows Server 2000 - Multiple COM Object Instantiation Code Execution Vulnerabilities

Microsoft Windows Server 2000 - Multiple COM Object Instantiation Code Execution Vulnerabilities source: https://www.securityfocus.com/bid/19636/info Microsoft Windows 2000 is prone to multiple memory-corruption vulnerabilities that are related to the instantiation of COM objects. These issues ma...

Microsoft Internet Explorer 6 - Multiple COM Object Color Property Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/19640/info Microsoft Internet Explorer is prone to multiple denial-of-service vulnerabilities that occur when instantiating COM objects. The vulnerabilities arise because of the way Internet Explorer tries to instantiate certain COM objects as ActiveX...

CVE-2006-4219: Undefined Security Weakness

The Terminal Services COM object tsuserex.dll allows remote attackers to cause a denial of service crash and possibly execute arbitrary code by instantiating it as an ActiveX object in Internet Explorer 6.0 SP1 on Microsoft Windows 2003 EE SP1 CN...

VMware 5.5.1 - COM Object Arbitrary Partition Table Delete

VMware 5.5.1 - COM Object Arbitrary Partition Table Delete http://www.xsec.org Overview: On running windows system, you can't delete, format and change system dirver. \ VMware register a COM Object use for Virtual Disk, but it's very danger. \ I don't know how to name this issue. If you allow...

VMware 5.5.1 COM Object Arbitrary Partition Table Delete Exploit

Exploit for unknown platform in category dos / poc ================================================================ VMware 5.5.1 COM Object Arbitrary Partition Table Delete Exploit ================================================================ http://www.xsec.org Overview: On running windows...