KLA11438 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges, execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in...

CVE-2017-10764

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at COMCTL32!TabOnGetItem+0x000000000000002f."...

CVE-2017-10760

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at COMCTL32!SetStatusText+0x0000000000000029."...

CVE-2017-10764

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at COMCTL32!TabOnGetItem+0x000000000000002f."...

MY-MP3-Player-3.0-m3u

written to bypass OptIn/OptOut DEP policy tested on windows xp sp3 running in virtualbox import sys calc.exe - 1014 bytes of space for shellcode shellcode = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49" "\x49\x51\x5a\x56\x54\x58\x36\x33\x30\x56\x58\x34\x41\x30\x42\x36"...

Integer overflow

The DSAInsertItem function in Comctl32.dll in the Windows common control library in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly allocate memory, which allo...

CVE-2013-3195

The DSAInsertItem function in Comctl32.dll in the Windows common control library in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly allocate memory, which allo...

CVE-2013-3195

The CVE-2013-3195 vulnerability affects the Windows common control library, specifically the DSA_InsertItem function in Comctl32.dll. It describes an integer/ memory allocation overflow that could allow remote code execution when a crafted value is supplied to an ASP.NET web application, affectin...

Microsoft Comctl32 Integer Overflow Vulnerability (2864058)

This host is missing an critical security update according to Microsoft Bulletin MS13-083. OpenVAS Vulnerability Test $Id: secpodms13-083.nasl 5351 2017-02-20 08:03:12Z mwiegand $ Microsoft Comctl32 Integer Overflow Vulnerability 2864058 Authors: Shashi Kiran N Copyright: Copyright c 2013 SecPod,...

Microsoft Windows multiple security vulnerabilities

.Net code execution, comctl32.dll integer overflow...

Microsoft Comctl32 Integer Overflow Vulnerability (2864058)

This host is missing a critical security update according to Microsoft Bulletin MS13-083. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

PT-2013-4219 · Microsoft · Windows Xp +10

Name of the Vulnerable Software and Affected Versions: Windows common control library versions in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT Description: A remote code...

HCView WriteAV Crash Proof Of Concept

!/usr/bin/perl Hardcoreview WriteAV Arbitrary Code Execution Author: Jean Pascal Pereira Vendor URI: http://sourceforge.net/projects/hardcoreview/ Vendor Description: Image browser. Designed and created for profesional and amature watching image files. All kind of image files ; . Support .jpg,...

MY MP3 Player 3.0 - '.m3u' DEP Bypass

written to bypass OptIn/OptOut DEP policy tested on windows xp sp3 running in virtualbox import sys print "\n============================" print " MY MP3 Player DEP Bypass " print " Bypass OptIn/OptOut Policy " print " Tested on Windows XP SP3 " print " Written by Blake " print...

MY MP3 Player 3.0 m3u Exploit DEP Bypass

Exploit for windows platform in category local exploits written to bypass OptIn/OptOut DEP policy tested on windows xp sp3 running in virtualbox import sys print "\n============================" print " MY MP3 Player DEP Bypass " print " Bypass OptIn/OptOut Policy " print " Tested on Windows XP S...

Microsoft Windows Common Control Library Heap Buffer Overflow (MS10-081; CVE-2010-2746)

The common controls are a set of windows that are implemented by the common control library, Comctl32.dll, which is a DLL included with the Windows operating system. Like other control windows, a common control is a child window that an application uses in conjunction with another window to enabl...

MS10-081: Windows Common Control Library (Comctl32) Heap Overflow

Exploit for windows platform in category remote exploits !/usr/bin/env ruby http://breakingpointsystems.com/community/blog/microsoft-vulnerability-proof-of-concept Nephi Johnson require 'socket' def httpsendsock, data, opts= defaults = :code="200", :message="OK", :type="text/html", :desc="content...

Microsoft Windows - Common Control Library 'Comctl32' Heap Overflow (MS10-081)

!/usr/bin/env ruby http://breakingpointsystems.com/community/blog/microsoft-vulnerability-proof-of-concept Nephi Johnson require 'socket' def httpsendsock, data, opts= defaults = :code="200", :message="OK", :type="text/html", :desc="content" opts = defaults.mergeopts code = opts:code message =...

CVE-2010-2746

Heap-based buffer overflow in Comctl32.dll aka the common control library in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when a third-party SVG viewer is used, allows remote attackers to execute...

Heap overflow

Heap-based buffer overflow in Comctl32.dll aka the common control library in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when a third-party SVG viewer is used, allows remote attackers to execute...