VulnCheck KEV: CVE-2004-1049

Integer overflow in the LoadImage API of the USER32 Lib for Microsoft Windows allows remote attackers to execute arbitrary code via a .bmp, .cur, .ico or .ani file with a large image size field, which leads to a buffer overflow, aka the "Cursor and Icon Format Handling Vulnerability."...

Windows ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (HTTP)

This module exploits a buffer overflow vulnerability in the LoadAniIcon function in USER32.dll. The flaw can be triggered through Internet Explorer 6 and 7 by using the CURSOR style sheet directive to load a malicious .ANI file. The module can also exploit Mozilla Firefox by using a UNC path in a...

Microsoft Animated Cursor .ANI Buffer Overflow

MS Animated Cursor .ANI BOF Perl Edition MS07-017 Discovered by Alex Sotirov from Determina,So all rights are reserved to him! Written by Jacky! This exploit is written in Perl , and it's the first MS07-017 exploit As i saw which be written in perl! THIS EXPLOIT IS FOR EDUCATIONAL PURPOSES ONLY !...

OpenJDK information leaks in mutable variables (6588003,6656586,6656610,6656625,6657133,6657619,6657625,6657695,6660049,6660539,6813167)

Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, might allow context-dependent attackers to obtain sensitive information via vectors involving static variables that are declared without the final keyword, related to 1 LayoutQueue, 2 Cursor.predefined, 3...

Oracle SYS.LT.COMPRESSWORKSPACETREE Evil Cursor Exploit

No description provided by source. EDB-ID: 10265 CVE-ID: Title: Oracle SYS.LT.COMPRESSWORKSPACETREE Evil Cursor Exploit Author: Andrea "bunker" Purificato Published: 2009-12-01 Download Exploit Code Download N/A -- -- sys-lt-compressworkspacetreeV2.sql -- -- -- Oracle SYS.LT.COMPRESSWORKSPACETREE...

Oracle SYS.LT.MERGEWORKSPACE Evil Cursor Exploit

No description provided by source. EDB-ID: 10264 CVE-ID: Title: Oracle SYS.LT.MERGEWORKSPACE Evil Cursor Exploit Author: Andrea "bunker" Purificato Published: 2009-12-01 Download Exploit Code Download N/A -- -- sys-lt-mergeworkspaceV2.sql -- -- -- Oracle SYS.LT.MERGEWORKSPACE exploit...

Oracle SYS.LT.REMOVEWORKSPACE Evil Cursor Exploit

No description provided by source. EDB-ID: 10268 CVE-ID: Title: Oracle SYS.LT.REMOVEWORKSPACE Evil Cursor Exploit Author: Andrea "bunker" Purificato Published: 2009-12-01 Download Exploit Code Download N/A -- -- sys-lt-removeworkspaceV2.sql -- -- -- Oracle SYS.LT.REMOVEWORKSPACE exploit...

Oracle ctxsys.drvxtabc.create_tables Evil Cursor Exploit

No description provided by source. EDB-ID: 10266 CVE-ID: Title: Oracle ctxsys.drvxtabc.createtables Evil Cursor Exploit Author: Andrea "bunker" Purificato Published: 2009-12-01 Download Exploit Code Download N/A -- -- ctxsys.drvxtabc.createtablesV2.sql -- -- -- Oracle ctxsys.drvxtabc.createtables...

Oracle - SYS.LT.COMPRESSWORKSPACETREE Evil Cursor

Oracle - SYS.LT.COMPRESSWORKSPACETREE Evil Cursor -- -- sys-lt-compressworkspacetreeV2.sql -- -- -- Oracle SYS.LT.COMPRESSWORKSPACETREE exploit 9iR2/10gR1,10gR2,11gR1 -- Evil cursor technique -- -- Grant dba permission to unprivileged user -- -- -- REF:...

Oracle SYS.LT.COMPRESSWORKSPACETREE Evil Cursor Exploit

Exploit for unknown platform in category local exploits ======================================================= Oracle SYS.LT.COMPRESSWORKSPACETREE Evil Cursor Exploit ======================================================= Title: Oracle SYS.LT.COMPRESSWORKSPACETREE Evil Cursor Exploit CVE-ID:...

Oracle - SYS.LT.COMPRESSWORKSPACETREE Evil Cursor

-- -- sys-lt-compressworkspacetreeV2.sql -- -- -- Oracle SYS.LT.COMPRESSWORKSPACETREE exploit 9iR2/10gR1,10gR2,11gR1 -- Evil cursor technique -- -- Grant dba permission to unprivileged user -- -- -- REF: http://www.google.it/search?q=SYS.LT.COMPRESSWORKSPACETREE -- -- AUTHOR: Andrea "bunker"...

Oracle ctxsys.drvxtabc.create_tables Evil Cursor Exploit

Exploit for unknown platform in category local exploits ======================================================== Oracle ctxsys.drvxtabc.createtables Evil Cursor Exploit ======================================================== Title: Oracle ctxsys.drvxtabc.createtables Evil Cursor Exploit CVE-ID:...

Oracle SYS.LT.REMOVEWORKSPACE Evil Cursor Exploit

Exploit for unknown platform in category local exploits ================================================= Oracle SYS.LT.REMOVEWORKSPACE Evil Cursor Exploit ================================================= Title: Oracle SYS.LT.REMOVEWORKSPACE Evil Cursor Exploit CVE-ID: OSVDB-ID: Author: Andrea...

Oracle - ctxsys.drvxtabc.create_tables Evil Cursor

-- -- ctxsys.drvxtabc.createtablesV2.sql -- -- -- Oracle ctxsys.drvxtabc.createtables exploit 9i/10g -- Evil cursor technique -- -- Grant dba permission to unprivileged user -- -- -- REF: http://www.google.it/search?q=ctxsys.drvxtabc.createtables -- -- AUTHOR: Andrea "bunker" Purificato --...

Oracle - SYS.LT.REMOVEWORKSPACE Evil Cursor

-- -- sys-lt-removeworkspaceV2.sql -- -- -- Oracle SYS.LT.REMOVEWORKSPACE exploit 9iR2/10gR1,10gR2,11gR1 -- Evil cursor technique -- -- Grant dba permission to unprivileged user -- -- -- REF: http://www.google.it/search?q=SYS.LT.REMOVEWORKSPACE -- -- AUTHOR: Andrea "bunker" Purificato --...

Oracle - SYS.LT.MERGEWORKSPACE Evil Cursor

Oracle - SYS.LT.MERGEWORKSPACE Evil Cursor -- -- sys-lt-mergeworkspaceV2.sql -- -- -- Oracle SYS.LT.MERGEWORKSPACE exploit 9iR2/10gR1,10gR2,11gR1 -- Evil cursor technique -- -- Grant dba permission to unprivileged user -- -- -- REF: http://www.google.it/search?q=SYS.LT.MERGEWORKSPACE -- -- AUTHOR...

Oracle SYS.LT.MERGEWORKSPACE Evil Cursor Exploit

Exploit for unknown platform in category local exploits ================================================ Oracle SYS.LT.MERGEWORKSPACE Evil Cursor Exploit ================================================ Title: Oracle SYS.LT.MERGEWORKSPACE Evil Cursor Exploit CVE-ID: OSVDB-ID: Author: Andrea...

Oracle - ctxsys.drvxtabc.create_tables Evil Cursor

Oracle - ctxsys.drvxtabc.createtables Evil Cursor -- -- ctxsys.drvxtabc.createtablesV2.sql -- -- -- Oracle ctxsys.drvxtabc.createtables exploit 9i/10g -- Evil cursor technique -- -- Grant dba permission to unprivileged user -- -- -- REF: http://www.google.it/search?q=ctxsys.drvxtabc.createtables ...

Oracle - SYS.LT.REMOVEWORKSPACE Evil Cursor

Oracle - SYS.LT.REMOVEWORKSPACE Evil Cursor -- -- sys-lt-removeworkspaceV2.sql -- -- -- Oracle SYS.LT.REMOVEWORKSPACE exploit 9iR2/10gR1,10gR2,11gR1 -- Evil cursor technique -- -- Grant dba permission to unprivileged user -- -- -- REF: http://www.google.it/search?q=SYS.LT.REMOVEWORKSPACE -- --...

Oracle - SYS.LT.MERGEWORKSPACE Evil Cursor

-- -- sys-lt-mergeworkspaceV2.sql -- -- -- Oracle SYS.LT.MERGEWORKSPACE exploit 9iR2/10gR1,10gR2,11gR1 -- Evil cursor technique -- -- Grant dba permission to unprivileged user -- -- -- REF: http://www.google.it/search?q=SYS.LT.MERGEWORKSPACE -- -- AUTHOR: Andrea "bunker" Purificato --...