MS Word 95/97/98/2000/2002 Excel 2002 INCLUDETEXT Document Sharing File Disclosure

No description provided by source. source: http://www.securityfocus.com/bid/5586/info The Microsoft Word and Excel INCLUDETEXT Field Code may be used to insert an arbitrary local file into a document. The INCLUDETEXT Field Code is reported to, under some circumstances, present a security threat. ...

Wine ( Core exe ) GIF Object Memory Corruption

Exploit for windows platform in category local exploits ================================================ Wine Core exe GIF Object Memory Corruption ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0...

Invensys Wonderware InTouch默认统一NetDDE共享特权提升漏洞

Vulnerability Note VU138633 Invensys Wonderware InTouch creates insecure NetDDE share Invensys Wonderware InTouch是一款生产过程中自动化监控系统中的应用。 Invensys Wonderware InTouch对NetDDE共享的默认权限设置存在问题，本地攻击者可以利用漏洞提升特权。 动态数据交换DDE设计允许Microsoft windows应用程序共享数据。NetDDE是Wonderware开发的DDE扩展。InTouch...

Bypassing Personal Firewall (Zone Alarm Pro) Using DDE-IPC

Hi All !! While I was testing desktop based firewalls here it is Zone Alarm Pro with the firewall evasion kit developed by me, I found that a very old flaw still exists in many latest versions of desktop based firewalls. It is possible for a malicious program to bypass a desktop based firewall by...

Microsoft Word 95/97/98/2000/2002 / Excel 2002 - INCLUDETEXT Document Sharing File Disclosure

source: https://www.securityfocus.com/bid/5586/info The Microsoft Word and Excel INCLUDETEXT Field Code may be used to insert an arbitrary local file into a document. The INCLUDETEXT Field Code is reported to, under some circumstances, present a security threat. If the INCLUDETEXT Field Code is...

Microsoft Windows 2000 Network Dynamic Data Exchange (DDE) executes code as Local System

Overview The Windows 2000 Network DDE agent permits local users to execute commands with system privileges. Description Dynamic Data Exchange DDE is an interprocess communication mechanism used in Microsoft Windows. A DDE share is an area of memory which is used to store and retrieve data. Networ...

CVE-2001-0944

CVE-2001-0944 describes a DDE-based risk in mIRC where a local user can trigger a DDE message that executes a command, potentially running in another user’s process. This enables local privilege escalation with the command execution potentially affecting confidentiality, integrity, and availabili...

CVE-2001-0944

DDE in mIRC allows local users to launch applications under another user's account via a DDE message that executes a command, which may be executed by the other user's process...

Проблемы с DDE в mIRC (privelege escalation)

Можно послать DDE сообщение из другого приложения чтобы выполнить команду с привилегиями пользователя mIRC...

mIRC bug?

Hello, BugTraq readers! I have recently started using mIRC's DDE feature, which allows DDE messaging between its instances and other software. At first I was quite pleased with this feature until I thought about the security implications of it under a multi-user system such as Windows 2000...

CVE-2001-0944

DDE in mIRC allows local users to launch applications under another user's account via a DDE message that executes a command, which may be executed by the other user's process...

CVE-2001-0015

CVE-2001-0015 affects Windows 2000 via the Network Dynamic Data Exchange (DDE) component. The vulnerability allows a local attacker to elevate privileges to Local System by sending a WM_COPYDATA message to an invisible DDE window that runs with WINLOGON privileges, enabling arbitrary command exec...

Дырка в Windows 2000 (Network DDE Agent privilege elevation)

Network DDE Agent выполняет запросы клинтской программы в контексте локальной системы вместо контекста запрашивающего пользователя...

Security Bulletin MS01-007

---------------------------------------------------------------------- Title: Patch Available for "Network DDE Agent Request" Vulnerability Date: 05 February 2001 Software: Windows 2000 Impact: Privilege elevation Bulletin: MS01-007 Microsoft encourages customers to review the Security Bulletin...

nukenabber-DoS.txt

------------------------------------ NOTE: NukeNabber 2.9 and earlier are vulnerable. nn29a.exe is NOT vulnerable. ------------------------------------ Date: Fri, 6 Nov 1998 01:46:17 -0600 From: [email protected] To: [email protected] Subject: various lame DoS attacks Aleph, None of...