Re: [VulnWatch] Microsoft Windows Vista Slideshow Unspecified Blue Screen Of Death Vulnerability

Dear Micha? Majchrowicz, This image also effectively exploits stack overflow in FastStone Image Viewer 2.8, EIP is 0x41414141. --Monday, March 26, 2007, 12:20:07 AM, you wrote to [email protected]: MM Everytime you try to turn on the slideshow with a JPG file in the MM folder you get BSoD...

[VulnWatch] Microsoft Windows Vista Slideshow Unspecified Blue Screen Of Death Vulnerability

It seems that Vista has some problems with ATI drivers. It was already reported that file atikmdag.sys can cause BSoD after leaving the game http://leovilletownsquare.com/fusionbb/showtopic.php?tid/17600/. Today user with nickname Olo contacted my and by making some tests we where able to determi...

Windows2000, blue screen of death stop information analysis-vulnerability warning-the black bar safety net

Windows2000 perhaps arguably a landmark of theoperating system, but it is still not able to avoid the blue screen of death Blue Screen of Death. The purpose of this article is the solution of the planing BSOD problem, but given how the process typically the blue screen problem solving steps...

gcards.txt

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- gcards languagefile = Remote File Include Discovered by : DeatH VirUs Dork : "powered by gcards" tasted on Version 1.13 Exploit gcards/admin/addnews.php?languagefile=shell code...

gcards (languagefile) <= Remote File Include

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- gcards languagefile = Remote File Include Discovered by : DeatH VirUs Dork : "powered by gcards" tasted on Version 1.13 Exploit gcards/admin/addnews.php?languagefile=shell code...

cnews101.txt

C-News v 1.0.1 Multiple Remote File Include Vulnerabilities ; Discovred By : ThELeO ; Software : C-News v 1.0.1 ; Exploit : http://Www.Example.Com/Script/affichage/pagination.php?path=U r Evil Script ; http://Www.Example.Com/Script/affichage/formulairecommentaires.php?path=U r Evil Script Greetz ...

CVE-2006-2075

CVE-2006-2075 concerns an unspecified vulnerability in MyDNS 1.1.0 that allows remote attackers to cause a denial of service by sending a crafted DNS message, popularly known as the “Query-of-death,” as demonstrated by the OUSPG PROTOS DNS test suite. The available connected documents confirm the...

qwikiXSS.txt

Software - QwikiWiki Version - v1.4 Type - XSS Vulnerability Powered by QwikiWiki v1.4 - www.qwikiwiki.com Examples: http://host/index.php?page=" http://host/index.php?page=" Found by Dr^Death of Suicide Scene Internet Security Group 2006...

CVE-2004-1576

CVE-2004-1576 affects Judge Dredd: Dredd vs. Death 1.01 and earlier. The vulnerability is a format string flaw in chat messages, leading to a denial of service (application crash). The provided documents do not specify exploit code, affected versions beyond 1.01 and earlier, or a remediation(patc...

TCP/IP Ping of Death Remote DoS (jolt)

The remote host crashed when pinged with an incorrectly fragmented packet. This is known as the 'jolt' or 'ping of death' denial of service attack. A remote attacker could exploit this to repeatedly crash this server. C Tenable Network Security, Inc. include"compat.inc"; if description...

CVE-2003-0397

CVE-2003-0397 describes a buffer overflow in the FastTrack (FT) network code used by Kazaa 2.0.2 (and possibly other versions) that can be triggered by a specially crafted packet containing a large list of supernodes, allowing remote code execution. The vulnerability affects the FastTrack network...

Vulnerability in Black ICE Defender

The current version of BlackICE Defender 2.9.caq and 2.9.cap running on a Windows 2000 machine can be remotely crashed using a very basic ping flood. This has been tested with Divine Intervention 2 & 3, Sisoft Sandra Network LAN benchmark. Setting the packet size to about 10,000 bytes causes a Bl...

Re: Zyxel Prestige 681 and 1600 (possibly other?) remote DoS

On Friday 14 December 2001 12:08, Przemyslaw Frasunek wrote: The workaround is to switch off routing and put device in bridging mode. Zyxel support has been notified, I won't release details of attack, until ZyNOS will be patched. I haven't received any response from Zyxel helpdesk so time to...

IrDA semiremote vulnerability

---- Win2k semi-remote DoS via IrDA Synopsis: There exists a "semi-remote" vulnerability against Windows machines via the IrDA port. The result of exploiting this vulnerability is the computer will crash, displaying a "Blue Screen of Death" BSOD, shortly followed by rebooting. As IrDA ports are...

Microsoft Windows NT 4.0 - Invalid LPC Request Denial of Service (MS00-070)

source: https://www.securityfocus.com/bid/1743/info LPC Local Procedure Call is a message-passing service that allows threads and processes to communicate with each other on a local machine as opposed to RPC Remote Procedure Call that takes place between different hosts. The implementation of LPC...

Cayman 3220H DSL Router Software Update and New Bonus Attack

Cayman 3220H DSL Router Software Update and New Bonus Attack Cayman has released a new software image version 5.5.0 build r1 to fix the DoS attack I reported a couple weeks ago. Details on the attack can be found here - http://www.securityfocus.com/vdb/bottom.html?vid=1219 You can get the new...

CVE-1999-0128

CVE-1999-0128 refers to a historic Ping of Death, where oversized ICMP echo packets can cause a denial of service. The initial entry and connected Red Hat/RedHat advisory records reiterate the same description without listing affected products, versions, root cause details, or exploitable vectors...

CVE-1999-0128

Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death...

windows_kod.txt

Subject: ip stack bug in windows kod.ckiss of death To: [email protected] / ::: kod.c kiss of death version 1.2 ::: author kod.c bug found by klepto / [email protected] / rewritten by ignitor / ignitor@EFnet ::: stuph works on bsd/linux/nix ::: notes bluescreens windows users98/98se and kill...

Microsoft Windows 3.11/95/NT 4.0/NT 3.5.1 - 'Out Of Band' Data Denial of Service (1)

// source: https://www.securityfocus.com/bid/2010/info Older versions of Microsoft Windows 95, Windows for Workgroups 3.11, Windows NT up to and including 4.0, as well as SCO Open Server 5.0, have a vulnerability relating to the way they handle TCP/IP "Out of Band" data. According to Microsoft, "...