1054 matches found
Microsoft Security Bulletin MS07-064 – Critical Vulnerabilities in DirectX Could Allow Remote Code Execution (941568)
Microsoft Security Bulletin MS07-064 – Critical Vulnerabilities in DirectX Could Allow Remote Code Execution 941568 Published: December 11, 2007 Version: 1.0 General Information Executive Summary This critical security update resolves two privately reported vulnerabilities in Microsoft DirectX...
Microsoft DirectX SAMI File Parsing Stack Buffer Overflow Vulnerability
Description DirectX is prone to a stack-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data An attacker could exploit this issue to execute arbitrary code within the privileges of the currently logged-in user. Failed exploit...
MS07-064: Vulnerabilities in DirectX Could Allow Remote Code Execution (941568)
The remote host contains a version of DirectX that is vulnerable to a remote code execution attack. To exploit this flaw, an attacker would need to send a malformed AVI, WMV or SAMI file to a user on the remote host and have him open it. C Tenable Network Security, Inc. include"compat.inc"; if...
Microsoft DirectX WAV and AVI File Parsing Remote Code Execution Vulnerability
Description Microsoft DirectX is prone to a remote code-execution vulnerability. An attacker could exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts may crash the application. Technologies Affected Avaya Messaging Application...
blizzard-dos.txt
HISPASEC Security Advisory http://blog.hispasec.com/lab/ Name : Blizzard StarCraft Brood War Remote DoS Class : Remote/Local DoS Threat level : MED Discovered : 2007-08-08 Published : 2007-08-29 Credit : Gynvael Coldwind Vulnerable : StarCraft Brood War 1.15.1 and prior StarCraft 1.15.1 and prior...
[HISPASEC] Blizzard StarCraft Brood War 1.15.1 Remote DoS
HISPASEC Security Advisory http://blog.hispasec.com/lab/ Name : Blizzard StarCraft Brood War Remote DoS Class : Remote/Local DoS Threat level : MED Discovered : 2007-08-08 Published : 2007-08-29 Credit : Gynvael Coldwind Vulnerable : StarCraft Brood War 1.15.1 and prior StarCraft 1.15.1 and prior...
Microsoft DirectX Media SDK DXTLIPI.DLL ActiveX缓冲区溢出漏洞
Microsoft DirectX Media SDK是一组底层应用程序编程接口API。 Microsoft DirectX Media SDK DXTLIP.DLL ActiveX控件存在缓冲区溢出，远程攻击者可以利用漏洞以链接此库的应用程序执行任意指令。 问题是DXTLIP.DLL ActiveX控件在处理"SourceUrl"方法时缺少充分的边界检查，提交超长字符串作为参数数据，并诱使用户访问，可导致缓冲区溢出，精心构建提交数据可能以链接此库的应用程序执行任意指令。 Microsoft DirectX Media SDK 6.0 目前没有详细解决方案提供：...
Buffer overflow
Buffer overflow in the Live Picture Corporation DXSurface.LivePicture.FlashPix.1 DirectTransform FlashPix ActiveX control in DXTLIPI.DLL 6.0.2.827, as packaged in Microsoft DirectX Media 6.0 SDK, allows remote attackers to execute arbitrary code via a long SourceUrl property value...
CVE-2007-4336
The CVE-2007-4336 entry concerns a buffer overflow in the Live Picture Corporation DXSurface.LivePicture.FlashPix.1 (DirectTransform FlashPix) ActiveX control, packaged in DXTLIPI.DLL version 6.0.2.827 within Microsoft DirectX Media 6.0 SDK. The vulnerability arises from processing a long SourceU...
Microsoft DXMedia SDK 6 (SourceUrl) ActiveX Remote Code Execution
Exploit for unknown platform in category remote exploits ================================================================= Microsoft DXMedia SDK 6 SourceUrl ActiveX Remote Code Execution ================================================================= Tested on:.. - Microsoft DirectX Media 6.0 S...
MS Internet Explorer 6 DirectX Media Remote Overflow DoS Exploit-vulnerability warning-the black bar safety net
!--============================================================================ dxtmsft.dll Remote Buffer Overflow Exploit Internet Explorer ver 6.0 DeltahackingSecurityTEAM Bug discovered by Dr. Pantagon Affected Software: dxtmsft.dll DirectX Media -- Image DirectX Transforms DLL VER :...
msie-directx.txt
Sub jojo buff = String999999, "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaA" getEDX = "aaaaaaaaaaaaaaaaaaaaaaaaaaaaabbbbbbbbbbbbbbcccccccccccccddddddddddeee" buff1 = String999999, "BBBBBBBBBBBBBBBBBBBBBBBBBBBBbb" egg = buff + getEDX + buff1 + scode Chroma.Color = egg End S...
Microsoft Internet Explorer 6 - DirectX Media Remote Overflow Denial of Service
Microsoft Internet Explorer 6 - DirectX Media Remote Overflow Denial of Service Sub jojo buff = String999999, "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaA" getEDX = "aaaaaaaaaaaaaaaaaaaaaaaaaaaaabbbbbbbbbbbbbbcccccccccccccddddddddddeee" buff1 = String999999,...
Microsoft Internet Explorer 6 - DirectX Media Remote Overflow Denial of Service
Sub jojo buff = String999999, "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaA" getEDX = "aaaaaaaaaaaaaaaaaaaaaaaaaaaaabbbbbbbbbbbbbbcccccccccccccddddddddddeee" buff1 = String999999, "BBBBBBBBBBBBBBBBBBBBBBBBBBBBbb" egg = buff + getEDX + buff1 + scode Chroma.Color = egg End S...
Microsoft DirectX RLE压缩Targa图形文件堆溢出漏洞
BUGTRAQ ID: 24963 CVECAN ID: CVE-2006-4183 Microsoft DirectX是一个API集，用于在Windows操作系统上处理有关游戏编程的任务。 DirectX库打开RLE压缩的Targa格式图形文件的方式存在堆溢出漏洞，远程攻击者可能利用此漏洞通过诱使用户处理畸形文件控制用户系统。...
iDefense Security Advisory 07.18.07: Microsoft DirectX RLE Compressed Targa Image File Heap Overflow
Microsoft DirectX RLE Compressed Targa Image File Heap Overflow iDefense Security Advisory 07.18.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 18, 2007 I. BACKGROUND Microsoft DirectX is a collection of APIs for easily handling tasks related to game programming on the Microsoft...
[Reversemode Advisory] Microsoft DirectX RLE Compressed Targa Image File Heap Overflow
Microsoft DirectX Direct3D 9 Microsoft DirectX RLE Compressed Targa Image File Heap Overflow Ruben Santamarta rubenatreversemodedotcom 07.18.2007 Affected products: + Microsoft DirectX Direct3D 9 runtime libraries. + D3dx928.dll – D3dx9d28.dll and earlier Microsoft DirectX is prone to a heap...
Microsoft DirectX buffer overflow
Buffer overflow on compressed TGA images parsing...
CVE-2006-4183
Heap-based buffer overflow in Microsoft DirectX SDK February 2006 and probably earlier, including 9.0c End User Runtimes, allows context-dependent attackers to execute arbitrary code via a crafted Targa file with a run-length-encoding RLE compression that produces more data than expected when...
CVE-2006-4183
Summary (CVE-2006-4183) : A heap-based buffer overflow exists in Microsoft DirectX when parsing RLE-compressed TGA images. The vulnerability affects the DirectX SDK (February 2006) and likely earlier End User Runtimes, enabling a remote attacker to execute arbitrary code via a crafted TGA file, d...