The Week in Security: Gov2.0, DLL Patches and When Social Media Attacks!

Summer may have reached its unofficial end with the Labor Day holiday, but there was no break from security news this week, as both the Gov 2.0 Conference in Washington D.C. and a raft of warnings and patches from leading vendors kept the heat on high. We all know the Internet started as a U.S...

Microsoft to Patch 13 Security Holes in Windows, Office

Microsoft’s September batch of security patches will include fixes for 13 documented vulnerabilities affecting Windows, Internet Information Services IIS, and Microsoft Office. According to the company’s advance notification for this month’s Patch Tuesday, there will be a total of 9 bulletins fou...

Mozilla Patches Firefox DLL Load Hijacking Bug

Mozilla has joined Apple in being among the first to fix the DLL load hijacking attack vector that continues to haunt hundreds of Windows applications. The open-source group released Firefox 3.6.9 with patches for a total of 15 vulnerabilities 11 rated critical, including the publicly known DLL...

Apple Plugs Safari Drive-by Download Security Holes

Apple has shipped Safari 5.0.2 and Safari 4.1.2 with patches for three gaping holes that expose Web surfers to drive-by download attacks. The browse-and-you’re-hacked vulnerabilities affect both Windows and Mac users, Apple warned in an advisory. One of the three vulnerabilities is the DLL load...

Microsoft Internet Explorer 7 - DLL-load Hijacking Code Execution (PoC)

/ Copyright C 2006-2007 Aviv Raff http://aviv.raffon.net Greetz: hdm, L.M.H, str0ke, SkyLined Compile and upload to the victim's desktop as one of the following hidden DLL files: - sqmapi.dll - imageres.dll - schannel.dll Run IE7 and watch the nice calculators pop up. Filter fdwReason to execute...

MS Internet Explorer 7 (DLL-load hijacking) Code Execution Exploit PoC

Exploit for unknown platform in category dos / poc ====================================================================== MS Internet Explorer 7 DLL-load hijacking Code Execution Exploit PoC ====================================================================== / Copyright C 2006-2007 Aviv Raff...

MS Internet Explorer 7 (DLL-load hijacking) Code Execution Exploit PoC

No description provided by source. / Copyright C 2006-2007 Aviv Raff http://aviv.raffon.net Greetz: hdm, L.M.H, str0ke, SkyLined Compile and upload to the victim's desktop as one of the following hidden DLL files: - sqmapi.dll - imageres.dll - schannel.dll Run IE7 and watch the nice calculators p...

Microsoft Internet Explorer 7 - DLL-load Hijacking Code Execution (PoC)

Microsoft Internet Explorer 7 - DLL-load Hijacking Code Execution PoC / Copyright C 2006-2007 Aviv Raff http://aviv.raffon.net Greetz: hdm, L.M.H, str0ke, SkyLined Compile and upload to the victim's desktop as one of the following hidden DLL files: - sqmapi.dll - imageres.dll - schannel.dll Run I...