Code injection

Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.215 and earlier, and SDK and JRE 1.3.120 and earlier does not properly enforce access restrictions for untrusted 1 applications and 2 applets, which allows user-assisted remote attacke...

CVE-2007-5239

Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.215 and earlier, and SDK and JRE 1.3.120 and earlier does not properly enforce access restrictions for untrusted 1 applications and 2 applets, which allows user-assisted remote attacke...

CVE-2007-5239

Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.215 and earlier, and SDK and JRE 1.3.120 and earlier does not properly enforce access restrictions for untrusted 1 applications and 2 applets, which allows user-assisted remote attacke...

CVE-2007-5239

The CVE-2007-5239 issue affects Sun Java Web Start / JRE components. Affected products include JDK/JRE 6 Update 2 and earlier, JDK/JRE 5.0 Update 12 and earlier, J2SE 1.4.2_15 and earlier, and J2SE 1.3.1_20 and earlier. The root cause is that Java Web Start/applets do not properly enforce access ...

CVE-2007-5239: Undefined Security Weakness

Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.215 and earlier, and SDK and JRE 1.3.120 and earlier does not properly enforce access restrictions for untrusted 1 applications and 2 applets, which allows user-assisted remote attacke...

Internet Explorer drag-n-drop vulnerability

By using javaasript in conjunction with shell:startup it's possible to place executable into startup folder if user drags an object on the page or scrolls the page...

Two Unpublished IE Cases

I'd like to publish two IE cases that I know about. Although it's too late. These two cases have already been patched. Just want to get them on the record here. Many complained that IE7's new features roadblocked hacking into this app. Well, those features are like any other Microsoft's public...

Directory traversal

Parallels Desktop for Mac before 20070216 implements Drag and Drop by sharing the entire host filesystem as the .psf share, which allows local users of the guest operating system to write arbitrary files to the host filesystem, and execute arbitrary code via launchd by writing a plist file to a...

CVE-2007-1222

Parallels Desktop for Mac before 20070216 implements Drag and Drop by sharing the entire host filesystem as the .psf share, which allows local users of the guest operating system to write arbitrary files to the host filesystem, and execute arbitrary code via launchd by writing a plist file to a...

CVE-2007-1222

Vulnerability: Parallels Desktop for Mac before 20070216 allows a guest OS user to affect the host by exposing the entire host filesystem via the .psf share. Root cause: the Drag and Drop mechanism shares the host filesystem with the guest, enabling write access to host files. Impact: local guest...

Microsoft Internet Explorer TIF Folder arbitrary file access vulnerability

Overview A vulnerability in the way Microsoft Internet Explorer handles drag and drop operations may allow access of arbitrary files within the Temporary Internet Files folder. Description Microsoft Internet Explorer contains a vulnerability that could be exploited when handling drag and drop...

CVE-2006-5578

Microsoft Internet Explorer 6 and earlier allows remote attackers to read Temporary Internet Files TIF and obtain sensitive information via unspecified vectors involving certain drag and drop operations, aka "TIF Folder Information Disclosure Vulnerability," and a different issue than CVE-2006-55...

Microsoft Internet Explorer Drag and Drop TIF Folder Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to an information-disclosure vulnerability. An attacker can exploit this issue to access sensitive information that may aid in further attacks. Technologies Affected Avaya Messaging Application Server Avaya S8100 Media Servers Avaya S8100 Media...

Microsoft Windows拖放操作远程代码执行漏洞（MS06-045）

Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows没有正确的处理拖放事件，本地攻击者可能利用此漏洞提升自己的权限。 远程攻击者可以创建文件名中包含有编码的“..\”（%2e%2e%5c）序列且扩展名中包含有HTML应用（HTA）的CLSID Key标识符的SMW文件共享，并诱骗用户访问到这个共享的链接，导致执行任意代码。 Microsoft Windows XP SP2 Microsoft Windows XP SP1 Microsoft Windows Server 2003 SP1 Microsoft Windows Server...

PT-2006-5347 · Canyon +3 · Canyon Power File Gold +5

Name of the Vulnerable Software and Affected Versions: BeCubed Compression Plus versions prior to 5.0.1.28 Tumbleweed EMF versions prior to 5.0.1.28 VCOM/Ontrack PowerDesk Pro versions prior to 5.0.1.28 Canyon Drag and Zip versions prior to 5.0.1.28 Canyon Power File versions prior to 5.0.1.28...

CVE-2006-4554

Stack-based buffer overflow in the ReadFile function in the ZOO-processing exports in the BeCubed Compression Plus before 5.0.1.28, as used in products including 1 Tumbleweed EMF, 2 VCOM/Ontrack PowerDesk Pro, 3 Canyon Drag and Zip, 4 Canyon Power File, and 5 Canyon Power File Gold, allow...

CVE-2006-4554: Undefined Security Weakness

Stack-based buffer overflow in the ReadFile function in the ZOO-processing exports in the BeCubed Compression Plus before 5.0.1.28, as used in products including 1 Tumbleweed EMF, 2 VCOM/Ontrack PowerDesk Pro, 3 Canyon Drag and Zip, 4 Canyon Power File, and 5 Canyon Power File Gold, allow...

Microsoft Windows XP20002003 - Explorer Drag and Drop Remote Code Execution

Microsoft Windows XP20002003 - Explorer Drag and Drop Remote Code Execution source: https://www.securityfocus.com/bid/19389/info Microsoft Windows is prone to a remote code-execution vulnerability. This issue affects the Windows Explorer component. This issue is caused by insecure handling of Dra...

Microsoft Windows XP/2000/2003 - Explorer Drag and Drop Remote Code Execution

source: https://www.securityfocus.com/bid/19389/info Microsoft Windows is prone to a remote code-execution vulnerability. This issue affects the Windows Explorer component. This issue is caused by insecure handling of Drag and Drop events. There is a public proof-of-concept that demonstrates that...

outpostPwn.txt

Hi, all current available "Outpost Firewall" versions do have severe vulnerabilities, every local user is able to run programs under the very high privileged LocalSystem account. Steps to reproduce: 1. create an empty text file e.g. "empty.txt" 2. create a batch file which will open a command...