CVE-2009-4850

The Awingsoft Awakening Winds3D Viewer plugin 3.5.0.9 allows remote attackers to execute arbitrary programs via a SceneURL property value with a URL for a .exe file...

Microsoft Winhlp32 Compressed Phrase Integer Overflow (CVE-2004-1361)

Microsoft Windows provides online help solutions for windows-based applications through help files that are compiled in a proprietary file format. These files may be viewed with the application winhlp32.exe. There is a vulnerability in the way Microsoft Winhlp32 calculates a length value from...

Internet Explorer Winhlp32.exe MsgBox Code Execution

$Id: ms10022ievbscriptwinhlp32.rb 9085 2010-04-15 16:08:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft IE winhlp32.exe服务远程代码执行漏洞(MS10-022)

BUGTRAQ ID: 38463 CVE ID: CVE-2010-0483 Internet Explorer是Windows操作系统中默认捆绑的web浏览器。 用户可以使用VBScript从IE调用winhlp32.exe服务，如果向该服务传送了恶意的.HLP文件就会导致执行任意命令。 必需一些用户交互才可以触发这个漏洞，在显示MsgBox弹出框时用户需要按下F1。以下是MsgBox函数的句法： MsgBoxprompt,buttons,title,helpfile,context...

PT-2010-1297 · Vmware · Vmware Remote Console +1

Name of the Vulnerable Software and Affected Versions: VMware Remote Console versions prior to the version that fixes the issue in build 158248 Description: The issue allows remote attackers to execute arbitrary code via unspecified vectors. This is due to a format string vulnerability in...

CVE-2009-4764

Adobe Reader 8.x and 9.x on Windows is able to execute EXE files that are embedded in a PDF document, which makes it easier for remote attackers to trick users into executing arbitrary code via a crafted document...

CVE-2009-4764

CVE-2009-4764 affects Adobe Reader on Windows (8.x/9.x). An embedded EXE in a PDF can be executed, enabling remote attackers to run arbitrary code. This is a user‑unrestricted, code execution risk via crafted documents; CVSS base score is 9.3 (HIGH) with network attack vector and complete impact....

Mackeitone Media Player - '.m3u' Stack Buffer Overflow

!/usr/bin/python Mackeitone Media Player .m3u file stack buffer Overflow download link: http://www.makeitone.net/downloads/MakeitOne-MediaPlayerv1.00.exe Tested in : Windows XP SP3 Credit : ItSecTeam mail : [email protected] Web: WwW.ITSecTeam.com Find by: PLATEN @ ItSecTeam Special Tanks :...

Energizer DUO USB battery charger software allows unauthorized remote system access

Overview The software available for the Energizer DUO USB battery charger contains a backdoor that allows unauthorized remote system access. Description Energizer DUO is a USB battery charger. An optional Windows application that allows the user to view the battery charging status has been...

Internet Explorer winhlp32.exe 'MsgBox()'远程代码执行漏洞

BUGTRAQ ID: 38463 CVECAN ID: CVE-2010-0483 Internet Explorer是Windows操作系统中默认捆绑的web浏览器。 用户可以使用VBScript从IE调用winhlp32.exe服务，如果向该服务传送了恶意的.HLP文件就会导致执行任意命令。 必需一些用户交互才可以触发这个漏洞，在显示MsgBox弹出框时用户需要按下F1。以下是MsgBox函数的句法： MsgBoxprompt,buttons,title,helpfile,context...

CVE-2010-0483

vbscript.dll in VBScript 5.1, 5.6, 5.7, and 5.8 in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, allows user-assisted remote attackers to execute arbitrary code by referencing a 1 local pathname, 2 UNC share pathname, or 3 WebDAV server with a...

Design/Logic Flaw

vbscript.dll in VBScript 5.1, 5.6, 5.7, and 5.8 in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, allows user-assisted remote attackers to execute arbitrary code by referencing a 1 local pathname, 2 UNC share pathname, or 3 WebDAV server with a...

CVE-2010-0483

vbscript.dll in VBScript 5.1, 5.6, 5.7, and 5.8 in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, allows user-assisted remote attackers to execute arbitrary code by referencing a 1 local pathname, 2 UNC share pathname, or 3 WebDAV server with a...

IE Winhlp32.exe MsgBox F1

$Id: iewinhlp32.rb 8688 2010-03-02 12:23:17Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Internet Explorer 'winhlp32.exe' 'MsgBox()' Code Execution Vulnerability

Exploit for unknown platform in category remote exploits =============================================================================== Internet Explorer 'winhlp32.exe' 'MsgBox' Remote Code Execution Vulnerability ===============================================================================...

Microsoft Internet Explorer 6/7/8 - 'winhlp32.exe MsgBox()' Remote Code Execution

Microsoft Internet Explorer is prone to a remote code execution vulnerability. Source iSEC Security Research: http://isec.pl/vulnerabilities10.html Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise th...

Internet Explorer versions 6, 7, 8 command execution vulnerability

Exploit for unknown platform in category remote exploits ================================================================== Internet Explorer versions 6, 7, 8 command execution vulnerability ================================================================== Internet Explorer versions 6, 7, and 8...

Microsoft IIS WebDAV Write Access Code Execution

This module can be used to execute a payload on IIS servers that have world-writeable directories. The payload is uploaded as an ASP script via a WebDAV PUT request. The target IIS machine must meet these conditions to be considered as exploitable: It allows 'Script resource access', Read and Wri...

HP OpenView Network Node Manager snmp.exe Oid Variable Buffer Overflow (CVE-2009-3849)

HP OpenView product consists of a suite of network and system management software applications developed by HP. It includes several optional modules and components, such as OpenView Quality Manager, OpenView Performance Insight, OpenView Network Node Manager, etc. A buffer overflow vulnerability...

Mandriva Security Advisory MDVSA-2009:327 (clamav)

The remote host is missing an update to clamav announced via advisory MDVSA-2009:327. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...