EUVD-2010-3610

named in ISC BIND 9.x before 9.6.2-P3, 9.7.x before 9.7.2-P3, 9.4-ESV before 9.4-ESV-R4, and 9.6-ESV before 9.6-ESV-R3 does not properly determine the security status of an NS RRset during a DNSKEY algorithm rollover, which might allow remote attackers to cause a denial of service DNSSEC validati...

USN-1023-1: Linux kernel vulnerabilities

Nelson Elhage discovered several problems with the Acorn Econet protocol driver. A local user could cause a denial of service via a NULL pointer dereference, escalate privileges by overflowing the kernel stack, and assign Econet addresses to arbitrary interfaces. CVE-2010-3848, CVE-2010-3849,...

Ubuntu 6.06 LTS / 8.04 LTS / 9.04 / 9.10 / 10.04 LTS / 10.10 : linux, linux-ec2, linux-source-2.6.15 vulnerabilities (USN-1000-1)

Dan Rosenberg discovered that the RDS network protocol did not correctly check certain parameters. A local attacker could exploit this gain root privileges. CVE-2010-3904 Al Viro discovered a race condition in the TTY driver. A local attacker could exploit this to crash the system, leading to a...

STDU explorer DLL Hijacking Exploit (dwmapi.dll)

Exploit for windows platform in category local exploits ================================================ STDU explorer DLL Hijacking Exploit dwmapi.dll ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\...

Video Workstation Version 5.3.9.4 dll hijacking (iacenc.dll, ir50_lcs.dll)

Exploit for windows platform in category local exploits ======================================================================= Video Workstation Version 5.3.9.4 dll hijacking iacenc.dll,ir50lcs.dll ======================================================================= / Video Workstation Versio...

FrontPage Server Extensions Anonymous Login Scanner

This module queries the FrontPage Server Extensions and determines whether anonymous access is allowed. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'FrontPage Server Extensions Anonymous Log...

NCP Secure Entry Client v.9.23.017 DLL Hijacking Exploit

Exploit for windows platform in category local exploits ======================================================== NCP Secure Entry Client v.9.23.017 DLL Hijacking Exploit ======================================================== / Exploit Title: NCP Secure Entry Client v.9.23.017 DLL Hijacking...

SeaMonkey DLL Hijacking (dwmapi.dll) Exploit

Exploit for windows platform in category local exploits ============================================ SeaMonkey DLL Hijacking dwmapi.dll Exploit ============================================ / Exploit Title: SeaMonkey DLL Hijacking Exploit dwmapi.dll Date: 07/09/2010 Author: Anastasios Monachos...

CVE-2010-3250

Unspecified vulnerability in Google Chrome before 6.0.472.53 allows remote attackers to enumerate the set of installed extensions via unknown vectors...

CVE-2010-3250

Unspecified vulnerability in Google Chrome before 6.0.472.53 allows remote attackers to enumerate the set of installed extensions via unknown vectors...

CVE-2010-3250

Removed by vendor...

CVE-2010-3250

CVE-2010-3250 concerns Google Chrome prior to version 6.0.472.53 and is described as an unspecified vulnerability that allows remote attackers to enumerate the set of installed extensions via unknown vectors. The NVD entry confirms this vulnerable condition, and OpenVAS entries list Google Chrome

CVE-2010-3250

Unspecified vulnerability in Google Chrome before 6.0.472.53 allows remote attackers to enumerate the set of installed extensions via unknown vectors...

Multiple vulnerabilities in third-party extensions

Several vulnerabilities have been found in the following third party TYPO3 extensions: Commenting system Backend Module commentsbe, Tiny Market hmtinymarket, Yet Another Calendar keyac, The official twitter tweet button for your page tweetbutton, XING Button xing Release Date: September 2, 2010...

MPLAB IDE .mcp .mcw DLL Hijacking

Exploit for windows platform in category local exploits ================================= MPLAB IDE .mcp .mcw DLL Hijacking ================================= / MPLAB IDE .mcw DLL Hijacking Date: August 31, 2010 Author: kB01 Software:...

Design/Logic Flaw

Untrusted search path vulnerability in Adobe Premier Pro CS4 4.0.0 314 MC: 160820 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse ibfs32.dll that is located in the same folder as a .pproj, .prfpset, .prexport, .prm,...

Microsoft Windows wscript.exe (XP) DLL Hijacking Exploit (wshfra.dll)

Exploit for windows platform in category local exploits ===================================================================== Microsoft Windows wscript.exe XP DLL Hijacking Exploit wshfra.dll ===================================================================== Microsoft Windows wscript.exe XP DL...

TeamViewer 5.0.8703 DLL Hijacking Exploit

/ Exploit Title: TeamViewer define DllExport declspec dllexport BOOL WINAPI DllMain HANDLE hinstDLL, DWORD fdwReason, LPVOID lpvReserved dllhijack; return 0; int dllhijack MessageBox0, "TeamViewer DLL Hijacking!", "DLL Message", MBOK; return 0;...

Mozilla Thunderbird 3.1.2 DLL Hijacking Exploit

/ Exploit Title: Mozilla Thunderbird DLL Hijacking Exploit dwmapi.dll Date: 26/08/2010 Author: h4ck3r47 http://twitter.com/hxteam Version: Latest Mozilla Thunderbird 3.1.2 Tested on: Windows XP SP3 The code is based on the exploit from "TheLeader" Vulnerable extensions: .eml .html / include defin...

Adobe Dreamweaver CS4 DLL Hijacking Exploit

/ Exploit Title: Adobe Dreamweaver CS4 DLL Hijacking Exploit ibfs32.dll Date: August 25, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Version: 10.0 Build 4117 Tested on: Windows 7 Ultimate x86 Vulnerable extensions: .asp .asa. aspx .php .php5 .cfm .tpl .asr .jsp etc Greetz:...