[SA18740] Microsoft HTML Help Workshop ".hhp" Parsing Buffer Overflow

TITLE: Microsoft HTML Help Workshop ".hhp" Parsing Buffer Overflow SECUNIA ADVISORY ID: SA18740 VERIFY ADVISORY: http://secunia.com/advisories/18740/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: Microsoft HTML Help Workshop 4.x http://secunia.com/product/6967/...

Microsoft HTML Help Workshop (.hhp file) Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ================================================================ Microsoft HTML Help Workshop .hhp file Buffer Overflow Exploit ================================================================ / Microsoft HTML Help Workshop .hhp file Buffer...

HTML Help Workshop 4.74 (hhp Project File) Buffer Overflow

This module exploits a stack buffer overflow in HTML Help Workshop 4.74 By creating a specially crafted hhp file, an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/fileformat/hhw/hhpcompiledfilebof msf undefinedhhpcompiledfilebof show actions ...actions...

HTML Help Workshop 4.74 (hhp Project File) Buffer Overflow

This module exploits a stack buffer overflow in HTML Help Workshop 4.74 by creating a specially crafted hhp file. Module Options msf use exploit/windows/fileformat/hhw/hhpcontentfilebof msf undefinedhhpcontentfilebof show actions ...actions... msf undefinedhhpcontentfilebof set ACTION msf...

Microsoft HTML Help Workshop - '.hhp' Local Buffer Overflow (1)

/ Microsoft HTML Help Workshop .hhp file Buffer Overflow Exploit by bratax http://www.bratax.be/ - greets to: all my miffm00f buddies, BuzzDee and everyone else I forgot who should be in here - thx to: Curt Wilson @ SIUC maybe you don't know why but this exploit wouldn't exist if we didn't have...

CVE-2006-0525

CVE-2006-0525 affects multiple Adobe products (notably Photoshop CS2, Illustrator CS2, and Adobe Help Center) where a large number of .EXE and .DLL files are installed with write-access for the Everyone group. This local-privilege-escalation vulnerability allows bypassing protections via Trojan h...

Cerberus Help Desk < 2.7.0 Multiple Vulnerabilities

Binary data 3337.prm...

PHPGedView &lt;= 3.3.7 remote code execution

--- PHPGedView = 3.3.7 Arbitrary local/remote code execution & php injection --- software: site: http://www.phpgedview.net/ description: "PhpGedView is a revolutionary genealogy program which allows you to view and edit your genealogy on your website." - vulnerabilties:...

Multi-Format Shellcode Encoding Tool - Beta 2.0 w32

Multi-Format Shellcode Encoding Tool - Beta v2.0 w32. Shellcode exploit for generator platform / ,sSSSis ,sSSSs, Beta v2.0 w32. iS" dP dY" ,SP Encodes binary data to/from a variety of formats. .SP dSS" ,sS" Copyright C 2003-2005 by Berend-Jan Wever dS' Sb ,sY" .SP dSSP' sSSSSSSP...

CVE-2005-4025

Help Desk Reloaded Free Help Desk does not remove or protect install.php once installation is complete, which allows remote attackers to gain privileges via a direct request to install.php, then navigating to accountsetup.php and creating a new user...

CVE-2005-4025

Help Desk Reloaded Free Help Desk does not remove or protect install.php once installation is complete, which allows remote attackers to gain privileges via a direct request to install.php, then navigating to accountsetup.php and creating a new user...

CVE-2005-4025

CVE-2005-4025 affects Help Desk Reloaded Free Help Desk. The vulnerability arises because install.php is not removed/protected after installation, enabling remote attackers to gain privileges by directly requesting install.php and then accessing accountsetup.php to create a new user. Public sourc...

freeHelpInject.txt

------------------------------------------------------ Nightmare TeAmZ Advisory 018 ------------------------------------------------------ Date - 11/2005 Free Help Desk Software Inject Admin Account AFFECTED PRODUCTS ================= Free Help Desk http://www.helpdeskreloaded.com Overview:...

CVE-2004-2602

PHP remote file inclusion vulnerability in UberTec Help Center Live HCL before 1.2.7 allows remote attackers to execute arbitrary PHP code via a URL in the HCLpath parameter to pipe.php...

CVE-2004-2601

UberTec Help Center Live (HCL) is affected by a PHP remote file inclusion vulnerability (CVE-2004-2601). The issue arises from the SKIN_inner parameter in inc/skin.php, which can be manipulated via a URL to read local files and potentially execute PHP code on the server. Impact, per sources, is r...

CVE-2004-2603

CVE-2004-2603 is an XSS vulnerability in the Search module of UberTec Help Center Live (HCL). The flaw allows remote attackers to inject arbitrary web script or HTML via the find parameter to index.php. This description is supported by multiple sources in the connected documents referencing the s...

CVE-2004-2602

CVE-2004-2602 affects UberTec Help Center Live (HCL) prior to 1.2.7. It describes a PHP remote file inclusion vulnerability that allows an attacker to execute arbitrary PHP code by passing a URL in the HCL_path parameter to pipe.php. The vulnerability arises from unsafely including user-supplied ...

CVE-2004-2603

Cross-site scripting XSS vulnerability in the Search module in UberTec Help Center Live HCL allows remote attackers to inject arbitrary web script or HTML via the find parameter to index.php...

CVE-2004-2601

PHP remote file inclusion vulnerability in UberTec Help Center Live HCL allows remote attackers to read local files and possibly execute PHP code via a URL in the SKINinner parameter to inc/skin.php...

Help Center Live module.php file Parameter Local File Inclusion

The remote host is running Help Center Live, a help desk tool written in PHP. The remote version of Help Center Live fails to sanitize input to the 'file' parameter of the 'module.php' script before using it in a PHP includeonce function. Regardless of PHP's 'registerglobals' setting, an...