3461 matches found
Apple Mac OSX 10.4.x - iMovie HD .imovieproj Filename Format String
Apple Mac OSX 10.4.x - iMovie HD .imovieproj Filename Format String source: https://www.securityfocus.com/bid/22326/info Multiple products for Mac OS X are prone to multiple remote format-string vulnerabilities. The affected applications include Help Viewer, Safari, iPhoto, and iMovie. Exploiting...
Apple Mac OSX 10.4.x - iMovie HD '.imovieproj' Filename Format String
source: https://www.securityfocus.com/bid/22326/info Multiple products for Mac OS X are prone to multiple remote format-string vulnerabilities. The affected applications include Help Viewer, Safari, iPhoto, and iMovie. Exploiting these issues can allow attacker-supplied data to be written to...
Apple Mac OSX 10.4.x - iPhoto 'photo://' URL Handling Format String
source: https://www.securityfocus.com/bid/22326/info Multiple products for Mac OS X are prone to multiple remote format-string vulnerabilities. The affected applications include Help Viewer, Safari, iPhoto, and iMovie. Exploiting these issues can allow attacker-supplied data to be written to...
Apple Mac OSX 10.4.x - Safari window.console.log Format String
source: https://www.securityfocus.com/bid/22326/info Multiple products for Mac OS X are prone to multiple remote format-string vulnerabilities. The affected applications include Help Viewer, Safari, iPhoto, and iMovie. Exploiting these issues can allow attacker-supplied data to be written to...
Microsoft Help Workshop .HPJ file HLP field buffer overflow
Added: 01/26/2007 CVE: CVE-2007-0427 BID: 22135 OSVDB: 31899 Background Microsoft Help Workshop is a standard component of Microsoft Visual Studio and is also available as a standalone product. Problem A buffer overflow vulnerability in Microsoft Help Workshop allows command execution when a user...
Microsoft Help Workshop .HPJ file HLP field buffer overflow
Added: 01/26/2007 CVE: CVE-2007-0427 BID: 22135 OSVDB: 31899 Background Microsoft Help Workshop is a standard component of Microsoft Visual Studio and is also available as a standalone product. Problem A buffer overflow vulnerability in Microsoft Help Workshop allows command execution when a user...
Microsoft Help Workshop .HPJ file HLP field buffer overflow
Added: 01/26/2007 CVE: CVE-2007-0427 BID: 22135 OSVDB: 31899 Background Microsoft Help Workshop is a standard component of Microsoft Visual Studio and is also available as a standalone product. Problem A buffer overflow vulnerability in Microsoft Help Workshop allows command execution when a user...
Microsoft Help Workshop .HPJ file HLP field buffer overflow
Added: 01/26/2007 CVE: CVE-2007-0427 BID: 22135 OSVDB: 31899 Background Microsoft Help Workshop is a standard component of Microsoft Visual Studio and is also available as a standalone product. Problem A buffer overflow vulnerability in Microsoft Help Workshop allows command execution when a user...
Microsoft Help Workshop .HPJ文件缓冲区溢出漏洞
Microsoft Help Workshop是一款用于构建和管理帮助对象的应用工具。 Microsoft Help Workshop处理畸形.hpj文件存在问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 问题存在于'OPTIONS'段中的'HLP'字段中的文件路径变量HelpFilePathString01缺少正确的边界条件检查，当字符串长度超过256字节，程序可导致缓冲区溢出。攻击者构建一个恶意.hpj文件，当使用Microsoft Help Workshop处理时可导致缓冲区溢出，精心构建提交数据可能以应用程序进程权限执行任意指令。 Microsoft Help...
CVE-2007-0427
Stack-based buffer overflow in Microsoft Help Workshop 4.03.0002 allows user-assisted remote attackers to execute arbitrary code via a help project .HPJ file with a long HLP field in the OPTIONS section...
Stack overflow
Stack-based buffer overflow in Microsoft Help Workshop 4.03.0002 allows user-assisted remote attackers to execute arbitrary code via a help project .HPJ file with a long HLP field in the OPTIONS section...
CVE-2007-0427
Stack-based buffer overflow in Microsoft Help Workshop 4.03.0002 allows user-assisted remote attackers to execute arbitrary code via a help project .HPJ file with a long HLP field in the OPTIONS section...
CVE-2007-0427
The CVE-2007-0427 case concerns Microsoft Help Workshop 4.03.0002, where a stack-based buffer overflow occurs in the HPJ OPTIONS section. A long HLP field in an HPJ file can lead to user-assisted remote code execution, with impact described as arbitrary code run in the context of the current user...
Microsoft Help Workshop 4.03.0002 (.HPJ) Buffer Overflow Exploit
No description provided by source. // // // PoC exploit for .HPJ project files buffer overflow vulnerability in // Microsoft Help Workshop v4.03.0002 // The tool is standard component of MS Visual Studio v6.0 and 2003 .NET // // vulnerability found / exploit built by porkythepig // //...
Microsoft Help Workshop buffer overflow
Buffer overflow on .cnt / .hpj files parsing...
cnt-exploit.txt
Description: There is a stack based memory corruption in Microsoft Help Workshop while processing .CNT Help Contents files, The tool is standard component of Microsoft Visual Studio 6.0 and 2003 .NET for building and managing help projects and could be also downloaded alone from the Microsoft...
Help project files (.HPJ) buffer overflow vulnerability in Microsoft Help Workshop
Advisory: ///////// Microsoft Help Workshop is prone to stack based memory corruption vulnerability during processing .HPJ help project files, caused by the lack of input data boundary check. It could be exploited by malicious entity to execute arbitrary code within the remote user context...
CVE-2007-0352
Stack-based buffer overflow in Microsoft Help Workshop 4.03.0002 allows user-assisted remote attackers to execute arbitrary code via a crafted .cnt file composed of lines that begin with an integer followed by a space and a long string...
Stack overflow
Stack-based buffer overflow in Microsoft Help Workshop 4.03.0002 allows user-assisted remote attackers to execute arbitrary code via a crafted .cnt file composed of lines that begin with an integer followed by a space and a long string...
CVE-2007-0352
Stack-based buffer overflow in Microsoft Help Workshop 4.03.0002 allows user-assisted remote attackers to execute arbitrary code via a crafted .cnt file composed of lines that begin with an integer followed by a space and a long string...