1379 matches found
Immunity Canvas: IE_PEERS_SETATTRIBUTE
Name| iepeerssetattribute ---|--- CVE| CVE-2010-0806 Exploit Pack| CANVAS Description| iepeerssetattribute Notes| CVE Name: CVE-2010-0806 VENDOR: Microsoft Notes: This is the iepeers exploit for IE 6/7, first discovered in the wild in March, 2010. It will work on both DEP and non-DEP machines and...
Microsoft Windows .ani文件tagBITMAPINFOHEADER拒绝服务漏洞
BUGTRAQ ID: 38579 Microsoft Windows是微软发布的非常流行的操作系统。 ANI文件将动画光标的每一帧存储为文件中的打包位图，每个位图的BITMAPINFOHEADER中的每个DWORD biClrUsed成员都可能导致Windows API函数分配任意数量的字节，并向新分配的内存中拷贝进同样数量的数据。由于代码没有检查是否有上述数量的数据可用，这可能导致拷贝操作读过为ANI文件所分配内存的边界。 如果很小的ANI文件对biClrUsed指定了很大的值，内存拷贝操作就可能越界，进入未分配的内存区。IE等应用程序使用这些Windows...
Microsoft Warns of New IE Code Execution Flaw
Microsoft’s security response team is investigating reports of a potentially dangerous code execution vulnerability in its flagship Internet Explorer browser. The company warned that an attacker could host a maliciously crafted web page and run arbitrary code if they could convince a user to visi...
Despite Security Hiccups, IE6 Usage Still High
Despite widespread calls to boycott IE 6 and Microsoft‘s plans to retire support for the browser, 19% of respondents in a Virus Bulletin poll said that they are still running the browser, whether at home, at work, or both. In VB‘s poll, 15% of respondents said they were running the browser at wor...
Winamp 5.57 - 'Browser' IE Denial of Service
From: Indonesia Tested Win xpsp2 Greetz: no thanks : Usage: change your winamp skin with bento, to open browser press ALT + X drag or load file to browser and keep smile : +---------------------------------------------------------------------------------+ Proud to be Muslim --...
Winamp 5.57 (Browser) IE Denial of Service Exploit
Exploit for unknown platform in category dos / poc ================================================== Winamp 5.57 Browser IE Denial of Service Exploit ================================================== From: Indonesia Tested Win xpsp2 Greetz: no thanks : Usage: change your winamp skin with bento,...
Worldweaver DX Studio Player <= 3.0.29 shell.execute() Command Execution
$Id: dxstudioplayerexec.rb 8541 2010-02-17 20:14:40Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
TinyMCE - Javascript WYSIWYG Editor xss/sql injection vurnerebility
=================================================================== TinyMCE - Javascript WYSIWYG Editor xss/sql injection vurnerebility =================================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0...
TinyMCE WYSIWYG Editor - Multiple Vulnerabilities
Vurnerebility: Js tinymce/tinymce WYSIWYGjava script vurnerebility xss--popup & SQl implemented + Language : Java--,Xml + lisences : LGPL + Vendor : Moxiecode Systems AB + support : IE7J0/IE6.0/NS8.1-IE/NS8.1-G/FF2.0/O9.02; + Category : bug report + vendor : http://tinymce.moxiecode.com/ +...
Microsoft IE 6&7 Crash Exploit
Securitylab.ir Application Info: Name: Microsoft IE Version: 6 & 7 Tested on : XPSP1/SP2/SP3 Vulnerability Info: Type: Crash Risk: Medium Vulnerability: IE.html scriptdocument.createElement"html".outerHTML/script Discoverd By: Pouya Daneshmand Website: http://securitylab.ir Contacts:...
Firefox Gets Browser Boost From IE Attacks
Mozilla yesterday reported a “huge increase” in downloads of Firefox in Germany after that country’s computer security agency urged users of Microsoft’s Internet Explorer to dump the browser and run a rival instead. Read the full article. Computerworld...
Tips For Managing The IE Aurora Attack
Here are some steps Microsoft and other security firms recommend you can take now to help defend yourself against the IE Aurora attacks. Read the full article. Dark Reading...
Code to mitigate IE event zero-day (CVE-2010-0249)
Here's a mitigation for the CVE-2010-0249 IE createEventObject srcElement zero-day. Quite simply, it just disables the createEventObject method by mangling its name in memory. If anyone knows an important web application that uses createEventObject, please respond to the mailing list. Use this co...
Attacks Continuing Against IE Flaw as Microsoft Preps Patch
Microsoft officials said on Sunday that they are continuing to investigate the attacks that are exploiting the unpatched flaw in Internet Explorer, but that the attacks right now are limited to specifically targeted activity against enterprise networks. The company said that it doesn’t look like...
Operation Aurora: the attack on Google code exposure-vulnerability warning-the black bar safety net
TechWeb's DarkReading published an article that revealed iDefense has already recovered before the release of the Adobe PDF vulnerability cause Google is to attack the statement, admitted McAfee said the IE vulnerability is the disaster source. The article also gives a link to the open source...
PHP-Fusion Teams Structure Infusion Addon SQL Injection Vulnerability
Exploit for php platform in category web applications Date: 16-1-2010 Author: Saif El-Sherei Software Link: http://www.php-fusion.co.uk/infusions/addondb/view.php?addonid=120 Version: PHP-fusion 7.01..03, TeamStructure Infusionall versions Tested on: Firefox 3.0.15, , IE 8 Info: Plugin that allow...
AwingSoft Winds3D Player 3.5 SceneURL Download and Execute
$Id: awingsoftwinds3dsceneurl.rb 7724 2009-12-06 05:50:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
CVE-2009-3671
CVE-2009-3671 concerns Microsoft Internet Explorer 8. The issue is a memory handling vulnerability where an object that is either not properly initialized or has been deleted is accessed, causing memory corruption and enabling remote code execution. The vulnerability is described as Uninitialized...
Microsoft IE PDF文件信息泄露漏洞
BUGTRAQ ID: 37117 CVECAN ID: CVE-2009-4073 Internet Explorer是Windows操作系统中默认捆绑的WEB浏览器。 Internet Explorer中的打印功能允许远程攻击者发现本地路径名和用户名。在使用Internet Explorer以PDF形式打印本地保存的网页时，从本地网页所生成的PDF文档的dc:title中可能泄露文件路径的前63个字节。 Microsoft Internet Explorer 8.0 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer...
Researchers Say IE Exploit Code 'Unreliable'
Researchers have released code that can compromise Microsoft’s Internet Explorer browser, but the software is not as reliable as first thought. Read the full article. Computerworld...