27 matches found
EUVD-2008-5510
Malware in sbrugna...
EUVD-2008-5521
Malware in sbrugna...
EUVD-2008-5504
Malware in sbrugna...
EUVD-2013-3791
Malware in sbrugna...
EUVD-1999-1455
Malware in sbrugna...
EUVD-2008-5499
Malware in sbrugna...
EUVD-2008-5500
Malware in sbrugna...
EUVD-2021-13997
Malware in sbrugna...
Crimea “manifesto” deploys VBA Rat using double attack vectors
This blog post was authored by Hossein Jazi. On July 21, 2021, we identified a suspicious document named "Манифест.docx" "Manifest.docx" that downloads and executes two templates: one is macro-enabled and the other is an html object that contains an Internet Explorer exploit. While both technique...
How to Detect IE Zero-day Exploit Used to Deploy Korplug Malware
Recently, Microsoft issued an Emergency patch for a zero-day vulnerability in Internet Explorer that is being exploited to deploy Korplug malware on vulnerable PCs. Korplug, a known variant of PlugX, is a Trojan that creates a backdoor used for information stealing on infected computers. In one o...
CVE-2005-0148
Thunderbird before 0.9, when running on Windows systems, uses the default handler when processing javascript: links, which invokes Internet Explorer and may expose the Thunderbird user to vulnerabilities in the version of Internet Explorer that is installed on the user's system. NOTE: since the...
Microsoft Internet Explorer (Windows XP SP2) - HTML Help Control Local Zone Bypass
Microsoft Internet Explorer Windows XP SP2 - HTML Help Control Local Zone Bypass // sp2rc.htm // localpage.HHClick; setTimeout"inject.HHClick",100; // writehta.txt // Dim Conn, rs Set Conn = CreateObject"ADODB.Connection" Conn.Open "Driver=Microsoft Text Driver .txt; .csv;" & "Dbq=http://server;"...
Microsoft Windows Kernel - '.ANI' File Parsing Crash
111111111111111111111111111111 // milw0rm.com 2004-12-25...
[Full-Disclosure] MSIE <IFRAME> and <FRAME> tag NAME property bufferoverflow PoC exploit (was: python does mangleme (with IE bugs!))
Since nobody else posted an exploit I figured I might aswell slap the BoF together with my default exploit JavaScript for the scriptkiddies to rejoice and the sysadmins to worry about. TECHNICAL The JavaScript creates a large amount of heap-blocks filled with 0x0D byte nopslides followed by the...
MS Internet Explorer (IFRAME Tag) Buffer Overflow Exploit
Exploit for unknown platform in category remote exploits ========================================================= MS Internet Explorer IFRAME Tag Buffer Overflow Exploit ========================================================= BoF PoC exploit iS' ,SS" Copyright C 2003, 2004 by Berend-Jan Wever...
MS Internet Explorer Remote Null Pointer Crash (mshtml.dll)
No description provided by source. centera href=::%7bRight Click aOn Me And Click "Save Target As"/a // milw0rm.com 2004-08-04...
MS Internet Explorer Overly Trusted Location Cache Exploit
Exploit for unknown platform in category dos / poc ========================================================== MS Internet Explorer Overly Trusted Location Cache Exploit ========================================================== Overly Trusted Location Variant Method Cache Vulnerability GO! This...
An analysis of the 180 Solutions Trojan
An analysis of the 180 Solutions Trojan Introduction Just when I though it was save to once more to use internet explorer I received an email bringing my attention to this webpage http://216.130.188.219/ei2/installer.htm that according to him used an exploit that affected fully patched internet...
[Full-Disclosure] Microsoft's Explorer and Internet Explorer long share name buffer overflow.
Microsoft Explorer and Internet Explorer Long Share Name Buffer Overflow. Author: Rodrigo Gutierrez [email protected] Affected: MS Internet Explorer, MS Explorer explorer.exe Windows XPAll, Windows 2000All, Windows 98All, Windows meAll Not Tested: Windows 2003 Vendor Status: i notified the...
Microsoft Windows HTML conversion library vulnerable to buffer overflow
Overview A buffer overflow vulnerability exists in a shared HTML conversion library used by Internet Explorer IE and other Windows applications. By enticing a victim to view an HTML document using IE, an attacker could execute arbitrary code with the victim's privileges or cause IE to crash...