RealNetworks RealGames StubbyUtil.ShellCtl.1 ActiveX Control Multiple Remote Command Execution

No description provided by source. RealNetworks RealGames StubbyUtil.ShellCtl.1 ActiveX Control InstallerDlg.dll v2.6.0.445 Multiple Remote Commands Execution and Code Execution Vulnerabilities tested against Internet Explorer 9, Vista sp2 download url: http://www.gamehouse.com/ background: When...

MS IE 4.0.1/5.0 Import/Export Favorites Vulnerability

No description provided by source. Microsoft Internet Explorer 4.0.1 for Windows 98/Windows NT 4.0,Microsoft Internet Explorer 5.0 for Windows 2000/Windows 95/Windows 98/Windows NT 4 Import/Export Favorites Vulnerability source: http://www.securityfocus.com/bid/627/info The ImportExportFavorites...

Microsoft Internet Explorer 6.0 File Attachment Script Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5450/info An error has been reported in Microsoft Internet Explorer 6, which may allow malicious file attachments to execute arbitrary code in the context of the local system. HTM files are associated with Internet...

Microsoft Internet Explorer 6.0 Pop-up Window Title Bar Spoofing Weakness

No description provided by source. source: http://www.securityfocus.com/bid/12602/info Internet Explorer is reported prone to a pop-up window title bar spoofing weakness. The weakness is reported to exist due to a flaw that manifests in script-initiated pop-up windows. This issue may be leveraged...

Microsoft Outlook Express 5/6 MHTML URL Handler File Rendering Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5473/info Microsoft Outlook Express introduced a URL handler called MHTML MIME Encapsulation of Aggregate HTML. This allows Internet Explorer to pass MHTML files to Outlook Express for rendering. The MHTML URL handler doe...

MS IE 5/6,MS ISA Server 2000,MS Proxy Server 2.0 Gopher Client Buffer Overflow

No description provided by source. source: http://www.securityfocus.com/bid/4930/info Microsoft Internet Explorer, Proxy Server and ISA Server includes a gopher client. Reportedly, these clients are vulnerable to a buffer overflow condition. The vulnerability exists in the component that parses...

Microsoft Internet Explorer 5.5 Index.dat Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1978/info IE 5.5 and possibly other versions stores recently visited URLs and cache folder names in a local file called index.dat. This file is kept in the following known locations: Windows 9x: C:/WINDOWS/Temporary...

avtech software (avc781viewer.dll) activex Multiple Vulnerabilities

No description provided by source. Title: AVTECH Software AVC781Viewer.dll ActiveX Multiple Remote Vulnerabilities Vendor: AVTECH Software, Inc. Product Web Page: http://www.avtech.com Summary: AVTECH Software, a private corporation founded in 1988, is a computer software and hardware manufacture...

Microsoft Internet Explorer 5.0.1/5.5 'mstask.exe' CPU Consumption Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2129/info Microsoft Internet Explorer ships with a task scheduler engine mstask.exe. By default mstask.exe listens between port 1025 to 1220. It is possible for a user to cause CPU utilization DoS. Sending malformed...

Tom Sawyer Software GET Extension Factory Remote Code Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Internet Explorer CSS Recursive Import Use After Free

No description provided by source. $Id: ms11003iecssimport.rb 11730 2011-02-08 23:31:44Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...

Microsoft OWC Spreadsheet msDataSourceObject Memory Corruption

No description provided by source. $Id: ms09043owcmsdso.rb 9893 2010-07-20 23:28:47Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

vBulletin 4.0.8 PL1 XSS Filter Bypass within Profile Customization

No description provided by source. Exploit Title: vBulletin 4.0.8 PL1 - XSS Filter Bypass within Profile Customization Google Dork: Powered by vBulletin Version 4.0.8 -vBulletin.com is now powered by Date: 20th November 2010 Author: MaXe Software Link: Commercial software. Version: 4.0.8 PL1...

MS Internet Explorer <= 6.0.2900 SP2 (CSS Attribute) Denial of Service

No description provided by source. !-- Internet Explorer = 6.0.2900 SP2 suffers from a DoS vulnerability in which a remote users Internet Explorer session can be crashed when hovering their cursor over a specially made table. The fault occurs when the position CSS attribute is set to a table. Thi...

Internet Download Accelerator 5.8 - Remote Buffer Overflow PoC

No description provided by source. !--========================== ================================================== Internet Explorer ver 7.0.5730.13 Tested On Windows SP2 Inj3ct0r team & yogyacarderlink team Bug discovered by eidelweiss Affected Software: idaiehlp.dll BHO: IE 4.x-6.x BHO for...

Microsoft Internet Explorer 5 Custom HTTP Error HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7939/info An issue has been reported for Microsoft Internet Explorer that may result in HTML injection attacks. The vulnerability exists when IE is used to display custom HTTP error messages also known as Friendly HTTP...

Microsoft Internet Explorer 5.0.1 - Cached Content Cross Domain Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/35200/info Microsoft Internet Explorer is prone to a cross-domain information-disclosure vulnerability because the application fails to properly enforce the same-origin policy. An attacker can exploit this issue to access...

Microsoft Internet Explorer 6 Absolute Position Block Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8758/info A problem has been reported in Microsoft Internet Explorer when absolute positioning is used. Because of this, it may be possible to deny service to users of the browser. This issue may be due to memory...

PPLive <= 1.9.21 (/LoadModule) URI Handlers Argument Injection Vuln

No description provided by source. -------------------------------------------------------------------------------- PPLive = 1.9.21 uri handlers /LoadModule remote argument injection by Nine:Situations:Group::strawdog -------------------------------------------------------------------------------...

Microsoft Windows XP/2000 showHelp CHM File Execution Weakness

No description provided by source. source: http://www.securityfocus.com/bid/9320/info Microsoft Windows is prone to a security flaw in the implementation of the showHelp function. Microsoft previously released patches that provide security measures to prevent abuse of the showHelp method to...