Memory corruption

The JIT compiler in Microsoft .NET Framework 4.0 on 64-bit platforms does not properly perform optimizations, which allows remote attackers to execute arbitrary code via a crafted .NET application that triggers memory corruption, aka ".NET Framework x64 JIT Compiler Vulnerability."...

CVE-2010-3228

The JIT compiler in Microsoft .NET Framework 4.0 on 64-bit platforms does not properly perform optimizations, which allows remote attackers to execute arbitrary code via a crafted .NET application that triggers memory corruption, aka ".NET Framework x64 JIT Compiler Vulnerability."...

CVE-2010-3228

The CVE-2010-3228 issue is a remote code execution vulnerability in the .NET Framework 4.0 JIT compiler on x64/Itanium. The root cause is incorrect optimizations in the JIT that lead to memory corruption when XBAPs or specially crafted Web content are processed. Exploitation requires a user to vi...

PT-2010-4664 · Microsoft · .Net Framework

Name of the Vulnerable Software and Affected Versions: Microsoft .NET Framework version 4.0 Description: A remote code execution issue exists in the Microsoft .NET Framework, specifically affecting the x64 and Itanium architectures. This is due to improper optimizations by the JIT compiler,...

MS10-077: Vulnerability in .NET Framework Could Allow Remote Code Execution (2160841)

The JIT compiler included with the version of the .NET Framework installed on the remote host optimizes code based on an incorrect assessment. If an attacker can trick a user on the affected host into viewing a specially crafted web page using a Web browser that can run XAML Browser Applications...

AoA Audio Extractor - Remote ActiveX SEH JIT Spray (ASLR + DEP Bypass)

AoA Audio Extractor - Remote ActiveX SEH JIT Spray ASLR + DEP Bypass Tested on my XPSP3+IE7+/nx=AlwaysOn, should work on Windows 7 with the proper return value. https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/14599.rar DrIDE-AoA-JIT.rar...

AoA Audio Extractor - Remote ActiveX SEH JIT Spray (ASLR + DEP Bypass)

Tested on my XPSP3+IE7+/nx=AlwaysOn, should work on Windows 7 with the proper return value. https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/14599.rar DrIDE-AoA-JIT.rar...

SigPlus Pro 3.74 Buffer Overflow

!-- =================================================================================================== SigPlus Pro v3.74 ActiveX Signature Capture LCDWriteString Remote BoF JIT Spray - aslr/dep bypass Author: mrme - @StevenSeeley Download:...

SigPlus Pro 3.74 - ActiveX LCDWriteString() Remote Buffer Overflow JIT Spray (ASLR + DEP Bypass)

SigPlus Pro 3.74 - ActiveX LCDWriteString Remote Buffer Overflow JIT Spray ASLR + DEP Bypass !-- =================================================================================================== SigPlus Pro v3.74 ActiveX Signature Capture LCDWriteString Remote BoF JIT Spray - aslr/dep bypass...

SigPlus Pro v3.74 ActiveX LCDWriteString() BoF JIT Spray aslr/dep bypass

Exploit for windows platform in category remote exploits ======================================================================== SigPlus Pro v3.74 ActiveX LCDWriteString BoF JIT Spray aslr/dep bypass ======================================================================== !--...

SigPlus Pro 3.74 - ActiveX 'LCDWriteString()' Remote Buffer Overflow JIT Spray (ASLR + DEP Bypass)

!-- =================================================================================================== SigPlus Pro v3.74 ActiveX Signature Capture LCDWriteString Remote BoF JIT Spray - aslr/dep bypass Author: mrme - @StevenSeeley Download:...

CVE-2010-1790

WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; does not properly handle just-in-time JIT compiled JavaScript stubs, which allows remote attackers to execute arbitrary code or cause a denial of service...

CVE-2010-1790

CVE-2010-1790 affects WebKit, including Safari on Mac OS X versions 10.5–10.6 and Windows, Safari 4.1.1 on Mac OS X 10.4, and webkitgtk prior to 1.2.6. The issue is a reentrancy-related flaw in handling just-in-time (JIT) compiled JavaScript stubs, enabling remote attackers to execute arbitrary c...

Fedora Update for mono FEDORA-2010-10433

Check for the Version of mono OpenVAS Vulnerability Test Fedora Update for mono FEDORA-2010-10433 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Fedora Update for mono FEDORA-2010-10332

Check for the Version of mono OpenVAS Vulnerability Test Fedora Update for mono FEDORA-2010-10332 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

[SECURITY] Fedora 12 Update: mono-2.4.3.1-2.fc12

The Mono runtime implements a JIT engine for the ECMA CLI virtual machine as well as a byte code interpreter, the class loader, the garbage collector, threading system and metadata access libraries...

[SECURITY] Fedora 13 Update: mono-2.6.4-1.fc13

The Mono runtime implements a JIT engine for the ECMA CLI virtual machine as well as a byte code interpreter, the class loader, the garbage collector, threading system and metadata access libraries...

Safari JS JITed shellcode - exec calc ASLR/DEP bypass

Safari JS JITed shellcode - exec calc ASLR/DEP bypass. Shellcode exploit for windows platform var SPRAY=""; var JIT=" "+ "var y="+ "0x22222222^"+ / START OF OFFSET / "0x22222222^"+ "0x22222222^"+ "0x22222222^"+ "0x22222222^"+ /we don't wanna NULLS in pointer/ "0x22222222^"+ "0x22222222^"+...

Safari 4.0.5 parent.close() Memory Corruption exploit (w/ASLR and DEP bypass)

No description provided by source. Download: http://www.exploit-db.com/sploits/safariparentclosesintsov.zip Unzip and run START.htm This exploit use JIT-SPRAY for DEP and ASLR bypass. jit-shellcode: system"notepad" 0day.html - use 0x09090101 address for CALL JITed shellcode. START.htm - iff.htm -...

Apple Safari 4.0.5 - parent.close() Memory Corruption (ASLR + DEP Bypass)

Apple Safari 4.0.5 - parent.close Memory Corruption ASLR + DEP Bypass Download: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/12614.zip safariparentclosesintsov.zip Unzip and run START.htm This exploit use JIT-SPRAY for DEP and ASLR bypass. jit-shellcode:...