iDefense Security Advisory 12.08.09: Microsoft WordPad Word97 Converter Integer Overflow Vulnerability

iDefense Security Advisory 12.08.09 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 08, 2009 I. BACKGROUND WordPad is the default text editing application included with nearly all Windows versions since Windows 95. The Word97 converter is used to convert Word documents into the format...

CVE-2009-3586: CoreHTTP web server off-by-one buffer overflow vulnerability

census ID: census-2009-0003 URL: http://census-labs.com/news/2009/12/02/corehttp-web-server/ CVE ID: CVE-2009-3586 Affected Products: CoreHTTP web server versions = 0.5.3.1. Class: Improper Input Validation CWE-20, Failure to Constrain Operations within the Bounds of a Memory Buffer CWE-119 Remot...

Novell eDirectory 8.8 SP5 HTTPSTK Stack Overflow

!usr\bin\perl Novell eDirectory 8.8 SP5 HTTPSTK BoF Vuln - 0day Vulnerability found in Hellcode Labs. karak0rsan || murderkey infoathellcode.net || www.hellcode.net use WWW::Mechanize; use LWP::Debug qw+; use HTTP::Cookies; use HTTP::Request::Common;; $target=$ARGV0; if!$ARGV0 print "Novell...

Novell eDirectory - HTTPSTK Login Stack Overflow

Exploit Title: Novell eDirectory HTTPSTK Login Stack Overflow Vulnerability Date: 2009-11-17 Author: karak0rsan Software Link: downoad link if available Version: Novell eDirectory 8.8 SP5 HTTPSTK Tested on: relevant os Code : exploit code !usr\bin\perl Novell eDirectory 8.8 SP5 HTTPSTK BoF Vuln -...

Novell eDirectory 8.8 SP5 iConsole Buffer Overflow

!/usr/bin/python Novell eDirectory 8.8 SP5 iConsole BOF Vulnerability found by Hellcode Labs, Original POC http://downloads.securityfocus.com/vulnerabilities/exploits/36815.pl Exploit coded by Matteo Memelli | ryujin A-T offensive-security.com www.offensive-security.com Spaghetti & Pwnsauce -...

Novell eDirectory 8.8 SP5 - iConsole Buffer Overflow

Novell eDirectory 8.8 SP5 - iConsole Buffer Overflow !/usr/bin/python Novell eDirectory 8.8 SP5 iConsole BOF Vulnerability found by Hellcode Labs, Original POC http://downloads.securityfocus.com/vulnerabilities/exploits/36815.pl Exploit coded by Matteo Memelli | ryujin A-T offensive-security.com...

Novell eDirectory 8.8 SP5 iConsole Buffer Overflow

Exploit for unknown platform in category remote exploits ================================================== Novell eDirectory 8.8 SP5 iConsole Buffer Overflow ================================================== Title: Novell eDirectory 8.8 SP5 iConsole Buffer Overflow CVE-ID: OSVDB-ID: Author:...

Online Ad Site Hacked, Rigged to Serve Exploits

A high-profile online advertising Web site has been hacked and rigged to serve multiple exploits to Microsoft Windows users surfing the net with unpatched third party desktop software. According to a warning issued by Websense Security Labs, the malicious code was found on media-servers.net, whic...

iDefense Security Advisory 11.10.09: Microsoft Excel FEATHEADER Record Memory Corruption Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDefense Security Advisory 11.10.09 http://labs.idefense.com/intelligence/vulnerabilities/ Nov 10, 2009 I. BACKGROUND Excel is the spreadsheet application included with Microsoft Corp.'s Office productivity software suite. More information is availabl...

iDefense Security Advisory 11.10.09: Microsoft Word FIB Processing Stack Buffer Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDefense Security Advisory 11.10.09 http://labs.idefense.com/intelligence/vulnerabilities/ Nov 10, 2009 I. BACKGROUND Microsoft Word is a word processing application that is part of the Microsoft Office suite of products. For more information about...

CVE-2009-3860

Multiple insecure method vulnerabilities in Idefense Labs COMRaider allow remote attackers to create or overwrite arbitrary files via the 1 CreateFolder and 2 Copy methods. NOTE: this might only be a vulnerability in certain insecure configurations of Internet Explorer...

Design/Logic Flaw

Multiple insecure method vulnerabilities in Idefense Labs COMRaider allow remote attackers to create or overwrite arbitrary files via the 1 CreateFolder and 2 Copy methods. NOTE: this might only be a vulnerability in certain insecure configurations of Internet Explorer...

CVE-2009-3860

The CVE-2009-3860 entry concerns Idefense Labs COMRaider, with reported vulnerabilities in the CreateFolder and Copy methods that could allow remote attackers to create or overwrite arbitrary files. The flaw is noted to potentially occur in certain insecure configurations of Internet Explorer. Th...

CVE-2009-3860

Multiple insecure method vulnerabilities in Idefense Labs COMRaider allow remote attackers to create or overwrite arbitrary files via the 1 CreateFolder and 2 Copy methods. NOTE: this might only be a vulnerability in certain insecure configurations of Internet Explorer...

Malware Abundant in Twitter URLs

As many as one in every 500 web addresses posted on Twitter lead to sites hosting malware, according to researchers at Kaspersky Labs who have deployed a tool that examines URLs circulating in tweets. The spread of malware is aided by the popular use of shortened URLs on Twitter, which generally...

Novell eDirectory 8.8sp5 - Remote Buffer Overflow

Novell eDirectory 8.8sp5 - Remote Buffer Overflow PoC for Vulnerability: !usr\bin\perl Novell eDirectory 8.8 SP5 BoF Vuln - 0day Vulnerability found in Hellcode Labs. karak0rsan || murderkey infoathellcode.net || www.hellcode.net to GamaSEC: "please continue to discover and publish XSS BUGS.. you...

Novell eDirectory 8.8 SP5 Proof Of Concept

PoC for Vulnerability: !usr\bin\perl Novell eDirectory 8.8 SP5 BoF Vuln - 0day Vulnerability found in Hellcode Labs. karak0rsan || murderkey infoathellcode.net || www.hellcode.net to GamaSEC: "please continue to discover and publish XSS BUGS.. you can just do that ;"...

Novell eDirectory 8.8sp5 - Remote Buffer Overflow

PoC for Vulnerability: !usr\bin\perl Novell eDirectory 8.8 SP5 BoF Vuln - 0day Vulnerability found in Hellcode Labs. karak0rsan || murderkey infoathellcode.net || www.hellcode.net to GamaSEC: "please continue to discover and publish XSS BUGS.. you can just do that ;"...

VMware Fusion 2.0.5 - vmx86 kext Local Buffer Overflow (PoC)

/ vmware-pop.c Copyright c 2009 by VMware Fusion include include include include include define VMX86IOCTL 0x80045643 struct ioctlreq struct ioctlreqbuf uaddr; ; struct ioctlreqbuf char pad0x8; int len; char pad0xC; ; int main int argc, char argv struct ioctlreq req; struct ioctlreqbuf buf; int f...

Microsoft Says Google Chrome Frame is IE Security Risk

Google’s decision to introduce a plug-in that runs Google Chrome inside Microsoft’s Internet Explorer isn’t sitting well with the folks at Redmond. The Google Chrome Frame, which is presented as a seamless way to bring Google Chrome’s open web technologies and speedy JavaScript engine to Internet...