CVE-2010-3227

Stack-based buffer overflow in the UpdateFrameTitleForDocument method in the CFrameWnd class in mfc42.dll in the Microsoft Foundation Class MFC Library in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7...

How Visual Studio Makes Your Applications Vulnerable to Binary Planting

Microsoft Visual Studio can automatically make an application binary planting-positive i.e., vulnerable even when the developer makes no programming errors. Every MFC application seems to be automatically made vulnerable, with those statically linking MFC libraries actually having the vulnerable...

Microsoft Foundation Classes Could Allow Remote Code Execution Vulnerability (2387149)

This host is missing a critical security update according to Microsoft Bulletin MS10-074. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Visual Studio Insecure Library Loading Vulnerability

Microsoft Visual Studio is prone to an insecure library loading vulnerability. This VT has been deprecated and replaced by the VT with the OID: 1.3.6.1.4.1.25623.1.0.900285. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

Design/Logic Flaw

Untrusted search path vulnerability in the Microsoft Foundation Class MFC Library in Microsoft Visual Studio .NET 2003 SP1; Visual Studio 2005 SP1, 2008 SP1, and 2010; Visual C++ 2005 SP1, 2008 SP1, and 2010; and Exchange Server 2010 Service Pack 3, 2013, and 2013 allows local users to gain...

CVE-2010-3190

Untrusted search path vulnerability in the Microsoft Foundation Class MFC Library in Microsoft Visual Studio .NET 2003 SP1; Visual Studio 2005 SP1, 2008 SP1, and 2010; Visual C++ 2005 SP1, 2008 SP1, and 2010; and Exchange Server 2010 Service Pack 3, 2013, and 2013 allows local users to gain...

CVE-2010-3190

CVE-2010-3190 affects the Microsoft Foundation Class (MFC) library used by Visual Studio (2003 SP1; 2005 SP1/2008 SP1/2010) and Exchange Server 2010/2013. Vulnerability arises from untrusted search path loading of dwmapi.dll in the current working directory, enabling local privilege escalation th...

CVE-2010-3190

Untrusted search path vulnerability in the Microsoft Foundation Class MFC Library in Microsoft Visual Studio .NET 2003 SP1; Visual Studio 2005 SP1, 2008 SP1, and 2010; Visual C++ 2005 SP1, 2008 SP1, and 2010; and Exchange Server 2010 Service Pack 3, 2013, and 2013 allows local users to gain...

Microsoft Windows MFC Document Title Updating Buffer Overflow (MS10-074)

The Microsoft Foundation Class Library MFC is a library that wraps portions of the Windows API in C++ classes, including functionality that enables them to use a default application framework. A stack buffer overflow vulnerability has been reported in Microsoft Windows MFC library mfc42.dll. The...

iDefense Security Advisory 07.28.09: Multiple Vendor Microsoft ATL/MFC ActiveX Security Bypass Vulnerability

iDefense Security Advisory 07.28.09 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 28, 2009 I. BACKGROUND Microsoft's Component Object Model COM was designed to allow interoperability between disjointed software components. It is a standardized interface solution to the programming...

Microsoft MFC库CFileFind::FindFile缓冲区溢出漏洞

Microsoft Windows是一款流行的操作系统。 Microsoft Windows包含的MFC库处理CFileFind::FindFile方法存在缓冲区溢出，远程攻击者可以利用漏洞以链接此库的应用程序权限执行任意指令。 问题存在于MFC库包含的FindFile函数中，FindFile函数管理垮文件系统文件搜索，可指定文件类型进行搜索。FindFile函数为buffer1分配内存，buffer1用于存储function2的第一个参数，而没有对其大小进行检查。这个数据用于开始一个搜索。...

Microsoft MFC FindFile function heap buffer overflow

Overview A buffer overflow vulnerability in the Microsoft Foundation Class MFC Library could allow an attacker to execute arbitrary code on an affected system. Description The Microsoft Foundation Class MFC Library is a Microsoft library that wraps parts of the Windows API in C++ classes. The MFC...

Heap overflow

Heap-based buffer overflow in the FileFind::FindFile method in 1 MFC42.dll, 2 MFC42u.dll, 3 MFC71.dll, and 4 MFC71u.dll in Microsoft Foundation Class MFC Library 8.0, as used by the ListFiles method in hpqutil.dll 2.0.0.138 in Hewlett-Packard HP All-in-One and Photo & Imaging Gallery 1.1 and...

CVE-2007-4916

Heap-based buffer overflow in the FileFind::FindFile method in 1 MFC42.dll, 2 MFC42u.dll, 3 MFC71.dll, and 4 MFC71u.dll in Microsoft Foundation Class MFC Library 8.0, as used by the ListFiles method in hpqutil.dll 2.0.0.138 in Hewlett-Packard HP All-in-One and Photo & Imaging Gallery 1.1 and...

CVE-2007-4916

Heap-based buffer overflow in the FileFind::FindFile method in 1 MFC42.dll, 2 MFC42u.dll, 3 MFC71.dll, and 4 MFC71u.dll in Microsoft Foundation Class MFC Library 8.0, as used by the ListFiles method in hpqutil.dll 2.0.0.138 in Hewlett-Packard HP All-in-One and Photo & Imaging Gallery 1.1 and...

CVE-2007-4916

CVE-2007-4916 is a heap-based buffer overflow in Microsoft Foundation Class (MFC) Library’s FileFind::FindFile() used by MFC42.dll/MFC42u.dll/MFC71.dll/MFC71u.dll and by Hewlett-Packard HP-related software (hpqutil.dll 2.0.0.138, HP All-in-One, Photo & Imaging Gallery 1.1). The overflow occurs wh...

[GOODFELLAS-VULN] FileFind class from MFC Library cause heap overflow

:. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: FileFind class from MFC Library cause heap overflow. =================================================== Internal ID: VULWKU200706142 introduction ------------ The GOODFELLAS security research team has found a bug in...

HP ActiveX (hpqutil.dll ListFiles hpqutil.dll) Remote Heap Overflow PoC

No description provided by source. :. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: ActiveX hpqutil!ListFiles hpqutil.dll - Remote heap overflow. ============================================================= Internal ID: VULWAR200706041 introduction ------------...

Microsoft MFC Library - CFileFind::FindFile Buffer Overflow

source: https://www.securityfocus.com/bid/25697/info The CFileFind::FindFile method in the MFC library for Microsoft Windows is prone to a buffer-overflow vulnerability because the method fails to perform adequate boundary checks of user-supplied input. Successfully exploiting this issue may allo...

Microsoft MFC Library - CFileFind::FindFile Buffer Overflow

Microsoft MFC Library - CFileFind::FindFile Buffer Overflow source: https://www.securityfocus.com/bid/25697/info The CFileFind::FindFile method in the MFC library for Microsoft Windows is prone to a buffer-overflow vulnerability because the method fails to perform adequate boundary checks of...