CVE-2013-4156: OpenOffice DOCM Memory Corruption Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2013-4156 OpenOffice DOCM Memory Corruption Vulnerability Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache OpenOffice 3.4.0 and 3.4.1, on all platforms. Predecessor versions of OpenOffice.org may be also affecte...

CVE-2013-3129

Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5; Silverlight 5 before 5.1.20513.0; win32k.sys in the kernel-mode drivers, and GDI+, DirectWrite, and Journal, in Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows ...

Immunity Canvas: IE_EXECCOMMAND

Name| ieexecCommand ---|--- CVE| CVE-2012-4969 Exploit Pack| CANVAS Description| ieexecCommand Notes| CVE Name: CVE-2012-4969 VENDOR: Microsoft Notes: VersionsAffected: Repeatability: Infinite References: 'http://technet.microsoft.com/en-us/security/advisory/2757760' Date public: 09/17/2012 MSADV...

Flame Malware Uses Forged Microsoft Certificate to Validate Components

Microsoft has found that some components of the Flame malware were signed using a forged digital certificate that the attackers were able to create by exploiting a weakness in the way that Microsoft’s Terminal Services allows customers to sign code with Microsoft certificates. The company has sen...

Microsoft.com Cross Site Scripting

Exploit Title: Microsoft Cross Site Scripting Vulnerability Date: 08/03/2012 - 06:21pm Author: Ryuzaki Lawlet Website: http://jusryuz.blogspot.com Tested On: WinXP, Win 7 Platform: - Email: [email protected] $ Vulnerable : http://www.microsoft.com/en-us/together/possibilities.aspx?hdrFo=mthdr= ...

[SECURITY] [DSA 2324-1] wireshark security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2324-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 20, 2011 http://www.debian.org/security/faq -...

Microsoft Vulnerability in Bluetooth Stack Could Allow Remote Code Execution

Microsoft Vulnerability in Bluetooth Stack Could Allow Remote Code Execution The single Critical vulnerability in today's batch of security updates addresses an issue in the Bluetooth stack. Your workstations' risk to this vulnerability varies, depending on a number of factors. I'd like to use th...

Fedora Update for libmspack FEDORA-2010-14135

Check for the Version of libmspack OpenVAS Vulnerability Test Fedora Update for libmspack FEDORA-2010-14135 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

opera -- multiple vulnerabilities

The Opera Desktop Team reports: Fixed an issue that allowed cross-domain checks to be bypassed, allowing limited data theft using CSS, as reported by Isaac Dawson. Fixed an issue where manipulating the window could be used to spoof the page address. Fixed an issue with reloads and redirects that...

openSUSE Security Update : MozillaFirefox (openSUSE-SU-2010:0358-2)

Mozilla Firefox was updated to version 3.5.10, fixing various bugs and security issues. MFSA 2010-33 / CVE-2008-5913: Security researcher Amit Klein reported that it was possible to reverse engineer the value used to seed Math.random. Since the pseudo-random number generator was only seeded once...

A Good Year for Security Collaboration

It seems like just yesterday when I was at Black Hat. Now as I get ready to fly to Las Vegas again, I look forward to seeing a lot of security researchers, hearing their latest exploits and how they fared over the last 352 days. At the same time, it is a great opportunity to look back at the past...

Microsoft Visual InterDev 6.0 SP6 - '.sln' Local Buffer Overflow

usage: exploit.py FileName import sys print "------------------------------------------------------------------------" print ' Microsoft Visual InterDev 6.0 SP6 ".sln" files Local Buffer Overflow' print " author: shinnai" print " mail: shinnaiatautisticidotorg" print " site:...

Immunity Canvas: SPEECH

Name| speech ---|--- CVE| CVE-2007-2222 Exploit Pack| CANVAS Description| Microsoft Speech API 4v MS07-033 Notes| CVE Name: CVE-2007-2222 VENDOR: Microsoft MSADV: MS07-033 Repeatability: Infinite client side - no crash MSRC: http://www.microsoft.com/technet/security/Bulletin/MS07-033.mspx CVE URL...

Immunity Canvas: MS06_070

Name| ms06070 ---|--- CVE| CVE-2006-4691 Exploit Pack| CANVAS Description| Microsoft Workstation Service Overflow Notes| CVE Name: CVE-2006-4691 VENDOR: Microsoft Notes: This exploit actually needs a domain reachable from the attacked machine Platforms Tested: MSADV: MS06-070 References:...

Boo! Don't tell Microsoft: shield genuine Feedback the program was born-vulnerability warning-the black bar safety net

A company called Firewall Leak Tester personal firewall is a software development company launched the first dedicated shield Microsoft genuine validation program WGA“to Microsoft call home”tools for software-RemoveWGA to. “Once Microsoft's WGA authentication tool determines that you are using...

Immunity Canvas: MS05_043

Name| ms05043 ---|--- CVE| CVE-2005-1984 Exploit Pack| CANVAS Description| Windows Print Spooler Overflow Notes| References: http://www.microsoft.com/technet/security/Bulletin/MS05-043.mspx CVE Name: CVE-2005-1984 VENDOR: Microsoft MSADV: MS05-043 Repeatability: One shot Note: Run setthreadtoken0...

Immunity Canvas: MS05_017

Name| ms05017 ---|--- CVE| CVE-2005-0059 Exploit Pack| CANVAS Description| Microsoft Message Queuing Service Overflow Notes| CVE Name: CVE-2005-0059 VENDOR: Microsoft MSADV: MS05-017 Repeatability: One shot Note: Windows XP needs a valid Username and Password. References:...

wins_ms04_045.pm

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

Immunity Canvas: MS04_045

Name| ms04045 ---|--- CVE| CVE-2004-0567 Exploit Pack| CANVAS Description| WINS Name Validation Stack Overflow Notes| CVE Name: CVE-2004-0567 VENDOR: Microsoft MSADV: MS04-045 VersionsAffected: Repeatability: One shot References: http://www.microsoft.com/technet/security/Bulletin/MS04-045.mspx CV...

ACROS Security: Poisoning Cached HTTPS Documents in Internet Explorer

Below please find our public report for the HTTPS cache poisoning issue in Internet Explorer. It includes workarounds for server operators, allowing them to protect their web services without having to rely on users to patch their browsers. Regards, ACROS Security http://www.acrossecurity.com...