Microsoft Windows内核GDI EMF/WMF解析远程代码执行漏洞（MS09-006）

BUGTRAQ ID: 34015 CVECAN ID: CVE-2009-0085 Microsoft Windows是微软发布的非常流行的操作系统。 Windows的GDI内核组件没有正确地验证用户态所传送输入，如果用户受骗查看了恶意网站上的特制EMF或WMF图形文件的话，就可能导致在系统上执行任意内核态代码。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP1 Microsoft Windows Vista Microsoft Windows Server 2008...

Got All Media 7.0.0.3 (t00t) Remote Denial of Service Exploit

Summary Got All Media is a Home theater PC application for Microsoft Windows platforms. Description Got All Media is exposed to a remote denial of service issue when processing URI requests. This issue occurs when the application handles an HTTP GET request over TCP port 5550. !/usr/local/bin/per...

BlazeVideo HDTV Player 3.5 - '.PLF' Playlist File Local Overflow

!/usr/bin/python Title: BlazeVideo HDTV Player = 3.5 PLF Playlist File Remote Heap Overflow Exploit Summary: BlazeVideo HDTV Player BlazeDTV is a full-featured and easy-to-use HDTV Player software, combining HDTV playback, FM receiving, video record and DVD playback functions. You can make...

Amaya Web Editor 11 Remote SEH Overwrite Exploit

Exploit for unknown platform in category remote exploits ================================================ Amaya Web Editor 11 Remote SEH Overwrite Exploit ================================================ !/usr/bin/perl Title: Amaya Web Editor 11 Remote SEH Overwrite Exploit Summary: Amaya is a We...

Amaya Web Editor 11 SEH Overwrite Exploit

!/usr/bin/perl Title: Amaya Web Editor 11 Remote SEH Overwrite Exploit Summary: Amaya is a Web editor, i.e. a tool used to create and update documents directly on the Web. Product web page: http://www.w3.org/Amaya/ Tested on Microsoft Windows XP Professional SP2 English Reference:...

Microsoft Windows XP SP3 denial of service vulnerability

The host is running Microsoft Windows XP which is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbwinxpchmdosvuln.nasl 5656 2017-03-21 11:03:12Z cfi $ Microsoft Windows XP SP3 denial of service vulnerability. Updated By: Antu Sanadi on 2011-09-22 Updated the version...

Remote code execution

Buffer overflow in SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via malformed values of unspecified "fields inside the SMB packets" in an NT Trans request, aka "SMB Buffer Overflow Remote Cod...

Google Chrome - 'ChromeHTML://' Remote Parameter Injection

click me milw0rm.com 2008-12-23...

Microsoft写字板文件转换器远程代码执行漏洞

BUGTRAQ ID: 32718 CVECAN ID: CVE-2008-4841 写字板是Windows操作系统中附件所提供的简单文本编辑工具。 对于没有安装Word的用户，可以使用写字板的文本转换器来打开.doc格式文档。如果用户使用转换器打开了特制的.doc、.wri或.rtf格式文档的话，就可能触发内存破坏，导致执行任意代码。目前这个漏洞正在被积极的利用。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Server 2003 SP2 Microsoft Windows Server 200...

CVE-2008-4841

The WordPad Text Converter for Word 97 files in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted 1 .doc, 2 .wri, or 3 .rtf Word 97 file that triggers memory corruption, as exploited in the wild in December 2008. NOTE: ...

ZDI-08-083: Microsoft Animation ActiveX Control Malformed AVI Parsing Code Execution Vulnerability

ZDI-08-083: Microsoft Animation ActiveX Control Malformed AVI Parsing Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-083 December 9, 2008 -- CVE ID: CVE-2008-4255 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Windows XP -- TippingPointTM IPS...

Nero ShowTime 5.0.15.0 - '.m3u' Playlist File Remote Buffer Overflow (PoC)

!/usr/bin/perl -w Nero ShowTime v5.0.15.0 m3u Playlist File Remote Buffer Overflow PoC Summary: Nero ShowTime provides you with a high-performance software DVD player that takes you to a new dimension in DVD's. Its cinema-like sound and excellent image quality for all digital pictures make an...

Google Chrome OnbeforeUload and OnUnload Null Check Vulnerability.

Advisory: Google Chrome OnbeforeUload and OnUnload Null Check Vulnerability. Version Affected: Chrome/0.2.149.30 Chrome/0.2.149.29 Chrome/0.2.149.27 Description: Google chrome is susceptible to stringent behavior while handling "onbeforeunload" and "onunload" event in body tags. The malicious...

KVIrc 3.4.0 Virgo Remote Format String Exploit PoC

Summary KVIrc is a free portable IRC client based on the excellent Qt GUI toolkit. KVirc is being written by Szymon Stefanek and the KVIrc Development Team with the contribution of many IRC addicted developers around the world. Description KVIrc is prone to a remote format-string vulnerability...

SMB Remote Code Execution Vulnerability (957095)

This host is missing a critical security update according to Microsoft Bulletin MS08-063. OpenVAS Vulnerability Test $Id: secpodms08-063900053.nasl 5344 2017-02-18 17:43:17Z cfi $ Description: SMB Remote Code Execution Vulnerability 957095 Authors: Chandan S Copyright: Copyright C 2008 SecPod,...

Eserv 3.x FTP Server (ABOR) Remote Stack Overflow PoC

Summary Eserv/3.x - Mail, News, Web and Proxy Servers - Mail Server SMTP, IMAP4 and POP3 - News Server NNTP - Web Server HTTP - FTP Server - Proxy Servers HTTP, FTP, Socks, etc - Finger Server - Built-in scheduler and dialer. Description Stack-based buffer overflow in the FTP server in Etype Eser...

Design/Logic Flaw

gdiplus.dll in GDI+ in Microsoft Windows XP SP3 does not properly handle crafted .ico files, which allows remote attackers to cause a denial of service divide-by-zero error and application crash via a certain crash.ico file on a web site, and allows user-assisted attackers to cause a denial of...

Advisory: Mozilla Firefox User Interface Null Pointer Dereference Dispatcher Crash and Remote Denial of Service.

Mozilla Firefox User Interface Null Pointer Dereference Dispatcher Crash and Remote Denial of Service. Version Tested: Mozilla 3.0.3 - 1.9.0 Branch /Specifically for Latest Version/ Severity: High Description: The mozilla firefox is vulnerable to user interface event dispatcher null pointer...

Bluetooth Stack Could Allow Remote Code Execution Vulnerability (951376)

This host is missing a critical security update according to Microsoft Bulletin MS08-030. OpenVAS Vulnerability Test $Id: gbms08-030.nasl 5863 2017-04-05 07:38:11Z antu123 $ Bluetooth Stack Could Allow Remote Code Execution Vulnerability 951376 Authors: Chandan S Copyright: Copyright c 2008...

Bluetooth Stack Could Allow Remote Code Execution Vulnerability (951376)

This host is missing a critical security update according to Microsoft Bulletin MS08-030. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...