15588 matches found
Microsoft Windows XP/2003 Explorer WMF File Handling Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22715/info Microsoft Windows Explorer is prone to a denial-of-service vulnerability. A remote attacker may exploit this vulnerability by presenting a malicious file to a victim user. Users do not have to open the file --...
Apache 1.3 Artificially Long Slash Path Directory Listing Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/2503/info Apache HTTPD is the Apache Web Server, freely distributed and actively maintained by the Apache Software Foundation. It is a freely available and widely used software package, included with various implementatio...
MS Windows 2000/NT 4 DLL Search Path Weakness
No description provided by source. source: http://www.securityfocus.com/bid/1699/info When a program executes under Microsoft Windows, it may require additional code stored in DLL library files. These files are dynamically located at run time, and loaded if necessary. A weakness exists in the...
Microsoft Windows Contacts DLL Hijacking Exploit (wab32res.dll)
No description provided by source. / Exploit Title: Microsoft Windows Contacts DLL Hijacking Exploit wab32res.dll Date: August 25, 2010 Author: storm [email protected] Tested on: Windows Vista SP2 http://www.gonullyourself.org/ gcc -shared -o wab32res.dll Contacts-DLL.c .contact, .group,...
OmniHTTPD 1.1/2.0.x/2.4 Sample Application URL Encoded Newline HTML Injection
No description provided by source. source: http://www.securityfocus.com/bid/5572/info OmniHTTPD is a webserver for Microsoft Windows operating systems. OmniHTTPD supports a number of CGI extensions which provide dynamic content. A HTML injection vulnerability has been reported in the...
Microsoft Windows XP/2000/NT 4 Shell Long Share Name Buffer Overrun Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10213/info Microsoft Windows operating systems have been reported to be prone to a remotely exploitable buffer overrun condition. This issue is exposed when a client attempts to connect to an SMB share with an overly long...
Sun SunPCi II VNC Software 2.3 Password Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5146/info The SunPCi II card is a co-processor for a number of Solaris based systems, and provides PC software compatibility, including the ability to run Microsoft Windows. Driver software is available for the SunPCi car...
Microsoft Windows XP Explorer.EXE Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9924/info Microsoft Windows Explorer for Windows XP has been reported to be prone to a remote denial of service vulnerability. This issue is due to a failure of the application to properly validate user-supplied input via...
Microsoft Windows XP/2000 WinMM.DLL - WAV Files Remote Denial of Service (DoS) Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22938/info Microsoft Windows is prone to a denial-of-service vulnerability. A remote attacker may exploit this vulnerability by presenting a malicious WAV file to a victim user. Successful exploits will result in excessiv...
Microsoft Windows ndproxy.sys - Local Privilege Escalation
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex' class Metasploit3 Msf::Exploit::Local Rank = AverageRanking include Msf::Post::File include...
Microsoft Windows Media Player 6/7 Filename Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5357/info The Microsoft Windows Media Player executable is prone to a buffer overflow condition when invoked with an oversized filename. Since the program is executed in the context of the user invoking it, it is not like...
Microsoft Windows URI Handler Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25945/info Microsoft Windows XP and Server 2003 with Internet Explorer 7 is prone to a command-execution vulnerability because it fails to properly sanitize input. Successfully exploiting this issue allows remote attacker...
Microsoft Windows XP/VISTA/2000/2003 Double Free Memory Corruption Local Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/38044/info Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the kernel. An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits...
Microsoft Windows - Path Conversion Weakness
No description provided by source. source: http://www.securityfocus.com/bid/17934/info Microsoft Windows is susceptible to a path-conversion weakness that may allow attackers to bypass security applications. This issue occurs because the operating system uses multiple differing algorithms to...
Microsoft Infotech Storage Library Heap Corruption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17926/info Microsoft Windows is susceptible to a heap-corruption vulnerability while attempting to read specially crafted CHM or ITS files. This occurs in the 'ITSS.DLL' library. This vulnerability allows remote attackers...
Microsoft Windows win32k.sys Driver "CreateDIBPalette()" Buffer Overflow
No description provided by source...
Microsoft Windows XP/VISTA '.ani' File 'tagBITMAPINFOHEADER' Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/38579/info Microsoft Windows is prone to a remote denial-of-service vulnerability when processing '.ani' files. Successful exploits will cause the vulnerable applications that use the affected APIs to crash or become...
OpenBB 1.0 .0 RC3 BBCode Cross Agent HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4819/info OpenBB is web forum software written in PHP. It will run on most Linux and Unix variants, in addition to Microsoft Windows operating systems. OpenBB is reportedly vulnerable to HTML injection attacks. The...
Microsoft MFC Library CFileFind::FindFile Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25697/info The CFileFind::FindFile method in the MFC library for Microsoft Windows is prone to a buffer-overflow vulnerability because the method fails to perform adequate boundary checks of user-supplied input...
Microsoft Windows SMB Relay Code Execution
No description provided by source. $Id: smbrelay.rb 10404 2010-09-21 00:13:30Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...