Waledac Botnet Now Completely Crippled, Experts Say

After Microsoft’s actions to take down the Waledac botnet last month, there was some question about whether the operation was much more than a grab for headlines that would have little effect on actual spam levels or malware infections. But more than three weeks after the takedown, researchers sa...

Microsoft Issues Fix-It Workaround for IE Zero-Day

Microsoft has released a one-click “fix-it” workaround to help Internet Explorer users block malware attacks against an unpatched browser vulnerability. The Fix-It workaround, available here, effectively disables peer factory in the iepeers.dll binary in affected versions of Internet Explorer. Th...

CVE-2010-0806

Use-after-free vulnerability in the Peer Objects component aka iepeers.dll in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object, as exploited in the wild in March 2010, a...

Memory corruption

Use-after-free vulnerability in the Peer Objects component aka iepeers.dll in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object, as exploited in the wild in March 2010, a...

CVE-2010-0806

Use-after-free vulnerability in the Peer Objects component aka iepeers.dll in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object, as exploited in the wild in March 2010, a...

VulnCheck KEV: CVE-2010-0806

Use-after-free vulnerability in the Peer Objects component aka iepeers.dll in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object, as exploited in the wild in March 2010,...

PT-2010-2535

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 6 through 7 Description The issue is a use-after-free vulnerability in the Peer Objects component, which allows remote attackers to execute arbitrary code via vectors involving access to an invalid pointer...

Xi Software Net Transport eDonkey Protocol Buffer Overflow

Added: 02/22/2010 OSVDB: 61435 Background Net Transport, also known as NetXfer, is a download manager for Windows made by Xi Software. Among the protocols Net Transport can handle is eDonkey, a decentrailized peer to peer network for file sharing. Problem The Net Transport download manager fails ...

Dead Peer Detection v1.0 VPN Detection

Binary data 5306.prm...

IT-Grundschutz M5.037: Einschränken der Peer-to-Peer-Funktionalitäten in einem servergestützten Netz (Windows)

IT-Grundschutz M5.037: Einschränken der Peer-to-Peer-Funktionalitäten in einem servergestützten Netz Windows. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde zudem in neueren EL gestrichen. Diese Prüfung bezieht sich auf die 11. Ergänzungslieferung 11. EL des IT- Grundschutz. Die...

IT-Grundschutz M5.037: Einschraenken der Peer-to-Peer-Funktionalitaeten in einem servergestuetzten Netz - Windows

IT-Grundschutz M5.037: Einschraenken der Peer-to-Peer-Funktionalitaeten in einem servergestuetzten Netz Windows. ACHTUNG: Dieser Test wird nicht mehr unterstuetzt. Er wurde zudem in neueren EL gestrichen. Diese Pruefung bezieht sich auf die 10. Ergaenzungslieferung 10. EL des IT- Grundschutz. Die...

IT-Grundschutz M5.037: Einschraenken der Peer-to-Peer-Funktionalitaeten in einem servergestuetzten Netz - Windows

IT-Grundschutz M5.037: Einschraenken der Peer-to-Peer-Funktionalitaeten in einem servergestuetzten Netz Windows. ACHTUNG: Dieser Test wird nicht mehr unterstuetzt. Er wurde zudem in neueren EL gestrichen. Diese Pruefung bezieht sich auf die 11. Ergaenzungslieferung 11. EL des IT- Grundschutz. Die...

IT-Grundschutz M5.037: Einschränken der Peer-to-Peer-Funktionalitäten in einem servergestützten Netz (Windows)

IT-Grundschutz M5.037: Einschränken der Peer-to-Peer-Funktionalitäten in einem servergestützten Netz Windows. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde zudem in neueren EL gestrichen. Diese Prüfung bezieht sich auf die 10. Ergänzungslieferung 10. EL des IT- Grundschutz. Die...

Security Best Practice: Blocking BitTorrent

BitTorrent is a peer to peer file sharing protocol used for distributing large amounts of data. It is one of the most common protocols for transferring large files. The use of BitTorrent may circumvent the organizational security policy...

jruby-openssl Gem for JRuby fails to do proper certificate validation

A security problem involving peer certificate verification was found where failed verification silently did nothing, making affected applications vulnerable to attackers. Attackers could lead a client application to believe that a secure connection to a rogue SSL server is legitimate. Attackers...

Congress Calls for Internal Security Review

After a former Congressional staffer exposed some sensitive data on a file-sharing network recently, some lawmakers are calling for the Congress to start an internal review of its own data security policies immediately. The situation, which is linked to an ethics investigation in the House of...

Wowd Search Client 1.3.0 XSS

Exploit for unknown platform in category web applications ============================ Wowd Search Client 1.3.0 XSS ============================ Wowd search client multiple variable xss Vendor URL: http://www.wowd.com/ Vendor notify:yes exploit available:yes What is Wowd? Wowd is a real-time sear...

Wowd Search Client 1.3.0 XSS

No description provided by source. Wowd search client multiple variable xss Vendor URL: http://www.wowd.com/ Advisore:http://lostmon.blogspot.com/2009/10/ wowd-search-client-multiple-variable.html Vendor notify:yes exploit available:yes What is Wowd? Wowd is a real-time search engine for...

openSUSE Security Update : strongswan (strongswan-676)

By sending a specially crafted Dead Peer Detection DPD packet remote attackers could crash the pluto IKE daemon CVE-2009-0790. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update strongswan-676. T...

Soulseek 157 NS < 13e/156.* Remote Peer Search Code Execution PoC

Exploit for unknown platform in category dos / poc ================================================================= Soulseek 157 NS 13e/156. Remote Peer Search Code Execution PoC ================================================================= Soulseek 157 NS 13e & 156. Remote Peer Search Code...