Omni-NFS Server 5.2 - nfsd.exe Remote Stack Overflow (Metasploit)

Omni-NFS Server 5.2 - nfsd.exe Remote Stack Overflow Metasploit vdxlink.pm The exploit is a part of VulnDisco Pack - use only under the license agreement specified in LICENSE.txt in your VulnDisco distribution VULNDISCO LICENSE Purchaser buys VulnDisco Pack "the Pack" and receives the right to us...

OpenLDAP 2.2.29 - Remote Denial of Service (Metasploit)

OpenLDAP 2.2.29 - Remote Denial of Service Metasploit vdopenldap.pm The exploit is a part of VulnDisco Pack - use only under the license agreement specified in LICENSE.txt in your VulnDisco distribution VULNDISCO LICENSE Purchaser buys VulnDisco Pack "the Pack" and receives the right to use it...

Microsoft Internet Explorer多个COM对象颜色属性拒绝服务漏洞

Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer在处理多个COM对象（dxtmsft.dll/dxtmsft3.dll）的颜色属性输入方式时，如果将颜色属性设置为超长字符串的话，就会导致Internet Explorer崩溃。 Microsoft Internet Explorer 6.0 SP1 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.microsoft.com/windows/ie/default.asp ===============...

CVE-2006-3436

Cross-site scripting XSS vulnerability in Microsoft .NET Framework 2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "ASP.NET controls that set the AutoPostBack property to true"...

CVE-2006-3436

Cross-site scripting XSS vulnerability in Microsoft .NET Framework 2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "ASP.NET controls that set the AutoPostBack property to true"...

Microsoft Internet Explorer - Multiple COM Object Color Property Denial of Service Vulnerabilities

Microsoft Internet Explorer - Multiple COM Object Color Property Denial of Service Vulnerabilities var i =0; var Objects = new Array // CLSID: 3A04D93B-1EDD-4f3f-A375-A03EC19572C4 // Info: MaskFilter // ProgID: DXImageTransform.Microsoft.MaskFilter.1 // InprocServer32: C:\WINNT\system32\dxtmsft.d...

Microsoft Internet Explorer - Multiple COM Object Color Property Denial of Service Vulnerabilities

var i =0; var Objects = new Array // CLSID: 3A04D93B-1EDD-4f3f-A375-A03EC19572C4 // Info: MaskFilter // ProgID: DXImageTransform.Microsoft.MaskFilter.1 // InprocServer32: C:\WINNT\system32\dxtmsft.dll "DXImageTransform.Microsoft.MaskFilter.1", // CLSID: 421516C1-3CF8-11D2-952A-00C04FA34F05 // Inf...

MS Internet Explorer Multiple COM Object Color Property DoS

No description provided by source. !-- // Internet Explorer Multiple COM Object Color Property DoS Vulnerability // tested on Windows 2000 SP4/XP SP2 // http://www.xsec.org // nop nopxsec.org --! html head title/title /head /body script var i =0; var Objects = new Array // CLSID:...

MS Internet Explorer Multiple COM Object Color Property DoS

Exploit for unknown platform in category dos / poc =========================================================== MS Internet Explorer Multiple COM Object Color Property DoS =========================================================== var i =0; var Objects = new Array // CLSID:...

Internet Explorer HTML Help ActiveX buffer overflow

Buffer overflow on oversized 'Image' property. Vulnerability can be used for hidden trojan installation...

CVE-2006-3944

Microsoft Internet Explorer 6 on Windows XP SP2 is affected by CVE-2006-3944. The vulnerability concerns the Forms.ListBox.1 object, where the ListWidth property set to 0x7fffffff can trigger an integer overflow, and set to 0x7ffffffe can cause a null dereference, leading to a denial of service (...

CVE-2006-3591

CVE-2006-3591 affects Microsoft Internet Explorer 6.0. The vulnerability arises when code accesses the URL property of a TriEditDocument.TriEditDocument object before initialization, causing a NULL pointer dereference and an application crash (denial of service). The description consistently stat...

CVE-2006-3513

danim.dll in Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service application crash by accessing the Data property of a DirectAnimation DAUserData object before it is initialized, which triggers a NULL pointer dereference...

CVE-2006-3513

danim.dll in Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service application crash by accessing the Data property of a DirectAnimation DAUserData object before it is initialized, which triggers a NULL pointer dereference...

CVE-2006-3511

The CVE-2006-3511 issue affects Internet Explorer 6 on Windows XP SP2. The vulnerability arises from setting the fonts property of the HtmlDlgSafeHelper object, triggering a null dereference and causing a denial-of-service crash. Public reference sources in the connected documents corroborate thi...

Memory corruption

Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via an Office file with a malformed property that triggers memory corruption related to record lengths, aka "Microsoft Offic...

CVE-2006-3404

Buffer overflow in the xcfloadvector function in app/xcf/xcf-load.c for gimp before 2.2.12 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via an XCF file with a large numaxes value in the VECTORS property...

CVE-2006-3404

Buffer overflow in the xcfloadvector function in app/xcf/xcf-load.c for gimp before 2.2.12 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via an XCF file with a large numaxes value in the VECTORS property...

Microsoft Internet Explorer 6 - ADODB.Recordset Filter Property Denial of Service

Microsoft Internet Explorer 6 - ADODB.Recordset Filter Property Denial of Service source: https://www.securityfocus.com/bid/18773/info Microsoft Internet Explorer is prone to a denial-of-service condition when processing the 'ADODB.Recordset Filter Property' COM object. A successful attack may...

Microsoft Internet Explorer 6 - ADODB.Recordset Filter Property Denial of Service

source: https://www.securityfocus.com/bid/18773/info Microsoft Internet Explorer is prone to a denial-of-service condition when processing the 'ADODB.Recordset Filter Property' COM object. A successful attack may cause the browser to fail due to a null-pointer dereference. Microsoft Internet...