4354 matches found
Microsoft Security Bulletin MS03-014: Cumulative Patch for Outlook Express (330994)
-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Cumulative Patch for Outlook Express 330994 Date: 23 April 2003 Software: Microsoft c Outlook Express Impact: Run code of the attacker's choice on a user's machine. Max Risk: Critica...
CVE-1999-1474
CVE-1999-1474 concerns PowerPoint 95 and 97 where opening a document in a browser (e.g., Internet Explorer) could trigger an automatic execution of an application without user prompting. The available sources describe that remote attackers could cause an application to run automatically via the s...
CVE-1999-1182
This CVE (CVE-1999-1182) affects Linux runtime linkers ld.so and ld-linux.so. A buffer overflow occurs when a long argv[0] triggers an error report by ld.so/ld-linux.so, allowing local users to gain privileges when invoking a setuid program. The attack is local with low complexity; impact is to c...
patchadd.pl
Here is an exploit to an old bug for patchadd in Solaris. It exploits a symlink vulnerability to clobber files with output from patchadd. This was written and tested on Solaris 2.8 Sparc with the current patch cluster applied. -- Larry http://vapid.dhs.org:8080 !/usr/local/bin/perl Exploit for...
Security Bulletin MS01-042
---------------------------------------------------------------------- Title: Windows Media Player .NSC Processor Contains Unchecked Buffer Date: 26 July 2001 Software: Windows Media Player 6.4, 7, and 7.1 Impact: Run code of attacker's choice. Bulletin: MS01-042 Microsoft encourages customers to...
[SECURITY] New version of ghostscript released
Package : gs Problem type : symlink attack Debian-specific: no ghostscript uses temporary files to do some of its work. Unfortunately the method used to create those files wasnt secure: mktemp was used to create a name for a temporary file, but the file was not opened safely. A second problem is...
Проблемы с HTT-фолдерами в Windows
Недобросовестный оператор Web-узла может заставить пользователя подключиться к своему ресурсу по UNC-имени, при этом если допускается вид папок как Web0-фолдеров, то будет выполнены команды из Folder.htt, в т.ч. могут быть запущены исполняемые файлы...
Windows Run Command As User
This module will login with the specified username/password and execute the supplied command as a hidden process. Output is not returned by default. Unless targeting a local user either set the DOMAIN, or specify a UPN user format e.g. user@domain. This uses the CreateProcessWithLogonW WinAPI...
Security update 1970-01-01
...
Security update 1970-01-01
...
Security update 1970-01-01
...
Windows Malicious Software Removal Tool x64 - v5.105 (KB890830)
After the download, this tool runs one time to check your computer for infection by specific, prevalent malicious software including Blaster, Sasser, and Mydoom and helps remove any infection that is found. If an infection is found, the tool will display a status report the next time that you sta...
Security update 1970-01-01
...
Security update 1970-01-01
...
Security update 1970-01-01
...
Security update 1970-01-01
...
Security update 1970-01-01
...
Security update 1970-01-01
...