Microsoft Windows - .doc Malformed Pointers Denial of Service

Microsoft Windows - .doc Malformed Pointers Denial of Service /\ Microsoft Windows .doc File Malformed Pointers DoS Just move your mouse on the file and explorer crashes. If it does not try to look at file properties. Bug comes from Ole32.dll: CMP DWORD PTR DS:EAX+EBX,3 and we can set EAX, EDX an...

CVE-2006-7066

Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service crash by creating an object inside an iframe, deleting the frame by setting its location.href to about:blank, then accessing a property of the object within the deleted frame, which triggers a NUL...

Snort 2.6.1 DCE/RPC Preprocessor Remote Buffer Overflow Exploit

No description provided by source. !/usr/bin/python Snort DCE/RPC Preprocessor Buffer Overflow Command Execution Version Author: Trirat Puttaraksa http://sf-freedom.blogspot.com For educational purpose only This exploit call calc.exe on Windows XP SP2 + Snort 2.6.1 Note: this exploit use Scapy...

Microsoft Windows OLE Dialog内存破坏漏洞（MS07-011）

Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows提供的OLE Dialog组件中存在一个远程执行代码漏洞。当用户与RTF文件中的畸形嵌入OLE对象进行交互时，就可能导致内存破坏，在用户系统上执行任意代码。 成功利用此漏洞的攻击者可以完全控制受影响的系统。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。那些帐户被配置为拥有较少系统用户权限的用户比具有管理用户权限的用户受到的影响要小。要利用此漏洞，需要进行用大量的户交互。 Microsoft Windows XP SP2 Microsoft Windows...

Snort 2.6.1 - DCE/RPC Preprocessor Remote Buffer Overflow

!/usr/bin/python Snort DCE/RPC Preprocessor Buffer Overflow Command Execution Version Author: Trirat Puttaraksa http://sf-freedom.blogspot.com For educational purpose only This exploit call calc.exe on Windows XP SP2 + Snort 2.6.1 Note: this exploit use Scapy http://www.secdev.org/projects/scapy/...

Explorer WMF File Denial Of Service

Explorer WMF File Denial Of Service Программа "Microsoft Explorer" при просмотре изображения WMF выдает ошибку Протестированно: Explorer 6.00.2900 Windows XP SP2...

CVE-2006-7030

Microsoft Internet Explorer 6 SP2 and earlier allows remote attackers to cause a denial of service crash via certain malformed HTML, possibly involving applet and base tags without required arguments, which triggers a null pointer dereference in mshtml.dll...

CVE-2006-7029

CVE-2006-7029 affects Microsoft Internet Explorer 6 SP2 and earlier. A frameset with only one frame that calls resizeTo with specific arguments can trigger a remote denial of service (crash). The entry notes a possible relation to CVE-2006-3637, but the provided documents do not specify a patch v...

News Bin Pro 5.33 (.NBI File) Local Buffer Overflow Exploit

No description provided by source. /\ News Bin Pro 5.33 .NBI File Buffer Overflow exploit There are 2 buffer overflow in News Bin Pro 5.33 that can be triggered by a crafted .nbi config file. DataPath and DownloadPath sizes are not checked and code execution is possible. This vulnerability also...

News Bin Pro 5.33 (.NBI File) Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits =========================================================== News Bin Pro 5.33 .NBI File Local Buffer Overflow Exploit =========================================================== /\ News Bin Pro 5.33 .NBI File Buffer Overflow exploit There ar...

WMF File Denial Of Service

WMF File Denial Of Service Программа "Microsoft Office Word 2003" подвисает при вставке спецрисункаиз файла в формате WMF Программа "IrfanView" подвисает при открытии файла формата WMF Протестированно: Microsoft Office Word 2003 11.6568.8122 SP2 IrfanView 3.99 Windows XP SP2...

Microsoft Internet Explorer 6 - Local File Access

source: https://www.securityfocus.com/bid/22621/info Microsoft Internet Explorer is reportedly prone to multiple local file-access weaknesses because the application fails to properly handle HTML tags. These issues are triggered when an attacker entices a victim user to visit a malicious website...

Microsoft Office Excel 2003 XLS File Denial Of Service

Microsoft Office Excel 2003 XLS File Denial Of Service В программе "Microsoft Office Excel 2003" компонент "DW20.EXE" вызывает ошибку при обработке файлов формата XLS Протестированно: Microsoft Office Excel 2003 11.6560.6568 SP2 Windows XP SP2 file "example.xls": ---begin--- MIME-Version: 1.0...

ActSoft DVD-Tools - 'dvdtools.ocx' Remote Buffer Overflow (PoC)

------------------------------------------------------------------------------------------------- ActSoft DVD-Tools dvdtools.ocx Buffer Overflow developer's url: http://www.activex-soft.com author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org Tested on Windows XP...

Buffer overflow

The Window Image Acquisition WIA Service in Microsoft Windows XP SP2 allows local users to gain privileges via unspecified vectors involving an "unchecked buffer," probably a buffer overflow...

BrightStor ARCserve Backup Tape Engine opnum 0xCF buffer overflow

Added: 02/09/2007 CVE: CVE-2007-0169 BID: 22005 OSVDB: 31327 Background The BrightStor ARCserve Backup server includes a Backup Tape Engine feature which allows use of tape drives for storage. Problem A buffer overflow in BrightStor ARCserve Backup allows remote attackers to execute arbitrary...

Computer Associates BrightStor ARCserve Backup Catirpc.EXE远程拒绝服务漏洞

Computer Associates BrightStor ARCserve Backup是一款企业级别的备份解决方案。 BrightStor AECserver Backup包含的Catirpc.exe处理TADDR2UADDR过程存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 Catirpc.exe是为BrightStor Backup产品提供末端映射和启用RPC服务的程序。CATIRPC.dll不正确处理用于与CA RPC服务器通信的TADDR2UADDR过程，可导致一个NULL指针引用而造成拒绝服务攻击。 Computer Associates BrightSto...

MySQL 4.x5.0 (Windows) - User-Defined Function Command Execution

MySQL 4.x5.0 Windows - User-Defined Function Command Execution -- raptorwinudf.sql - A MySQL UDF backdoor kit for Windows -- Copyright c 2007 Marco Ivaldi -- -- This is a MySQL backdoor kit for Windows based on the UDFs User Defined -- Functions mechanism. Use it to spawn a reverse shell netcat U...

Hewlett-Packard Network Node Manager 7.50 Remote Console weak files permissions

Vendor: Hewlett-Packard Application: Network Node Manager 7.50 Remote Console under Microsoft Windows XP SP2. Vulnerability: Local Vulnerability Level: High Author: 3APA3A , Impact: privilege escalation of any unprivileged user to Local System or another user's account. Intro: NNM Remote Console ...

MS Windows Explorer (AVI) Unspecified Denial of Service Exploit

Exploit for unknown platform in category dos / poc =============================================================== MS Windows Explorer AVI Unspecified Denial of Service Exploit =============================================================== print...