News Bin Pro 5.33 (.NBI File) Local Buffer Overflow Exploit

No description provided by source. /\ News Bin Pro 5.33 .NBI File Buffer Overflow exploit There are 2 buffer overflow in News Bin Pro 5.33 that can be triggered by a crafted .nbi config file. DataPath and DownloadPath sizes are not checked and code execution is possible. This vulnerability also...

Microsoft Internet Explorer 6 - Local File Access

source: https://www.securityfocus.com/bid/22621/info Microsoft Internet Explorer is reportedly prone to multiple local file-access weaknesses because the application fails to properly handle HTML tags. These issues are triggered when an attacker entices a victim user to visit a malicious website...

WMF File Denial Of Service

WMF File Denial Of Service Программа "Microsoft Office Word 2003" подвисает при вставке спецрисункаиз файла в формате WMF Программа "IrfanView" подвисает при открытии файла формата WMF Протестированно: Microsoft Office Word 2003 11.6568.8122 SP2 IrfanView 3.99 Windows XP SP2...

Microsoft Office Excel 2003 XLS File Denial Of Service

Microsoft Office Excel 2003 XLS File Denial Of Service В программе "Microsoft Office Excel 2003" компонент "DW20.EXE" вызывает ошибку при обработке файлов формата XLS Протестированно: Microsoft Office Excel 2003 11.6560.6568 SP2 Windows XP SP2 file "example.xls": ---begin--- MIME-Version: 1.0...

ActSoft DVD-Tools - 'dvdtools.ocx' Remote Buffer Overflow (PoC)

------------------------------------------------------------------------------------------------- ActSoft DVD-Tools dvdtools.ocx Buffer Overflow developer's url: http://www.activex-soft.com author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org Tested on Windows XP...

Buffer overflow

The Window Image Acquisition WIA Service in Microsoft Windows XP SP2 allows local users to gain privileges via unspecified vectors involving an "unchecked buffer," probably a buffer overflow...

CVE-2007-0210: Undefined Security Weakness

The Window Image Acquisition WIA Service in Microsoft Windows XP SP2 allows local users to gain privileges via unspecified vectors involving an "unchecked buffer," probably a buffer overflow...

CVE-2007-0209: Improper Control of Generation of Code

Microsoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a Word file with a malformed drawing object, which leads to memory corruption...

CVE-2006-3448: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Step-by-Step Interactive Training in Microsoft Windows 2000 SP4, XP SP2 and Professional, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a long Syllabus string in crafted bookmark link files cbo, cbl, or .cbm, a different issue than CVE-2005-1212...

CVE-2007-0208: Improper Input Validation

Microsoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office 2004 for Mac does not correctly check the properties of certain documents and warn the user of macro content, which allows user-assisted remote attackers to execute arbitrary code...

CVE-2007-0211: Undefined Security Weakness

The hardware detection functionality in the Windows Shell in Microsoft Windows XP SP2 and Professional, and Server 2003 SP1 allows local users to gain privileges via an unvalidated parameter to a function related to the "detection and registration of new hardware."...

CVE-2007-0026: Undefined Security Weakness

The OLE Dialog component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 allows user-assisted remote attackers to execute arbitrary code via an RTF file with a malformed OLE object that triggers memory corruption...

Trend Micro OfficeScan Client ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in Trend Micro OfficeScan Corporate Edition 7.3. By sending an overly long string to the "CgiOnUpdate" method located in the OfficeScanSetupINI.dll Control, an attacker may be able to execute arbitrary code. Module Options msf use...

BrightStor ARCserve Backup Tape Engine opnum 0xCF buffer overflow

Added: 02/09/2007 CVE: CVE-2007-0169 BID: 22005 OSVDB: 31327 Background The BrightStor ARCserve Backup server includes a Backup Tape Engine feature which allows use of tape drives for storage. Problem A buffer overflow in BrightStor ARCserve Backup allows remote attackers to execute arbitrary...

Computer Associates BrightStor ARCserve Backup Catirpc.EXE远程拒绝服务漏洞

Computer Associates BrightStor ARCserve Backup是一款企业级别的备份解决方案。 BrightStor AECserver Backup包含的Catirpc.exe处理TADDR2UADDR过程存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 Catirpc.exe是为BrightStor Backup产品提供末端映射和启用RPC服务的程序。CATIRPC.dll不正确处理用于与CA RPC服务器通信的TADDR2UADDR过程，可导致一个NULL指针引用而造成拒绝服务攻击。 Computer Associates BrightSto...

MySQL 4.x5.0 (Windows) - User-Defined Function Command Execution

MySQL 4.x5.0 Windows - User-Defined Function Command Execution -- raptorwinudf.sql - A MySQL UDF backdoor kit for Windows -- Copyright c 2007 Marco Ivaldi -- -- This is a MySQL backdoor kit for Windows based on the UDFs User Defined -- Functions mechanism. Use it to spawn a reverse shell netcat U...

Hewlett-Packard Network Node Manager 7.50 Remote Console weak files permissions

Vendor: Hewlett-Packard Application: Network Node Manager 7.50 Remote Console under Microsoft Windows XP SP2. Vulnerability: Local Vulnerability Level: High Author: 3APA3A , Impact: privilege escalation of any unprivileged user to Local System or another user's account. Intro: NNM Remote Console ...

CVE-2007-0562: Undefined Security Weakness

Windows Explorer explorer.exe 6.0.2900.2180 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial of service application crash via a crafted .avi file, which triggers the crash when the user right clicks on the file...

Microsoft Windows Explorer - .AVI File Denial of Service

Microsoft Windows Explorer - .AVI File Denial of Service print "-----------------------------------------------------------------------------------" print "Explorer.exe version 6.0.2900.2180 .avi file Denial of Service" print "author: shinnai" print "mail: shinnaiatautisticidotorg" print "site:...

MS Windows Explorer (AVI) Unspecified Denial of Service Exploit

Exploit for unknown platform in category dos / poc =============================================================== MS Windows Explorer AVI Unspecified Denial of Service Exploit =============================================================== print...