Microsoft Word 2003 - Record Parsing Buffer Overflow (MS09-027) (Metasploit)

Microsoft Word 2003 - Record Parsing Buffer Overflow MS09-027 Metasploit $Id: ms09-027 10477 2011-04-13 11:59:02Z mc $ This file is not part of the Metasploit Framework and may not be subject to redistribution and commercial restrictions. TODO some testing to find the real banned characters and...

Microsoft Word 2003 - Record Parsing Buffer Overflow (MS09-027) (Metasploit)

$Id: ms09-027 10477 2011-04-13 11:59:02Z mc $ This file is not part of the Metasploit Framework and may not be subject to redistribution and commercial restrictions. TODO some testing to find the real banned characters and maxlen add those parameters to the .rb file drop in appropriate directory...

SimplyPlay V.66 .PLS File Buffer Overflow Vulnerability

No description provided by source. !/usr/bin/perl +Exploit Title: SimplyPlay V.66 .PLS File Buffer Overflow Vulnerability +Date: 14\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.softpedia.com/get/Multimedia/Audio/Audio-Players/SimplyPlay.shtml +Version: Revision 66 +Tested On: WIN-XP S...

Xilisoft Video Converter Ultimate (.au) PoC Exploit

Exploit for windows platform in category dos / poc !/usr/bin/perl --------- Xilisoft Video Converter Ultimate .au Proof Of Concept Exploit Author : KedAns-Dz special thanks to : josalijoe exploit-id.com , and All exploit-id Team --------- Tested in Windows XP sp3 France Creating The Bad File .AU...

Winamp <=5.6.1 (.au) Denial of Service Exploit

Exploit for windows platform in category dos / poc !/usr/bin/perl --------- Winamp special thanks to : josalijoe exploit-id.com , and All exploit-id Team --------- Tested in Windows XP sp3 Fr Creating The Bad File .AU And Opening ... The Winamp 5.6.1 is Run With Process igfxsrvc.exe and...

SimplyPlay Buffer Overflow

!/usr/bin/perl +Exploit Title: SimplyPlay V.66 .PLS File Buffer Overflow Vulnerability +Date: 14\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.softpedia.com/get/Multimedia/Audio/Audio-Players/SimplyPlay.shtml +Version: Revision 66 +Tested On: WIN-XP SP3 Brazilian Portuguese +CVE: N/A...

Media Player Classic v6.4.9.1 (.au) PoC Exploit

Exploit for windows platform in category dos / poc !/usr/bin/perl --------- Media Player Classic v6.4.9.1 .au Proof Of Concept Exploit Author : KedAns-Dz special thanks to : josalijoe exploit-id.com , and All exploit-id Team --------- Tested in Windows XP sp3 France Creating The Bad File .AU And...

SimplyPlay v.66 .pls File Buffer Overflow Vulnerability

Exploit for windows platform in category local exploits !/usr/bin/perl +Exploit Title: SimplyPlay V.66 .PLS File Buffer Overflow Vulnerability +Date: 14\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.softpedia.com/get/Multimedia/Audio/Audio-Players/SimplyPlay.shtml +Version: Revision 66...

PlaylistMaker V1.5 .txt File Buffer Overflow Vulnerability

Exploit for windows platform in category local exploits !/usr/bin/python +Exploit Title: PlaylistMaker V1.5 .TXT File Buffer Overflow Vulnerability +Date: 13\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.softpedia.com/get/Multimedia/Audio/Other-AUDIO-Tools/Playlistmaker.shtml +Version:...

Xilisoft Video Converter Ultimate Denial Of Service

!/usr/bin/perl --------- Xilisoft Video Converter Ultimate .au Proof Of Concept Exploit Author : KedAns-Dz special thanks to : josalijoe exploit-id.com , and All exploit-id Team --------- Tested in Windows XP sp3 France Creating The Bad File .AU And Start Converting ... Stack Fram : avc.exe !...

EC Software Help & Manual 5.5.1 Build 1296 - 'ijl15.dll' DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/47349/info EC Software Help & Manual is prone to an arbitrary-code-execution vulnerability. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a...

SimplyPlay 66 - .pls Local Buffer Overflow

SimplyPlay 66 - .pls Local Buffer Overflow !/usr/bin/perl +Exploit Title: SimplyPlay V.66 .PLS File Buffer Overflow Vulnerability +Date: 14\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.softpedia.com/get/Multimedia/Audio/Audio-Players/SimplyPlay.shtml +Version: Revision 66 +Tested On:...

Winamp 5.6.1 Install Language SEH Exploit

Winamp 'Winamp %q This module exploits a stack buffer overflow in versions v5.6.1 In Winamp 5.6.1 Install New Language with .wlz file, and In File .wlz can Inclusion SEH for Installing an attacker may be able to execute arbitrary code. , 'License' = MSFLICENSE, 'Author' = 'KedAns-Dz | ', 'Version...

SimplyPlay 66 - '.pls' Local Buffer Overflow

!/usr/bin/perl +Exploit Title: SimplyPlay V.66 .PLS File Buffer Overflow Vulnerability +Date: 14\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.softpedia.com/get/Multimedia/Audio/Audio-Players/SimplyPlay.shtml +Version: Revision 66 +Tested On: WIN-XP SP3 Brazilian Portuguese +CVE: N/A...

CVE-2011-1235

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application...

Null pointer dereference

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP3 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, aka "Win32k Null Pointer De-reference Vulnerability."...

Double free

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application...

Double free

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application...

Double free

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application...

Null pointer dereference

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer...