Null pointer dereference

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer...

CVE-2011-1240

CVE-2011-1240 is a local privilege-escalation in the Windows kernel via the Win32k.sys use-after-free condition. A crafted local attack can abuse incorrect driver object management to execute code with kernel privileges on affected Windows versions (XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Ser...

CVE-2011-0673

CVE-2011-0673 affects Windows XP SP3 with a NULL pointer de-reference in win32k.sys (kernel-mode). The issue allows local users to gain privileges via a crafted application, as part of a broader set of Windows kernel NULL-dereference and use-after-free vulnerabilities described under MS11-034 (Wi...

CVE-2011-0097

Integer underflow in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary cod...

CVE-2011-0104

Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted HLink record in an Excel file, aka "Excel Buffer Overwrite Vulnerability."...

Wordtrainer 3.0 .ORD File Buffer Overflow Vulnerability

Exploit for php platform in category web applications !/usr/bin/python +Exploit Title: Wordtrainer V3.0 .ORD File Buffer Overflow Vulnerability +Date: 12\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.wordtrainer.net/software/files/wt307shwexe/wt307shw.exe +Version: 3.0 +Tested On: WIN-...

PlaylistMaker 1.5 - .txt Local Buffer Overflow

PlaylistMaker 1.5 - .txt Local Buffer Overflow !/usr/bin/python +Exploit Title: PlaylistMaker V1.5 .TXT File Buffer Overflow Vulnerability +Date: 13\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.softpedia.com/get/Multimedia/Audio/Other-AUDIO-Tools/Playlistmaker.shtml +Version: V1.5...

PT-2011-2543 · Microsoft · Windows Server 2003 +4

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 and SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 and SP2 Microsoft Windows Server 2008 versions Gold, SP2, R2, and R2 SP1 Microsoft Windows 7 versions Gold and SP1...

PT-2011-2546 · Microsoft · Windows Xp +4

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 through SP2 Microsoft Windows Server 2008 versions Gold through R2 SP1 Microsoft Windows 7 versions Gold through SP1...

PlaylistMaker 1.5 - '.txt' Local Buffer Overflow

!/usr/bin/python +Exploit Title: PlaylistMaker V1.5 .TXT File Buffer Overflow Vulnerability +Date: 13\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.softpedia.com/get/Multimedia/Audio/Other-AUDIO-Tools/Playlistmaker.shtml +Version: V1.5 +Tested On: WIN-XP SP3 Brazilian Portuguese +CVE:...

Microsoft Windows "afd.sys" 120CFh IOCTL处理拒绝服务漏洞

BUGTRAQ ID: 47279 Windows是微软发布的非常流行的操作系统。 Windows的AFD.sys驱动程序在实现上存在本地拒绝服务安全漏洞，本地攻击者可利用此漏洞使受影响系统不响应，造成拒绝服务。 此漏洞源于AFD.sys驱动程序在处理IOCTL时的错误，可致访问无效内存，通过特制的0x000120CF IOCTL造成崩溃。此漏洞在Windows XP SP3 afd.sys 版本 5.1.2600.5657上已确认，其他版本也可能受到影响。 Microsoft Windows XP Professional Microsoft Windows XP Home Editi...

Winamp 5.6.1 - .m3u8 Remote Buffer Overflow

Winamp 5.6.1 - .m3u8 Remote Buffer Overflow source: https://www.securityfocus.com/bid/47333/info Winamp is prone to a remote buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. Attackers can execute...

Vallen Zipper V2.30 .ZIP File Heap Overflow

Exploit for windows platform in category dos / poc !/usr/bin/perl +Exploit Title: Vallen Zipper V2.30 .ZIP File Heap Overflow +Date: 11\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.vallen.de/freeware/vzsetup.exe +Version: 2.30 +Tested On: WIN-XP SP3 Brazil Portuguese +CVE: N/A use...

MS11-022: Description of the security update for PowerPoint 2003: April 12, 2011

None None...

Wordtrainer 3.0 - .ord Local Buffer Overflow

Wordtrainer 3.0 - .ord Local Buffer Overflow !/usr/bin/python +Exploit Title: Wordtrainer V3.0 .ORD File Buffer Overflow Vulnerability +Date: 12\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.wordtrainer.net/software/files/wt307shwexe/wt307shw.exe +Version: 3.0 +Tested On: WIN-XP SP3...

Wordtrainer 3.0 - '.ord' Local Buffer Overflow

!/usr/bin/python +Exploit Title: Wordtrainer V3.0 .ORD File Buffer Overflow Vulnerability +Date: 12\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.wordtrainer.net/software/files/wt307shwexe/wt307shw.exe +Version: 3.0 +Tested On: WIN-XP SP3 Brazilian Portuguese +CVE: N/A from struct impo...

Vallen Zipper 2.30 ZIP Heap Overflow

!/usr/bin/perl +Exploit Title: Vallen Zipper V2.30 .ZIP File Heap Overflow +Date: 11\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.vallen.de/freeware/vzsetup.exe +Version: 2.30 +Tested On: WIN-XP SP3 Brazil Portuguese +CVE: N/A use strict; use warnings; my $filename = "Exploit.zip";...

Vallen Zipper 2.30 - .zip Heap Overflow

Vallen Zipper 2.30 - .zip Heap Overflow !/usr/bin/perl +Exploit Title: Vallen Zipper V2.30 .ZIP File Heap Overflow +Date: 11\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.vallen.de/freeware/vzsetup.exe +Version: 2.30 +Tested On: WIN-XP SP3 Brazil Portuguese +CVE: N/A use strict; use...

Vallen Zipper 2.30 - '.zip' Heap Overflow

!/usr/bin/perl +Exploit Title: Vallen Zipper V2.30 .ZIP File Heap Overflow +Date: 11\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.vallen.de/freeware/vzsetup.exe +Version: 2.30 +Tested On: WIN-XP SP3 Brazil Portuguese +CVE: N/A use strict; use warnings; my $filename = "Exploit.zip";...

MikeyZip 1.1 ZIP Buffer Overflow

!/usr/bin/perl +Exploit Title: MikeyZip 1.1 .ZIP File Buffer Overflow +Date: 10\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.softpedia.com/get/Compression-tools/MikeyZip.shtml +Version: 1.1 +Tested On: WIN-XP SP3 Brazil Portuguese +CVE: N/A use strict; use warnings; my $filename =...