Writeup by Amit Klein (Trusteer): Address Bar Spoofing for IE6

Address Bar Spoofing Attacks against Microsoft Internet Explorer 6 Amit Klein, Trusteer Summary ======= IE6 is the second most popular web browser after IE7, with market share of around 25 according to recent surveys e.g. http://marketshare.hitslink.com/report.aspx?qprid=2. This write-up presents...

db Software Laboratory VImpX - 'VImpX.ocx' Multiple Vulnerabilities

----------------------------------------------------------------------------- db Software Laboratory VImpX VImpX.ocx Multiple vulnerabilities url: http://www.dbsoftlab.com/ Author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.net Info: File: VImpX.ocx v. 4.8.8.0 CLSID:...

Hummingbird Deployment Wizard 2008 - ActiveX Command Execution

------------------------------------------------------------------------------ Hummingbird Deployment Wizard 2008 DeployRun.dll Arbitrary File Execution url: http://www.hummingbird.com Author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.net This was written for educational...

Hummingbird Deployment Wizard 2008 Registry Values Creation/Change

No description provided by source. ------------------------------------------------------------------------------------ Hummingbird Deployment Wizard 2008 DeployRun.dll Registry Values Creation/Change url: http://www.hummingbird.com Author: shinnai mail: shinnaiatautisticidotorg site:...

Hummingbird Deployment Wizard 2008 Registry Values Creation/Change

Exploit for unknown platform in category remote exploits ================================================================== Hummingbird Deployment Wizard 2008 Registry Values Creation/Change ==================================================================...

Hummingbird Deployment Wizard 2008 - Registry Values CreationChange

Hummingbird Deployment Wizard 2008 - Registry Values CreationChange ------------------------------------------------------------------------------------ Hummingbird Deployment Wizard 2008 DeployRun.dll Registry Values Creation/Change url: http://www.hummingbird.com Author: shinnai mail:...

hummingbird-exec2.txt

-------------------------------------------------------------------------------- Hummingbird Deployment Wizard 2008 DeployRun.dll Arbitrary File Execution2 url: http://www.hummingbird.com Author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.net This was written for educational...

Hummingbird Deployment Wizard 2008 ActiveX File Execution(2)

No description provided by source. -------------------------------------------------------------------------------- Hummingbird Deployment Wizard 2008 DeployRun.dll Arbitrary File Execution2 url: http://www.hummingbird.com Author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.ne...

CVE-2008-4020

Summary: CVE-2008-4020 is a cross-site scripting vulnerability in Microsoft Office XP SP3 related to the CDO protocol handling of the Content-Disposition header. When a user accesses content via a cdo: URL, the Content-Disposition header may be ignored and the download dialog bypassed, potentiall...

mIRC 6.34 - Remote Buffer Overflow

mIRC 6.34 - Remote Buffer Overflow !/usr/bin/perl mIRC 6.34 Remote Buffer Overflow Exploit Exploit by SkD skdrat hotmail com ---------------------------------------- A day's work of debugging and looking at mIRC. Tested on Windows XP SP3 English and Windows Vista SP0. Credits to securfrog for...

Design/Logic Flaw

gdiplus.dll in GDI+ in Microsoft Windows XP SP3 does not properly handle crafted .ico files, which allows remote attackers to cause a denial of service divide-by-zero error and application crash via a certain crash.ico file on a web site, and allows user-assisted attackers to cause a denial of...

CVE-2008-4327

gdiplus.dll in GDI+ in Microsoft Windows XP SP3 does not properly handle crafted .ico files, which allows remote attackers to cause a denial of service divide-by-zero error and application crash via a certain crash.ico file on a web site, and allows user-assisted attackers to cause a denial of...

Bluetooth Stack Could Allow Remote Code Execution Vulnerability (951376)

This host is missing a critical security update according to Microsoft Bulletin MS08-030. OpenVAS Vulnerability Test $Id: gbms08-030.nasl 5863 2017-04-05 07:38:11Z antu123 $ Bluetooth Stack Could Allow Remote Code Execution Vulnerability 951376 Authors: Chandan S Copyright: Copyright c 2008...

Crashing ZoneAlarm 8.0.020.000 by Checkpoint (Component : TrueVector)

Crashing ZoneAlarm 8.0.020.000 by Checkpoint Component : TrueVector ========================================== - Keep ZoneALarm 8 running with vsmon.exe running which runs by default - On System A : Run the rogue proxy attached zacrasherproxy.exe and set a port number eg: zacrasherproxy.exe 5938 ...

MS Windows GDI+ (.ico File) Remote Division By Zero Exploit

No description provided by source. MS Windows GDI+ .ico Remote Division By Zero Application: GDIPLUS.DLL Web Site: http://www.microsoft.com/ Platform: Windows Bug: Division By Zero Tested agains: XP SP3 fully patched Note: This have nothing to do with http://milw0rm.com/exploits/4044...

Microsoft Windows - GDI+ '.ICO' Remote Division By Zero

MS Windows GDI+ .ico Remote Division By Zero Application: GDIPLUS.DLL Web Site: http://www.microsoft.com/ Platform: Windows Bug: Division By Zero Tested agains: XP SP3 fully patched Note: This have nothing to do with http://milw0rm.com/exploits/4044...

Microsoft Windows - GDI+ .ICO Remote Division By Zero

Microsoft Windows - GDI+ .ICO Remote Division By Zero MS Windows GDI+ .ico Remote Division By Zero Application: GDIPLUS.DLL Web Site: http://www.microsoft.com/ Platform: Windows Bug: Division By Zero Tested agains: XP SP3 fully patched Note: This have nothing to do with...

mswingdi-dos.txt

MS Windows GDI+ .ico Remote Division By Zero Application: GDIPLUS.DLL Web Site: http://www.microsoft.com/ Platform: Windows Bug: Division By Zero Tested agains: XP SP3 fully patched Note: This have nothing to do with http://milw0rm.com/exploits/4044...

BurnAware NMSDVDXU ActiveX Remote Arbitrary File Creation/Execution

No description provided by source. ----------------------------------------------------------------------------- BurnAware NMSDVDXU ActiveX Control Remote Arbitrary File Creation/Execution url: http://www.burnaware.com File: NMSDVDXU.dll = 1.0.0.13 CLSID: 0355854A-7F23-47E2-B7C3-97EE8DD42CD8...

Google Chrome Browser 0.2.149.27 Automatic File Download Exploit

No description provided by source. Author: nerex E-mail: nerexatlivedotcom Google's new Web browser Chrome allows files e.g., executables to be automatically downloaded to the user's computer without any user prompt. This proof-of-concept was created for educational purposes only. Use the code it...