IBM Tivoli Storage Manager FastBack Mount Service Code Execution

Added: 10/18/2010 CVE: CVE-2010-3058 BID: 42549 OSVDB: 67292 Background IBM Tivoli Storage Manager TSM provides centralized management for automated backup and restoration operations. TSM includes FastBack, which provides a client/server backup solution for the MS Windows environment. FastBack...

IBM Tivoli Storage Manager FastBack Mount Service Code Execution

Added: 10/18/2010 CVE: CVE-2010-3058 BID: 42549 OSVDB: 67292 Background IBM Tivoli Storage Manager TSM provides centralized management for automated backup and restoration operations. TSM includes FastBack, which provides a client/server backup solution for the MS Windows environment. FastBack...

Mozilla Suite/Firefox - InstallVersion->compareTo() Code Execution (Metasploit)

$Id: mozillacompareto.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Apple QuickTime 7.6.7 _Marshaled_pUnk Code Execution

$Id: applequicktimemarshaledpunk.rb 10196 2010-08-30 21:52:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Apple QuickTime 7.6.7 _Marshaled_pUnk Code Execution

This module exploits a memory trust issue in Apple QuickTime 7.6.7. When processing a specially-crafted HTML page, the QuickTime ActiveX control will treat a supplied parameter as a trusted pointer. It will then use it as a COM-type pUnknown and lead to arbitrary code execution. This exploit...

Anatomy of the New Adobe Flash Exploit

The exploit that is being used in the attacks against the latest zero-day vulnerability in Adobe Flash is a modified version of a harmless SWF file that is only one byte different from the original file. Researchers have seen the exploit being used in active attacks against the vulnerability in...

Google Researcher Ships Exploit to Defeat ASLR+DEP

A prominent security researcher has released an exploit that uses a new technique to defeat ALSR + DEP on Microsoft’s Windows operating system. The exploit, released by Google security researcher “SkyLined,” uses the ret-into-libc technique to bypass DEP Data Execution Prevention and launch code...

Immunity Canvas: AURORA_FLASH

Name| auroraflash ---|--- CVE| CVE-2010-0249 Exploit Pack| CANVAS Description| Aurora vulnerability with ActionScript JIT spraying for IE8 and Windows 7 Notes| CVE Name: CVE-2010-0249 VENDOR: Microsoft VersionsAffected: Repeatability: References: MS10-002 CVE Url: Date public: 01/21/2001 CVSS: 9....

Microsoft Internet Explorer CSS style element vulnerability

Overview Microsoft Internet Explorer IE does not safely reference CSS style elements. Using a specially crafted HTML page, an attacker can cause IE to crash and potentially execute arbitrary code. Description IE contains a vulnerability in the way it references CSS style elements. Processing a...

Apple Safari 4.0.2 - WebKit Parsing of Floating Point Numbers Buffer Overflow (PoC)

Apple Safari 4.0.2 - WebKit Parsing of Floating Point Numbers Buffer Overflow PoC Three weeks ago, I coded a nice little browser fuzzer, and started playing with various browsers: IE, Firefox, Safari, Chrome, Opera... I found an interesting Safari crash after couple of hours of fuzzing. It was a...

Apple Safari 4.0.2 - WebKit Parsing of Floating Point Numbers Buffer Overflow (PoC)

Three weeks ago, I coded a nice little browser fuzzer, and started playing with various browsers: IE, Firefox, Safari, Chrome, Opera... I found an interesting Safari crash after couple of hours of fuzzing. It was a stack overflow and a smile on my face. Since then, every now and then I took some...

[GSEC-TZO-45-2009] iPhone remote code execution

Fell quite behind on this one, here it is. Phone &iPod Touch - Remote arbritary code execution Reference : GSEC-TZO-45-2009 - iPhone remote arbritary code execution WWW : http://www.g-sec.lu/iphone-remote-code-exec.html CVE : CVE-2009-1698 BID : 35318 Credit : http://support.apple.com/kb/HT3639...

Apple Mac OSX xnu 1228.9.59 - Kernel Privilege Escalation

Apple Mac OSX xnu 1228.9.59 - Kernel Privilege Escalation / xnu-workq-v2-64.c Copyright c 2008 by Apple MACOS X xnu include include include include include include / profil defines / define PROFILITEMSIZE 64 define PROFILBLKSIZE 65536 define PROFILBLKNUM 84 / workq defines / define WQOPSQUEUEADD ...

Foxit Reader 3.0 (<= Build 1301) PDF Buffer Overflow Exploit (Univ.)

No description provided by source. !/usr/bin/perl Foxit Reader 3.0 = Build 1301 PDF Buffer Overflow Exploit Universal ------------------------------------------------------------------------ Exploit by SkD [email protected] A SEH overflow occurs in this vulnerability in the popular Foxit Reader...

Foxit Reader 3.0 (<= Build 1301) PDF Buffer Overflow Exploit (Univ.)

Exploit for unknown platform in category local exploits ==================================================================== Foxit Reader 3.0 = Build 1301 PDF Buffer Overflow Exploit Univ. ==================================================================== !/usr/bin/perl Foxit Reader 3.0 = Build...

Foxit Reader 3.0 (Build 1301) - PDF Universal Buffer Overflow

Foxit Reader 3.0 Build 1301 - PDF Universal Buffer Overflow !/usr/bin/perl Foxit Reader 3.0 = Build 1301 PDF Buffer Overflow Exploit Universal ------------------------------------------------------------------------ Exploit by SkD [email protected] A SEH overflow occurs in this vulnerability in...

Foxit Reader 3.0 (Build 1301) - PDF Universal Buffer Overflow

!/usr/bin/perl Foxit Reader 3.0 = Build 1301 PDF Buffer Overflow Exploit Universal ------------------------------------------------------------------------ Exploit by SkD [email protected] A SEH overflow occurs in this vulnerability in the popular Foxit Reader. The latest build 1506 is not...

NeoTracePro 3.25 ActiveX TraceTarget() Remote BoF Exploit

Exploit for unknown platform in category remote exploits ========================================================= NeoTracePro 3.25 ActiveX TraceTarget Remote BoF Exploit ========================================================= Date: 24/03/07 Mexico / PRIVATE DON'T DISTRIBUTE PRIVATE DON'T...

MS Windows Media Player 10 Plugin Overflow Exploit (MS06-006)

No description provided by source. HTML HEAD TITLEWMP Plugin EMBED Exploit/TITLE SCRIPT // Windows Media Player Plug-In EMBED Overflow Universal Exploit MS06-006 // By Matthew Murphy [email protected] // // DISCLAIMER: // // This exploit code is intended only as a demonstration tool for...

Program Checker (sasatl.dll 1.5.0.531) DebugMsgLog Heap Spraying Exploit

Exploit for unknown platform in category remote exploits ======================================================================== Program Checker sasatl.dll 1.5.0.531 DebugMsgLog Heap Spraying Exploit ======================================================================== :. GOODFELLAS Security...