1344 matches found
CVE-2002-0052: Undefined Security Weakness
Internet Explorer 6.0 and earlier does not properly handle VBScript in certain domain security checks, which allows remote attackers to read arbitrary files...
Microsoft Internet Explorer 56 Outlook 200020025.5 Word 20002002 - VBScript ActiveX Word Object Denial of Service
Microsoft Internet Explorer 56 Outlook 200020025.5 Word 20002002 - VBScript ActiveX Word Object Denial of Service source: https://www.securityfocus.com/bid/4463/info A vulnerability has been discovered which is reported to affect Microsoft Internet Explorer, Outlook and Word. Other Office...
Microsoft Internet Explorer 5/6 / Outlook 2000/2002/5.5 / Word 2000/2002 - VBScript ActiveX Word Object Denial of Service
source: https://www.securityfocus.com/bid/4463/info A vulnerability has been discovered which is reported to affect Microsoft Internet Explorer, Outlook and Word. Other Office components may also be affected by this issue. It is possible to misuse VBScript ActiveX Word objects to cause a denial o...
MS02-009: IE VBScript Handling patch (318089)
The remote host is running a version of Internet Explorer that may allow an attacker to read local files on the remote host. To exploit this flaw, an attacker would need to lure a victim on the remote system into visiting a rogue website. C Tenable Network Security, Inc. include"compat.inc"; if...
CVE-2002-0052
Internet Explorer 6.0 and earlier does not properly handle VBScript in certain domain security checks, which allows remote attackers to read arbitrary files...
Security Bulletin MS02-009
---------------------------------------------------------------------- Title: Incorrect VBScript Handling in IE can Allow Web Pages to Read Local Files Date: 21 February 2002 Software: Internet Explorer Impact: Information Disclosure Max Risk: Critical Bulletin: MS02-009 Microsoft encourages...
Modifed images can lead to JavaScript/VBScript execution in AIM
Software Effected: AOL Instant Messenger Versions Effected: 4.1 to current including 4.4 alpha, older versions probably effected Details: AOL Instnat Messenger has the ability to embed images into an instant message. The user sends the graphic to the person they wish to show, and the graphic show...
Дырка в AOL Instant Messenger
При некоторых условиях на компьютере клиента может быть выполнен Javascript/VBScript...
Microsoft Internet Explorer vulnerable to file disclosure via code containing GetObject() function
Overview Internet Explorer may disclose files on your computer if you visit a malicious web site or read a mail message with Active Scripting enabled. Description By design, Microsoft Internet Explorer prevents programs on web sites from reading files on your computer without authorization...
Exploit Code for File Input field advisory.
I have coded an exploit example for the "File Upload via Form" vulnerability recently mentioned by Microsoft Security. Here's the source for it well, most of the source. If you would like the whole source, email me. I'll send it as an attachment. --------------snip------------------ !script...
Microsoft Windows NT 4.0 - DCOM Server
Microsoft Windows NT 4.0 - DCOM Server source: https://www.securityfocus.com/bid/624/info It is possible for a local user to modify how DCOM servers are run, thereby escalating his/her privilege level. The Interactive User has write permissions to the DCOM registry entries. By editing the registr...
Microsoft Windows NT 4.0 - DCOM Server
source: https://www.securityfocus.com/bid/624/info It is possible for a local user to modify how DCOM servers are run, thereby escalating his/her privilege level. The Interactive User has write permissions to the DCOM registry entries. By editing the registry keys associated with DCOM server...
cuartango-window.txt
Cuartango Window http://pages.whowhere.com/computers/cuartangojc/cuartangow1.html Affected software Microsoft Internet Explorer 4 Risks Your computer is at risk a malicious VBScript can get full control over your system. The VBScript can de everything : delete files, install viruses, read your...
Malicious Windows Script Host VBScript (.vbs) File
This module creates a Windows Script Host WSH VBScript .vbs file. Module Options msf use exploit/windows/fileformat/windows/scripthostvbscript msf undefinedscripthostvbscript show actions ...actions... msf undefinedscripthostvbscript set ACTION msf undefinedscripthostvbscript show options ...show...
MS11-009: Vulnerability in JScript and VBScript scripting engines could allow remote code execution
None None...
Security Update for Windows Server 2003 for Itanium-based Systems (KB944338)
A security issue has been identified in VBScript and Jscript that could allow an attacker to compromise your Microsoft Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart...
Internet Explorer help
None None...
Security Update, February 14, 2002 (Internet Explorer 5.01)
This is an updated version of Security Update, February 14, 2002. This update resolves the "Incorrect VBScript Handling can Allow Web Pages to Read Local Files" security vulnerability in Internet Explorer 5.01 and Windows 2000, and is discussed in Microsoft Security Bulletin MS02-009. Download no...
Security Update for Windows 2000 (KB944338)
A security issue has been identified in VBScript and Jscript that could allow an attacker to compromise your Microsoft Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart...
Security Update for Windows Server 2003 x64 Edition (KB944338)
A security issue has been identified in VBScript and Jscript that could allow an attacker to compromise your Microsoft Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart...