5265 matches found
Active Defense class software generic implementation vulnerability-a vulnerability warning-the black bar safety net
Active Defense software in the realization of the presence of a Common Vulnerability, malware can take to bypass security checks to perform malicious acts The main anti-block system some of the key operation in these monitoring points do parameter checking. Because the parameters often come from...
Microsoft Office OneNote 2010 - Crash (PoC)
Title : Microsoft Office OneNote 2010 WriteAV Vulnerability Version : Microsoft Office professional Plus 2010 Date : 2012-11-19 Vendor : http://office.microsoft.com Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 ENG Bug : ---- memory corruption during...
Microsoft Office OneNote 2010 WriteAV Vulnerability
memory corruption during the handling of the one files How can i make sure a crash is not exploitable? The short answer is simple assume every crash is exploitable and just fix it. Or "defective software is OK." Title : Microsoft Office OneNote 2010 WriteAV Vulnerability Version : Microsoft Offic...
Microsoft Publisher 2013 - Crash (PoC)
Title : Microsoft Publisher 2013 memory corruption Version : Microsoft Office Publisher professional Plus 2013 Date : 2012-11-11 Vendor : http://office.microsoft.com Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : Windows 7 Bug : ---- memory corruption during...
Microsoft Excel 2007 - WriteAV Crash (PoC)
Title : Microsoft Office Excel 2007 WriteAV Vulnerability Version : Microsoft Office professional Plus 2007 SP2 Date : 2012-11-08 Vendor : http://office.microsoft.com Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 ENG Bug : ---- memory corruption duri...
Ocean Data Systems Dream Reports XSS and Write Access Violation Vulnerabilities
Overview Independent researchers Billy Rios and Terry McCorkle identified cross-site scripting XSS and write access violation vulnerabilities in Ocean Data Systems Dream Report application. ICS-CERT has coordinated these vulnerabilities with Ocean Data Systems, which has produced a new version th...
Allscripts Homecare Client Local Memory Corruption
Title: Allscripts Homecare Client Local Memory Corruption tableinfo.ff2 Date: 10/25/12 Author: G13 Software Link: http://www.allscripts.com/en/solutions/post-acute-solutions/homecare/show/overview.html Version: 6.1.0, 7.0.1 Category: Application local Tested on: Windows 7 Pro 64 Bit dc585...
CVE-2012-5672
Microsoft Excel Viewer aka Xlview.exe and Excel in Microsoft Office 2007 aka Office 12 allow remote attackers to cause a denial of service read access violation and application crash via a crafted spreadsheet file, as demonstrated by a .xls file with battery voltage data...
Design/Logic Flaw
Microsoft Excel Viewer aka Xlview.exe and Excel in Microsoft Office 2007 aka Office 12 allow remote attackers to cause a denial of service read access violation and application crash via a crafted spreadsheet file, as demonstrated by a .xls file with battery voltage data...
CVE-2012-5672
Microsoft Excel Viewer aka Xlview.exe and Excel in Microsoft Office 2007 aka Office 12 allow remote attackers to cause a denial of service read access violation and application crash via a crafted spreadsheet file, as demonstrated by a .xls file with battery voltage data...
Microsoft Office Picture Manager 2010 memory corruption
notice : for testing POC please run the Microsoft Office Picture Manager under a Debugger and then open the POC file Successful exploits can allow attackers to execute arbitrary code Title : Microsoft Office Picture Manager 2010 memory corruption Version : Microsoft Office professional Plus 2010...
Report: 'Aggressive Adware' More Prevalent Among Android Malware
A new report from Trend Micro showed a 483 percent jump in malware — including “aggressive adware” that harvests person data without permission using legitimate ad networks. It’s no surprise that the open nature of the Android platform makes it a magnet for malware, but the type of malware becomi...
SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 8327)
MozillaFirefox was updated to the 10.0.9ESR security release which fixes bugs and security issues : - Security researchers Thai Duong and Juliano Rizzo reported that SPDY's request header compression leads to information leakage, which can allow the extraction of private data such as session...
TVMOBiLi Media Server Multiple Remote DoS Vulnerabilities
High-Tech Bridge Security Research Lab has discovered 2 remote DoS vulnerabilities in TVMOBiLi Media server, which could be exploited to crash remote server with malicious HTTP requests. 1 Improper Handling of Length Parameter Inconsistency in TVMOBiLi: CVE-2012-5451 1.1 The vulnerability exists...
Continued access to initial origin after setting document.domain — Mozilla
Security researcher Collin Jackson reported a violation of the HTML5 specifications for document.domain behavior. Specified behavior requires pages to only have access to windows in a new document.domain but the observed violation allowed pages to retain access to windows from the page's initial...
Massachusetts Hospital Agrees to Pay $1.5m After Stolen Laptop HIPAA Violation
Massachusetts Eye and Ear Infirmary, a Boston-based hospital, agreed to pay $1.5 million to the U.S. Department of Health and Human Services HSS earlier this week, settling a HIPAA violation stemming from a 2010 incident. The agreement acknowledges that the hospital failed to comply with...
Most Smartphone Users Consider Privacy When Vetting Apps
Cellphone owners now account for 88 percent of the U.S. population, of which some 43 percent say they download applications on their phones. Among these ‘app users,’ 57 percent told the Pew Internet and American Life Project that they have either uninstalled existing applications or made the...
httpdx 1.5.4 - HTTP Server Remote Denial of Service
httpdx 1.5.4 - HTTP Server Remote Denial of Service !/usr/bin/perl -w ====================================================================== Exploit Title: httpdx v1.5.4 Remote HTTP Server DoS using wildcards Date: 18 July 2012 Exploit Author: st3n at sign funoverip dot net Vendor Homepage:...
httpdx 1.5.4 Remote HTTP Server Denial of Service
Exploit for windows platform in category dos / poc !/usr/bin/perl -w ====================================================================== Exploit Title: httpdx v1.5.4 Remote HTTP Server DoS using wildcards Date: 18 July 2012 Exploit Author: st3n at sign funoverip dot net Vendor Homepage:...
httpdx 1.5.4 - HTTP Server Remote Denial of Service
!/usr/bin/perl -w ====================================================================== Exploit Title: httpdx v1.5.4 Remote HTTP Server DoS using wildcards Date: 18 July 2012 Exploit Author: st3n at sign funoverip dot net Vendor Homepage: http://httpdx.sourceforge.net Download link:...