Autodesk MapGuide Viewer Overflow

Exploit Title: Autodesk MapGuide Viewer ActiveXMGAXCTRL.DLLOverflow Vulnerability Date: 01-09-2010 Author: d3b4g Software Link: http://usa.autodesk.com/adsk/servlet/item?siteID=123112&id=9454821 Version: 6.5 Tested on: Winxp SP3 regards to ROL guys Exception Code: ACCESSVIOLATION Disasm: 175CE9E...

LEADTOOLS ActiveX Raster Twain 16.5 Buffer Overflow

LEADTOOLS ActiveX Raster Twain v16.5 LtocxTwainu.dll Remote Buffer Overflow PoC Vendor: LEAD Technologies, Inc. Product Web Page: http://www.leadtools.com Affected Version: 16.5.0.2 Summary: With LEADTOOLS you can control any scanner, digital camera or capture card that has a TWAIN 32 and 64 bit...

Leadtools ActiveX Raster Twain v16.5 (LtocxTwainu.dll) Buffer Overflow

Exploit for windows platform in category dos / poc ====================================================================== Leadtools ActiveX Raster Twain v16.5 LtocxTwainu.dll Buffer Overflow ====================================================================== LEADTOOLS ActiveX Raster Twain v16....

Google Bans GPS Spy App, Developer Cries Foul

Malware may be difficult to define but, as former U.S. Supreme Court Justice Potter Stewart famously quipped about pornography “you know it when you see it.” At least that’s the position being taken by Google and anti malware firms about two applications designed for mobile phones running Google’...

MS win32k!xxxRealDrawMenuItem() Missing HBITMAP Bounds Checks

Exploit for windows platform in category dos / poc ===================================================================== MS Windows win32k!xxxRealDrawMenuItem Missing HBITMAP Bounds Checks ===================================================================== Microsoft Windows...

Microsoft Windows win32k!xxxRealDrawMenuItem() Missing HBITMAP Bounds Checks

Microsoft Windows win32k!xxxRealDrawMenuItem missing HBITMAP bounds checks ---------------------------------------------------------------------------- Microsoft produce two builds of each of thier supported operating system, a checked build and a free build. The free build is intended for end...

Российский студент получил реальный срок за взлом электронной почты

Омский суд вынес приговор студенту педагогического колледжа - 7 месяцев лишения свободы в колонии-поселении - за то, что он взломал электронный ящик незнакомого человека, а затем требовал с него деньги за возврат аккаунта. Октябрьский районный суд Омска вынес приговор в отношении...

openSUSE Security Update : MozillaThunderbird (openSUSE-SU-2010:0430-2)

This update brings Mozilla Thunderbird to the 3.0.6 security release. It fixes following security bugs: MFSA 2010-34 / CVE-2010-1211: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showe...

Haihaisoft PDF Reader Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ================================================================================== ================================================================================== Haihaisoft PDF Reader OCX Control Remote Buffer Overflow url:...

Haihaisoft PDF Reader OCX Control v1.1.2.0 Remote Buffer Overflow

Exploit for windows platform in category dos / poc ================================================================= Haihaisoft PDF Reader OCX Control v1.1.2.0 Remote Buffer Overflow ================================================================= -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1...

Winamp v5.571 Malicious AVI Denial of Service

Exploit for windows platform in category dos / poc ============================================= Winamp v5.571 Malicious AVI Denial of Service ============================================= Tested on Windows 7 and Winamp v5.571x86 This bug is informed to Nullsoft and was fixed long back. The statu...

Corel VideoStudio Pro X3 Boundary Condition

/ DISCLAIMER THIS PROGRAM IS NOT INTENDED TO BE USED ON OTHER COMPUTERS AND IT IS DESTINED FOR PERSONAL RESEARCH ONLY!!!! The programs are provided as is without any guarantees or warranty. The author is not responsible for any damage or losses of any kind caused by the use or misuse of the...

Corel VideoStudio Pro X3 - .mp4 Buffer Overflow

Corel VideoStudio Pro X3 - .mp4 Buffer Overflow / DISCLAIMER THIS PROGRAM IS NOT INTENDED TO BE USED ON OTHER COMPUTERS AND IT IS DESTINED FOR PERSONAL RESEARCH ONLY!!!! The programs are provided as is without any guarantees or warranty. The author is not responsible for any damage or losses of a...

Corel VideoStudio Pro X3 (.mp4) Buffer Overflow

Exploit for windows platform in category dos / poc =============================================== Corel VideoStudio Pro X3 .mp4 Buffer Overflow =============================================== / DISCLAIMER THIS PROGRAM IS NOT INTENDED TO BE USED ON OTHER COMPUTERS AND IT IS DESTINED FOR PERSONAL...

Corel VideoStudio Pro X3 - '.mp4' Buffer Overflow

/ DISCLAIMER THIS PROGRAM IS NOT INTENDED TO BE USED ON OTHER COMPUTERS AND IT IS DESTINED FOR PERSONAL RESEARCH ONLY!!!! The programs are provided as is without any guarantees or warranty. The author is not responsible for any damage or losses of any kind caused by the use or misuse of the...

SumatraPDF 1.1 - Denial of Service (PoC)

SumatraPDF 1.1 - Denial of Service PoC Exploit Title: SumatraPDF v1.1 Denial-of-Service Date: June, 14, 2010 Author: Matthew Bergin Software Link: blog.kowalczyk.info/software/sumatrapdf Version: 1.1 Tested on: Windows XP Home SP3 Code was generated utilizing a custom fuzzer, PoC creates an Acces...

SumatraPDF 1.1 - Denial of Service (PoC)

Exploit Title: SumatraPDF v1.1 Denial-of-Service Date: June, 14, 2010 Author: Matthew Bergin Software Link: blog.kowalczyk.info/software/sumatrapdf Version: 1.1 Tested on: Windows XP Home SP3 Code was generated utilizing a custom fuzzer, PoC creates an Access Violation when writing to memory...

Winamp v5.571 malicious AVI file handling DoS Vulnerability

No description provided by source. Tested on Windows 7 and Winamp v5.571x86 This bug is informed to Nullsoft and was fixed long back. The status can be found at http://forums.winamp.com/showthread.php?s=&threadid=316000 This code works on Python 3.0. To make it work on 3.0 remove braces in print...

DM Database Server Memory Corruption

DM Database Server Memory Corruption Vulnerability Vulnerable: All Version Vendor: www.dameng.com Discovered by: Shennan Wang HuaweiSymantec SRT Details: ========= A vulnerability in DM Database Server all version allows attacker to execute arbitrary code or cause a DoS Denial of...

Disable Third Party Browser Extensions

The Advanced tab contains settings that apply to all of the security zones. We recommend that you disable the Enable third-party browser extensions option. This option includes toolbars and Browser Helper Objects BHOs. While some add-ons can be useful, they also have the ability to violate your...