CVE-2007-0025

The CVE-2007-0025 family describes a stack-based buffer overflow in the MFC component (AfxOleSetEditMenu) of the MFC42u.dll used by Windows 2000 SP4, XP SP2, Server 2003 SP1, and Visual Studio .NET 2000/2002/2003/2003 SP1. A malformed OLE object in an RTF file triggers memory corruption, enabling...

CVE-2007-0025

The MFC component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 and Visual Studio .NET 2000, 2002 SP1, 2003, and 2003 SP1 allows user-assisted remote attackers to execute arbitrary code via an RTF file with a malformed OLE object that triggers memory corruption. NOTE: this might be due to a...

CVE-2007-0842

The 64-bit versions of Microsoft Visual C++ 8.0 standard library MSVCR80.DLL time functions, including 1 localtime, 2 localtimes, 3 gmtime, 4 gmtimes, 5 ctime, 6 ctimes, 7 wctime, 8 wctimes, and 9 fstat, trigger an assertion error instead of a NULL pointer or EINVAL when processing a time argumen...

CVE-2007-0842

The 64-bit versions of Microsoft Visual C++ 8.0 standard library MSVCR80.DLL time functions, including 1 localtime, 2 localtimes, 3 gmtime, 4 gmtimes, 5 ctime, 6 ctimes, 7 wctime, 8 wctimes, and 9 fstat, trigger an assertion error instead of a NULL pointer or EINVAL when processing a time argumen...

CVE-2007-0842

CVE-2007-0842 affects 64-bit Microsoft Visual C++ 8.0 standard library (MSVCR80.DLL) time functions (localtime, localtime_s, gmtime, gmtime_s, ctime, ctime_s, wctime, wctime_s, fstat). When processing a time argument >= 1 Jan 3000, these functions trigger an assertion instead of returning NULL...

Microsoft MFC Embedded OLE Object Remote Code Execution Vulnerability

Description The Microsoft MFC component for Microsoft Windows and Microsoft Visual Studio .NET is prone to a remote code-execution vulnerability. This issue occurs when the application using the component attempts to parse malformed Rich Text Files RTF. An attacker could exploit this issue by...

Microsoft Visual Studio 64-bit time functions DoS

Invalid use of assert-style macro causes application termination for timet values behind MAXTIME64T January, 1 3000...

SecurityVulns.com: Microsoft Visual C++ 8.0 standard library time functions invalid assertion DoS (Problem 3000).

Title: Microsoft Visual C++ 8.0 standard library time functions invalid assertion DoS Problem 3000. Product: Visual Studio 2005 Vendor: Microsoft Vulnerability class: Denial of Service Remote: application dependant, remote vector is possible CVE: CVE-2007-0842 Author: 3APA3A,...

CVE-2007-0468

Stack-based buffer overflow in rcdll.dll in msdev.exe in Visual C++ MSVC in Microsoft Visual Studio 6.0 SP6 allows user-assisted remote attackers to execute arbitrary code via a long file path in the "1 TYPELIB MOVEABLE PURE" option in an RC file...

Stack overflow

Stack-based buffer overflow in rcdll.dll in msdev.exe in Visual C++ MSVC in Microsoft Visual Studio 6.0 SP6 allows user-assisted remote attackers to execute arbitrary code via a long file path in the "1 TYPELIB MOVEABLE PURE" option in an RC file...

CVE-2007-0468

Stack-based buffer overflow in rcdll.dll in msdev.exe in Visual C++ MSVC in Microsoft Visual Studio 6.0 SP6 allows user-assisted remote attackers to execute arbitrary code via a long file path in the "1 TYPELIB MOVEABLE PURE" option in an RC file...

CVE-2007-0468

CVE-2007-0468 describes a stack-based buffer overflow in rcdll.dll inside msdev.exe (Visual C++ MSVC) of Microsoft Visual Studio 6.0 SP6. The vulnerability is triggered by a long file path in the RC file’s 1 TYPELIB MOVEABLE PURE option, allowing a user-assisted attacker to execute arbitrary code...

Microsoft Visual C++ (.RC) resource files buffer overflow vulnerability

Advisory: //////////// Microsoft Visual C++ 6.0 is prone to stack based memory corruption vulnerability during processing .RC resource files, caused by the lack of input data boundary check. Vulnerable software: //////////////////// Microsoft Visual Studio 6.0 SP6 Impact: /////// Remote code...

Microsoft Visual Studio buffer overflow

Buffer overflows on oversized filename in different paramters...

mssploit.txt

Advisory: //////////// Microsoft Visual C++ 6.0 is prone to stack based memory corruption vulnerability during processing .RC resource files, caused by the lack of input data boundary check. Vulnerable software: //////////////////// Microsoft Visual Studio 6.0 SP6 Impact: /////// Remote code...

Microsoft Visual C++ (.RC)资源文件远程栈溢出漏洞

Microsoft Visual C++是基于Windows平台的C++编译器。 Microsoft Visual C++资源编译器RCDLL.DLL模块的MSDEV.EXE进程在处理.rc资源文件时存在栈溢出漏洞，远程攻击者可能利用此漏洞通过诱骗用户打开恶意资源文件来控制用户机器。 在处理类似于以下的文件名字段时： 1 TYPELIB MOVEABLE PURE "FilePath01"...

Microsoft Visual C++ (.RC Resource Files) Local Buffer Overflow Exploit

No description provided by source. // // // Microsoft Visual C++ 6.0 SP6 resource compiler buffer overflow // vulnerability .rc resource files exploit // // vulnerability found / exploit built by porkythepig // // include "stdio.h" include "stdlib.h" include "memory.h"...

Microsoft Visual C++ - .RC Resource Files Local Buffer Overflow

Microsoft Visual C++ - .RC Resource Files Local Buffer Overflow // // // Microsoft Visual C++ 6.0 SP6 resource compiler buffer overflow // vulnerability .rc resource files exploit // // vulnerability found / exploit built by porkythepig // // include "stdio.h" include "stdlib.h" include "memory.h...

Microsoft Visual C++ (.RC Resource Files) Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ======================================================================= Microsoft Visual C++ .RC Resource Files Local Buffer Overflow Exploit ======================================================================= // // // Microsoft Visual C...

Microsoft Visual C++ - '.RC Resource Files' Local Buffer Overflow

// // // Microsoft Visual C++ 6.0 SP6 resource compiler buffer overflow // vulnerability .rc resource files exploit // // vulnerability found / exploit built by porkythepig // // include "stdio.h" include "stdlib.h" include "memory.h" define STR01 "Microsoft Visual Studio 6.0 SP6 .rc PoC exploit ...