Microsoft Windows Explorer - 'explorer.exe .WMV' File Handling Denial of Service

source: https://www.securityfocus.com/bid/21612/info Multiple applications are prone to a denial-of-service vulnerability. A remote attacker may exploit this vulnerability by presenting malicious 'WMV', 'MID', and 'AVI' files to a victim user. When an affected application processes this image, th...

Symantec LiveState Agent privilege escalation

It's possible to launch Windows Explorer with SYSTEM privileges...

Microsoft IE WebViewFolderIcon远程整数溢出漏洞(MS06-057)

Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer在处理畸形的ActiveX对象调用方式时存在整数溢出漏洞，远程攻击者可能利用此漏洞导致浏览器崩溃或执行任意指令。 如果攻击者能够向WebViewFolderIcon控件的setSlice方法传送0x7fffffff参数的话，可能导致浏览器崩溃或执行任意指令。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁：...

Internet Explorer SetSlice Method Buffer Overflow (MS06-057; CVE-2006-3730)

Microsoft Internet Explorer is the most widely used Internet browser. The WebViewFolderIcon object is an ActiveX control that comes with Microsoft Windows. Provided by the file webvw.dll, this control provides support functionality for icons in the Windows Explorer Web view. A vulnerability in...

Update Protection against Microsoft Windows MHTML Remote Code Execution Vulnerability (MS06-043)

Several Microsoft Windows applications are prone to a buffer overflow vulnerability. Microsoft Internet Explorer, Windows Explorer and Outlook Express 6 fail to properly process overly long MHTML URLs. MHTML is an Internet standard that defines the MIME structure used to send HTML content in e-ma...

Microsoft Security Bulletin MS06-057 Vulnerability in Windows Explorer Could Allow Remote Execution (923191)

Microsoft Security Bulletin MS06-057 Vulnerability in Windows Explorer Could Allow Remote Execution 923191 Published: October 10, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating:...

Microsoft Security Bulletin MS06-045 Vulnerability in Windows Explorer Could Allow Remote Code Execution (921398)

Microsoft Security Bulletin MS06-045 Vulnerability in Windows Explorer Could Allow Remote Code Execution 921398 Published: August 8, 2006 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating:...

MS06-045: Vulnerability in Windows Explorer Could Allow Remote Code Execution (921398)

The remote host is running a version of Windows that contains a flaw in the Windows Explorer Drag & Drop handler. An attacker may be able to execute arbitrary code on the remote host by constructing a malicious script and enticing a victim to visit a website or view a specially crafted email...

CVE-2006-3351

Buffer overflow in Windows Explorer explorer.exe on Windows XP and 2003 allows user-assisted attackers to cause a denial of service repeated crash and possibly execute arbitrary code via a .url file with an InternetShortcut tag containing a long URL and a large number of "file:" specifiers...

CVE-2006-3351

CVE-2006-3351 is a Windows Explorer vulnerability (explorer.exe) affecting Windows XP/2003 where parsing of .url files with InternetShortcut tags can overflow the stack. A crafted .url file containing a long URL and many file: specifiers may trigger a denial of service and possibly arbitrary code...

CVE-2006-3351

Buffer overflow in Windows Explorer explorer.exe on Windows XP and 2003 allows user-assisted attackers to cause a denial of service repeated crash and possibly execute arbitrary code via a .url file with an InternetShortcut tag containing a long URL and a large number of "file:" specifiers...

Pico Zip 4.01 - Filename Local Buffer Overflow

Pico Zip 4.01 - Filename Local Buffer Overflow !/usr/bin/perl Pico Zip v. 4.01 Long Filename Buffer Overflow Original advisory - http://www.securityfocus.com/archive/1/437103/30/30/threaded Author - c0rrupt Greets - sh0uts to n0limit, muts, and brax for the music ; The vulnerability is caused due...

Pico Zip 4.01 (Long Filename) Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ===================================================== Pico Zip 4.01 Long Filename Buffer Overflow Exploit ===================================================== !/usr/bin/perl Pico Zip v. 4.01 Long Filename Buffer Overflow Original advisory -...

Pico Zip 4.01 - 'Filename' Local Buffer Overflow

!/usr/bin/perl Pico Zip v. 4.01 Long Filename Buffer Overflow Original advisory - http://www.securityfocus.com/archive/1/437103/30/30/threaded Author - c0rrupt Greets - sh0uts to n0limit, muts, and brax for the music ; The vulnerability is caused due to a boundary error within the "zipinfo.dll"...

Buffer overflow

Buffer overflow in INETCOMM.DLL, as used in Microsoft Internet Explorer 6.0 through 6.0 SP2, Windows Explorer, Outlook Express 6, and possibly other programs, allows remote user-assisted attackers to cause a denial of service application crash via a long mhtml URI in the URL value in a URL file...

CVE-2006-2766

Buffer overflow in INETCOMM.DLL, as used in Microsoft Internet Explorer 6.0 through 6.0 SP2, Windows Explorer, Outlook Express 6, and possibly other programs, allows remote user-assisted attackers to cause a denial of service application crash via a long mhtml URI in the URL value in a URL file...

Re: [Full-disclosure] MSIE (mshtml.dll) OBJECT tag vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: RIPEMD160 Michal Zalewski wrote: Perhaps not surprisingly, there appears to be a vulnerability in how Microsoft Internet Explorer handles or fails to handle certain combinations of nested OBJECT tags. This was tested with MSIE 6.0.2900.2180.xpsp.040806-182...

Design/Logic Flaw

Unspecified vulnerability in Windows Explorer in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via attack vectors involving COM objects and "crafted files and directories," aka the "Windows Shell Vulnerability."...

CVE-2006-0012

Unspecified vulnerability in Windows Explorer in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via attack vectors involving COM objects and "crafted files and directories," aka the "Windows Shell Vulnerability."...

CVE-2006-0012

Unspecified vulnerability in Windows Explorer in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via attack vectors involving COM objects and "crafted files and directories," aka the "Windows Shell Vulnerability."...