Microsoft Windows animated cursor stack buffer overflow

Overview Microsoft Windows contains a stack buffer overflow in the handling of animated cursor files. This vulnerability may allow a remote attacker to execute arbitrary code or cause a denial-of-service condition. Description Animated cursor files .ani contain animated graphics for icons and...

CVE-2007-1347

Microsoft Windows Explorer on Windows 2000 SP4 FR and XP SP2 FR, and possibly other versions and platforms, allows remote attackers to cause a denial of service memory corruption and crash via an Office file with crafted document summary information, which causes an error in Ole32.dll...

CVE-2007-1347

Microsoft Windows Explorer on Windows 2000 SP4 FR and XP SP2 FR, and possibly other versions and platforms, allows remote attackers to cause a denial of service memory corruption and crash via an Office file with crafted document summary information, which causes an error in Ole32.dll...

Design/Logic Flaw

Microsoft Windows Explorer on Windows XP and 2003 allows remote user-assisted attackers to cause a denial of service crash via a malformed WMF file, which triggers the crash when the user browses the folder...

CVE-2007-1090

Microsoft Windows Explorer on Windows XP and 2003 allows remote user-assisted attackers to cause a denial of service crash via a malformed WMF file, which triggers the crash when the user browses the folder...

Microsoft Internet Explorer fails to properly interpret certain responses from FTP servers

Overview A vulnerability in the way Microsoft Internet Explorer handles responses from FTP servers may lead to execution of arbitrary code. Description Microsoft Internet Explorer contains an unspecified vulnerability that could be exploited when it attempts to interpret responses from FTP server...

CVE-2007-0675

A certain ActiveX control in sapi.dll aka the Speech API in Speech Components in Microsoft Windows Vista, when the Speech Recognition feature is enabled, allows user-assisted remote attackers to delete arbitrary files, and conduct other unauthorized activities, via a web page with an embedded sou...

Design/Logic Flaw

A certain ActiveX control in sapi.dll aka the Speech API in Speech Components in Microsoft Windows Vista, when the Speech Recognition feature is enabled, allows user-assisted remote attackers to delete arbitrary files, and conduct other unauthorized activities, via a web page with an embedded sou...

CVE-2007-0675

A certain ActiveX control in sapi.dll aka the Speech API in Speech Components in Microsoft Windows Vista, when the Speech Recognition feature is enabled, allows user-assisted remote attackers to delete arbitrary files, and conduct other unauthorized activities, via a web page with an embedded sou...

Design/Logic Flaw

Windows Explorer explorer.exe 6.0.2900.2180 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial of service application crash via a crafted .avi file, which triggers the crash when the user right clicks on the file...

CVE-2007-0562

CVE-2007-0562 affects Windows Explorer (explorer.exe) on Microsoft Windows XP SP2. A crafted .AVI file can cause a denial-of-service (application crash) when the user right-clicks the file. The description indicates that a user-assisted remote attacker could trigger the crash, implying a remote t...

CVE-2007-0562

Windows Explorer explorer.exe 6.0.2900.2180 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial of service application crash via a crafted .avi file, which triggers the crash when the user right clicks on the file...

MS Windows Explorer (AVI) Unspecified Denial of Service Exploit

No description provided by source. print "-----------------------------------------------------------------------------------" print "Explorer.exe version 6.0.2900.2180 .avi file Denial of Service" print "author: shinnai" print "mail: shinnaiatautisticidotorg" print "site:...

MS Windows Explorer (WMF) Unspecified Denial of Service Exploit

No description provided by source. !/usr/bin/perl WMF 0-day Dos Exploit Exploit Coded by Vampire Form Iran Contact : [email protected] Bug Found by Orbital Gr33tz To : Spy , l0pht.blackhat , Samir , Scorpino y4nliz and All Iranian Hackers and Programmers !!! Contact :...

Microsoft Internet Explorer VML buffer overflow

Overview Microsoft Internet Explorer IE fails to properly handle Vector Markup Language tags. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft IE version 5.0 and higher supports the Vector Markup Language VML,...

Windows Explorer DoS PoC

No description provided by source. http://www.security.nnov.ru/files/AAAA.WMV...

Microsoft Windows Explorer - 'explorer.exe .WMV' File Handling Denial of Service

source: https://www.securityfocus.com/bid/21612/info Multiple applications are prone to a denial-of-service vulnerability. A remote attacker may exploit this vulnerability by presenting malicious 'WMV', 'MID', and 'AVI' files to a victim user. When an affected application processes this image, th...

Symantec LiveState Agent privilege escalation

It's possible to launch Windows Explorer with SYSTEM privileges...

Microsoft IE WebViewFolderIcon远程整数溢出漏洞(MS06-057)

Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer在处理畸形的ActiveX对象调用方式时存在整数溢出漏洞，远程攻击者可能利用此漏洞导致浏览器崩溃或执行任意指令。 如果攻击者能够向WebViewFolderIcon控件的setSlice方法传送0x7fffffff参数的话，可能导致浏览器崩溃或执行任意指令。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁：...

Internet Explorer SetSlice Method Buffer Overflow (MS06-057; CVE-2006-3730)

Microsoft Internet Explorer is the most widely used Internet browser. The WebViewFolderIcon object is an ActiveX control that comes with Microsoft Windows. Provided by the file webvw.dll, this control provides support functionality for icons in the Windows Explorer Web view. A vulnerability in...