187 matches found
KLA10397 ACE vulnerability in MSN & Live
A buffer overflow was found in Microsoft Live. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via unspecified vectors. Original advisories - Related products Microsoft-MSN-Messenger Windows-Live-Messenger CVE list...
Windows Live Messenger < 8.1.0178 Video Processing Overflow
Binary data 4197.prm...
Microsoft MSN Messenger Video Conversation Buffer Overflow Vulnerability
Description Microsoft MSN Messenger is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the application. Failed exploit attemp...
MSN Messenger and Windows Live Messenger webcam stream heap overflow
Overview MSN Messenger fails to properly handle webcam streams, which may allow a remote attacker to execute arbitrary code. Description MSN Messenger is an instant messaging application. Starting with version 8, MSN Messenger was renamed to Windows Live Messenger. Windows Live Messenger and some...
Windows Live Messenger Version Detection (deprecated)
Binary data 4196.prm...
Windows Live Messenger Version Detection
Binary data 4084.prm...
phpWebThings ==>1.5.2 RFI
script:phpWebThings ==1.5.2 RFI dir url:http://sourceforge.net/project/showfiles.php?groupid=19103 author:titanichacker c0ntact:[email protected] H.P: hack-teach.com & mohandko.com & tryag.com bug in: /core/editor.php include$editorinserttop; include$editorinsertbottom; exploit:...
wls-xss.txt
Windows Live Spaces has a XSS vulnerability in NetworkSetup.aspx page. This vuln affects every windows live space and it works only on logged users. With this vuln you can grab cookies and so gain the access to the blog's admin panel, where you can edit user's options and data, MSN Messenger...
Windows Live OneCare Antivirus Detection
Windows Live OneCare antivirus, a commercial antivirus software package for Windows, is installed on the remote host; however, there is a problem with the install in that either its services are not running, or its engine and/or virus definition are out of date. %NASLMINLEVEL 999999 C Tenable...
Microsoft Security Bulletin MS07-010 Vulnerability in Microsoft Malware Protection Engine Could Allow Remote Code Execution (932135)
Microsoft Security Bulletin MS07-010 Vulnerability in Microsoft Malware Protection Engine Could Allow Remote Code Execution 932135 Published: February 13, 2007 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Malware Protection Engine Impact of Vulnerability: Remote...
Windows Live Messenger / Windows MSN Messenger decryptable password
Password is stored in registry in reversable encryption...
Hotmail and Windows Live Mail XSS Vulnerabilities
Hotmail's filter identifies "expression" syntax in a CSS attribute. According to Hasegawa Yosuke's posthttp://archive.openmya.devnull.jp/2006.08/msg00369.html, in some character encodingse.g. GB2312, we can substitute some special double-byte chars for the corresponding chars in "expression"...
The latest Windows Live Mail registration and vulnerability analysis-vulnerability warning-the black bar safety net
From the 2 0 0 6 year 6 month 1 8 day@live mailbox broke registered vulnerability the start, in fact, Microsoft has not closed the register for the live mailbox database, the Windows live ID associated with the page, have been able to access, [email protected]/cn/de/fr/jp/...... In the database,...
CVE-2006-6252
Microsoft Windows Live Messenger 8.0 and earlier, when gestual emoticons are enabled, allows remote attackers to cause a denial of service CPU consumption via a long string composed of ":D" sequences, which are interpreted as emoticons...
CVE-2006-6252
Microsoft Windows Live Messenger 8.0 and earlier, when gestual emoticons are enabled, allows remote attackers to cause a denial of service CPU consumption via a long string composed of ":D" sequences, which are interpreted as emoticons...
CVE-2006-6252
Microsoft Windows Live Messenger 8.0 and earlier, when gestual emoticons are enabled, allows remote attackers to cause a denial of service CPU consumption via a long string composed of ":D" sequences, which are interpreted as emoticons...
Block MSN Messenger Live 8
Windows Live Messenger, formerly and still commonly known as MSN Messenger or MSN, is a freeware instant messaging client for Windows XP and Windows Vista. It is part of Microsoft's Windows Live set of online services.Released on June 19, 2006, MSN Messenger Live 8 has many features including...
hotmail_xss.txt
Adivisory Name : Hotmail and Windows Live Mail XSS Vulnerabilities Release Date : 2006.11.03 Test On : Microsoft IE 6.0 Discover : Cheng Peng Suapplesoupatgmail.com Introduction: Hotmail and Windows Live Mail are both web-based e-mail services by Microsoft. Details: Hotmail's filter identifies...
PollCreator1.04.txt
PHP Poll Creator 1.04 pollvote.phpFile Include Source Code: http://www.phppc.de/download/phppc104.zip Vulnerable Code: include $relativerpfad . "layouttop.inc.php"; include $relativerpfad . "polltitelkat.inc.php"; Exploit : http://www.vicTim.com/PhpPC/pollvote.php?relativerpfad=sh3ll.txt? Discove...
PHPForge3b2.txt
PHP Forge 3b2 /inc/inc.php Remote File Include Vulnerability Source Code: http://www.comscripts.com/jump.php?action=script&id=697 Vulnerable Code: require$cfgracine."inc/vars.php"; require$cfgracine."inc/config.php"; require$cfgracine."inc/fonctions.php"; require$cfgracine."inc/systeme.php";...