Logitech Webcam Software 1.1 - 'eReg.exe' Local Buffer Overflow (SEH Unicode)

Title: Logitech Webcam Software 1.1 eReg.exe SEH/Unicode Buffer Overflow Date: 9-10-2015 Target tested: Windows 7 x64 Software Link: http://www.logitech.com/pub/techsupport/quickcam/lws110x64.exe Author: Robbie Corley Contact: [email protected] Website: CVE: Category: Local Description: The...

Microsoft Internet Explorer 11 - Stack Underflow Crash (PoC)

crash IE 11 function crash var id0 = null; id0 = document.createElement 'THEAD' ; document.body.appendChild id0 ; elemTree = ; elemTree0= document.createElement'SELECT'; document.all7.appendChildelemTree0; elemTree1= document.createElement'B'; document.all8.appendChildelemTree1; elemTree2=...

Logitech Webcam Software 1.1 - eReg.exe SEH/Unicode Buffer Overflow Vulnerability

Exploit for windows platform in category local exploits Title: Logitech Webcam Software 1.1 eReg.exe SEH/Unicode Buffer Overflow Date: 9-10-2015 Target tested: Windows 7 x64 Software Link: http://www.logitech.com/pub/techsupport/quickcam/lws110x64.exe Author: Robbie Corley Contact: email protecte...

Microsoft Windows Media Center - Command Execution (MS15-100)

Microsoft Windows Media Center - Command Execution MS15-100 Title: MS15-100 Windows Media Center Command Execution Date : 11/09/2015 Author: R-73eN Software: Windows Media Center Tested : Windows 7 Ultimate CVE : 2015-2509 banner = "" banner += " \n" banner +=" | | / | / | / \ | | \n" banner +=" ...

Microsoft Internet Explorer 11 - Stack Underflow Crash (PoC)

Microsoft Internet Explorer 11 - Stack Underflow Crash PoC crash IE 11 function crash var id0 = null; id0 = document.createElement 'THEAD' ; document.body.appendChild id0 ; elemTree = ; elemTree0= document.createElement'SELECT'; document.all7.appendChildelemTree0; elemTree1=...

Logitech Webcam Software 1.1 - eReg.exe Local Buffer Overflow (SEH Unicode)

Logitech Webcam Software 1.1 - eReg.exe Local Buffer Overflow SEH Unicode Title: Logitech Webcam Software 1.1 eReg.exe SEH/Unicode Buffer Overflow Date: 9-10-2015 Target tested: Windows 7 x64 Software Link: http://www.logitech.com/pub/techsupport/quickcam/lws110x64.exe Author: Robbie Corley...

CVE-2015-2512

The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows local users to gain privileges via a crafted application, aka "Font Driver...

CVE-2015-2506

atmfd.dll in the Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to cause a denial of service system crash via a...

Design/Logic Flaw

Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to cause a denial of service data loss via a crafted .jnt file, aka "Windows...

Immunity Canvas: MS15_100

Name| ms15100 ---|--- CVE| CVE-2015-2509 Exploit Pack| CANVAS Description| ms15100 Notes| References: https://technet.microsoft.com/library/security/ms15-100 CVE Name: CVE-2015-2509 VENDOR: Microsoft NOTES: Tested on: Windows 7 SP132 bits Windows 7 SP164 bits Use port 80 as the server port Window...

Privilege escalation

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows local users to gain privileges via a crafted application, aka "Win32k Memory Corruption...

Design/Logic Flaw

Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to execute arbitrary code via a crafted .jnt file, aka "Windows Journal RCE...

Design/Logic Flaw

atmfd.dll in the Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to cause a denial of service system crash via a...

Immunity Canvas: MS15_102

Name| ms15102 ---|--- CVE| CVE-2015-2525 Exploit Pack| CANVAS Description| Windows Task Arbitrary File Deletion Notes| Repeatability: Infinite Notes: This module exploits a vulnerability on the Task Scheduler Service schedsvc.dll. When a scheduled task is created with the DeleteExpiredTaskAfter...

CVE-2015-2514

CVE-2015-2514 pertains to Windows Journal remote code execution via a crafted .jnt file affecting Windows Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8/8.1, Windows Server 2012 Gold/R2, Windows RT Gold/8.1, and Windows 10. The connected records also reference CVE-2015-2513 and CVE-2...

CVE-2015-2509

Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1 allows user-assisted remote attackers to execute arbitrary code via a crafted Media Center link mcl file, aka "Windows Media Center RCE Vulnerability."...

CVE-2015-2516

Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to cause a denial of service data loss via a crafted .jnt file, aka "Windows...

CVE-2015-2513

CVE-2015-2513 relates to Windows Journal remote code execution via a crafted .jnt file across Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8/8.1, Windows Server 2012 Gold/R2, Windows RT Gold/8.1, and Windows 10. The root cause is processing of .jnt files enabling arbi...

CVE-2015-2514

Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to execute arbitrary code via a crafted .jnt file, aka "Windows Journal RCE...

Microsoft Windows Task Management Privilege Elevation Vulnerabilities (3089657)

This host is missing an important security update according to Microsoft Bulletin MS15-102. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...