CVE-2013-1332

CVE-2013-1332 is a local privilege-escalation vulnerability in the DirectX Graphics Kernel Subsystem (dxgkrnl.sys) used by Windows. The issue arises from how objects in memory are handled by the kernel-mode driver, allowing a crafted local user to elevate privileges ("DirectX Graphics Kernel Subs...

CVE-2013-1333

CVE-2013-1333 is a vulnerability in Windows 7 SP1 where a buffer overflow in win32k.sys (kernel-mode driver) can allow local privilege escalation by manipulating memory objects. The issue is due to improper handling of objects in memory, enabling an attacker with local access to gain elevated pri...

CVE-2013-1334

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle objects in memory, which allows local users to gain...

CVE-2013-1333

Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows 7 SP1 allows local users to gain privileges via a crafted application that leverages improper handling of objects in memory, aka "Win32k Buffer Overflow Vulnerability."...

Serva 32 TFTP 2.1.0 - Buffer Overflow (Denial of Service) (PoC)

Serva 32 TFTP 2.1.0 - Buffer Overflow Denial of Service PoC Serva 32 TFTP Buffer overflow DoS 05/14/2013 Sapling Vendor homepage http://www.vercot.com/ Software Link: http://www.vercot.com/serva/download/ServaNon-Supporter32v2.1.0.zip Version 2.1.0 Only prior versions are not vulnerable Tested on...

Serva 32 TFTP 2.1.0 - Buffer Overflow Denial of service

Exploit for windows platform in category dos / poc Serva 32 TFTP Buffer overflow DoS 05/14/2013 Sapling Vendor homepage http://www.vercot.com/ Software Link: http://www.vercot.com/serva/download/ServaNon-Supporter32v2.1.0.zip Version 2.1.0 Only prior versions are not vulnerable Tested on Windows ...

Quick Search 1.1.0.189 Buffer Overflow

Exploit Title: Quick Search Version 1.1.0.189 Buffer Overflow vulnerabilitySEH Date: 14-05-2013 Exploit Author: ariarat Vendor Homepage: http://www.glarysoft.com/ Software Link: http://download.glarysoft.com/qsearchsetup.exe Version: 1.1.0.189 Tested on: Windows 7 & windows XP sp2,sp3...

Windows EPATHOBJ::pprFlattenRec Local Privilege Escalation

This module exploits a vulnerability on EPATHOBJ::pprFlattenRec due to the usage of uninitialized data which allows to corrupt memory. At the moment, the module has been tested successfully on Windows XP SP3, Windows 2003 SP1, and Windows 7 SP1. Module Options msf use...

PT-2013-3089 · Microsoft · Windows Xp +8

Name of the Vulnerable Software and Affected Versions: Windows XP versions SP2 and SP3 Windows Server 2003 version SP2 Windows Vista version SP2 Windows Server 2008 versions SP2 and R2 SP1 Windows 7 version SP1 Windows 8 Windows Server 2012 Windows RT Description: The issue arises from the improp...

AdobeCollabSync Buffer Overflow Adobe Reader X Sandbox Bypass

This module exploits a vulnerability on Adobe Reader X Sandbox. The vulnerability is due to a sandbox rule allowing a Low Integrity AcroRd32.exe process to write register values which can be used to trigger a buffer overflow on the AdobeCollabSync component, allowing to achieve Medium Integrity...

Internet Explorer Json Information Disclosure (MS13-037; CVE-2013-1297)

An information disclosure vulnerability exists in Internet Explorer versions 7, 8, and 9 on Windows Vista and Windows 7. An attacker who successfully exploited this vulnerability could view the contents of protected JSON files...

Microsoft Windows Kernel 'Win32k.sys' CVE-2013-1333 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel due to a buffer-overflow error. A local attacker can exploit this issue to escalate privileges and perform unauthorized actions. Technologies Affected Avaya CallPilot 4.0 Avaya...

Quick Search 1.1.0.189 - Buffer Overflow (SEH)

Quick Search 1.1.0.189 - Buffer Overflow SEH Exploit Title: Quick Search Version 1.1.0.189 Buffer Overflow vulnerabilitySEH Date: 14-05-2013 Exploit Author: ariarat Vendor Homepage: http://www.glarysoft.com/ Software Link: http://download.glarysoft.com/qsearchsetup.exe Version: 1.1.0.189 Tested o...

ERS Viewer 2011 - '.ERS' File Handling Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "ERS Viewer 2011 E...

Lan Messenger - sending PM UNICODE Overwrite Buffer Overflow (SEH)

Lan Messenger - sending PM UNICODE Overwrite Buffer Overflow SEH Exploit Title: Lan Messenger Version 1.2 Buffer Overflow vulnerability - UNICODEPOC Date: 09-05-2013 Exploit Author: ariarat Vendor Homepage: http://lmadhavan.com Software Link: http://lmadhavan.com/software/archive/lanmsg12.zip...

Lan Messenger - sending PM 'UNICODE' Overwrite Buffer Overflow (SEH)

Exploit Title: Lan Messenger Version 1.2 Buffer Overflow vulnerability - UNICODEPOC Date: 09-05-2013 Exploit Author: ariarat Vendor Homepage: http://lmadhavan.com Software Link: http://lmadhavan.com/software/archive/lanmsg12.zip Version: 1.2 & may be old versions! Tested on: Windows 7 & windows X...

Lan Messenger 1.2 Buffer Overflow

Exploit Title: Lan Messenger Version 1.2 Buffer Overflow vulnerability - UNICODEPOC Date: 09-05-2013 Exploit Author: ariarat Vendor Homepage: http://lmadhavan.com Software Link: http://lmadhavan.com/software/archive/lanmsg12.zip Version: 1.2 & may be old versions! Tested on: Windows 7 & windows X...

ERS Viewer 2011 ERS File Handling Buffer Overflow Vulnerability

This Metasploit module exploits a buffer overflow vulnerability found in ERS Viewer 2011 version 11.04. The vulnerability exists in the module ermapperu.dll where the function ERMconverttocorrectwebpath handles user provided data in an insecure way. It results in arbitrary code execution under th...

AudioCoder .M3U Buffer Overflow

Exploit for windows platform in category local exploits require 'msf/core' class Metasploit3 'AudioCoder .M3U Buffer Overflow', 'Description' = %q This module exploits a buffer overflow in Audio Code 0.8.18. The vulnerability occurs when adding an .m3u, allowing arbitrary code execution with the...

AudioCoder - '.m3u' Local Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'AudioCoder .M3U Buffer Overflow',...