Ultimate DVD Player DLL Hijacking Exploit

Exploit for windows platform in category local exploits ========================================= Ultimate DVD Player DLL Hijacking Exploit ========================================= || || | || o,7 || . o7 || 4||| ow, : / / . 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0...

Sun VirtualBox DLL Hijacking Exploit

Exploit for windows platform in category local exploits ==================================== Sun VirtualBox DLL Hijacking Exploit ==================================== || || | || o,7 || . o7 || 4||| ow, : / / . 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'...

Immunity Canvas: JAVA_DOCBASE

Name| javadocbase ---|--- CVE| CVE-2010-3552 Exploit Pack| CANVAS Description| Java IE Plugin "docparam" Overflow Notes| CVE Name: CVE-2010-3552 Vendor: Oracle Notes: This exploit can only be used from clientd. Tested on: Windows XP Professional SP3 EN under IE 8 updated. Windows XP Home SP3 EN...

Opera v10.63 SVG animation Element Denial of Service

Exploit for windows platform in category dos / poc ==================================================== Opera v10.63 SVG animation Element Denial of Service ==================================================== Software Link: http://www.opera.com/ Version: 10.63 and previous Tested on: Ubuntu 10.1...

ConvexSoft DJ Audio Mixer - Denial of Service

ConvexSoft DJ Audio Mixer - Denial of Service Exploit Title :ConvexSoft DJ Audio Mixer Denial of Service Vulnerability Software : ConvexSoft DJ Audio Mixer Software link :...

Microsoft Windows Win32k.sys内核驱动多个本地权限提升漏洞（MS10-073）

BUGTRAQ ID: 43773,43774 CVE ID: CVE-2010-2744,CVE-2010-2743 Microsoft Windows是微软发布的非常流行的操作系统。 Windows Win32k.sys内核态驱动加载特定键盘布局和验证窗口类数据的方式存在权限提升漏洞。成功利用这个漏洞的攻击者可以执行任意内核态代码。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 Microsoft Windows XP SP3 Microsoft Windows XP Pro x64版SP2 Microsoft Windows Vista SP2...

CVE-2010-2746

Heap-based buffer overflow in Comctl32.dll aka the common control library in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when a third-party SVG viewer is used, allows remote attackers to execute...

Integer overflow

Integer overflow in the Embedded OpenType EOT Font Engine in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to execute arbitrary code via a crafted table in an embedded font, aka...

Heap overflow

Heap-based buffer overflow in Comctl32.dll aka the common control library in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when a third-party SVG viewer is used, allows remote attackers to execute...

Denial of service

The Secure Channel aka SChannel security package in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when IIS 7.x is used, does not properly process client certificates during SSL and TLS handshakes, which allows remote attackers to cause a denial of...

Design/Logic Flaw

Use-after-free vulnerability in the Media Player Network Sharing Service in Microsoft Windows Vista SP1 and SP2 and Windows 7 allows remote attackers to execute arbitrary code via a crafted Real Time Streaming Protocol RTSP packet, aka "RTSP Use After Free Vulnerability."...

CVE-2010-3225

CVE-2010-3225 is a use-after-free vulnerability in the Windows Media Player Network Sharing Service that can allow remote code execution when a specially crafted RTSP packet is processed. It affects Windows Vista (SP1/SP2) and Windows 7, with exploitation via RTSP requests and no user interaction...

CVE-2010-2746

CVE-2010-2746 describes a heap-based buffer overflow in the Windows common controls library, Comctl32.dll, triggered when processing messages from a third-party SVG viewer. A remote code execution risk exists on affected Windows releases (XP SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008, and W...

CVE-2010-3225

Use-after-free vulnerability in the Media Player Network Sharing Service in Microsoft Windows Vista SP1 and SP2 and Windows 7 allows remote attackers to execute arbitrary code via a crafted Real Time Streaming Protocol RTSP packet, aka "RTSP Use After Free Vulnerability."...

Windows Common Control Library Remote Code Execution Vulnerability (2296011)

This host is missing a critical security update according to Microsoft Bulletin MS10-081. OpenVAS Vulnerability Test $Id: secpodms10-081.nasl 5361 2017-02-20 11:57:13Z cfi $ Windows Common Control Library Remote Code Execution Vulnerability 2296011 Authors: Sooraj KS Copyright: Copyright c 2010...

CVE-2010-3229: Improper Input Validation

The Secure Channel aka SChannel security package in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when IIS 7.x is used, does not properly process client certificates during SSL and TLS handshakes, which allows remote attackers to cause a denial of...

Microsoft Foundation Classes Could Allow Remote Code Execution Vulnerability (2387149)

This host is missing a critical security update according to Microsoft Bulletin MS10-074. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Shell and WordPad COM Validation Vulnerability (2405882)

This host is missing a critical security update according to Microsoft Bulletin MS10-083. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Media Player Remote Code Execution Vulnerability (2378111)

This host is missing a critical security update according to Microsoft Bulletin MS10-082. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Media Player Remote Code Execution Vulnerability (2378111))

This host is missing a critical security update according to Microsoft Bulletin MS10-082. OpenVAS Vulnerability Test $Id: secpodms10-082.nasl 5361 2017-02-20 11:57:13Z cfi $ Microsoft Windows Media Player Remote Code Execution Vulnerability 2378111 Authors: Sooraj KS Copyright: Copyright c 2010...