MS10-018: Cumulative Security Update for Internet Explorer (980182)

The remote host is missing IE Security Update 980182. The remote version of IE is affected by several vulnerabilities that may allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid45378; scriptversion"1.29";...

Adobe PDF Embedded EXE Social Engineering

This module embeds a Metasploit payload into an existing PDF file. The resulting PDF can be sent to a target as part of a social engineering attack. Module Options msf use exploit/windows/fileformat/adobe/pdfembeddedexe msf undefinedpdfembeddedexe show actions ...actions... msf...

JITed egg-hunter stage-0 shellcode Adjusted universal for xp/vista/win7

JITed egg-hunter stage-0 shellcode Adjusted universal for xp/vista/win7. Shellcode exploit for windows platform // JITed egg-hunter stage-0 shellcode // Permanent DEP bypass // // By Alexey Sintsov // [email protected] // [email protected] // // DSecRG - Digital Security Research Group dsecrg.com//...

CVE-2010-1117

Heap-based buffer overflow in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to discover the base address of a Windows .dll file, and possibly have unspecified other impact, via unknown vectors, as demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 20...

CVE-2010-1118

Unspecified vulnerability in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to a use-after-free issue, as demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 2010...

Design/Logic Flaw

Unspecified vulnerability in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to a use-after-free issue, as demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 2010...

Heap overflow

Heap-based buffer overflow in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to discover the base address of a Windows .dll file, and possibly have unspecified other impact, via unknown vectors, as demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 20...

CVE-2010-1118

Unspecified vulnerability in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to a use-after-free issue, as demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 2010...

CVE-2010-1118

Technical details for CVE-2010-1118 are not publicly available in the provided connected documents. The Initial Description notes an unspecified vulnerability in IE8 on Windows 7. Monitor for updates for any concrete impact, affected products, or fixes.

CVE-2010-1117

CVE-2010-1117 is a heap-based buffer overflow in Internet Explorer 8 on Windows 7 that enables remote attackers to discover the base address of a Windows DLL, via unknown vectors, demonstrated during Pwn2Own at CanSecWest 2010. The description notes potential additional impact but does not provid...

CVE-2010-1117

Heap-based buffer overflow in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to discover the base address of a Windows .dll file, and possibly have unspecified other impact, via unknown vectors, as demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 20...

Hacker exploits IE8 on Windows 7 to Win Pwn2Own

VANCOUVER, BC — Jumping through a series of anti-exploit roadblocks, Dutch hacker Peter Vreugdenhil pulled off an impressive CanSecWest Pwn2Own victory here, hacking into a fully patched 64-bit Windows 7 machine using a pair of Internet Explorer vulnerabilities. Vreugdenhil, an independent...

Mozilla Firefox Hacked at Pwn2Own Contest

VANCOUVER, BC — The first day of the CanSecWest Pwn2Own hacker challenge wrapped up here today with a familiar face going after a familiar target. And, for the second year in a row, a German hacker known simply as “Nils” exploited a previously unknown vulnerability in Mozilla Firefox to take...

CVE-2010-1118: Undefined Security Weakness

Unspecified vulnerability in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to a use-after-free issue, as demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 2010...

CVE-2010-1117: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to discover the base address of a Windows .dll file, and possibly have unspecified other impact, via unknown vectors, as demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 20...

Smart PC Recorder 4.8 - .mp3 Local Crash (PoC)

Smart PC Recorder 4.8 - .mp3 Local Crash PoC Exploit Title: Smart PC Recorder .MP3 Local Crash POC Date: March 23, 2010 Author: chap0 Software Link: http://www.voiceemotion.com/smartrecorder.htm Version: Current Version: 4.8 Tested on: Windows XP SP3/Windows 7 Cost USD 19.95 !/usr/bin/perl Glory ...

Smart PC Recorder .MP3 Local Crash POC

Exploit for windows platform in category dos / poc ========================================== Smart PC Recorder 4.8 .MP3 Local Crash POC ========================================== Exploit Title: Smart PC Recorder .MP3 Local Crash POC Date: March 23, 2010 Author: chap0 Software Link:...

Smart PC Recorder 4.8 Crash Exploit

Exploit Title: Smart PC Recorder .MP3 Local Crash POC Date: March 23, 2010 Author: chap0 Software Link: http://www.voiceemotion.com/smartrecorder.htm Version: Current Version: 4.8 Tested on: Windows XP SP3/Windows 7 Cost USD 19.95 !/usr/bin/perl Glory to God Won't Bow to Men, I Defy! print "| Sma...

Smart PC Recorder 4.8 - '.mp3' Local Crash (PoC)

Exploit Title: Smart PC Recorder .MP3 Local Crash POC Date: March 23, 2010 Author: chap0 Software Link: http://www.voiceemotion.com/smartrecorder.htm Version: Current Version: 4.8 Tested on: Windows XP SP3/Windows 7 Cost USD 19.95 !/usr/bin/perl Glory to God Won't Bow to Men, I Defy! print "| Sma...

CVE-2010-0161

The nsAuthSSPI::Unwrap function in extensions/auth/nsAuthSSPI.cpp in Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 on Windows Vista, Windows Server 2008 R2, and Windows 7 allows remote SMTP, IMAP, and POP servers to cause a denial of service heap memory corruption and applicatio...