Mozilla Thunderbird多个拒绝服务漏洞

BUGTRAQ ID: 38831 CVECAN ID: CVE-2010-0161,CVE-2010-0163 Thunderbird是一个邮件客户端，支持IMAP、POP邮件协议以及HTML邮件格式。 如果将Thunderbird客户端配置为使用calmail.berkeley.edu（在这种情况下会对SSL/TLS连接广播 AUTH=GSSAPI），运行在Vista或Windows 7平台上的Thunderbird在加入到AD期间试图使用SSPI时就会崩溃。默认下Thunderbird 2在SMTP期间总会试图使用SSPI。...

CVE-2010-0161

CVE-2010-0161 affects Thunderbird (before 2.0.0.24) and SeaMonkey (before 1.1.19) on Windows, where the nsAuthSSPI::Unwrap function in extensions/auth/nsAuthSSPI.cpp can be triggered by data from a remote SMTP/IMAP/POP server using SSPI. This may cause heap memory corruption and application crash...

CORE-2009-0803: Virtual PC Hypervisor Memory Protection Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Virtual PC Hypervisor Memory Protection Vulnerability 1. Advisory Information Title: Virtual PC Hypervisor Memory Protection Vulnerability Advisory Id: CORE-2009-0803...

ArGoSoft FTP Server .NET 1.0.2.1 Directory Traversal

Exploit Title: ArGoSoft FTP Server .NET v.1.0.2.1 directory traversal Date: 16.03.2010 Author: dmnt Software Link: http://www.argosoft.com/files/apps/FtpServerSetup.msi Version: ArGoSoft FTP Server .NET v.1.0.2.1 Tested on: Windows 7 Code : CWD ... 250 Requested file action OK, completed XPWD 257...

Virtual PC Hypervisor - Memory Protection

Virtual PC Hypervisor - Memory Protection -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Virtual PC Hypervisor Memory Protection Vulnerability 1. Advisory Information Title: Virtual PC Hypervisor Memory Protection...

Microsoft Virtual PC Hypervisor Virtual Machine Monitor Security Bypass Vulnerability

Bugtraq ID:38764 Microsoft Virtual PC Hypervisor is prone to a security-bypass vulnerability. Attackers can exploit this issue to bypass memory protection mechanisms. Successfully exploiting this issue will allow attackers to gain access to sensitive information, overwrite arbitrary data, and gai...

Virtual PC Hypervisor Memory Protection Vulnerability

1. Advisory Information Title: Virtual PC Hypervisor Memory Protection Vulnerability Advisory Id: CORE-2009-0803 Advisory URL:http://www.coresecurity.com/core-labs/advisories/virtual-pc-2007-hypervisor-memory-protection-bug Date published: 2010-03-16 Date of last update: 2010-03-16 Vendors...

ArGoSoft FTP Server .NET v.1.0.2.1 Directory Traversal Vulnerability

Exploit for unknown platform in category remote exploits ==================================================================== ArGoSoft FTP Server .NET v.1.0.2.1 Directory Traversal Vulnerability ==================================================================== Exploit Title: ArGoSoft FTP Serve...

ArGoSoft FTP Server .NET 1.0.2.1 - Directory Traversal

ArGoSoft FTP Server .NET 1.0.2.1 - Directory Traversal Exploit Title: ArGoSoft FTP Server .NET v.1.0.2.1 directory traversal Date: 16.03.2010 Author: dmnt Software Link: http://www.argosoft.com/files/apps/FtpServerSetup.msi Version: ArGoSoft FTP Server .NET v.1.0.2.1 Tested on: Windows 7 Code : C...

ArGoSoft FTP Server .NET 1.0.2.1 - Directory Traversal

Exploit Title: ArGoSoft FTP Server .NET v.1.0.2.1 directory traversal Date: 16.03.2010 Author: dmnt Software Link: http://www.argosoft.com/files/apps/FtpServerSetup.msi Version: ArGoSoft FTP Server .NET v.1.0.2.1 Tested on: Windows 7 Code : CWD ... 250 Requested file action OK, completed XPWD 257...

Microsoft Security Bulletin MS10-016 - Important Vulnerability in Windows Movie Maker Could Allow Remote Code Execution (975561)

Microsoft Security Bulletin MS10-016 - Important Vulnerability in Windows Movie Maker Could Allow Remote Code Execution 975561 Published: March 09, 2010 Version: 1.0 General Information Executive Summary This security update addresses a privately reported vulnerability in Windows Movie Maker and...

Apache 2.2.14 mod_isapi Dangling Pointer Remote SYSTEM Exploit

No description provided by source. / Apache 2.2.14 modisapi Dangling Pointer Remote SYSTEM Exploit CVE-2010-0425 ------------------------------------------------------------------------------ Advisory: http://www.senseofsecurity.com.au/advisories/SOS-10-002 Description: pwn-isapi.cpp exploits a...

Flare <= 0.6 Local Heap Overflow DoS

Exploit for multiple platform in category dos / poc ==================================== Flare Site: xraysecurity.blogspot.com ---- Coming soon! Registers: EAX 003E0000 ECX 003E1088 ASCII "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA..." EDX 41414141 EBX 00004141 ESP 0022FB0C EBP 0022FBDC ESI...

Namoroka 3.6 Alpha 1 Remote Memory Corrupt (Local Crash Exploit)

Exploit for unknown platform in category dos / poc ================================================================ Namoroka 3.6 Alpha 1 Remote Memory Corrupt Local Crash Exploit ================================================================ function DoS var buffer = '\x41'; for i...

Google Chrome v4.0.249 XML Denial of Service PoC

Exploit for windows platform in category dos / poc ================================================ Google Chrome v4.0.249 XML Denial of Service PoC ================================================ Exploit Title: Google Chrome 4.0.249 XML PoC Date: 3/6/2009 Author: Blade Software Link:...

Google Chrome 4.0.249 - XML Denial of Service (PoC)

Google Chrome 4.0.249 - XML Denial of Service PoC Exploit Title: Google Chrome 4.0.249 XML PoC Date: 3/6/2009 Author: Blade Software Link: www.google.com Version: 4.0.249.89 Tested on: Attached CVE : Code : Stack Overflow caused by long malformed string inside XML Tags Tested on Windows 7 64bit...

Flare 0.6 - Local Heap Overflow Denial of Service

Flare 0.6 - Local Heap Overflow Denial of Service Exploit Title: Flare Site: xraysecurity.blogspot.com ---- Coming soon! Registers: EAX 003E0000 ECX 003E1088 ASCII "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA..." EDX 41414141 EBX 00004141 ESP 0022FB0C EBP 0022FBDC ESI 003E1080 EDI 41414141 EIP...

Google Chrome 4.0.249 - XML Denial of Service (PoC)

Exploit Title: Google Chrome 4.0.249 XML PoC Date: 3/6/2009 Author: Blade Software Link: www.google.com Version: 4.0.249.89 Tested on: Attached CVE : Code : Stack Overflow caused by long malformed string inside XML Tags Tested on Windows 7 64bit Chrome will through up the "Aw, Snap!" Know your...

IT-Grundschutz M4.249: Windows Client-Systeme aktuell halten

IT-Grundschutz M4.249: Windows Client-Systeme aktuell halten. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94222 Diese Prüfung bezieht sich auf die 11...

Mozilla Firefox <= 3.6 Denial Of Service Exploit

Exploit for unknown platform in category dos / poc ================================================ Mozilla Firefox '; $b = ''; for $i=0;$i'; $b .= ''; echo ''; echo $a; echo "hadouken!"; echo $b; echo ''; ? 0day.today 2018-01-05...