Mozilla Firefox <= 3.6 Denial Of Service Exploit

Exploit for unknown platform in category dos / poc ================================================ Mozilla Firefox '; $b = ''; for $i=0;$i'; $b .= ''; echo ''; echo $a; echo "hadouken!"; echo $b; echo ''; ? 0day.today 2018-01-05...

Microsoft SRV2.SYS SMB Negotiate ProcessID Function Table Dereference

$Id: ms09050smb2negotiatefuncindex.rb 8656 2010-02-26 13:42:17Z sf $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft DirectX DirectShow AVI文件解析堆溢出漏洞（MS10-013）

BUGTRAQ ID: 38112 CVE ID: CVE-2010-0250 Microsoft DirectX是Windows操作系统中的一项功能，流媒体在玩游戏或观看视频时通过这个功能支持图形和声音。 DirectX的DirectShow组件（quartz.dll）在解析AVI文件中的特定类型视频流时没有正确的使用分配所用的长度字段，导致分配了不充分的缓冲区。用户打开特制的AVI文件就可以触发堆溢出，导致执行任意代码。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2...

Safari 4.0.4 & Google Chrome 4.0.249 CSS DoS/PoC

Exploit for unknown platform in category dos / poc ================================================ Safari 4.0.4 & Google Chrome 4.0.249 CSS DoS/PoC ================================================ Apple Safari 4.0.4 & Google Chrome 4.0.249 CSS DoS/PoC Stack overflow on Safari Extra long malforme...

Apple Safari 4.0.4 Google Chrome 4.0.249 - CSS style Stack Overflow Denial of Service (PoC)

Apple Safari 4.0.4 Google Chrome 4.0.249 - CSS style Stack Overflow Denial of Service PoC Apple Safari 4.0.4 & Google Chrome 4.0.249 CSS style Stack Overflow DoS/PoC Thank you Rad L. Sneak Apple Safari 4.0.4 & Google Chrome 4.0.249 CSS style Stack Overflow DoS/PoC Tested on WinXP SP3 and Windows ...

Ollydbg 2.00 Beta Local Overflow Exploit

Exploit for unknown platform in category local exploits ======================================== Ollydbg 2.00 Beta Local Overflow Exploit ======================================== Exploit: Ollydbg 2.00 Beta Local Overflow Exploit Author : r45c4l Taken from thr original advisory published by "SuBz3...

Mandriva Update for samba MDVA-2010:056 (samba)

Check for the Version of samba OpenVAS Vulnerability Test Mandriva Update for samba MDVA-2010:056 samba Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Update for samba MDVA-2010:056 (samba)

Check for the Version of samba OpenVAS Vulnerability Test Mandriva Update for samba MDVA-2010:056 samba Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

MDVA-2010:056 : samba

This is a maintenance update of samba in order to support Windows 7 hosts integration in Samba domain. Additionally on 2009.0 and MES5 samba has been upgraded from 3.2.15 to 3.3.10 which brings many upstream fixes besides those that mainly conserns Windows 7 interoperabilities. %NASLMINLEVEL 7030...

MS Internet Explorer versions 7 and 8 url validation vulnerability

Exploit for unknown platform in category remote exploits ================================================================== MS Internet Explorer versions 7 and 8 url validation vulnerability ================================================================== Internet explorer 7 & 8 url validation...

Heap overflow

Heap-based buffer overflow in DirectShow in Microsoft DirectX, as used in the AVI Filter on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2, and in Quartz on Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server...

CVE-2010-0252

The Microsoft Data Analyzer ActiveX control aka the Office Excel ActiveX control for Data Analysis in max3activex.dll in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remot...

CVE-2010-0021: Concurrent Execution using Shared Resource with Improper Synchronization

Multiple race conditions in the SMB implementation in the Server service in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allow remote attackers to cause a denial of service system hang via a crafted 1 SMBv1 or 2 SMBv2 Negotiate packet, aka "SMB...

stratsec Security Advisory SS-2010-003 - Microsoft SMB Client Pool Overflow

=============================================================================== Stratsec Security Advisory: SS-2010-003 =============================================================================== Title: Microsoft SMB Client Pool Overflow MS10-006 Version: 1.0 Issue type: Pool overflow Affecte...

Internet Explorer 7 / 8 URL Validation

Internet explorer 7 & 8 url validation vulnerability Original Advisore: http://lostmon.blogspot.com/ 2010/02/internet-explorer-7-8-url-validation.html Vendor URl: http://www.microsoft.com related adv:http://lostmon.blogspot.com/ 2010/02/internet-explorer-6-7-8-url-validation.html related bulletin...

Microsoft SMB Client Remote Code Execution Vulnerabilities (978251)

This host is missing a critical security update according to Microsoft Bulletin MS10-006. OpenVAS Vulnerability Test $Id: secpodms10-006.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft SMB Client Remote Code Execution Vulnerabilities 978251 Authors: Antu Sanadi Updated By: Madhuri D on...

Microsoft Data Analyzer ActiveX Control Vulnerability (978262)

This host is missing a critical security update according to Microsoft Bulletin MS10-008. OpenVAS Vulnerability Test $Id: secpodms10-008.nasl 5361 2017-02-20 11:57:13Z cfi $ Microsoft Data Analyzer ActiveX Control Vulnerability 978262 Authors: Veerendra GG Updated By: Madhuri D on 2010-11-22 - To...

Microsoft DirectShow Remote Code Execution Vulnerability (977935)

This host is missing a critical security update according to Microsoft Bulletin MS10-013. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Data Analyzer 'max3activex.dll' ActiveX Control Remote Code Execution Vulnerability

Description The Microsoft Data Analyzer is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting user to view a malicious webpage. Successful exploits will allow the attacker to execute arbitrary code within the context of the application...

Microsoft Windows SMB Client Race Condition Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute code with SYSTEM-level privileges. On some systems, remote attacks may result in denial-of-service conditions. Technologies Affected Avaya Meeting Exchange - Client...