Oracle Java APPLET Tag Memory Corruption

Source: http://skypher.com/index.php/2010/10/13/issue-18-oracle-java-applet-childre/ o=document.createElement"applet"; setTimeoutfunction x=o.children; location.reload; , 1; Tested with: Windows XP sp3 5.1.2600 MSIE 7.0.5730.13 MSIE 8.0.6001.18702 Sun Java Version 6 Update 20 1.6.020-b02...

Ease Jukebox 1.30 - Denial of Service

Ease Jukebox 1.30 - Denial of Service Exploit Title :Ease Jukebox 1.30 Dos vulnerability Software : Ease Jukebox 1.30 Software link : http://www.mymusictools.com/all-in-onejukebox9/easejukebox4040.htm Autor : Sweet Email : [email protected] Software version : 1.30 Tested on : WinXP sp3 ENG vm t...

Oracle Java APPLET Tag Children Property Memory Corruption

Exploit for windows platform in category dos / poc ========================================================== Oracle Java APPLET Tag Children Property Memory Corruption ========================================================== Source:...

Acoustica BeatCraft v1.02 Build 19 Local DoS Crash PoC

Exploit for windows platform in category dos / poc ====================================================== Acoustica BeatCraft v1.02 Build 19 Local DoS Crash PoC ====================================================== Download: http://www.acoustica.com/beatcraft/download.htm Tested on Windows XP Pr...

Firefox 3.5.10 & 3.6.6 WMP Memory Corruption Using Popups

Exploit for windows platform in category dos / poc ========================================================= Firefox 3.5.10 & 3.6.6 WMP Memory Corruption Using Popups ========================================================= Source: http://code.google.com/p/skylined/issues/detail?id=21 Exploit...

Firefox 3.5.10 / 3.6.6 Memory Corruption

Source: http://code.google.com/p/skylined/issues/detail?id=21 Exploit Title: Firefox 3.5.10 & 3.6.6 WMP Memory Corruption Using Popups Date: 2010-10-13 Author: berendjanwever Version: FF 3.5.10 & 3.6.6 with WMP 10 & 11 Tested on: Windows XP sp3 function go var oWMP = document.getElementById"WMP";...

STDU explorer DLL Hijacking Exploit (dwmapi.dll)

Exploit for windows platform in category local exploits ================================================ STDU explorer DLL Hijacking Exploit dwmapi.dll ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\...

CVE-2010-2746

Heap-based buffer overflow in Comctl32.dll aka the common control library in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when a third-party SVG viewer is used, allows remote attackers to execute...

CVE-2010-3222

Stack-based buffer overflow in the Remote Procedure Call Subsystem RPCSS in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted LPC message that requests an LRPC connection from an LPC server to a client, aka "LPC Message Buffer Overrun...

CVE-2010-2740

The OpenType Font OTF format driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly perform memory allocation during font parsing, which allows local users to gain privileges via a crafted application, aka "OpenType Font Parsing Vulnerability."...

Immunity Canvas: MS_KBLAYOUT

Name| mskblayout ---|--- CVE| CVE-2010-2744 Exploit Pack| CANVAS Description| MSKBLAYOUT Notes| CVE Name: CVE-2010-2744 VENDOR: Microsoft Notes: This is one of the vulnerabilities used by the Stuxnet work to elevate its privileges on Windows XP and Windows 2000. It may cause some minor side effec...

Integer overflow

Integer overflow in the Embedded OpenType EOT Font Engine in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to execute arbitrary code via a crafted table in an embedded font, aka...

Information disclosure

Microsoft Internet Explorer 6 and 7 on Windows XP and Vista does not prevent script from simulating user interaction with the AutoComplete feature, which allows remote attackers to obtain sensitive form information via a crafted web site, aka "AutoComplete Information Disclosure Vulnerability."...

Heap overflow

Heap-based buffer overflow in Comctl32.dll aka the common control library in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when a third-party SVG viewer is used, allows remote attackers to execute...

Stack overflow

Stack-based buffer overflow in the Remote Procedure Call Subsystem RPCSS in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted LPC message that requests an LRPC connection from an LPC server to a client, aka "LPC Message Buffer Overrun...

CVE-2010-2746

CVE-2010-2746 describes a heap-based buffer overflow in the Windows common controls library, Comctl32.dll, triggered when processing messages from a third-party SVG viewer. A remote code execution risk exists on affected Windows releases (XP SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008, and W...

CVE-2010-0808

CVE-2010-0808 represents an information disclosure vulnerability in Microsoft Internet Explorer 6 and 7 (on Windows XP and Windows Vista) where scripted AutoComplete actions could be used to capture previously entered form data via a malicious page. The issue arises from IE’s AutoComplete feature...

CVE-2010-0808

Microsoft Internet Explorer 6 and 7 on Windows XP and Vista does not prevent script from simulating user interaction with the AutoComplete feature, which allows remote attackers to obtain sensitive form information via a crafted web site, aka "AutoComplete Information Disclosure Vulnerability."...

CVE-2010-3222

Stack-based buffer overflow in the Remote Procedure Call Subsystem RPCSS in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted LPC message that requests an LRPC connection from an LPC server to a client, aka "LPC Message Buffer Overrun...

Oracle Java - APPLET Tag Children Property Memory Corruption

Oracle Java - APPLET Tag Children Property Memory Corruption Source: http://skypher.com/index.php/2010/10/13/issue-18-oracle-java-applet-childre/ o=document.createElement"applet"; setTimeoutfunction x=o.children; location.reload; , 1; Tested with: Windows XP sp3 5.1.2600 MSIE 7.0.5730.13 MSIE...