Microsoft Windows 'xxxCreateWindowEx()' Window Creation Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker may exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of affected computers...

Microsoft Windows Movie Maker Remote Buffer Overflow Vulnerability

Description Microsoft Windows Movie Maker is prone to a remote buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the application. Failed exploit attempts will cause a denial-of-service condition. Technologies Affect...

myMP3-Player v3.0 Buffer Overflow Exploit

No description provided by source. Exploit Title: myMP3-Player 3.0 NOT SEH Overwrite Date: 8 / 8 / 2010 Author: Oh Yaw Theng Software Link: http://www.chip.de/downloads/myMP3-Player-3.013008621.html Version: 3.0 Tested on: Windows XP SP 2 CVE : N / A !/usr/bin/python filename = "crash.m3u" junk =...

Rosoft Media Player 4.4.4 - Buffer Overflow (SEH) (PoC)

rosoft media player 4.4.4 SEH buffer overflow POC vulnerble application link http://download.cnet.com/Rosoft-Media-Player/3000-21394-10044022.html tested on XP SP2 !/usr/bin/python filename = "crash.m3u" junk = "\x41" 4500 textfile = openfilename , 'w' textfile.writejunk textfile.close...

AoAAudioExtractor 2.0.0.0 - ActiveX (PoC) (SEH)

AoAAudioExtractor 2.0.0.0 - ActiveX PoC SEH 'AoAAudioExtractor 2.0.0.0 ActiveX PoC SEH ' Author: Hadji Samir ,[email protected] ' Tested on: Windows XP SP2 FR / IE6 ' Down: http://www.aoamedia.com/audioextractor.exe ' Date: 2010-08-09 'samir tjrs mahboul-3lik arg1=String2048, "A" nseh=String4, "B"...

dBpowerAMP Audio Player 2 (FileExists) ActiveX Buffer Overflow Exploit

Exploit for windows platform in category remote exploits ====================================================================== dBpowerAMP Audio Player 2 FileExists ActiveX Buffer Overflow Exploit ====================================================================== ' Exploit Title: dBpowerAMP...

Visual MP3 Splitter Joiner 6.1 - Denial of Service

Visual MP3 Splitter Joiner 6.1 - Denial of Service Exploit Title: Visual MP3 Splitter & Joiner 6.1 .mp3 , .wav DoS Date: 9 / 8 / 2010 Author: Oh Yaw Theng Software Link: http://www.maniactools.com/soft/mp3-splitter-joiner/index.shtml Version: 6.1 Tested on: Windows XP SP 2 CVE : N /A...

Fat Player 0.6b WAV File Processing Buffer Overflow (SEH)

Exploit for windows platform in category local exploits ========================================================= Fat Player 0.6b WAV File Processing Buffer Overflow SEH ========================================================= Stack-based buffer overflow in Fat Player 0.6b allows remote attacker...

Visual MP3 Splitter & Joiner 6.1 - Denial of Service

Exploit Title: Visual MP3 Splitter & Joiner 6.1 .mp3 , .wav DoS Date: 9 / 8 / 2010 Author: Oh Yaw Theng Software Link: http://www.maniactools.com/soft/mp3-splitter-joiner/index.shtml Version: 6.1 Tested on: Windows XP SP 2 CVE : N /A !/usr/bin/python User needs to change the following extension...

dBpowerAMP Audio Player 2 - FileExists ActiveX Buffer Overflow

dBpowerAMP Audio Player 2 - FileExists ActiveX Buffer Overflow ' Exploit Title: dBpowerAMP Audio Player 2 FileExists ActiveX Buffer Overflow ' Author: Hadji Samir ,[email protected] ' Tested on: Windows XP SP2 FR / IE6 ' Down : http://www.dbpoweramp.com/bin/dBpowerAMP-r2.exe buffer=String352, "A"...

Fat Player 0.6b - .WAV File Processing Buffer Overflow (SEH)

Fat Player 0.6b - .WAV File Processing Buffer Overflow SEH Stack-based buffer overflow in Fat Player 0.6b allows remote attackers to execute arbitrary code via a long string in a .wav file. NOTE: some of these details are obtained from third party information. Reference:...

Fat Player 0.6b - '.WAV' File Processing Buffer Overflow (SEH)

Stack-based buffer overflow in Fat Player 0.6b allows remote attackers to execute arbitrary code via a long string in a .wav file. NOTE: some of these details are obtained from third party information. Reference: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-4962...

AoAAudioExtractor 2.0.0.0 - ActiveX (PoC) (SEH)

'AoAAudioExtractor 2.0.0.0 ActiveX PoC SEH ' Author: Hadji Samir ,[email protected] ' Tested on: Windows XP SP2 FR / IE6 ' Down: http://www.aoamedia.com/audioextractor.exe ' Date: 2010-08-09 'samir tjrs mahboul-3lik arg1=String2048, "A" nseh=String4, "B" seh=String4, "C" arg4=String100, "D"...

dBpowerAMP Audio Player 2 - 'FileExists' ActiveX Buffer Overflow

' Exploit Title: dBpowerAMP Audio Player 2 FileExists ActiveX Buffer Overflow ' Author: Hadji Samir ,[email protected] ' Tested on: Windows XP SP2 FR / IE6 ' Down : http://www.dbpoweramp.com/bin/dBpowerAMP-r2.exe buffer=String352, "A" jmp=unescape"%65%82%A6%7C" 'jmp esp from shell32.dll 0x7CA68265...

ffdshow Video Codec - Denial of Service

ffdshow Video Codec - Denial of Service !/usr/bin/perl Exploit Title: Malformed MP4 Local DoS for ffdshow Video Codec tryouts rev. 3467 20100713 x86 Date: 08/08/2010 Author: Nishant Das Patnaik Web: http://nishantdaspatnaik.yolasite.com Software Link:...

myMP3-Player 3.0 - Local Buffer Overflow

myMP3-Player 3.0 - Local Buffer Overflow Exploit Title: myMP3-Player 3.0 NOT SEH Overwrite Date: 8 / 8 / 2010 Author: Oh Yaw Theng Software Link: http://www.chip.de/downloads/myMP3-Player-3.013008621.html Version: 3.0 Tested on: Windows XP SP 2 CVE : N / A !/usr/bin/python filename = "crash.m3u"...

CoolPlayer219_Bin (.m3u) File Buffer Overflow Stack Exploit

Exploit for windows platform in category local exploits =========================================================== CoolPlayer219Bin .m3u File Buffer Overflow Stack Exploit =========================================================== !/usr/bin/perl CoolPlayer219Bin .m3u File WinXP Sp3fr Buffer...

iKlax Player 3.2 (.mp3) File Buffer Overflow Stack Exploit

Exploit for windows platform in category local exploits ========================================================== iKlax Player 3.2 .mp3 File Buffer Overflow Stack Exploit ========================================================== !/usr/bin/perl iKlax Player 3.2 mp3 Author: hadji samir ,...

ffdshow Video Codec Denial of Service

Exploit for windows platform in category dos / poc ===================================== ffdshow Video Codec Denial of Service ===================================== !/usr/bin/perl Exploit Title: Malformed MP4 Local DoS for ffdshow Video Codec tryouts rev. 3467 20100713 x86 Date: 08/08/2010 Author...

myMP3-Player v3.0 Buffer Overflow Exploit

Exploit for windows platform in category local exploits ========================================= myMP3-Player v3.0 Buffer Overflow Exploit ========================================= Exploit Title: myMP3-Player 3.0 NOT SEH Overwrite Date: 8 / 8 / 2010 Author: Oh Yaw Theng Software Link:...