CVE-2010-1988

Mozilla Firefox 3.6.3 on Windows XP SP3 allows remote attackers to cause a denial of service NULL pointer dereference and application crash or possibly execute arbitrary code via JavaScript code that performs certain string concatenation and substring operations, a different vulnerability than...

CVE-2010-1987

Mozilla Firefox 3.6.3 on Windows XP SP3 allows remote attackers to cause a denial of service memory consumption, out-of-bounds read, and application crash via JavaScript code that appends long strings to the content of a P element, and performs certain other string concatenation and substring...

Design/Logic Flaw

Mozilla Firefox 3.6.3 on Windows XP SP3 allows remote attackers to cause a denial of service memory consumption and application crash via JavaScript code that creates multiple arrays containing elements with long string values, and then appends long strings to the content of a P element, related ...

Out-of-bounds

Mozilla Firefox 3.6.3 on Windows XP SP3 allows remote attackers to cause a denial of service memory consumption, out-of-bounds read, and application crash via JavaScript code that appends long strings to the content of a P element, and performs certain other string concatenation and substring...

CVE-2010-1988

Mozilla Firefox 3.6.3 on Windows XP SP3 allows remote attackers to cause a denial of service NULL pointer dereference and application crash or possibly execute arbitrary code via JavaScript code that performs certain string concatenation and substring operations, a different vulnerability than...

CVE-2010-1988

Technical details for CVE-2010-1988 are not provided in the connected documents. Public information in the Initial Description covers Firefox 3.6.3 on Windows XP SP3 but no additional technical specifics, vulnerable components, impact, or fixes are included here.

CVE-2010-1987

Mozilla Firefox 3.6.3 on Windows XP SP3 is affected by CVE-2010-1987, allowing remote attackers to trigger memory consumption and a crash through crafted JavaScript that appends long strings to a P element and performs string operations. The root cause is tied to DoubleWideCharMappedString in USP...

CVE-2010-1987

Mozilla Firefox 3.6.3 on Windows XP SP3 allows remote attackers to cause a denial of service memory consumption, out-of-bounds read, and application crash via JavaScript code that appends long strings to the content of a P element, and performs certain other string concatenation and substring...

CVE-2010-1986

Technical details for CVE-2010-1986 are not present in the provided Connected documents. The Initial Description mentions Firefox 3.6.3 memory DoS via long strings but provides no vendor/version mappings or remediation in this set. Monitor for updates.

Windows Live Messenger 14.0.8117.416 DoS

Exploit for windows platform in category dos / poc ======================================== Windows Live Messenger 14.0.8117.416 DoS ======================================== Software : Windows Live Messenger 14.0.8117.416 Found by : Mr Ha1 / Morad Quraan Date: May 20, 2010 Site :...

Battle Scrypt Shell Upload

Exploit Title: Battle Scrypt Shell Upload Vulnerability Date: 19.05.2010 Author: DigitALL Software Link: http://www.coniac.com/membersbusiness/scripts/BattleScrypt.zip or http://www.scrypted.com/battlescrypt.html Tested on: Windows Xp Sp3 Code : d0rk: "Powered by Battle Scrypt" or inurl:upload.ph...

Battle Scrypt - Arbitrary File Upload

Battle Scrypt - Arbitrary File Upload Exploit Title: Battle Scrypt Shell Upload Vulnerability Date: 19.05.2010 Author: DigitALL Software Link: http://www.scrypted.com/battlescrypt.html Tested on: Windows Xp Sp3 Code : d0rk: "Powered by Battle Scrypt" or inurl:upload.php For Script Kidde : Exploit...

Microsoft Windows Movie Maker IsValidWMToolsStream buffer overflow

Added: 05/19/2010 CVE: CVE-2010-0265 BID: 38515 OSVDB: 62811 Background Windows Movie Maker is software for creating and editing home movies. Problem A buffer overflow vulnerability in the IsValidWMToolsStream function allows command execution when a user opens a specially crafted .MSWMM file...

Battle Scrypt Shell Upload Vulnerability

Exploit for php platform in category web applications ======================================== Battle Scrypt Shell Upload Vulnerability ======================================== Exploit Title: Battle Scrypt Shell Upload Vulnerability Date: 19.05.2010 Author: DigitALL Software Link:...

Microsoft Windows Movie Maker IsValidWMToolsStream buffer overflow

Added: 05/19/2010 CVE: CVE-2010-0265 BID: 38515 OSVDB: 62811 Background Windows Movie Maker is software for creating and editing home movies. Problem A buffer overflow vulnerability in the IsValidWMToolsStream function allows command execution when a user opens a specially crafted .MSWMM file...

Battle Scrypt - Arbitrary File Upload

Exploit Title: Battle Scrypt Shell Upload Vulnerability Date: 19.05.2010 Author: DigitALL Software Link: http://www.scrypted.com/battlescrypt.html Tested on: Windows Xp Sp3 Code : d0rk: "Powered by Battle Scrypt" or inurl:upload.php For Script Kidde : Exploit: Go To /upload.php Your Shell...

CommuniCrypt Mail 1.16 SMTP ActiveX Stack Buffer Overflow

This module exploits a stack buffer overflow in the ANSMTP.dll/AOSMTP.dll ActiveX Control provided by CommuniCrypt Mail 1.16. By sending an overly long string to the "AddAttachments" method, an attacker may be able to execute arbitrary code. Module Options msf use...

Microsoft Windows Movie Maker IsValidWMToolsStream buffer overflow

Added: 05/19/2010 CVE: CVE-2010-0265 BID: 38515 OSVDB: 62811 Background Windows Movie Maker is software for creating and editing home movies. Problem A buffer overflow vulnerability in the IsValidWMToolsStream function allows command execution when a user opens a specially crafted .MSWMM file...

win32/xp sp3 Fr (calc.exe) Shellcode 31 bytes

Exploit for win32 platform in category shellcode ============================================= win32/xp sp3 Fr calc.exe Shellcode 31 Bytes ============================================= / | Title: Windows Xp Pro SP3 Fr calc.exe Shellcode 31 Bytes | Type: Shellcode | Author: agix | Platform: win32 ...

File Thingie 2.5.5 - File Security Bypass

File Thingie 2.5.5 - File Security Bypass Title: File Thingie v2.5.5 File Security Bypass Author: Jeremiah Talamantes RedTeam Security Website: http://www.redteamsecure.com/labs Date: 5/15/2010 Application: File Thingie Version: 2.5.5 Link: http://www.solitude.dk/filethingie/download Description:...