Pegasus Mail Client Buffer Overflow

Application: Pegasus Mail Client Platforms: Windows XP Professional SP2 Exploitation: remote BoF Date: 2009-10-06 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details 3 The Code Only DoS =============== 1 Introduction =============== Pegasus Mail PMail is suitable f...

Eureka Mail Client Buffer Overflow

Application: Eureka Mail client Platforms: Windows XP Professional SP2 Exploitation: remote BoF Date: 2009-10-06 Author: Francis Provencher Protek Research Lab's Special Thanks to: M Jeremy Brown 1 Introduction 2 Technical details 3 The Code =============== 1 Introduction =============== Sick of...

Microsoft GDI+库图形文件处理多个缓冲区溢出和内存破坏漏洞(MS09-062)

BUGTRAQ ID: 36619,36645,36646,36648,36649,36650,36651,36647 CVE ID: CVE-2009-2500,CVE-2009-2501,CVE-2009-2502,CVE-2009-2503,CVE-2009-2504,CVE-2009-3126,CVE-2009-2528,CVE-2009-2518 Microsoft产品中所使用的GDI+库（GdiPlus.dll）通过基于类的API提供对各种图形方式的访问。...

South River Technologies WebDrive 9.02 build 2232 - Local Privilege Escalation

South River Technologies WebDrive 9.02 build 2232 - Local Privilege Escalation South River Technologies WebDrive Service Bad Security Descriptor Local Elevation Of Privileges by Nine:Situations:Group::bellick site: http://retrogod.altervista.org/ Software site: http://www.webdrive.com/ Download...

South River Technologies WebDrive 9.02 build 2232 - Local Privilege Escalation

South River Technologies WebDrive Service Bad Security Descriptor Local Elevation Of Privileges by Nine:Situations:Group::bellick site: http://retrogod.altervista.org/ Software site: http://www.webdrive.com/ Download location: http://www.webdrive.com/download/index.html Tested against: South Rive...

South River Technologies WebDrive Service privilege escalation

No description provided by source. South River Technologies WebDrive Service Bad Security Descriptor Local Elevation Of Privileges by Nine:Situations:Group::bellick site: http://retrogod.altervista.org/ Software site: http://www.webdrive.com/ Download location:...

South River Technologies WebDrive Service privilege escalation

Exploit for unknown platform in category local exploits ============================================================== South River Technologies WebDrive Service privilege escalation ============================================================== Title: South River Technologies WebDrive Service...

Microsoft Visual Basic VBP Buffer Overflow

This module exploits a stack buffer overflow in Microsoft Visual Basic 6.0. When a specially crafted vbp file containing a long reference line, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...

Microsoft Windows CryptoAPI组件整数溢出漏洞（MS09-056）

BUGTRAQ ID: 36577 CVECAN ID: CVE-2009-2511 Windows是微软发布的非常流行的操作系统。 Windows的CryptoAPI组件在解析X.509证书的ASN.1对象标识符时存在整数溢出漏洞，远程攻击者可以通过包含有畸形ASN.1对象标识符的X.509证书扮演称为其他用户或系统。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft Windows Vista...

Vulnerability in Zoiper softphone version 2.22 - Denial Of Service

================================================================== Vulnerability in Zoiper softphone version 2.22 - Denial Of Service ================================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /,...

Talkative IRC v0.4.4.16 Response Buffer Overflow

This module exploits a stack buffer overflow in Talkative IRC v0.4.4.16. When a specially crafted response string is sent to a client, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...

HTTPDX h_handlepeer() Buffer Overflow

require 'msf/core' class Metasploit3 'HTTPDX hhandlepeer Function Buffer Overflow', 'Description' = %q This module exploits a stack-based buffer overflow vulnerability in HTTPDX HTTP server 1.4. The vulnerability is caused due to a boundary error within the "hhandlepeer" function in http.cpp. By...

httpdx 1.4 - h_handlepeer Buffer Overflow (Metasploit)

require 'msf/core' class Metasploit3 'HTTPDX hhandlepeer Function Buffer Overflow', 'Description' = %q This module exploits a stack-based buffer overflow vulnerability in HTTPDX HTTP server 1.4. The vulnerability is caused due to a boundary error within the "hhandlepeer" function in http.cpp. By...

httpdx 1.4 h_handlepeer BoF

No description provided by source. require 'msf/core' class Metasploit3 Msf::Exploit::Remote include Msf::Exploit::Remote::Tcp def initializeinfo = superupdateinfoinfo, 'Name' = 'HTTPDX hhandlepeer Function Buffer Overflow', 'Description' = %q This module exploits a stack-based buffer overflow...

Xion Audio Player 1.0 121 m3u file buffer overflow

Exploit for unknown platform in category local exploits ================================================== Xion Audio Player 1.0 121 m3u file buffer overflow ================================================== Title: Xion Audio Player 1.0 121 m3u file buffer overflow CVE-ID: OSVDB-ID: Author: Drag...

httpdx 1.4 - h_handlepeer Buffer Overflow (Metasploit)

httpdx 1.4 - hhandlepeer Buffer Overflow Metasploit require 'msf/core' class Metasploit3 'HTTPDX hhandlepeer Function Buffer Overflow', 'Description' = %q This module exploits a stack-based buffer overflow vulnerability in HTTPDX HTTP server 1.4. The vulnerability is caused due to a boundary erro...

CA eTrust PestPatrol ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in CA eTrust PestPatrol. When sending an overly long string to the Initialize property of ppctl.dll 5.6.7.9 an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...

activePDF WebGrabber ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in activePDF WebGrabber 3.8. When sending an overly long string to the GetStatus method of APWebGrb.ocx 3.8.2.0 an attacker may be able to execute arbitrary code. This control is not marked safe for scripting, so choose your attack vector accordingly...

Electronic Arts SnoopyCtrl ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in Electronic Arts SnoopyCtrl ActiveX Control NPSnpy.dll 1.1.0.36. When sending an overly long string to the CheckRequirements method, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download...

McAfee Remediation Client ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in McAfee Remediation Agent 4.5.0.41. When sending an overly long string to the DeleteSnapshot method of enginecom.dll 3.7.0.9 an attacker may be able to execute arbitrary code. This control is not marked safe for scripting, so choose your attack vecto...