Microsoft OWC Spreadsheet msDataSourceObject Memory Corruption

This module exploits a memory corruption vulnerability within versions 10 and 11 of the Office Web Component Spreadsheet ActiveX control. This module was based on an exploit found in the wild. Module Options msf use exploit/windows/browser/ms09/043owcmsdso msf undefined043owcmsdso show actions...

Mp3-Nator 2.0 - 'ListData.dat' Universal Buffer Overflow (SEH)

!/usr/bin/perl + Bug : Mp3-Nator 2.0 ListData.dat Universal Buffer Overflow Exploit SEH + Author : ThE g0bL!N Greetz to all my friends Download:http://files.brothersoft.com/mp3audio/players/mp3nator.zip Tested on: Windows XP Pro SP2 Fr Ismail: Hadi Wallah Ghir 3la Rabbi : usage: After Clicking On...

Mozilla Firefox JIT Escape Function Memory Corruption

Added: 07/13/2009 CVE: CVE-2009-2477 BID: 35660 OSVDB: 55846 Background Mozilla is a suite of Internet client products available for multiple platforms. Problem A memory corruption vulnerability in Mozilla Firefox in the way it handles JIT escape function calls allows arbitrary code injection and...

eEye Retina WiFi Security Scanner 1.0 (.rws Parsing) Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ======================================================================== eEye Retina WiFi Security Scanner 1.0 .rws Parsing Buffer Overflow PoC ======================================================================== !/usr/bin/python Title: Retin...

AwingSoft Web3D Player - WindsPly.ocx Remote Buffer Overflow (PoC)

AwingSoft Web3D Player - WindsPly.ocx Remote Buffer Overflow PoC ----------------------------------------------------------------------------- AwingSoft Web3D Player WindsPly.ocx "SceneURL" Remote Buffer Overflow url: http://www.awingsoft.com/ Author: shinnai mail: shinnaiatautisticidotorg site:...

Retina WiFi Security Scanner 1.0 Overflow

!/usr/bin/python Title: Retina WiFi Security Scanner 1.0 .rws parsing Buffer Overflow Vulnerability Summary: Retina WiFi Scanner is a tool to be used to detect IEEE 802.11 WiFi based devices. Vendor: eEye Digital Security Inc. Product Web Page: http://www.eeye.com/ Current Version: 1.0.8.68 Notiz...

AwingSoft Web3D Player - 'WindsPly.ocx' Remote Buffer Overflow (PoC)

----------------------------------------------------------------------------- AwingSoft Web3D Player WindsPly.ocx "SceneURL" Remote Buffer Overflow url: http://www.awingsoft.com/ Author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.net/ Dedicated to aaannamariaaa :D This was...

Photo DVD Maker Pro 8.02 - .pdm Local Buffer Overflow (SEH)

Photo DVD Maker Pro 8.02 - .pdm Local Buffer Overflow SEH  | || | / \ | | | | | | | | | -open header1 = "\x3c\x3f\x78\x6d\x6c\x20\x76\x65\x72\x73\x69\x6f\x6e\x3d\x22\x31\x2e\x30\x22\x20" header1 += "\x65\x6e\x63\x6f\x64\x69\x6e\x67\x3d\x22\x55\x54\x46\x2d\x38\x22\x20\x3f\x3e\x0a" header1 +=...

Photo DVD Maker Pro 8.02 Buffer Overflow

| || | / \ | | | | | | | | | -open header1 = "\x3c\x3f\x78\x6d\x6c\x20\x76\x65\x72\x73\x69\x6f\x6e\x3d\x22\x31\x2e\x30\x22\x20" header1 += "\x65\x6e\x63\x6f\x64\x69\x6e\x67\x3d\x22\x55\x54\x46\x2d\x38\x22\x20\x3f\x3e\x0a" header1 +=...

AwingSoft Winds3D Player SceneURL Buffer Overflow

This module exploits a data segment buffer overflow within Winds3D Viewer of AwingSoft Awakening 3.x WindsPly.ocx v3.6.0.0. This ActiveX is a plugin of AwingSoft Web3D Player. By setting an overly long value to the 'SceneURL' property, an attacker can overrun a buffer and execute arbitrary code...

Microsoft to Release Patches for Two Video Control Flaws

Microsoft’s July Patch Tuesday release will include a fix for the DirectShow vulnerability that was revealed in May, and the software giant said it likely will also have a patch available for a related flaw in the MsVidCtl ActiveX control that became public earlier this week and has been under...

Microsoft Video ActiveX Control 'msvidctl.dll' BOF Vulnerability

This host is installed with Microsoft Video ActiveX Control and is prone to Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: gbmsvideoactvxbofvulnjul09.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft Video ActiveX Control 'msvidctl.dll' BOF Vulnerability Authors: Sharath S...

Immunity Canvas: MS09_032

Name| ms09032 ---|--- CVE| CVE-2008-0015 Exploit Pack| CANVAS Description| Microsoft DirectShow msvidctl.dll Vulnerability Notes| CVE Name: CVE-2008-0015 Vendor: Microsoft Notes: Tested against a Windows XP SP2 & SP3 English, German & Simplified Chinese with IE 6. IE 7 asks for confirmation befor...

How to Protect Against the MSVidCtl Vulnerability

The ongoing exploitation of the vulnerability in an ActiveX control used by Internet Explorer has created a dangerous situation, as there is no patch yet for the MSVidCtl.dll vulnerability. However, there are several steps you can take to protect yourself against attacks. Microsoft has released a...

PT-2009-1181

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 Description A stack-based buffer overflow exists in the CComVariant::ReadFromStream function within the Active Templat...

Microsoft DirectShow Video Streaming ActiveX IMPEG2TuneRequest Overflow

Added: 07/07/2009 CVE: CVE-2008-0015 BID: 35558 OSVDB: 55651 Background DirectX is a feature of the Windows operating system used for streaming media. Within DirectX, the DirectShow technology performs client-side audio and video sourcing, manipulation and rendering. Problem A stack buffer overfl...

Microsoft DirectShow Video Streaming ActiveX IMPEG2TuneRequest Overflow

Added: 07/07/2009 CVE: CVE-2008-0015 BID: 35558 OSVDB: 55651 Background DirectX is a feature of the Windows operating system used for streaming media. Within DirectX, the DirectShow technology performs client-side audio and video sourcing, manipulation and rendering. Problem A stack buffer overfl...

US-CERT Technical Cyber Security Alert TA09-187A -- Microsoft Video ActiveX Control Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA09-187A Microsoft Video ActiveX Control Vulnerability Original release date: July 06, 2009 Last revised: -- Source: US-CERT Systems Affected Microsoft Windows XP Microsoft Windows Server 200...

Microsoft DirectShow Video Streaming ActiveX IMPEG2TuneRequest Overflow

Added: 07/07/2009 CVE: CVE-2008-0015 BID: 35558 OSVDB: 55651 Background DirectX is a feature of the Windows operating system used for streaming media. Within DirectX, the DirectShow technology performs client-side audio and video sourcing, manipulation and rendering. Problem A stack buffer overfl...

MS09-032: Cumulative Security Update of ActiveX Kill Bits (973346)

The remote host is missing a list of kill bits for ActiveX controls that are known to contain vulnerabilities. If these ActiveX controls are ever installed on the remote host, either now or in the future, they would expose it to various security issues. %NASLMINLEVEL 70300 C Tenable Network...