374 matches found
Few unreported vulnerabilities by SehaTo
Hello lists, SehaTo sehato at yandex ru reported few vulnerabilities in different Windows applications. Original messages in Russian may be found at http://securityvulns.com/source16446.html 1. Microsoft Windows Explorer corrupted WMF vulnerability...
Microsoft Windows Explorer DoS
Application explorer.exe crashes on browsing folder with corrupted WMF file no need to click file itself...
Microsoft Windows XP2003 - Explorer .WMF File Handling Denial of Service
Microsoft Windows XP2003 - Explorer .WMF File Handling Denial of Service source: https://www.securityfocus.com/bid/22715/info Microsoft Windows Explorer is prone to a denial-of-service vulnerability. A remote attacker may exploit this vulnerability by presenting a malicious file to a victim user...
Explorer WMF File Denial Of Service
Explorer WMF File Denial Of Service Программа "Microsoft Explorer" при просмотре изображения WMF выдает ошибку Протестированно: Explorer 6.00.2900 Windows XP SP2...
Microsoft Office 2003 - Denial of Service
Microsoft Office 2003 - Denial of Service source: https://www.securityfocus.com/bid/22716/info Microsoft Office is prone to a denial-of-service condition when the malformed WMF file is viewed in an Office application. Exploiting this issue allows remote attackers to crash applications, denying...
Microsoft Windows XP/2003 - Explorer '.WMF' File Handling Denial of Service
source: https://www.securityfocus.com/bid/22715/info Microsoft Windows Explorer is prone to a denial-of-service vulnerability. A remote attacker may exploit this vulnerability by presenting a malicious file to a victim user. Users do not have to open the file -- simply browsing a folder containin...
Microsoft Office 2003 - Denial of Service
source: https://www.securityfocus.com/bid/22716/info Microsoft Office is prone to a denial-of-service condition when the malformed WMF file is viewed in an Office application. Exploiting this issue allows remote attackers to crash applications, denying service to legitimate users. Microsoft Offic...
WMF File Denial Of Service
WMF File Denial Of Service Программа "Microsoft Office Word 2003" подвисает при вставке спецрисункаиз файла в формате WMF Программа "IrfanView" подвисает при открытии файла формата WMF Протестированно: Microsoft Office Word 2003 11.6568.8122 SP2 IrfanView 3.99 Windows XP SP2...
IrfanView DoS
Program hangs on corrupted WMF files open...
SUSE-SA:2007:001: OpenOffice_org
The remote host is missing the patch for the advisory SUSE-SA:2007:001 OpenOfficeorg. Security problems were fixed in the WMF and Enhanced WMF handling in OpenOfficeorg These could potentially be used to execute code or crash OpenOffice when a user could be convinced to open specially crafted...
GLSA-200701-07 : OpenOffice.org: EMF/WMF file handling vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200701-07 OpenOffice.org: EMF/WMF file handling vulnerabilities John Heasman of NGSSoftware has discovered integer overflows in the EMRPOLYPOLYGON and EMRPOLYPOLYGON16 processing and an error within the handling of METAESCAPE...
OpenOffice WMF/EMF文件处理堆溢出漏洞
OpenOffice是个整合性的软件，包含了许多文字处理、表格、公式等办公工具。 OpenOffice在处理METAESCAPE记录时存在截尾错误。在svtools\source\filter.vcl\wmf\winwmf.cxx文件中： case WMETAESCAPE : ... saluInt32 i, nStringLen, nDXCount; ... aMemoryStream aPt.X aPt.Y nStringLen; salUnicode pBuf = aString.AllocBuffer saluInt16nStringLen ; for i = 0; i...
MS Windows Explorer (WMF) CreateBrushIndirect DoS Exploit
No description provided by source. !/usr/bin/perl print "\nWMF PoC denial of service exploit by cyanid-E [email protected]"; print "\n\ngenerating brush.wmf..."; openWMF, "./brush.wmf" or die "cannot create wmf file\n"; print WMF "\x01\x00\x09\x00\x00\x03\x22\x00\x00\x00\x63\x79\x61\x6E\x69\x64";...
wmfdos.txt
!/usr/bin/perl print "\nWMF PoC denial of service exploit by cyanid-E "; print "\n\ngenerating brush.wmf..."; openWMF, "./brush.wmf" or die "cannot create wmf file\n"; print WMF "\x01\x00\x09\x00\x00\x03\x22\x00\x00\x00\x63\x79\x61\x6E\x69\x64"; print WMF...
Microsoft Windows资源管理器WMF文件拒绝服务漏洞
Microsoft Windows是微软发布的非常流行的操作系统。 Windows在处理畸形WMF文件时存在拒绝服务漏洞，资源管理器在处理包含畸形文件的目录时会发生崩溃。 Microsoft Windows XP SP2 Microsoft Windows XP SP1 Microsoft Windows XP 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.microsoft.com/technet/security/ !/usr/bin/perl WMF 0-day Dos Exploit Exploit Code...
Microsoft Windows Explorer - .WMF CreateBrushIndirect Denial of Service
Microsoft Windows Explorer - .WMF CreateBrushIndirect Denial of Service !/usr/bin/perl print "\nWMF PoC denial of service exploit by cyanid-E "; print "\n\ngenerating brush.wmf..."; openWMF, "./brush.wmf" or die "cannot create wmf file\n"; print WMF...
MS Windows Explorer (WMF) CreateBrushIndirect DoS Exploit
Exploit for unknown platform in category dos / poc ========================================================= MS Windows Explorer WMF CreateBrushIndirect DoS Exploit ========================================================= !/usr/bin/perl print "\nWMF PoC denial of service exploit by cyanid-E ";...
Microsoft Windows Explorer - '.WMF' CreateBrushIndirect Denial of Service
!/usr/bin/perl print "\nWMF PoC denial of service exploit by cyanid-E "; print "\n\ngenerating brush.wmf..."; openWMF, "./brush.wmf" or die "cannot create wmf file\n"; print WMF "\x01\x00\x09\x00\x00\x03\x22\x00\x00\x00\x63\x79\x61\x6E\x69\x64"; print WMF...
USN-406-1: OpenOffice.org vulnerability
An integer overflow was discovered in OpenOffice.org's handling of WMF files. If a user were tricked into opening a specially crafted WMF file, an attacker could execute arbitrary code with user privileges...
OpenOffice.org: EMF/WMF file handling vulnerabilities
Background OpenOffice.org is an open source office productivity suite, including word processing, spreadsheet, presentation, drawing, data charting, formula editing, and file conversion facilities. Description John Heasman of NGSSoftware has discovered integer overflows in the EMRPOLYPOLYGON and...