513 matches found
CVE-2008-3021
Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of a PICT file, which allows remote attackers to execute arbitrary code via a crafted PICT file with an invalid bitsperpixel field, aka the "PICT Filter Parsing Vulnerability," a...
CVE-2008-3018
CVE-2008-3021 concerns a memory corruption/vulnerability in Microsoft Office filters when processing malformed PICT images. Affected products include Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP2, Office Converter Pack, and Works 8. The issue stems from improper handling of PICT image...
CVE-2008-3019
CVE-2008-3019 describes a remote code execution vulnerability in Microsoft Office filters related to malformed Encapsulated PostScript (EPS) handling. A crafted EPS file could allow code execution when opened with affected Office products: Office 2000 SP3, XP SP3, and 2003 SP2, plus the Office Co...
CVE-2008-3020
CVE-2008-3020 is a remote code execution vulnerability in Microsoft Office filters, specifically in the BMPIMP32.FLT module used by Office BMP import handling. A crafted BMP image with a malformed header (e.g., an excessive number of colors) causes a heap buffer overflow/memory corruption in BMP ...
Alphanumeric Shellcode Encoder Decoder
Alphanumeric Shellcode Encoder Decoder. Shellcode exploit for generator platform / ////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// Alphanumeric Shellcode Encoder Decoder Copyright © 1985-2008 Avri Schneider - Aladdin Knowledg...
MS08-011: Vulnerabilities in Microsoft Works File Converter Could Allow Remote Code Execution (947081)
The remote host is running a version of Microsoft Office Works Converter that may allow arbitrary code to be run. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have him open it. Then a bug in the wps header handler would result in code execution. C...
DoubleTake/HP StorageWorks Storage Mirroring Service Authentication Overflow
This module exploits a stack buffer overflow in the authentication mechanism of NSI Doubletake which is also rebranded as HP Storage Works. This vulnerability was found by Titon of Bastard Labs. This module requires Metasploit: https://metasploit.com/download Current source:...
HP StorageWorks NSI Double Take Remote Overflow Exploit (meta)
No description provided by source. $Id: doubletake.rb 4529 2007-03-23 01:08:18Z $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
hpstorage-meta.txt
$Id: doubletake.rb 4529 2007-03-23 01:08:18Z $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/...
HP StorageWorks NSI Double Take Remote Overflow Exploit (meta)
Exploit for unknown platform in category remote exploits ============================================================== HP StorageWorks NSI Double Take Remote Overflow Exploit meta ============================================================== $Id: doubletake.rb 4529 2007-03-23 01:08:18Z $ This...
Microsoft Works 7 WkImgSrv.dll ActiveX Remote BOF Exploit
No description provided by source. !– The problem is in wkimgsrv.dll module shipped with many MS Offiice Suite tested on MS OF 2003,MS OF 2007 Actually,this is not the case of buffer overflow attack,just a exploit of insecure method WKsPictureInterface...
Microsoft Works 7 WkImgSrv.dll ActiveX控件远程代码执行漏洞
BUGTRAQ ID: 28820 Microsoft Works是微软在早期所发布的文件处理程序。 Microsoft Works所带的ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 Microsoft Works所提供的wkimgsrv.dll库没有安全地调用WKsPictureInterface方式： 00D473BD PUSH EBP ; Begin of Set WksPictureInterface method 00D473BE MOV EBP,ESP 00D473C0 SUB ESP,1C 00D473C3 MOV EAX,DWORD PTR...
Microsoft Works 7 WkImgSrv.dll vulnerability-vulnerability warning-the black bar safety net
Many machines pre-loaded with works7, Works 7 WkImgSrv.dll controls overflow html head titleMicrosoft Works 7 WkImgSrv.dll crash POC/title script language="JavaScript" function payload var num = -1; obj. WksPictureInterface = num; /script /head body object...
Microsoft Works 7 WkImgSrv.dll ActiveX Remote BOF Exploit
Exploit for unknown platform in category remote exploits ========================================================= Microsoft Works 7 WkImgSrv.dll ActiveX Remote BOF Exploit ========================================================= MOV ESI,DWORD PTR SS:EBP+8 ; Do some other stuffs, we don't care...
Microsoft Works 7 - WkImgSrv.dll ActiveX Remote Buffer Overflow
Microsoft Works 7 - WkImgSrv.dll ActiveX Remote Buffer Overflow MOV ESI,DWORD PTR SS:EBP+8 ; Do some other stuffs, we don't care 00D473D8 LEA EDX,DWORD PTR SS:EBP-1C ; 00D473DB PUSH EDX 00D473DC PUSH EAX 00D473DD MOV DWORD PTR DS:ESI+2A0,EAX ; ============= 00D473E3 == MOV ECX,DWORD PTR DS:EAX ;...
mswork-insecure.txt
BKIS Research 21/04/2008 - Microsoft Work ActiveX Insecure Method Exploit - ====================================================================== Table of Contents Affected Software....................................................1...
Microsoft Works 7 - 'WkImgSrv.dll' ActiveX Remote Buffer Overflow
MOV ESI,DWORD PTR SS:EBP+8 ; Do some other stuffs, we don't care 00D473D8 LEA EDX,DWORD PTR SS:EBP-1C ; 00D473DB PUSH EDX 00D473DC PUSH EAX 00D473DD MOV DWORD PTR DS:ESI+2A0,EAX ; ============= 00D473E3 == MOV ECX,DWORD PTR DS:EAX ; Here is the problem,the data stored by EAX is referenced and mov...
Windows Components 0Day vulnerabilities pass to kill IE6 and IE7 browser-vulnerability warning-the black bar safety net
China IT lab 4 on 2 1 reported: recently received a netizen sent a message, reflecting one of the Windows 0Day vulnerabilities. And in its blog is given in the relevant code. 0dayMicrosoft Works 7 WkImgSrv.dll crash POC, dll version 7. 0 3. 0 6 1 6. 0, IE7+Windows XP SP2 test. ! the following is...
Input validation
A certain ActiveX control in WkImgSrv.dll 7.03.0616.0, as distributed in Microsoft Works 7 and Microsoft Office 2003 and 2007, allows remote attackers to execute arbitrary code or cause a denial of service browser crash via an invalid WksPictureInterface property value, which triggers an improper...
