Code injection

mshtml.dll in Microsoft Internet Explorer 7 and 8 on Windows XP SP3 allows remote attackers to cause a denial of service application crash by calling the JavaScript findText method with a crafted Unicode string in the first argument, and only one additional argument, as demonstrated by a second...

CVE-2009-2655

CVE-2009-2655 describes a denial-of-service vulnerability in mshtml.dll used by Microsoft Internet Explorer 7/8 on Windows XP SP3. The issue is triggered when the JavaScript findText method is called with a crafted Unicode string in the first argument and only one additional argument (e.g., a sec...

Millenium MP3 Studio 1.0 .mpf File Local Stack Overflow Exploit (update)

No description provided by source. + Vulnerability : .m3u File Local Stack Overflow Exploit SEH Full Rewrite + Product : Millenium MP3 Studio + Versions affected : v1.0 + Download : http://www.software112.com/products/mp3-millennium+download.html + Method : seh + Tested on : Windows XP SP3 En +...

MP3 Studio 1.0 (.mpf /.m3u File) Local Stack Overflow Exploit (SEH)

No description provided by source. + Vulnerability : .mpf /.m3u File Local Stack Overflow Exploit SEH 1 + Product : Millenium MP3 Studio + Versions affected : v1.0 + Download : http://www.software112.com/products/mp3-millennium+download.html + Method : ret/seh + Tested on : Windows XP SP3 En +...

WINMOD 1.4 (.lst) Local Stack Overflow Exploit XP SP3 (RET+SEH) #3

No description provided by source. Winmod 1.4 .lst Local Stack Overflow Exploit RET overwrite+SEH http://www.software112.com/products/winmod+download.html Exploit for Windows XP SP3 en by corelan - c0d3r Greetings to Saumil and SK my $sploitfile = "c:\program files\winmod\xplsp3.lst"; my...

Millenium MP3 Studio 1.0 Stack Overflow

Vulnerability : .mpf File Local Stack Overflow Exploit SEH 2 + Product : Millenium MP3 Studio + Versions affected : v1.0 + Download : http://www.software112.com/products/mp3-millennium+download.html + Method : seh + Tested on : Windows XP SP3 En + Written by : corelanc0d3r...

WINMOD 1.4 Stack Overflow

Winmod 1.4 .lst Local Stack Overflow Exploit RET overwrite+SEH http://www.software112.com/products/winmod+download.html Exploit for Windows XP SP3 en by corelan - c0d3r Greetings to Saumil and SK my $sploitfile = "c:\program files\winmod\xplsp3.lst"; my $buf="\x41" x 500;...

WINMOD 1.4 - .lst File Local Stack Overflow XP SP3 (RET + SEH) (3)

WINMOD 1.4 - .lst File Local Stack Overflow XP SP3 RET + SEH 3 Winmod 1.4 .lst Local Stack Overflow Exploit RET overwrite+SEH http://www.software112.com/products/winmod+download.html Exploit for Windows XP SP3 en by corelan - c0d3r Greetings to Saumil and SK my $sploitfile = "c:\program...

Millenium MP3 Studio 1.0 .mpf File Local Stack Overflow Exploit #2

Exploit for unknown platform in category local exploits ================================================================== Millenium MP3 Studio 1.0 .mpf File Local Stack Overflow Exploit 2 ================================================================== + Vulnerability : .mpf File Local Stack...

MP3 Studio 1.0 - '.mpf' / '.m3u' Local Stack Overflow (SEH)

Vulnerability : .mpf /.m3u File Local Stack Overflow Exploit SEH 1 + Product : Millenium MP3 Studio + Versions affected : v1.0 + Download : http://www.software112.com/products/mp3-millennium+download.html + Method : / + Tested on : Windows XP SP3 En + Written by : corelanc0d3r...

WINMOD 1.4 - '.lst' File Local Stack Overflow XP SP3 (RET + SEH) (3)

Winmod 1.4 .lst Local Stack Overflow Exploit RET overwrite+SEH http://www.software112.com/products/winmod+download.html Exploit for Windows XP SP3 en by corelan - c0d3r Greetings to Saumil and SK my $sploitfile = "c:\program files\winmod\xplsp3.lst"; my $buf="\x41" x 500;...

MS Internet Explorer 7/8 findText Unicode Parsing Crash Exploit

No description provided by source. meta http-equiv="Context-Type" content="text/html; charset=US-ASCII" !-- Contact:[email protected],[email protected] Title: MS Internet Explorer findText Unicode Parsing error Vulnerability mshtml.dll Bug discovered: Hong10 PoC code: AmesianX & Hong10 Critical:...

MS Internet Explorer 7/8 findText Unicode Parsing Crash Exploit

Exploit for unknown platform in category dos / poc =============================================================== MS Internet Explorer 7/8 findText Unicode Parsing Crash Exploit =============================================================== IE findText crash Hit the button after ie7/8 crash...

Microsoft Internet Explorer 78 - findText Unicode Parsing Crash

Microsoft Internet Explorer 78 - findText Unicode Parsing Crash IE findText crash Hit the button after ie7/8 crash.. function docrash var o1=document.createElement"input"; o1.type="text"; //or password o1.id="powerhacker"; o1.value="AAAA"; document.body.appendChildo1; var r= o1.createTextRange;...

Microsoft Internet Explorer 7/8 - findText Unicode Parsing Crash

IE findText crash Hit the button after ie7/8 crash.. function docrash var o1=document.createElement"input"; o1.type="text"; //or password o1.id="powerhacker"; o1.value="AAAA"; document.body.appendChildo1; var r= o1.createTextRange;...

MS Office Web Components Spreadsheet ActiveX (OWC10/11) Exploit

No description provided by source. Author : Ahmed Obied [email protected] - Based on the code posted at http://www.milw0rm.com/exploits/9163 - Tested using: Internet Explorer 7.0.5730.13 on Windows XP SP3 with owc10.dll installed Internet Explorer 7.0.5730.13 on Windows XP SP3 with owc11.dll...

Adobe Acrobat 9.1.2 NOS Local Privilege Escalation Exploit

No description provided by source. / alwaysdirtyneverclean.c AKA Adobe Acrobat 9.1.2 NOS Local Privilege Escalation Exploit alwaysdirtyneverclean.zip BY Jeremy Brown 2009 [email protected] 07.21.2009 I've been up for nearly 24 hours only the last few doing research though. This exploit is base...

Microsoft Office Web Active-X Exploit

Author : Ahmed Obied [email protected] - Based on the code posted at http://www.milw0rm.com/exploits/9163 - Tested using: Internet Explorer 7.0.5730.13 on Windows XP SP3 with owc10.dll installed Internet Explorer 7.0.5730.13 on Windows XP SP3 with owc11.dll installed Usage : python ieowc.py...

Adobe Acrobat 9.1.2 NOS - Local Privilege Escalation

/ alwaysdirtyneverclean.c AKA Adobe Acrobat 9.1.2 NOS Local Privilege Escalation Exploit alwaysdirtyneverclean.zip BY Jeremy Brown 2009 [email protected] 07.21.2009 I've been up for nearly 24 hours only the last few doing research though. This exploit is based on the brief information provided...

Microsoft Office Web Components Spreadsheet - ActiveX 'OWC10/11' Remote Overflow

Author : Ahmed Obied [email protected] - Based on the code posted at http://www.milw0rm.com/exploits/9163 - Tested using: Internet Explorer 7.0.5730.13 on Windows XP SP3 with owc10.dll installed Internet Explorer 7.0.5730.13 on Windows XP SP3 with owc11.dll installed Usage : python ieowc.py...