ASPR #2010-12-14-1: Remote Binary Planting in Windows Address Book

=====BEGIN-ACROS-REPORT===== PUBLIC ========================================================================= ACROS Security Problem Report 2010-12-14-1 ------------------------------------------------------------------------- ASPR 2010-12-14-1: Remote Binary Planting in Windows Address Book...

MS10-099: Vulnerability in Routing and Remote Access Could Allow Elevation of Privilege (2440591)

The Routing and Remote Access NDProxy component of the remote Windows host does not properly validate user-supplied input when passing data from user mode to the kernel. An attacker who can log on locally to the affected system can exploit this to run arbitrary code in kernel mode. C Tenable...

MS10-094: Vulnerability in Windows Media Encoder Could Allow Remote Code Execution (2447961)

The remote Windows host contains a version of Windows Media Encoder that incorrectly restricts the path used for loading external libraries. If an attacker can trick a user on the affected system into opening a specially crafted Windows Media Profile .prx file located in the same network director...

Digital Audio Editor 7.6.0.237 - Local Crash (PoC)

Digital Audio Editor 7.6.0.237 - Local Crash PoC Exploit Title: Digital Audio Editor 7.6.0.237 Local Crash PoC Software Link: http://www.audioeditor.us/dae/index.htm Tested on: Win XP SP3 Date: 15-12-2010 Author: h1ch4m Email: [email protected] my $file= "1.cda"; my $junk = "\x41" x 1000;...

Microsoft Windows OpenType Compact Font Format Driver Privilege Escalation Vulnerability (2296199)

This host is missing an important security update according to Microsoft Bulletin MS10-091. OpenVAS Vulnerability Test $Id: secpodms10-091.nasl 5361 2017-02-20 11:57:13Z cfi $ Microsoft Windows OpenType Compact Font Format Driver Privilege Escalation Vulnerability 2296199 Authors: Veerendra GG...

Microsoft Media Decompression Remote Code Execution Vulnerability (2447961)

This host is missing a critical security update according to Microsoft Bulletin MS10-094. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows ICSW Remote Code Execution Vulnerability (2443105)

This host is missing a critical security update according to Microsoft Bulletin MS10-097. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Office Graphics Filters Remote Code Execution Vulnerabilities (968095)

This host is missing a critical security update according to Microsoft Bulletin MS10-105. OpenVAS Vulnerability Test $Id: secpodms10-105.nasl 5361 2017-02-20 11:57:13Z cfi $ Microsoft Office Graphics Filters Remote Code Execution Vulnerabilities 968095 Authors: Madhuri D Copyright: Copyright c 20...

Digital Audio Editor 7.6.0.237 - Local Crash (PoC)

Exploit Title: Digital Audio Editor 7.6.0.237 Local Crash PoC Software Link: http://www.audioeditor.us/dae/index.htm Tested on: Win XP SP3 Date: 15-12-2010 Author: h1ch4m Email: [email protected] my $file= "1.cda"; my $junk = "\x41" x 1000; open$FILE,"$file"; print $FILE $junk; close$FILE; print "Fi...

Digital Audio Editor 7.6.0.237 Local Crash

Exploit Title: Digital Audio Editor 7.6.0.237 Local Crash PoC Software Link: http://www.audioeditor.us/dae/index.htm Tested on: Win XP SP3 Date: 15-12-2010 Author: h1ch4m Email: [email protected] my $file= "1.cda"; my $junk = "\x41" x 1000; open$FILE,"$file"; print $FILE $junk; close$FILE; print "Fi...

Easy DVD Creator - Local Crash (PoC)

Easy DVD Creator - Local Crash PoC Exploit Title: Easy DVD Creator Local Crash PoC Software Link: http://www.divxtodvd.net/dvd-creator.htm Tested on: Win XP SP3 Date: 15-12-2010 Author: h1ch4m Email: [email protected] my $file= "1.avi"; my $junk = "\x41" x 1000; open$FILE,"$file"; print $FILE $junk;...

Microsoft Media Decompression Remote Code Execution Vulnerability (2447961)

This host is missing a critical security update according to Microsoft Bulletin MS10-094. OpenVAS Vulnerability Test $Id: secpodms10-094.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft Media Decompression Remote Code Execution Vulnerability 2447961 Authors: Veerendra GG Copyright c 2010 SecPod...

Easy DVD Creator Local Crash

Exploit Title: Easy DVD Creator Local Crash PoC Software Link: http://www.divxtodvd.net/dvd-creator.htm Tested on: Win XP SP3 Date: 15-12-2010 Author: h1ch4m Email: [email protected] my $file= "1.avi"; my $junk = "\x41" x 1000; open$FILE,"$file"; print $FILE $junk; close$FILE; print "File Created...

MS10-105: Vulnerabilities in Microsoft Office Graphics Filters Could Allow for Remote Code Execution (968095)

The remote host is running a version of Microsoft Office with multiple memory corruption vulnerabilities. A remote attacker could exploit this by tricking a user into viewing a specially crafted image file with Office, resulting in arbitrary code execution. C Tenable Network Security, Inc...

Microsoft Office Graphics Filters Remote Code Execution Vulnerabilities (968095)

This host is missing a critical security update according to Microsoft Bulletin MS10-105. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Routing and Remote Access Privilege Escalation Vulnerability (2440591)

This host is missing an important security update according to Microsoft Bulletin MS10-099. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Easy DVD Creator - Local Crash (PoC)

Exploit Title: Easy DVD Creator Local Crash PoC Software Link: http://www.divxtodvd.net/dvd-creator.htm Tested on: Win XP SP3 Date: 15-12-2010 Author: h1ch4m Email: [email protected] my $file= "1.avi"; my $junk = "\x41" x 1000; open$FILE,"$file"; print $FILE $junk; close$FILE; print "File Created...

Microsoft Office FlashPix Image Converter (CVE-2010-3951) Buffer Overflow Vulnerability

Description Microsoft Office is prone to a remote buffer-overflow vulnerability because the software fails to perform adequate boundary-checks on user-supplied data. An attacker can exploit this issue by enticing an unsuspecting user into opening an Office document that contains a specially craft...

Microsoft Office FlashPix Image Converter Dictionary property buffer overflow

Added: 12/14/2010 CVE: CVE-2010-3951 BID: 45278 OSVDB: 69808 Background Microsoft Office is a package that provides word processing, spreadsheet, presentation, e-mail, and calendaring capabilities for Microsoft Windows workstations. The suite ships with a set of image processing helper libraries...

Microsoft Office FlashPix Image Converter Dictionary property buffer overflow

Added: 12/14/2010 CVE: CVE-2010-3951 BID: 45278 OSVDB: 69808 Background Microsoft Office is a package that provides word processing, spreadsheet, presentation, e-mail, and calendaring capabilities for Microsoft Windows workstations. The suite ships with a set of image processing helper libraries...