CVE-2010-1987

Mozilla Firefox 3.6.3 on Windows XP SP3 is affected by CVE-2010-1987, allowing remote attackers to trigger memory consumption and a crash through crafted JavaScript that appends long strings to a P element and performs string operations. The root cause is tied to DoubleWideCharMappedString in USP...

CVE-2010-1987

Mozilla Firefox 3.6.3 on Windows XP SP3 allows remote attackers to cause a denial of service memory consumption, out-of-bounds read, and application crash via JavaScript code that appends long strings to the content of a P element, and performs certain other string concatenation and substring...

CVE-2010-1986

Technical details for CVE-2010-1986 are not present in the provided Connected documents. The Initial Description mentions Firefox 3.6.3 memory DoS via long strings but provides no vendor/version mappings or remediation in this set. Monitor for updates.

Windows Live Messenger 14.0.8117.416 DoS

Exploit for windows platform in category dos / poc ======================================== Windows Live Messenger 14.0.8117.416 DoS ======================================== Software : Windows Live Messenger 14.0.8117.416 Found by : Mr Ha1 / Morad Quraan Date: May 20, 2010 Site :...

Battle Scrypt Shell Upload

Exploit Title: Battle Scrypt Shell Upload Vulnerability Date: 19.05.2010 Author: DigitALL Software Link: http://www.coniac.com/membersbusiness/scripts/BattleScrypt.zip or http://www.scrypted.com/battlescrypt.html Tested on: Windows Xp Sp3 Code : d0rk: "Powered by Battle Scrypt" or inurl:upload.ph...

CommuniCrypt Mail 1.16 (ANSMTP.dll/AOSMTP.dll) ActiveX

No description provided by source. html !-- |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | |...

CommuniCrypt mail 1.16 Active-X Buffer Overflow

junk = String284, "A" nseh = unescape"%eb%06%90%90" seh = unescape"%1c%e4...

Battle Scrypt - Arbitrary File Upload

Battle Scrypt - Arbitrary File Upload Exploit Title: Battle Scrypt Shell Upload Vulnerability Date: 19.05.2010 Author: DigitALL Software Link: http://www.scrypted.com/battlescrypt.html Tested on: Windows Xp Sp3 Code : d0rk: "Powered by Battle Scrypt" or inurl:upload.php For Script Kidde : Exploit...

Microsoft Windows Movie Maker IsValidWMToolsStream buffer overflow

Added: 05/19/2010 CVE: CVE-2010-0265 BID: 38515 OSVDB: 62811 Background Windows Movie Maker is software for creating and editing home movies. Problem A buffer overflow vulnerability in the IsValidWMToolsStream function allows command execution when a user opens a specially crafted .MSWMM file...

Battle Scrypt Shell Upload Vulnerability

Exploit for php platform in category web applications ======================================== Battle Scrypt Shell Upload Vulnerability ======================================== Exploit Title: Battle Scrypt Shell Upload Vulnerability Date: 19.05.2010 Author: DigitALL Software Link:...

Microsoft Windows Movie Maker IsValidWMToolsStream buffer overflow

Added: 05/19/2010 CVE: CVE-2010-0265 BID: 38515 OSVDB: 62811 Background Windows Movie Maker is software for creating and editing home movies. Problem A buffer overflow vulnerability in the IsValidWMToolsStream function allows command execution when a user opens a specially crafted .MSWMM file...

Battle Scrypt - Arbitrary File Upload

Exploit Title: Battle Scrypt Shell Upload Vulnerability Date: 19.05.2010 Author: DigitALL Software Link: http://www.scrypted.com/battlescrypt.html Tested on: Windows Xp Sp3 Code : d0rk: "Powered by Battle Scrypt" or inurl:upload.php For Script Kidde : Exploit: Go To /upload.php Your Shell...

CommuniCrypt Mail 1.16 SMTP ActiveX Stack Buffer Overflow

This module exploits a stack buffer overflow in the ANSMTP.dll/AOSMTP.dll ActiveX Control provided by CommuniCrypt Mail 1.16. By sending an overly long string to the "AddAttachments" method, an attacker may be able to execute arbitrary code. Module Options msf use...

CommuniCrypt Mail 1.16 - ANSMTP.dllAOSMTP.dll ActiveX

CommuniCrypt Mail 1.16 - ANSMTP.dllAOSMTP.dll ActiveX !-- |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800...

Microsoft Windows Movie Maker IsValidWMToolsStream buffer overflow

Added: 05/19/2010 CVE: CVE-2010-0265 BID: 38515 OSVDB: 62811 Background Windows Movie Maker is software for creating and editing home movies. Problem A buffer overflow vulnerability in the IsValidWMToolsStream function allows command execution when a user opens a specially crafted .MSWMM file...

win32/xp sp3 Fr (calc.exe) Shellcode 31 bytes

Exploit for win32 platform in category shellcode ============================================= win32/xp sp3 Fr calc.exe Shellcode 31 Bytes ============================================= / | Title: Windows Xp Pro SP3 Fr calc.exe Shellcode 31 Bytes | Type: Shellcode | Author: agix | Platform: win32 ...

File Thingie 2.5.5 - File Security Bypass

File Thingie 2.5.5 - File Security Bypass Title: File Thingie v2.5.5 File Security Bypass Author: Jeremiah Talamantes RedTeam Security Website: http://www.redteamsecure.com/labs Date: 5/15/2010 Application: File Thingie Version: 2.5.5 Link: http://www.solitude.dk/filethingie/download Description:...

TYPSoft FTP Server RETR Command DoS

No description provided by source. Exploit Title: TYPSoft FTP Server RETR Command DoS Date: 5/13/2010 Author: Jeremiah Talamantes Software Link: Version: 1.10 Tested on: Windows XP, SP2 EN CVE : N/A !/usr/bin/python print "\n" print " RedTeam Security " print " TYPSoft FTP Server RETR Command DoS...

IncrediMail (ImShExtU.dll) ActiveX Memory Corruption

Exploit for windows platform in category dos / poc ==================================================== IncrediMail ImShExtU.dll ActiveX Memory Corruption ==================================================== !-- |------------------------------------------------------------------| | | | / / / / | ...

ReGet Deluxe .wjr file SaveTo attribute buffer overflow

Added: 05/14/2010 BID: 37511 Background ReGet Deluxe is a download manager for Windows. Problem A buffer overflow vulnerability allows command execution when a user opens a .wjr file containing a Download tag with a specially crafted SaveTo attribute. Resolution Do not open untrusted .wjr files...