| Email address | private |
|---|---|
| First Active | 2008-05-09 |
| Last Active | 2011-08-19 |
Microsoft Patch Analysis presentation slides from Confidence 2010.
7ec969f7ce7dd6a082eb350a5cc69296faf9cf9787d943e97bba72f29e1d3c0aThis Metasploit module exploits a stack-based buffer overflow in the handling of thumbnails within .MIC files and various Office documents. When processing a thumbnail bitmap containing a negative 'biClrUsed' value, a stack-based buffer overflow occurs. This leads to arbitrary code execution. In order to trigger the vulnerable code, the folder containing the document must be viewed using the "Thumbnails" view.
ff0746ba8e2fc6963fae334d5cae3d633461ec95d7ca6d6099761907cf4797c4iDefense Security Advisory 02.08.11 - Remote exploitation of a buffer overflow vulnerability in multiple versions of Microsoft Corp.'s Windows could allow attackers to execute arbitrary code on the targeted host. An integer overflow vulnerability exists in the "shimgvw" library. During the processing of an image within a certain function, a bitmap containing a large "biWidth" value can be used to cause an integer calculation overflow. This condition can lead to the overflow of a heap buffer and may result in the execute arbitrary code on the targeted host.
f6124a1b8cbfad6d5655d8dd9b8857fd339410ce72f7e673b15b3fbb4d62778cThis Metasploit module exploits a stack-based buffer overflow in the handling of thumbnails within .MIC files and various Office documents. When processing a thumbnail bitmap containing a negative 'biClrUsed' value, a stack-based buffer overflow occurs. This leads to arbitrary code execution. In order to trigger the vulnerable code, the folder containing the document must be viewed using the "Thumbnails" view.
324a4cf6708fa3e2e4a6d04a2e921ca6490b4047ccd7b0dfca5643c50afc11c8The Aris AGX agXchange ESM safety submissions module suffers from an open redirection vulnerability.
2c9de39e17d4804bef609db851591fe352f2c6759ab33b6236daaa76c6ef0832IBM Lotus version 6.x suffers from a HTTP response splitting vulnerability.
eb17a890d0e369f28679e022d3d6d0ec5c394507a4192671f18179c81f926f67Friendly-Tech FriendlyTR69 CPE remote management version 2.8.9 suffers from a remote SQL injection vulnerability.
58ccac000cdd3134afda51cec0b760989d3af73eaba4ecc1194b1016dcfa7bd1IBM ENOVIA SmarTeam version 5 suffers from a cross site scripting vulnerability.
2a2209931b1ffd42b7662b43ba4d47eb79ceb56b8533c08525649d627220dac8The Sparta Systems TrackWise TeamAccess module suffers from a cross site scripting vulnerability.
52aeca03b84206b3c2b015722e3fbbb96730fc996397f673d8eb9f960cfe130dEshbel Priority MarketGate module suffers from a cross site scripting vulnerability.
ba1eb4771be17163701c33bc9cd1834c5df42518f2f7cfe06aaa3c6efd2d9e92Oracle Siebel CRM version 7.x suffers from a cross site scripting vulnerability.
d9b8d785baaec4c817bb1fc5be6e354ef43d9a6c8da1f1bffdc2b704fbf65d0bARISg5 version 5.0 suffers from a cross site scripting vulnerability.
c5198d5f0e7e3bc211bc96fbfda873a31bfed02e818bcd04d6b3f10e9eec1edfApache versions 2.2.x and 1.3.x suffer from a cross site scripting vulnerability leveraging UTF-7 encoding on 403 forbidden pages.
8fffd3a81ffabcbd3507f0163054297820bd7db26ac5b1589bffae4cacbe171d
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed