Showing 1 - 6 of 6

Files from Context Information Security Ltd

First Active	2011-08-19
Last Active	2013-01-10

Microsoft .NET Framework Privilege Escalation: Posted Jan 10, 2013; Authored by James Forshaw, Context Information Security Ltd | Site contextis.co.uk; The Microsoft .NET Framework contains an error in the Intermediate Language (IL) verifier which could allow hosted partial trust code to elevate privileges to escape a sandboxed environment resulting in arbitrary code execution with the permissions of the user. Affected are Microsoft .Net Frameworks versions 1.1 through 4.5.; tags | advisory, arbitrary, code execution; advisories | CVE-2013-0004; SHA-256 | 079e079043b920220d28f1a88dcf3dd9d69b471f51c59bc6253d0bd339e455ac; Download | Favorite | View

Citrix XenServer 6.0.2 Privilege Escalation: Posted Oct 30, 2012; Authored by James Forshaw, Context Information Security Ltd | Site contextis.co.uk; Citrix XenServer version 5.0 through 6.0.2 suffer from a privilege escalation vulnerability.; tags | advisory; advisories | CVE-2012-4606; SHA-256 | eb3974e68da4195443054f477c4bf3f18f7d35f86b9ec8a0799c51acbb0c4459; Download | Favorite | View

.NET 4 Remote Code Execution: Posted May 31, 2012; Authored by James Forshaw, Context Information Security Ltd; .NET versions 1.0 through 4 suffer from a remote code execution vulnerability.; tags | advisory, remote, code execution; advisories | CVE-2012-0160, CVE-2012-0161; SHA-256 | 307f395b028ac122304fef534240c7e23084013f6280c7430f0e184b83090603; Download | Favorite | View

SAP AG Netweaver 7.02 Buffer Overflow: Posted Feb 18, 2012; Authored by Nico Leidecker, Context Information Security Ltd; SAP AG Netweaver version 7.02 suffers from a stack based buffer overflow vulnerability in the SAPHostControl service. Exploitation can lead to code execution.; tags | advisory, overflow, code execution; SHA-256 | 96012632a04d7e30153723120084472f3f130485461ca0a85ad16a64e3a5da2f; Download | Favorite | View

Apache Reverse Proxy Bypass: Posted Oct 6, 2011; Authored by Michael Jordon, Context Information Security Ltd, David Robinson | Site contextis.co.uk; Context discovered a security vulnerability which allows for Apache in reverse proxy mode to be used to access internal/DMZ systems due to a weakness in its handling of URLs being processed by mod_rewrite. Versions 1.3 and 2.x are affected.; tags | exploit; advisories | CVE-2011-3368; SHA-256 | cc7c3ff195e475a2b7ec8ea66d98deaebf0cf9dedd7ae209991e3d3c5d4274d8; Download | Favorite | View

Firefox 4 / 5 Heap Overflows: Posted Aug 19, 2011; Authored by James Forshaw, Context Information Security Ltd; Context discovered two memory corruption issues related to Firefox code that processes WebGL, that could result in remote code execution via a malicious web page. Heap overflows make use of the WebGL shader compiler and the ANGLE library. Versions 4.0.1 and 5 are affected.; tags | advisory, remote, web, overflow, code execution; advisories | CVE-2011-2987, CVE-2011-2988; SHA-256 | e2a6dbc735d5a7f645b6a0736a8b929cdad5127974443db6a2057209e4c009f7; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days