windows

windows 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

ACDSee – ‘.XPM’ File Section Buffer Overflow (Metasploit)

##

2010-09-25 Metasploit local

Microsoft HTML Help Workshop 4.74 – ‘.hhp’ Index Buffer Overflow (Metasploit) (3)

##

2010-09-25 Metasploit local

Microsoft Excel – Malformed FEATHEADER Record (MS09-067) (Metasploit)

##

2010-09-25 Metasploit local

Adobe – ‘util.printf()’ Local Buffer Overflow (Metasploit) (2)

##

2010-09-25 Metasploit local

Adobe – ‘Doc.media.newPlayer’ Use-After-Free (Metasploit) (2)

##

2010-09-25 Metasploit local

Adobe – U3D CLODProgressiveMeshDeclaration Array Overrun (Metasploit) (2)

##

2010-09-25 Metasploit local

Adobe CoolType – SING Table ‘uniqueName’ Local Stack Buffer Overflow (Metasploit) (2)

##

2010-09-25 Metasploit local

Mozilla Firefox CSS – font-face Remote Code Execution

'''

2010-09-25 Abysssec dos

VMware Workstation 7.1.1 – ‘VMkbd.sys’ Denial of Service

#!/usr/bin/python

2010-09-25 Lufeng Li dos

WebDAV – Application DLL Hijacker (Metasploit)

##

2010-09-24 Metasploit remote

SnackAmp 3.1.3B – SMP Buffer Overflow (SEH)

# Exploit Title: SnackAmp 3.1.3B Malicious SMP Buffer Overflow Vulnerability (SEH)

2010-09-24 James Fitts local

Microsoft MPEG Layer-3 Audio Decoder – Division By Zero

'''

2010-09-24 Abysssec dos

Microsoft Excel – OBJ Record Stack Overflow

'''

2010-09-24 Abysssec local

Microsoft Excel 2002 – Memory Corruption

source: https://www.securityfocus.com/bid/43419/info

2010-09-23 Abysssec dos

Microsoft Excel – HFPicture Record Parsing Memory Corruption

'''

2010-09-23 Abysssec dos

Sothink SWF Decompiler – ‘dwmapi.dll’ DLL Loading Arbitrary Code Execution

source: https://www.securityfocus.com/bid/43417/info

2010-09-22 anT!-Tr0J4n remote

Easy Office Recovery – ‘dwmapi.dll’ DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/43416/info

2010-09-22 anT!-Tr0J4n remote

GreenBrowser – ‘RSRC32.dll’ DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/43414/info

2010-09-22 anT!-Tr0J4n remote

MP3 Workstation 9.2.1.1.2 – Local Overflow (SEH) (Metasploit)

# Exploit Climatisée fermee la Porte DeRrière Twaa xDeii

2010-09-22 Madjix local

Adobe Shockwave Director tSAC – Chunk Memory Corruption

'''

2010-09-22 Abysssec dos

Sun Java – Web Start Plugin Command Line Argument Injection (Metasploit)

##

2010-09-21 Metasploit remote

Microsoft Windows – Shell LNK Code Execution (MS10-046) (Metasploit)

##

2010-09-21 Metasploit remote

Novell iPrint Client – ActiveX Control ExecuteRequest Buffer Overflow (Metasploit)

##

2010-09-21 Metasploit remote

Novell iPrint Client – ActiveX Control ExecuteRequest debug Buffer Overflow (Metasploit)

##

2010-09-21 Metasploit remote

Microsoft Windows – SMB Relay Code Execution (MS08-068) (Metasploit)

##

2010-09-21 Metasploit remote

Novell iPrint Client – ActiveX Control ‘debug’ Remote Buffer Overflow (Metasploit)

##

2010-09-21 Trancer remote

Novell iPrint Client – ActiveX Control call-back-url Buffer Overflow (Metasploit)

##

2010-09-21 Trancer remote

Softek Barcode Reader Toolkit ActiveX 7.1.4.14 – ‘SoftekATL.dll’ Remote Buffer Overflow

Softek Barcode Reader Toolkit ActiveX 7.1.4.14 (SoftekATL.dll) Buffer Overflow PoC

2010-09-21 LiquidWorm remote

Acoustica Audio Converter Pro 1.1 (build 25) – ‘.mp3 / .wav / .ogg / .wma’ Local Heap Overflow

# Exploit Title: Acoustica Audio Converter Pro 1.1 (build 25) Heap Overflow(.mp3.wav.ogg.wma) PoC

2010-09-21 Carlos Mario Penagos Hollmann local

Microsoft Excel – WOPT Record Parsing Heap Memory Corruption

'''

2010-09-21 Abysssec dos

SWiSH Max3 – DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/43332/info

2010-09-20 anT!-Tr0J4n remote

QBik WinGate WWW Proxy Server – URL Processing Overflow (Metasploit)

##

2010-09-20 Metasploit remote

Mercantec SoftCart – CGI Overflow (Metasploit)

##

2010-09-20 Metasploit remote

IBM TPM for OS Deployment 5.1.0.x – ‘rembo.exe’ Remote Buffer Overflow (Metasploit)

##

2010-09-20 Metasploit remote

MaxDB WebDBM – ‘Database’ Remote Overflow (Metasploit)

##

2010-09-20 Metasploit remote

Novell Messenger Server 2.0 – Accept-Language Overflow (Metasploit)

##

2010-09-20 Metasploit remote

Computer Associates License Server – GETCONFIG Overflow (Metasploit)

##

2010-09-20 Metasploit remote

Computer Associates License Client – GETCONFIG Overflow (Metasploit)

##

2010-09-20 Metasploit remote

3Com 3CDaemon 2.0 FTP Server – ‘Username’ Remote Overflow (Metasploit)

##

2010-09-20 Metasploit remote

Vermillion FTP Daemon – ‘PORT’ Memory Corruption (Metasploit)

##

2010-09-20 Metasploit remote

RhinoSoft Serv-U FTPd Server – MDTM Overflow (Metasploit)

##

2010-09-20 Metasploit remote

Microsoft Outlook – ‘ATTACH_BY_REF_ONLY’ File Execution (MS10-045) (Metasploit)

##

2010-09-20 Metasploit remote

Microsoft Outlook – ‘ATTACH_BY_REF_RESOLVE’ File Execution (MS10-045) (Metasploit)

##

2010-09-20 Metasploit remote

Microsoft Windows – ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (SMTP) (MS07-017) (Metasploit)

##

2010-09-20 Metasploit remote

Racer 0.5.3 Beta 5 – Remote Buffer Overflow (Metasploit)

##

2010-09-20 Metasploit remote

Unreal Tournament 2004 (Windows) – ‘secure’ Remote Overflow (Metasploit)

##

2010-09-20 Metasploit remote

Proxy-Pro Professional GateKeeper 4.7 – GET Overflow (Metasploit)

##

2010-09-20 Metasploit remote

AstonSoft DeepBurner – ‘.dbr’ Path Buffer Overflow (Metasploit)

##

2010-09-20 Metasploit local

Adobe Flash Player – ‘newfunction’ Invalid Pointer Use (Metasploit) (1)

##

2010-09-20 Metasploit local

Microsoft Windows XP/Vista/2003 – Metafile Escape() SetAbortProc Code Execution (MS06-001) (Metasploit)

##

2010-09-20 Metasploit remote