exploits , vulnerabilities , articles , MS Windows XP/Vista Animated Cursor (.ANI) Remote Overflow Exploit

2007-06-13 Safari 3 for Windows Beta Remote Command Execution PoC
2007-06-08 Microsoft Windows Animated Cursor Stack Overflow Exploit
2007-04-17 MS Windows GDI Local Privilege Escalation Exploit (MS07-017) 2
2007-04-16 MS Windows DNS RPC Remote Buffer Overflow Exploit (port 445)
2007-04-16 MS Windows DNS DnssrvQuery Remote Stack Overflow Exploit
2007-04-15 XAMPP for Windows <= 1.6.0a mssql_connect() Remote BoF Exploit

2007-04-02

MS Windows XP/Vista Animated Cursor (.ANI) Remote Overflow Exploit

Rated as : Critical

..::[ jamikazu presents ]::..

Windows Animated Cursor Handling Exploit (0day)

Works on fully patched Windows Vista
I think it is first real remote code execution exploit on vista =)

Tested on:
Windows Vista Enterprise Version 6.0 (Build 6000) (default installation
and UAC enabled)
Windows Vista Ultimate Version 6.0 (Build 6000) (default installation and
UAC enabled)
Windows XP SP2 
(It also must to work on all nt based windows but not tested)

Author: jamikazu 
Mail: jamikazu@gmail.com

Bug discovered by determina (http://www.determina.com)

Credit: milw0rm,metasploit, SkyLined, http://doctus.net/

invokes calc.exe if successful 


http://www.milw0rm.com/sploits/04012007-Animated_Cursor_Exploit.zip

securitydot.net - 2007-04-02

Exploits - newest 10 RSS | More

2007-06-15 57100 Hits XOOPS Module Cjay Content 3 Remote File Inclusion Vulnerability
2007-06-15 34089 Hits XOOPS Module XT-Conteudo (spaw_root) RFI Vulnerability
2007-06-15 42244 Hits XOOPS Module XFsection (modify.php) Remote File Inclusion Vulnerability
2007-06-15 29256 Hits Microsoft Office MSODataSourceControl COM-object BoF PoC (0day)
2007-06-13 19688 Hits Microsoft Speech API ActiveX control Remote BoF Exploit (xp sp2)
2007-06-13 16639 Hits Microsoft Speech API ActiveX control Remote BoF Exploit (win2k sp4)
2007-06-13 19342 Hits Safari 3 for Windows Beta Remote Command Execution PoC
2007-06-13 16520 Hits Ace-FTP Client 1.24a Remote Buffer Overflow PoC
2007-06-09 33520 Hits MoviePlay 4.76 .lst File Local Buffer Overflow Exploit
2007-06-09 17165 Hits e-Vision CMS <= 2.02 SQL Injection/Remote Code Execution Exploit