jetlib.sec » Tags » ani

Feeds

133337 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

6 items tagged "ani"

Related tags: shell [+], php [+], mass mailer [+], bind [+], ani shell [+], vulnerability [+], user32 dll [+], user [+], unc path [+], module [+], buffer overflow vulnerability [+], alexander sotirov [+]

• September 22, 2011
• 8:53

  Ani-Shell 1.4 PHP Shell

   » ‎ Packet Storm Security Recent Files
  Ani-Shell is a simple PHP shell with some unique features like a mass mailer, ddoser, connect-back shell, bind shell, and various other features.

  Tags:  ani php shell ani-shell mass-mailer bind  

• 8:53

  Ani-Shell 1.4 PHP Shell

   » ‎ Packet Storm Security Tools
  Ani-Shell is a simple PHP shell with some unique features like a mass mailer, ddoser, connect-back shell, bind shell, and various other features.

  Tags:  ani php shell ani-shell mass-mailer bind  

• 8:53

  Ani-Shell 1.4 PHP Shell

   » ‎ Packet Storm Security Tools
  Ani-Shell is a simple PHP shell with some unique features like a mass mailer, ddoser, connect-back shell, bind shell, and various other features.

  Tags:  ani php shell ani-shell mass-mailer bind  

• 8:53

  Ani-Shell 1.4 PHP Shell

   » ‎ Packet Storm Security Misc. Files
  Ani-Shell is a simple PHP shell with some unique features like a mass mailer, ddoser, connect-back shell, bind shell, and various other features.

  Tags:  ani php shell ani-shell mass-mailer bind  

• April 15, 2010
• 16:00

  ms07_017_ani_loadimage_chunksize.rb.txt

   » ‎ Packet Storm Security Recent Files
  This Metasploit module exploits a buffer overflow vulnerability in the LoadAniIcon() function in USER32.dll. The flaw can be triggered through Internet Explorer 6 and 7 by using the CURSOR style sheet directive to load a malicious .ANI file. The module can also exploit Mozilla Firefox by using a UNC path in a moz-icon URL and serving the .ANI file over WebDAV. The vulnerable code in USER32.dll will catch any exceptions that occur while the invalid cursor is loaded, causing the exploit to silently fail when the wrong target has been chosen. This vulnerability was discovered by Alexander Sotirov of Determina and was rediscovered, in the wild, by McAfee.

  Tags:  user vulnerability module alexander-sotirov ani buffer-overflow-vulnerability unc-path user32-dll  

• 16:00

  ms07_017_ani_loadimage_chunksize.rb.txt

   » ‎ Packet Storm Security Exploits
  This Metasploit module exploits a buffer overflow vulnerability in the LoadAniIcon() function in USER32.dll. The flaw can be triggered through Internet Explorer 6 and 7 by using the CURSOR style sheet directive to load a malicious .ANI file. The module can also exploit Mozilla Firefox by using a UNC path in a moz-icon URL and serving the .ANI file over WebDAV. The vulnerable code in USER32.dll will catch any exceptions that occur while the invalid cursor is loaded, causing the exploit to silently fail when the wrong target has been chosen. This vulnerability was discovered by Alexander Sotirov of Determina and was rediscovered, in the wild, by McAfee.

  Tags:  user vulnerability module alexander-sotirov ani buffer-overflow-vulnerability unc-path user32-dll