< Back to JetLib.com

jetlib.sec » Tags » tom-sawyer-software

« Expand/Collapse

5 items tagged "tom sawyer software"

Related tags: tom sawyer [+], memory corruption [+], extension [+], vulnerability [+], idefense security advisory [+], idefense [+], factory [+], safer use [+], object initialization [+], memory [+], Software [+]

September 18, 2011
18:09
Tom Sawyer GET Extension Factory COM Object Instantiation Memory Corruption Vulnerability
» ‎ SecuriTeam

A memory corruption vulnerability in Tom Sawyer Software's GET Extension Factory could allow an attacker to execute arbitrary code with the privileges of the affected user.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: factory memory extension tom-sawyer tom-sawyer-software memory-corruption safer-use

June 06, 2011
17:45
iDEFENSE Security Advisory 2011-05-03.1
» ‎ Packet Storm Security Advisories

iDefense Security Advisory 05.03.11 - Remote exploitation of a memory corruption vulnerability in Tom Sawyer Software's GET Extension Factory could allow an attacker to execute arbitrary code with the privileges of the affected user. The vulnerability exists within the way that Internet Explorer instantiates GET Extension Factory COM objects, which is not intended to be created inside of the browser. The object does not initialize properly, and this leads to a memory corruption vulnerability that an attacker can exploit to execute arbitrary code. iDefense has confirmed Tom Sawyer's Default GET Extension Factory 5.5.2.237, tsgetxu71ex552.dll and tsgetx71ex552.dll to be vulnerable. VMWare VirtualCenter 2.5 Update 6, VirtualCenter 2.5 Update 6a is vulnerable.
Tags: idefense vulnerability extension tom-sawyer idefense-security-advisory tom-sawyer-software memory-corruption

17:45
iDEFENSE Security Advisory 2011-05-03.1
» ‎ Packet Storm Security Recent Files

iDefense Security Advisory 05.03.11 - Remote exploitation of a memory corruption vulnerability in Tom Sawyer Software's GET Extension Factory could allow an attacker to execute arbitrary code with the privileges of the affected user. The vulnerability exists within the way that Internet Explorer instantiates GET Extension Factory COM objects, which is not intended to be created inside of the browser. The object does not initialize properly, and this leads to a memory corruption vulnerability that an attacker can exploit to execute arbitrary code. iDefense has confirmed Tom Sawyer's Default GET Extension Factory 5.5.2.237, tsgetxu71ex552.dll and tsgetx71ex552.dll to be vulnerable. VMWare VirtualCenter 2.5 Update 6, VirtualCenter 2.5 Update 6a is vulnerable.
Tags: idefense vulnerability extension tom-sawyer idefense-security-advisory tom-sawyer-software memory-corruption

17:45
iDEFENSE Security Advisory 2011-05-03.1
» ‎ Packet Storm Security Misc. Files

iDefense Security Advisory 05.03.11 - Remote exploitation of a memory corruption vulnerability in Tom Sawyer Software's GET Extension Factory could allow an attacker to execute arbitrary code with the privileges of the affected user. The vulnerability exists within the way that Internet Explorer instantiates GET Extension Factory COM objects, which is not intended to be created inside of the browser. The object does not initialize properly, and this leads to a memory corruption vulnerability that an attacker can exploit to execute arbitrary code. iDefense has confirmed Tom Sawyer's Default GET Extension Factory 5.5.2.237, tsgetxu71ex552.dll and tsgetx71ex552.dll to be vulnerable. VMWare VirtualCenter 2.5 Update 6, VirtualCenter 2.5 Update 6a is vulnerable.
Tags: idefense vulnerability extension tom-sawyer idefense-security-advisory tom-sawyer-software memory-corruption

June 03, 2011
0:00
Vuln: Tom Sawyer Software GET Extension Factory Object Initialization Memory Corruption Vulnerability
» ‎ SecurityFocus Vulnerabilities

Tom Sawyer Software GET Extension Factory Object Initialization Memory Corruption Vulnerability
Tags: factory extension Software tom-sawyer tom-sawyer-software memory-corruption object-initialization