sinn3r d3e57ffc46 Add OSVDB-93754: Synactis PDF In-The-Box ConnectToSynactic Stack Buffer Overflow ...

This module exploits a vulnerability found in Synactis' PDF In-The-Box ActiveX
component, specifically PDF_IN_1.ocx.  When a long string of data is given
to the ConnectToSynactis function, which is meant to be used for the ldCmdLine
argument of a WinExec call, a strcpy routine can end up overwriting a TRegistry
class pointer saved on the stack, and results in arbitrary code execution under the
context of the user.

2013-06-06 20:05:08 -05:00

..

antivirus

msftidy: Remove $Revision$

2013-01-04 00:48:10 +01:00

arkeia

msftidy: Remove $Revision$

2013-01-04 00:48:10 +01:00

backdoor

msftidy: Remove $Revision$

2013-01-04 00:48:10 +01:00

backupexec

msftidy: Remove $Revision$

2013-01-04 00:48:10 +01:00

brightstor

msftidy: Remove $Revision$

2013-01-04 00:48:10 +01:00

browser

Add OSVDB-93754: Synactis PDF In-The-Box ConnectToSynactic Stack Buffer Overflow

2013-06-06 20:05:08 -05:00

dcerpc

msftidy: Remove $Revision$

2013-01-04 00:48:10 +01:00

driver

msftidy: Remove $Revision$

2013-01-04 00:48:10 +01:00

email

Removing VERBOSE offenders

2013-04-15 15:29:56 -05:00

emc

msftidy: Remove $Revision$

2013-01-04 00:48:10 +01:00

fileformat

Update ms11_006_createsizeddibsection.rb

2013-05-25 13:14:41 +06:00

firewall

msftidy: Remove $Revision$

2013-01-04 00:48:10 +01:00

ftp

cleanup for freefloatftp_user

2013-04-16 20:43:38 -05:00

games

msftidy: Remove $Revision$

2013-01-04 00:48:10 +01:00

http

Add more references

2013-06-05 02:43:43 -05:00

iis

Correctly use normalize_uri()

2013-01-30 23:23:41 -06:00

imap

msftidy: Remove $Revision$

2013-01-04 00:48:10 +01:00

isapi

Merges and resolves CJR's normalize_uri fixes

2013-01-07 11:16:58 -06:00

ldap

msftidy: Remove $Revision$

2013-01-04 00:48:10 +01:00

license

msftidy: Remove $Revision$

2013-01-04 00:48:10 +01:00

local

Fixed check for Administrators SID in whoami /group output

2013-06-04 18:34:06 -04:00

lotus

msftidy: Remove $Revision$

2013-01-04 00:48:10 +01:00

lpd

msftidy: Remove $Revision$

2013-01-04 00:48:10 +01:00

misc

New module title and description fixes

2013-06-03 14:40:38 -05:00

mmsp

msftidy: Remove $Revision$

2013-01-04 00:48:10 +01:00

motorola

msftidy: Remove $Revision$

2013-01-04 00:48:10 +01:00

mssql

msftidy: Remove $Revision$

2013-01-04 00:48:10 +01:00

mysql

Fix scrutinizer checks

2013-01-31 14:48:54 -06:00

nfs

msftidy: Remove $Revision$

2013-01-04 00:48:10 +01:00

nntp

msftidy: Remove $Revision$

2013-01-04 00:48:10 +01:00

novell

msftidy: Remove $Revision$

2013-01-04 00:48:10 +01:00

oracle

msftidy: Remove $Revision$

2013-01-04 00:48:10 +01:00

pop3

msftidy: Remove $Revision$

2013-01-04 00:48:10 +01:00

postgres

Make Windows postgres_payload more generic

2012-12-22 00:30:09 -06:00

proxy

msftidy: Remove $Revision$

2013-01-04 00:48:10 +01:00

scada

fixed author details

2013-03-30 12:41:31 +01:00

sip

msftidy: Remove $Revision$

2013-01-04 00:48:10 +01:00

smb

Fix a syntax error

2013-05-31 13:31:36 -05:00

smtp

msftidy: Remove $Revision$

2013-01-04 00:48:10 +01:00

ssh

msftidy compliant

2013-01-16 12:28:09 +01:00

ssl

msftidy: Remove $Revision$

2013-01-04 00:48:10 +01:00

telnet

msftidy: Remove $Revision$

2013-01-04 00:48:10 +01:00

tftp

msftidy: Remove $Revision$

2013-01-04 00:48:10 +01:00

unicenter

msftidy: Remove $Revision$

2013-01-04 00:48:10 +01:00

vnc

msftidy: Remove $Revision$

2013-01-04 00:48:10 +01:00

vpn

msftidy: Remove $Revision$

2013-01-04 00:48:10 +01:00

winrm

Add a few more references for those without

2013-05-16 14:32:02 -05:00

wins

msftidy: Remove $Revision$

2013-01-04 00:48:10 +01:00