.:[ packet storm ]:.
                         
security in numbers
security in numbers

 ///  File Name:ZDI-10-027.txt
Description:
Zero Day Initiative Advisory 10-027 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Skype. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists with how the OS web-browser passes command line arguments to Skype through the registered 'skype:' protocol handler. Insufficient sanity checking to the /datapath argument allows an attacker to construct a link that will execute Skype with arbitrary arguments. This can be abused to specify a remote configuration storage directory which can be leveraged to glean target user credentials.
Author:TippingPoint
Homepage:http://www.zerodayinitiative.com/
File Size:3574
Last Modified:Mar 11 17:29:44 2010
MD5 Checksum:a5b3d84df1886a5f304313233a95f00f

 .:. Back
 

 ///  Last 10 Files
  1. :· MDVSA-2010-142.txt
  2. :· uplusftp-overflow.txt
  3. :· symantecams-flaw.txt
  4. :· jira-xss.txt
  5. :· secunia-autonomykvrp.txt
  6. :· secunia-autonomykvindex.txt
  7. :· zemana-escalate.txt
  8. :· ceteraecommerce-sqlxss.txt
  9. :· secunia-wkssriu.txt
  10. :· secunia-autonomywosr.txt
[ Last 20 | Last 50 | Last 100 ]

 ///  Last 10 Advisories
  1. :· MDVSA-2010-142.txt
  2. :· secunia-autonomykvrp.txt
  3. :· secunia-autonomykvindex.txt
  4. :· secunia-wkssriu.txt
  5. :· secunia-autonomywosr.txt
  6. :· secunia-autonomyrtfsigned.txt
  7. :· secunia-autonomywkssr.txt
  8. :· secunia-autonomycfp.txt
  9. :· dsa-2076-1.txt
  10. :· dsa-2075-1.txt
[ Last 20 | Last 50 | Last 100 ]

 ///  Last 10 Exploits
  1. :· uplusftp-overflow.txt
  2. :· symantecams-flaw.txt
  3. :· jira-xss.txt
  4. :· zemana-escalate.txt
  5. :· ceteraecommerce-sqlxss.txt
  6. :· apachetomcat-traversal.txt
  7. :· joomlaphotomapgallery-sql.txt
  8. :· avarcade-insecure.txt
  9. :· nubuilder-rfi.txt
  10. :· punbbpunpm-sql.txt
[ Last 20 | Last 50 | Last 100 ]

 ///  Last 10 Tools
  1. :· AdminLoginFinder.tar.gz
  2. :· fbruteforcer.py.txt
  3. :· stackbf.c
  4. :· fuzzdiff.py.txt
  5. :· dff-0.7.0-src.tar.gz
  6. :· RewriteProxy.tar.gz
  7. :· watobo_0.9.2rev149.zip
  8. :· PHPJackal.php.gz
  9. :· skipfish-1.52b.tgz
  10. :· webenum-0.1.py.gz
[ Last 20 | Last 50 | Last 100 ]

 ///  Last 10 Misc
  1. :· NocON2010-CFP.txt
  2. :· transparent-medical-devices.pdf
  3. :· my-sql.pdf
  4. :· H2HC-CFP-2010.txt
  5. :· CVP-HackersPerspective.pdf
  6. :· buffer_overflow_edisi_ketiga.txt
  7. :· simple-sqlinj.txt
  8. :· clickonce-mitm.txt
  9. :· kiwicon2010-cfp.txt
  10. :· clubhack2010-cfp.txt
[ Last 20 | Last 50 | Last 100 ]


 .:. TopPrivacy Statement | Copyright Notice