CVE-2004-2694
published 2004-12-31CVE-2004-2694: Microsoft Outlook Express 6.0 allows remote attackers to bypass intended access restrictions, load content from arbitrary sources into the Outlook context, and…
PriorityP427medium5.8CVSS 2.0
AVNACMAuNCPIPAN
EPSS
8.56%
94.5th percentile
Microsoft Outlook Express 6.0 allows remote attackers to bypass intended access restrictions, load content from arbitrary sources into the Outlook context, and facilitate phishing attacks via a "BASE HREF" with the target set to "_top".
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | outlook_express | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
WinAce 2.6.0.5 - Temporary File Parsing Buffer Overflow
exploitdb·2005-08-19
CVE-2005-2694 WinAce 2.6.0.5 - Temporary File Parsing Buffer Overflow
WinAce 2.6.0.5 - Temporary File Parsing Buffer Overflow
---
/*
Application: WinAce
http://www.winace.com/
Versions: 2.6.0.5
Platforms: Windows
Bug: buffer-overflow
Exploitation: local
Date: Jul 22 2004
Author: ATmaCA
e-mail: [email protected]
web: http://www.atmacasoft.com
Credit: Kozan
I. BACKGROUND
WinAce is an archiving utility with an easy-to-use interface for creating,
extracting, and viewing archives. It includes built-in compression for
ACE, ZIP, LHA, and MS CAB formats, and built-in decompression for
ACE, ZIP, LHA, MS CAB, RAR, ARJ, ARC, GZIP, TAR, and ZOO formats.
You can create multivolume (disk-spanning) archives for ACE and MS CAB formats
and self-extracting archives (SFX) for ACE and ZIP formats.
More information about WinAce is available from:
http://www.winace.com/wina
Exploit-DB
Linux Kernel 2.4.23/2.6.0 - 'do_mremap()' Bound Checking Validator (2)
exploitdb·2004-01-07
CVE-2003-0985 Linux Kernel 2.4.23/2.6.0 - 'do_mremap()' Bound Checking Validator (2)
Linux Kernel 2.4.23/2.6.0 - 'do_mremap()' Bound Checking Validator (2)
---
/*
* EDB Note: This will just "test" the vulnerability.
* EDB Note: An exploit version can be found here ~ https://www.exploit-db.com/exploits/145/
*/
/*
* Proof of concept code for testing do_mremap() Linux kernel bug.
* It is based on the code by Christophe Devine and Julien Tinnes
* posted on Bugtraq mailing list on 5 Jan 2004 but it's safer since
* it avoids any kernel data corruption.
*
* The following test was done against the Linux kernel 2.6.0. Similar
* results were obtained against the kernel 2.4.23 and previous ones.
*
* buffer@mintaka:~$ gcc -o mremap_bug mremap_bug.c
* buffer@mintaka:~$ ./mremap_bug
*
* Base address : 0x60000000
*
* 08048000-08049000 r-xp 00000000 03:03 2694 /home/buffer/mremap_bug
*
No writeups or analysis indexed.
2004-12-31
Published