CVE-2010-0027

Related Files

Internet Explorer 7 / 8 URL Validation

Posted Feb 10, 2010

Authored by Lostmon | Site lostmon.blogspot.com

Microsoft Internet Explorer versions 7 and 8 suffer from an url validation vulnerability.

tags | exploit

advisories | CVE-2010-0027

SHA-256 | 5691209f6297d7c41dfedc1fd1bc337896dda52d19cb5fb673984e723b44156a

Download | Favorite | View

Zero Day Initiative Advisory 10-016

Posted Feb 9, 2010

Authored by Tipping Point | Site zerodayinitiative.com

Zero Day Initiative Advisory 10-016 - This vulnerability allows remote attackers to force a Microsoft Windows system to execute a given local executable. User interaction is required in that the target must access a malicious URL. The specific flaw exists within the ShellExecute API. Using a specially formatted URL an attacker can bypass sanitization checks within this function and force the calling application into running an executable of their choice. Successful exploitation requires a useful binary to exist in a predictable location on the remote system.

tags | advisory, remote, local

systems | windows

advisories | CVE-2010-0027

SHA-256 | cbead906d997ee76877af1d55e446626a519eb77a9753cd8dd8b5595996a9469

Download | Favorite | View