what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files from O600KO78RUS

Windows XP/2003/Vista Metafile Escape() SetAbortProc Code Execution

Posted Nov 26, 2009

Authored by H D Moore, san, O600KO78RUS | Site metasploit.com

This Metasploit module exploits a vulnerability in the GDI library included with Windows XP and 2003. This vulnerability uses the 'Escape' metafile function to execute arbitrary code through the SetAbortProc procedure. This Metasploit module generates a random WMF record stream for each request.

tags | exploit, arbitrary

systems | windows

advisories | CVE-2005-4560

SHA-256 | 86db9cc6a7d38fd5ac3353ce911cfa4cb32c5b51f03725a5e001c941eb2b3e42

Download | Favorite | View

20051231.ie_xp_pfv_metafile.pm

Posted Jan 4, 2006

Authored by H D Moore, san, O600KO78RUS | Site metasploit.com

Microsoft Windows Metafile (WMF) SetAbortProc remote code execution exploit which takes advantage of a vulnerability in the GDI library by using the 'Escape' metafile function to execute arbitrary code through the SetAbortProc procedure. Tested against Windows XP and 2003.

tags | exploit, remote, arbitrary, code execution

systems | windows

SHA-256 | bdfd116bc6a03d8c1124c067854578e4ef5e1ef88b7c3bd05c6e6f83179f797c

Download | Favorite | View