Core Impact Threat Intelligence Exploits, Security and Penetration Testing Updates
When you buy Core Impact, we provide real-time updates including new penetration testing exploits and tests for additional platforms as they become available. We advise you of any new modules by email, after which you can download them directly from within Core Impact. All product updates are free during the license period. You're always on the cutting edge of vulnerability and threat intelligence because Core Impact keeps you there.
Use the controls below to navigate Core Impact exploits and other modules.
|Novell iPrint Client ActiveX Buffer Overflow Exploit||
This module exploits a stack-based buffer overflow in the ienipp.ocx ActiveX Control included in Novell iPrint 4.34.
|OpenOffice OLE DocumentSummaryInformation Heap Overflow Exploit||
A security vulnerability with the way OpenOffice.org processes OLE files may allow a remote unprivileged user who provides an OpenOffice.org document that is opened by a local user to execute arbitrary commands on the system with the privileges of the user running OpenOffice.org. This can be exploited to cause a heap-based buffer overflow when a specially crafted file is opened.
|Samba nttrans Exploit Update||
This update improves reliability on Solaris.
|Microsoft WINS Exploit (MS08-034)||
A memory corruption vulnerability in the ChkNtfSock function of wins.exe allows remote code execution.
|GhostScript ICC Exploit||
This module exploits a buffer overflow vulnerability in the Ghostscript software included in most Linux distributions. The vulnerability is caused by a buffer overflow in the ICC parser at the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier. The exploit is triggered when an unsuspecting user opens a specially crafted file distributed via an email.
|CitectSCADA Buffer Overflow Exploit||
Remote exploitation of a buffer overflow vulnerability in CitectSCADA allows for the remote execution of arbitrary code by attackers.
|Creative Software AutoUpdate ActiveX Exploit||
This module exploits a vulnerability in the CTSUEng.ocx control included in the Creative Software AutoUpdate application. The exploit is triggered when the CacheFolder property processes a long string argument resulting in a stack-based buffer overflow. This module runs a malicious web site on the CORE IMPACT Console and waits for an unsuspecting user to trigger the exploit by connecting to the web site.
|Borland InterBase Remote Integer Overflow Exploit||
This module exploits a buffer overflow vulnerability in the database service (ibserver.exe) of the Borland InterBase 2007 application. The exploit triggers an integer overflow and causes a stack-based buffer overflow by sending a specially crafted packet to port 3050/TCP of the vulnerable system and installs an agent if successful.
|ASUS Remote Console Buffer Overflow Exploit||
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of software utilizing ASUS Remote Console.
|MDaemon IMAP Fetch Exploit Update||
This module exploits a stack-based buffer overflow in the MDaemon Email Server 9.64.
|Apache Tomcat buffer overflow exploit update||
This module exploits a buffer overflow vulnerability in the Apache Tomcat JK Web Server Connector and installs an agent. An attacker can use an overly long URL to trigger a buffer overflow in the URL work map routine (map_uri_to_worker()) in the mod_jk.so library, resulting in the compromise of the target system.
This package improves the reliability of the exploit.
|Adobe Flash Player SWF Buffer Overflow Exploit||
This module exploits a vulnerability in Adobe Flash Player triggered when processing a specially crafted SWF file.
|MDaemon IMAP Fetch Exploit||
This module exploits a stack-based buffer overflow in the MDaemon Email Server 9.64.
|CA BrightStor ARCserve Backup ListCtrl Buffer Overflow Exploit||
This module exploits a vulnerability in the ListCtrl ActiveX Control (ListCtrl.ocx) used CA BrighStor ARCserve Backup. The exploit is triggered when a long string argument is processed by the AddColumn() method resulting in a stack-based buffer overflow. This module runs a malicious web site on the CORE IMPACT Console and waits for an unsuspecting user to trigger the exploit by connecting to the web site.
|MSRPC Trend Micro Server Protect buffer overflow exploit Update 2||
This update improves the reliability of the exploit.
|Debian OpenSSL Predictable Random Number Generation Exploit||
This module exploits the random number generator in Debian's OpenSSL package being predictable. This vulnerability is used to generate SSH keys and to install an agent into the target host.
|VideoLAN VLC Buffer Overflow Subtitle Exploit Update 3||
VLC is able to handle the subtitles automatically in a very simple way,it just checks the presence of SSA files with the same name of the loaded video and a possible subtitles folder. The functions which handle the MicroDVD, SSA and VPlayer subtitle formats are vulnerable to some stack based buffer-overflow vulnerabilities which can allow an attacker to execute malicious code. This exploit add support for VLC 0.86e version.
|Microsoft NtUserMessageCall Kernel Privilege Escalation Exploit (MS08-025)||
An elevation of privilege vulnerability exists due to the Windows kernel improperly validating input passed from user mode to the kernel. The vulnerability could allow an attacker to run code with elevated privileges.
|TFTPServer SP Buffer Overflow Exploit||
This module exploits a buffer overflow vulnerability in the handling of Error Packet for overwrite all the .bss section and some portion of the .idata section.
|Microsoft JET MDB Exploit (MS08-028)||
This module exploits a vulnerability in Microsoft Jet Database (msjet40.dll) trough a Microsoft Access Document. The vulnerability is caused due to boundary error in msjet40.dll within the processing of mdb files. This can be exploited to cause a stack-based buffer overflow when a specially crafted file is opened.
|DivX Player SRT Exploit||
DivX Player (as installed by the DivX Bundle) is reported to have boundary errors in PlaybackModule2.dll within the processing of SRT subtitles. This can be exploited to cause a stack-based buffer overflow when the victim opens a specially crafted file with an overly long subtitle line.
|Cisco Secure ACS UCP CSuserCGI.exe Remote Buffer Overflow Exploit||
The vulnerability is caused due to a boundary error within Cisco Secure ACS UCP when processing users info with CSuserCGI.exe vulnerable module.
|WonderWare SuiteLink slssvc.exe DoS||
WonderWare is supplier of industrial automation and information software solutions. According to the company's website:
The vulnerability found in Wonderware SuiteLink Service (slssvc.exe) could allow an un-authenticated remote attacker with the ability to connect to the SuiteLink service TCP port to shutdown the service abnormally by sending a malformed packet.
|CVE-2008-2005||Denial of Service/Remote||Windows|
|Orbit Downloader Download Failed Exploit||
Orbit Downloader is vulnerable to a buffer overflow attack, which can be exploited by malicious remote attackers to execute arbitrary code. The vulnerability is due to Orbit not properly converting an URL ASCII string to UNICODE. This can be exploited to execute arbitrary code by downloading a file from a specially crafted URL.
|Microsoft IIS MS08-006 Exploit update||
This module exploits a stack buffer overflow vulnerability in Microsoft Internet Information Server 5.1 through 6.0.
This update adds support for 2003 Enterprise Sp1 and bypasses DEP in already supported platforms.
|CVS pserver Directory Command Double free() Exploit Update||
By sending a malformed 'Directory' request it is possible to create a condition where free() is called on memory that is still in use. This can result in an exploitable condition when free() is called on the memory chunk a second time.
The agent installed by this exploit runs with administrative privileges.
This update improve the exploit reliability.
|RealPlayer rmoc3260.dll ActiveX Buffer Overflow Exploit||
This module exploits a heap-based buffer overflow in the rmoc3260.dll ActiveX Control included in Real Player 11.
|Arkeia Network Backup buffer overflow exploit update||
This package updates the Arkeia Network Backup exploit.
|WireShark LDAP Dissector DoS||
This module exploits a vulnerability in the WireShark LDAP dissector, sending a specially crafted LDAP packet, causing WireShark to crash.
|CVE-2008-1562||Denial of Service/Remote||Windows|