<?xml version="1.0" encoding="UTF-8"?>
<!-- generator="wordpress/2.3.3" -->
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	>

<channel>
	<title>My Anti Spyware &#187; Exploits &#038; Vulnerabilities</title>
	<link>http://www.myantispyware.com</link>
	<description>Spyware news, discussions, forums, Anti Spyware Tools, Online Scanners, HowTOs, removal instructions about spyware, adware, trojans, worms.</description>
	<pubDate>Sun, 04 May 2008 10:19:55 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.3.3</generator>
	<language>en</language>
			<item>
		<title>New way for push exploit to your PC</title>
		<link>http://www.myantispyware.com/2007/03/29/new-way-for-push-exploit-to-your-pc/</link>
		<comments>http://www.myantispyware.com/2007/03/29/new-way-for-push-exploit-to-your-pc/#comments</comments>
		<pubDate>Thu, 29 Mar 2007 11:32:20 +0000</pubDate>
		<dc:creator>Patrik</dc:creator>
		
		<category><![CDATA[Critical patch]]></category>

		<category><![CDATA[Exploits &#038; Vulnerabilities]]></category>

	<!-- AutoMeta Start -->
	<category>exploit</category>
	<category>vulnerability</category>
	<category>MS07 009</category>
	<category>msado15 dll</category>
	<category>NextRecordset</category>
	<category>ADODB Recordset</category>
	<!-- AutoMeta End -->
	
		<guid isPermaLink="false">http://www.myantispyware.com/2007/03/29/new-way-for-push-exploit-to-your-pc/</guid>
		<description><![CDATA[Full exploit code
This code exploit &#8220;double free error&#8221; in msado15.dll NextRecordset() function.
As a result of double freeing of same string, rewriting of Heap Control Block
by malicious data is occuring.
Technique of exploitation is based on &#8220;Lookaside remapping&#8221;.
was published for Microsoft Data Access Components vulnerability MS07-009. The original demonstration of this vulnerability occurred on July 29, 2006 [...]]]></description>
		<wfw:commentRss>http://www.myantispyware.com/2007/03/29/new-way-for-push-exploit-to-your-pc/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Found first security flaw hits Vista</title>
		<link>http://www.myantispyware.com/2007/03/01/found-first-security-flaw-hits-vista/</link>
		<comments>http://www.myantispyware.com/2007/03/01/found-first-security-flaw-hits-vista/#comments</comments>
		<pubDate>Thu, 01 Mar 2007 16:34:58 +0000</pubDate>
		<dc:creator>Patrik</dc:creator>
		
		<category><![CDATA[Exploits &#038; Vulnerabilities]]></category>

		<category><![CDATA[Tips]]></category>

	<!-- AutoMeta Start -->
	<category>windows</category>
	<category>vista</category>
	<category>eeye</category>
	<category>ecurity</category>
	<category>flaw</category>
	<category>User</category>
	<category>Account</category>
	<category>Control</category>
	<category>UAC</category>
	<!-- AutoMeta End -->
	
		<guid isPermaLink="false">http://www.myantispyware.com/2007/03/01/found-first-security-flaw-hits-vista/</guid>
		<description><![CDATA[The security firm eEye has discovered one of the first security flaws to directly affect Windows Vista, a bug that it claims allows local users to escalate their privileges.
The flaw involves Windows&#8217; system for managing user security levels, User Account Control (UAC), which was introduced with Vista. UAC is designed to limit the damage that [...]]]></description>
		<wfw:commentRss>http://www.myantispyware.com/2007/03/01/found-first-security-flaw-hits-vista/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Found vulnerability in the Firefox built-in popup blocker</title>
		<link>http://www.myantispyware.com/2007/02/07/found-vulnerability-in-the-firefox-built-in-popup-blocker/</link>
		<comments>http://www.myantispyware.com/2007/02/07/found-vulnerability-in-the-firefox-built-in-popup-blocker/#comments</comments>
		<pubDate>Wed, 07 Feb 2007 11:33:15 +0000</pubDate>
		<dc:creator>Patrik</dc:creator>
		
		<category><![CDATA[Exploits &#038; Vulnerabilities]]></category>

	<!-- AutoMeta Start -->
	<category>firefox</category>
	<category>popup</category>
	<category>blocker</category>
	<category>vulnerability</category>
	<category>xmlhttprequest</category>
	<!-- AutoMeta End -->
	
		<guid isPermaLink="false">http://www.myantispyware.com/2007/02/07/found-vulnerability-in-the-firefox-built-in-popup-blocker/</guid>
		<description><![CDATA[This vulnerability, coupled with an additional trick, allows the attacker to read arbitrary user-accessible files on the system, and thus steal some fairly sensitive information.
Vulnerable Systems: Firefox version 1.5.0.9
For security reasons, Firefox does not allow Internet-originating websites to access the file:// namespace. When the user chooses to manually allow a blocked popup however, normal URL [...]]]></description>
		<wfw:commentRss>http://www.myantispyware.com/2007/02/07/found-vulnerability-in-the-firefox-built-in-popup-blocker/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Found new vulnerability in the Internet Explorer / how to protect</title>
		<link>http://www.myantispyware.com/2006/10/02/found-new-vulnerability-in-the-internet-explorer-how-to-protect/</link>
		<comments>http://www.myantispyware.com/2006/10/02/found-new-vulnerability-in-the-internet-explorer-how-to-protect/#comments</comments>
		<pubDate>Mon, 02 Oct 2006 14:40:48 +0000</pubDate>
		<dc:creator>Patrik</dc:creator>
		
		<category><![CDATA[Exploits &#038; Vulnerabilities]]></category>

	<!-- AutoMeta Start -->
	<category>vulnerability</category>
	<category>Internet</category>
	<category>Explorer</category>
	<category>protect</category>
	<category>webvw dll</category>
	<category>setSlice</category>
	<!-- AutoMeta End -->
	
		<guid isPermaLink="false">http://www.myantispyware.com/2006/10/02/found-new-vulnerability-in-the-internet-explorer-how-to-protect/</guid>
		<description><![CDATA[Found new vulnerability in Microsoft Windows, which can be exploited by malicious people to compromise a user&#8217;s system.
The vulnerability is caused due to an error in the Windows Shell and is exposed via the &#8220;setSlice()&#8221; method in the WebViewFolderIcon ActiveX control (webvw.dll). This can e.g. be exploited via Internet Explorer by a malicious website to [...]]]></description>
		<wfw:commentRss>http://www.myantispyware.com/2006/10/02/found-new-vulnerability-in-the-internet-explorer-how-to-protect/feed/</wfw:commentRss>
		</item>
		<item>
		<title>How to block VML exploit</title>
		<link>http://www.myantispyware.com/2006/09/20/how-to-block-vml-exploit/</link>
		<comments>http://www.myantispyware.com/2006/09/20/how-to-block-vml-exploit/#comments</comments>
		<pubDate>Wed, 20 Sep 2006 23:16:34 +0000</pubDate>
		<dc:creator>Patrik</dc:creator>
		
		<category><![CDATA[Exploits &#038; Vulnerabilities]]></category>

		<category><![CDATA[Tips]]></category>

		<category><![CDATA[Tutorials - "How to"]]></category>

	<!-- AutoMeta Start -->
	<category>regsvr32</category>
	<category>regsvr32</category>
	<category>dialog</category>
	<category>vector</category>
	<category>library</category>
	<category>vml</category>
	<category>exploit</category>
	<!-- AutoMeta End -->
	
		<guid isPermaLink="false">http://www.myantispyware.com/2006/09/20/how-to-block-vml-exploit/</guid>
		<description><![CDATA[Some days ago has been found new Zero day exploit. The exploit uses a bug in VML in Internet Explorer to overflow a buffer and inject shellcode.   It is currently on and off again at a number of sites.
Secunia reported:
The vulnerability is caused due to a boundary error in the Microsoft Vector Graphics [...]]]></description>
		<wfw:commentRss>http://www.myantispyware.com/2006/09/20/how-to-block-vml-exploit/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Found new Internet Explorer Vulnerability</title>
		<link>http://www.myantispyware.com/2006/08/31/found-new-internet-explorer-vulnerability/</link>
		<comments>http://www.myantispyware.com/2006/08/31/found-new-internet-explorer-vulnerability/#comments</comments>
		<pubDate>Fri, 01 Sep 2006 03:11:15 +0000</pubDate>
		<dc:creator>Patrik</dc:creator>
		
		<category><![CDATA[Exploits &#038; Vulnerabilities]]></category>

	<!-- AutoMeta Start -->
	<category>Internet</category>
	<category>Explorer</category>
	<category>Vulnerability</category>
	<category>daxctle ocx</category>
	<category>Heap</category>
	<category>Overflow</category>
	<!-- AutoMeta End -->
	
		<guid isPermaLink="false">http://www.myantispyware.com/2006/08/31/found-new-internet-explorer-vulnerability/</guid>
		<description><![CDATA[Found  Internet Explorer (daxctle.ocx) Heap Overflow Vulnerability.
When Internet Explorer handle DirectAnimation.PathControl COM
object(daxctle.ocx) Spline method, Set the first parameter to 0xffffffff will triggers an
invalid memory write, That an attacker may DoS and possibly could execute arbitrary code.
Affected windows version:
Windows 2000
Windows XP
Windows 2003
Windows users..  check out Firefox, Opera, and whatever other nice browsers you can [...]]]></description>
		<wfw:commentRss>http://www.myantispyware.com/2006/08/31/found-new-internet-explorer-vulnerability/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Exploits for new microsoft vulnerabilities available</title>
		<link>http://www.myantispyware.com/2006/07/24/exploits-for-new-microsoft-vulnerabilities-available/</link>
		<comments>http://www.myantispyware.com/2006/07/24/exploits-for-new-microsoft-vulnerabilities-available/#comments</comments>
		<pubDate>Tue, 25 Jul 2006 01:01:15 +0000</pubDate>
		<dc:creator>Patrik</dc:creator>
		
		<category><![CDATA[Critical patch]]></category>

		<category><![CDATA[Exploits &#038; Vulnerabilities]]></category>

	<!-- AutoMeta Start -->
	<category>upload</category>
	<category>ms06</category>
	<category>dhcp</category>
	<category>mailslots</category>
	<category>unchecked</category>
	<category>buffer</category>
	<category>attacker</category>
	<category>millennium</category>
	<!-- AutoMeta End -->
	
		<guid isPermaLink="false">http://www.myantispyware.com/2006/07/24/exploits-for-new-microsoft-vulnerabilities-available/</guid>
		<description><![CDATA[Internet Storm Center reported about available exploit code  for MS06-034, MS06-035, and MS06-036.
If you haven&#8217;t already patched for these vulnerabilities you should take  immediate action.
MS06-034 -  unchecked IIS buffer vulnerability in ASP files processing
This patch fixes what seems to be a buffer overflow in IIS. This buffer overflow can be exploited when [...]]]></description>
		<wfw:commentRss>http://www.myantispyware.com/2006/07/24/exploits-for-new-microsoft-vulnerabilities-available/feed/</wfw:commentRss>
		</item>
		<item>
		<title>New way - Exploiting over distiance</title>
		<link>http://www.myantispyware.com/2006/07/10/new-way-exploiting-over-distiance/</link>
		<comments>http://www.myantispyware.com/2006/07/10/new-way-exploiting-over-distiance/#comments</comments>
		<pubDate>Mon, 10 Jul 2006 15:15:32 +0000</pubDate>
		<dc:creator>Patrik</dc:creator>
		
		<category><![CDATA[Exploits &#038; Vulnerabilities]]></category>

	<!-- AutoMeta Start -->
	<category>exploit</category>
	<category>wireless</category>
	<category>conference</category>
	<category>lorcon</category>
	<category>vector</category>
	<category>device</category>
	<category>distance</category>
	<category>drivers</category>
	<category>hacking</category>
	<!-- AutoMeta End -->
	
		<guid isPermaLink="false">http://www.myantispyware.com/2006/07/10/new-way-exploiting-over-distiance/</guid>
		<description><![CDATA[An ISC reader pointed out this relatively new exploit vector. At the upcoming BlackHat conference, a duo is going to demonstrate hacking WiFi device drivers to assume control of a target machine.

The two researchers used an open-source 802.11 hacking tool called LORCON (Loss of Radio Connectivity) to throw an extremely large number of wireless packets [...]]]></description>
		<wfw:commentRss>http://www.myantispyware.com/2006/07/10/new-way-exploiting-over-distiance/feed/</wfw:commentRss>
		</item>
		<item>
		<title>OpenOffice.org fixes three security vulnerabilites</title>
		<link>http://www.myantispyware.com/2006/06/30/openofficeorg-fixes-three-security-vulnerabilites/</link>
		<comments>http://www.myantispyware.com/2006/06/30/openofficeorg-fixes-three-security-vulnerabilites/#comments</comments>
		<pubDate>Fri, 30 Jun 2006 11:04:57 +0000</pubDate>
		<dc:creator>Patrik</dc:creator>
		
		<category><![CDATA[Exploits &#038; Vulnerabilities]]></category>

	<!-- AutoMeta Start -->
	<category>openoffice</category>
	<category>macros</category>
	<category>security</category>
	<category>vulnerabilites</category>
	<category></category>
	<!-- AutoMeta End -->
	
		<guid isPermaLink="false">http://www.myantispyware.com/2006/06/30/openofficeorg-fixes-three-security-vulnerabilites/</guid>
		<description><![CDATA[OpenOffice.org 2.0.3 fixes three security vulnerabilites that have been found through internal security audits. Although there are currently no known exploits, They urge all users of 2.0.x prior to 2.0.2 to upgrade to the new version or install their vendor&#8217;s patches accordingly. Patches for users of OpenOffice.org 1.1.5 will be available shortly.
The three vulnerabilities involve:

 [...]]]></description>
		<wfw:commentRss>http://www.myantispyware.com/2006/06/30/openofficeorg-fixes-three-security-vulnerabilites/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Found new vulnerability in Microsoft Excel</title>
		<link>http://www.myantispyware.com/2006/06/16/found-new-vulnerability-in-microsoft-excel/</link>
		<comments>http://www.myantispyware.com/2006/06/16/found-new-vulnerability-in-microsoft-excel/#comments</comments>
		<pubDate>Fri, 16 Jun 2006 14:49:13 +0000</pubDate>
		<dc:creator>Patrik</dc:creator>
		
		<category><![CDATA[Exploits &#038; Vulnerabilities]]></category>

	<!-- AutoMeta Start -->
	<category>vulnerability</category>
	<category>Trojan Mdropper J</category>
	<category>Downloader Booli A</category>
	<category>Microsoft</category>
	<category>Excel</category>
	<category>svc exe</category>
	<category>210 6 90 153</category>
	<category>temp exe</category>
	<category>bool ini</category>
	<!-- AutoMeta End -->
	
		<guid isPermaLink="false">http://www.myantispyware.com/2006/06/16/found-new-vulnerability-in-microsoft-excel/</guid>
		<description><![CDATA[ISC and Microsoft reported about new vulnerability in Microsoft Excel. Also found exploit using the vulnerability for install malware.
Now Symantec can to detect this attack.
Trojan.Mdropper.J is a Trojan horse that drops Downloader.Booli.A on the compromised computer. It exploits an undocumented vulnerability in Microsoft Excel.
The Symantec website also reports &#8230; Downloader.Booli.A may arrive on the compromised [...]]]></description>
		<wfw:commentRss>http://www.myantispyware.com/2006/06/16/found-new-vulnerability-in-microsoft-excel/feed/</wfw:commentRss>
		</item>
	</channel>
</rss>
