Mario Ballano Bárcena

3 exploits Active since May 2006
CVE-2006-2334 EXPLOITDB WORKING POC
Microsoft Windows 2000 and XP - File Access Restriction via RtlDosPathNameToNtPathName_U Path Handling
The RtlDosPathNameToNtPathName_U API function in NTDLL.DLL in Microsoft Windows 2000 SP4 and XP SP2 does not properly convert DOS style paths with trailing spaces into NT style paths, which allows context-dependent attackers to create files that cannot be accessed through the expected DOS path or prevent access to other similarly named files in the same directory, which prevents those files from being detected or disinfected by certain anti-virus and anti-spyware software.
CVE-2007-3681 EXPLOITDB c WORKING POC
WinPcap - Memory Corruption via IOCTL 9031 BIOCGSTATS Handler
The IOCTL 9031 (BIOCGSTATS) handler in the NPF.SYS device driver in WinPcap before 4.0.1 allows local users to overwrite memory and execute arbitrary code via malformed Interrupt Request Packet (Irp) parameters.
CVE-2008-2326 EXPLOITDB text WORKING POC
Apple Bonjour for Windows - Denial of Service via Crafted .local Domain Name
mDNSResponder in the Bonjour Namespace Provider in Apple Bonjour for Windows before 1.0.5 allows attackers to cause a denial of service (NULL pointer dereference and application crash) by resolving a crafted .local domain name that contains a long label.