Immunity CANVAS Early Updates


Legal Information

The information provided below is only available to subscribers of Immunity's Early Updates and is subject to the terms of the Immunity CANVAS Software License Agreement located HERE. It is the customer's responsibility to maintain the confidentiality of this information, and any tools, techniques, or information provided as part of the Immunity's CANVAS Early Update Program.

This information is not for re-release to any third party, including contractors, consultants, and temporary workers.

Latest Updates

CANVAS Modules and Proof of Concepts

  • September 1, 2010 QuickTime 7.6.5 _Marshaled_pUnk Vulnerability
  • August 31, 2010 ColdFusion Directory Traversal update (OSX support)
  • August 31, 2010 OS Detection Module: NTP
  • August 30, 2010 ms10_048 update
  • August 24, 2010 ColdFusion Directory Traversal update (Linux support)
  • August 24, 2010 Windows DLL Hell Exploit
  • August 20, 2010 ColdFusion Directory Traversal Update
  • August 20, 2010 Adobe Acrobat Reader TTF Integer Overflow (MaxComponentPoints)
  • August 19, 2010 XAMPP default webdav password
  • August 19, 2010 ColdFusion directory traversal (CVE-2010-2861)
  • August 17, 2010 MS10-060
  • August 13, 2010 MS10-048 update
  • August 11, 2010 Exploit for MS10-048 (CVE-2010-1897)(Updated)
  • August 10, 2010 Exploit for MS10-048 (CVE-2010-1897)
  • August 3, 2010 Windows Shell Link Exploit For Windows 7 32 Bits

  • Last Month's CANVAS Early Updates

  • July 23, 2010 Windows Shell Link Vulnerability
  • July 23, 2010 Presentation: Aleatory Persistent Threat - Nicolas Waisman (BH USA 2010)
  • June 30, 2010 Updated FCKEditor module
  • June 28, 2010 FCKEditor Arbitrary File Upload (including ColdFusion MX 8) (CVE-2009-2265)
  • June 14, 2010 Win32k Windows Creation (ms10_032)
  • June 14, 2010 flash_newfunction (update)
  • June 11, 2010 ie_hcp


  • Copyright © 2003 - Immunity, Inc.
    All Rights Reserved.