92 matches found
inotes6w2-overwrite.txt
This one is the same offset as dwa7w and the same class id as inotes6. Basically inotes6 and inotes6w share the same class id, except that inotes6w is unicode. dwa7w is unicode and has a different class id. Code is inline, I would attach it except for the fact that I set off way to many av scanne...
Lotus Domino Web Access ActiveX control dwa7w.dll buffer overflow
Added: 12/31/2007 CVE: CVE-2007-4474 BID: 26972 OSVDB: 40954 Background Lotus Domino Web Access provides capabilities similar to those of the Lotus Notes client, delivered through a web browser. Problem A buffer overflow vulnerability in the Lotus Domino Web Access ActiveX control in the dwa7w.dl...
IBM Domino Web Access Upload Module inotes6.dll BoF Exploit
Exploit for unknown platform in category remote exploits =========================================================== IBM Domino Web Access Upload Module inotes6.dll BoF Exploit =========================================================== IBM Domino Web Access Upload Module inotes6.dll SEH Overwrit...
IBM Domino Web Access Upload Module dwa7w.dll BoF Exploit
Exploit for unknown platform in category remote exploits ========================================================= IBM Domino Web Access Upload Module dwa7w.dll BoF Exploit ========================================================= IBM Domino Web Access Upload Module dwa7w.dll SEH Overwrite Exploi...
IBM Domino Web Access Upload Module - dwa7w.dll Remote Buffer Overflow
IBM Domino Web Access Upload Module - dwa7w.dll Remote Buffer Overflow IBM Domino Web Access Upload Module dwa7w.dll SEH Overwrite Exploit function Check var buf = unescape"%u4141"; while buf.length = 2461 buf = buf + unescape"%u4141"; // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe...
IBM Domino Web Access 7.0 Upload Module - inotes6.dll Remote Buffer Overflow
IBM Domino Web Access 7.0 Upload Module - inotes6.dll Remote Buffer Overflow IBM Domino Web Access Upload Module inotes6.dll SEH Overwrite Exploit function Check var buf = 'A'; while buf.length = 3119 buf = buf + 'A'; // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378...
IBM Domino Web Access 7.0 Upload Module - 'inotes6.dll' Remote Buffer Overflow
IBM Domino Web Access Upload Module inotes6.dll SEH Overwrite Exploit function Check var buf = 'A'; while buf.length = 3119 buf = buf + 'A'; // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 =...
IBM Domino Web Access Upload Module - 'dwa7w.dll' Remote Buffer Overflow
IBM Domino Web Access Upload Module dwa7w.dll SEH Overwrite Exploit function Check var buf = unescape"%u4141"; while buf.length = 2461 buf = buf + unescape"%u4141"; // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 =...
DSquare Exploit Pack: D2SEC_INOTES2
Name| d2secinotes2 ---|--- CVE| CVE-2007-4474 Exploit Pack| D2ExploitPack Description| IBM Lotus Domino Web Access ActiveX Stack Overflow Vulnerability Notes|...
CVE-2007-4474
CVE-2007-4474 involves multiple stack-based buffer overflows in IBM Lotus Domino Web Access ActiveX controls (inotes6.dll, inotes6w.dll, dwa7.dll, dwa7w.dll) used by Domino 6.x/7.x. The root cause is a boundary/overflow vulnerability when handling a long General_ServerName property value in the U...
CVE-2005-4474
The CVE-2005-4474 entry concerns WinRAR 3.51 with a buffer overflow in the “Add to archive” command. The described issue arises when a user is tricked into adding a file whose filename contains non-default code page and non-ANSI characters (e.g., Chinese filenames). The root cause is described as...
