AOL Radio AmpX ActiveX Control ConvertFile() Buffer Overflow

require 'msf/core' class Metasploit3 'AOL Radio AmpX ActiveX Control ConvertFile Buffer Overflow', 'Description' = %q This module exploits a stack-based buffer overflow in AOL IWinAmpActiveX class AmpX.dll version 2.4.0.6 installed via AOL Radio website. By setting an overly long value to...

AIM Triton 1.0.4 CSeq Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'AIM Triton...

CentOS 4 / 5 : pidgin (CESA-2009:1536)

Updated pidgin packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on multiple...

RHEL 4 / 5 : pidgin (RHSA-2009:1536)

Updated pidgin packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on multiple...

AOL AIM sipXtapi.dll多个堆溢出漏洞

BUGTRAQ ID: 36849 AOL Instant Messenger是一款在线即时聊天工具。 AIM的SIP协议实现库（sipXtapi.dll）在解析RTCP发送方报告报文和RTP头时存在堆溢出漏洞。如果攻击者诱骗用户接受了视频聊天会话并向客户端发送了设置有畸形Extension Length值的RTP头或发送了恶意报文的话，就可以触发这些溢出，导致在客户端机器上执行任意指令。 AOL Instant Messenger 6.8 厂商补丁： AOL --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Moderate: Red Hat Security Advisory: pidgin security update

Updated pidgin packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on multiple...

AOL AIM 'sipXtapi.dll' Multiple Buffer Overflow Vulnerabilities

AOL AIM is affected by multiple buffer overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied data. Successful exploits may allow attackers to execute arbitrary code with the privileges of the user running the software or cause an application crash. C Tenab...

America Online (AOL) Detection (Windows SMB Login)

Detects the installed version of America Online AOL on Windows. The script logs in via smb, searches for America Online in the registry and gets the install location and extract version from the file. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a...

AOL SuperBuddy ActiveX Control RCE Vulnerability

AOL ActiveX is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AOL SuperBuddy ActiveX Control Remote Code Execution Vulnerability

This host is installed with AOL ActiveX and is prone to remote code execution vulnerability. OpenVAS Vulnerability Test $Id: gbaolactivexremotecodeexecvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ AOL SuperBuddy ActiveX Control Remote Code Execution Vulnerability Authors: Antu Sanadi Copyright:...

CVE-2009-3658

Use-after-free vulnerability in the Sb.SuperBuddy.1 ActiveX control sb.dll in America Online AOL 9.5.0.1 allows remote attackers to trigger memory corruption or possibly execute arbitrary code via a malformed argument to the SetSuperBuddy method...

CVE-2009-3658

The CVE-2009-3658 entry concerns AOL (America Online) 9.5.0.1, specifically the Sb.SuperBuddy.1 ActiveX control (sb.dll). A use-after-free in the SetSuperBuddy method leads to memory corruption and potential remote code execution. Public details across sources confirm RCE risk with this ActiveX c...

CVE-2009-3658

Use-after-free vulnerability in the Sb.SuperBuddy.1 ActiveX control sb.dll in America Online AOL 9.5.0.1 allows remote attackers to trigger memory corruption or possibly execute arbitrary code via a malformed argument to the SetSuperBuddy method...

AOL 9.1 SuperBuddy ActiveX Control SetSuperBuddy() remote code execution exploit

!-- AOL 9.1 SuperBuddy ActiveX Control SetSuperBuddy remote code execution exploit IE7/heap spray version by nine:situations:group::trotzkista Is possible to execute arbitrary code by setting the first argument to an overlong url and the second argument to a 16 bytes long string which overwrite...

AOL ActiveX buffer overflow

Buffer overflow in Sb.SuperBuddy.1 control...

AOL 9.1 SuperBuddy SetSuperBuddy() Code Execution

Set obj = CreateObject"Sb.SuperBuddy.1" shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949" + "%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a" + "%u5058%u4230%u4231%u6b41%u4141%u3255%u4241%u3241" + "%u4142%u4230%u5841%u3850%u4241%u6d75%u6b39%u494c" +...

AOL 9.1 SuperBuddy ActiveX Control remote code execution

No description provided by source. script language=vbscript Set obj = CreateObject"Sb.SuperBuddy.1" /script script language=javascript shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949" + "%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a" +...

AOL 9.1 SuperBuddy ActiveX Control remote code execution

Exploit for unknown platform in category remote exploits ======================================================== AOL 9.1 SuperBuddy ActiveX Control remote code execution ======================================================== Title: AOL 9.1 SuperBuddy ActiveX Control remote code execution CVE-I...

Nullsoft Winamp Ultravox Streaming Metadata Parsing Stack Buffer Overflow (CVE-2008-0065)

NullSoft Winamp is a multimedia player that is capable of playing back many audio/video formats and streaming protocols. Winamp supports the Ultravox media streaming format, a proprietary streaming media protocol developed by AOL. There exists a buffer overflow vulnerability in Nullsoft Winamp...

AOL 9.1 SuperBuddy - ActiveX Control Remote code Execution

AOL 9.1 SuperBuddy - ActiveX Control Remote code Execution Set obj = CreateObject"Sb.SuperBuddy.1" shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949" + "%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a" + "%u5058%u4230%u4231%u6b41%u4141%u3255%u4241%u3241" +...