Cisco WebEx Meeting Manager WebexUCFObject ActiveX Control stack buffer overflow

Overview The WebexUCFObject ActiveX control, which comes with Cisco WebEx Meeting Manager, contains a stack buffer overflow, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Cisco WebEx is an online meeting and collaboration software...

Vulnerability in Cisco WebEx Meeting Manager ActiveX Control

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

msmask-activex.txt

var body=''; var buf=''; for i=1;i=1945;i++buf=buf+unescape"%0C"; document.writebody+buf+body1;...

Code injection

An ActiveX control Messenger.UIAutomation.1 in Windows Messenger 4.7 and 5.1 is marked as safe-for-scripting, which allows remote attackers to control the Messenger application, and "change state," obtain contact information, and establish audio or video connections without notification via unkno...

CVE-2008-0082

An ActiveX control Messenger.UIAutomation.1 in Windows Messenger 4.7 and 5.1 is marked as safe-for-scripting, which allows remote attackers to control the Messenger application, and "change state," obtain contact information, and establish audio or video connections without notification via unkno...

webex-activex.txt

// ksOSe 08/08/2008 // tested in IE6, XP SP1 var shellcode =...

Microsoft Visual Studio Mdmask32.ocx ActiveX Stack Buffer Overflow

This module exploits a stack buffer overflow in Microsoft Visual Studio 6.0. When passing a specially crafted string to the Mask parameter of the Mdmask32.ocx ActiveX Control, an attacker may be able to execute arbitrary code. Module Options msf use...

CVE-2008-0082

CVE-2008-0082 concerns an ActiveX control (Messenger.UIAutomation.1) in Windows Messenger 4.7 and 5.1 that is marked as safe-for-scripting. This vulnerability allows a remote attacker to hijack the Messenger client, enabling actions such as changing user state, viewing or obtaining contact inform...

CVE-2008-0082

An ActiveX control Messenger.UIAutomation.1 in Windows Messenger 4.7 and 5.1 is marked as safe-for-scripting, which allows remote attackers to control the Messenger application, and "change state," obtain contact information, and establish audio or video connections without notification via unkno...

MS08-041: Vulnerability in the ActiveX Control for the Snapshot Viewer for Microsoft Access Could Allow Remote Code Execution (955617)

The remote host contains a version of the ActiveX control for the Snapshot Viewer for Microsoft Access which is vulnerable to a security flaw that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and entice a victim to visit it. C Tenable...

CVE-2008-0082: Exposure of Sensitive Information to an Unauthorized Actor

An ActiveX control Messenger.UIAutomation.1 in Windows Messenger 4.7 and 5.1 is marked as safe-for-scripting, which allows remote attackers to control the Messenger application, and "change state," obtain contact information, and establish audio or video connections without notification via unkno...

Trend Micro产品ObjRemoveCtrl类缓冲区溢出漏洞

BUGTRAQ ID:30633 CVE ID：CVE-2008-3364 CNCVE ID：CNCVE-20083364 多个Trend Micro产品处理ObjRemoveCtrl类存在安全问题，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 当通过WEB接口配置产品时OfficeScan Web控制台利用多个ActiveX控件，其中ObjRemoveCtrl类ActiveX控件存在边界错误，可触发基于堆栈的缓冲区溢出，精心构建WEB页，诱使用户访问可导致应用程序权限执行任意指令。 Trend Micro Client Server Messaging Security for...

Microsoft Security Bulletin MS08-041 – Critical Vulnerability in the ActiveX Control for the Snapshot Viewer for Microsoft Access Could Allow Remote Code Execution (955617)

Microsoft Security Bulletin MS08-041 – Critical Vulnerability in the ActiveX Control for the Snapshot Viewer for Microsoft Access Could Allow Remote Code Execution 955617 Published: August 12, 2008 Version: 1.0 General Information Executive Summary This security update resolves a privately report...

webshell upload asp file called Server ActiveX control overflow access shell-vulnerability warning-the black bar safety net

| --- Do windows System penetration testing when there is a webshell, but don't get the shell, used to elevate privileges, it is a very depressing thing. In General, the use of mdb jet engine overflow is more common, but sometimes depending on the server installed on third-party software, the use...

WebEx Meeting Manager WebexUCFObject ActiveX Control Buffer Overflow

The atucfobj module of the WebexUCFObject ActiveX control, used by WebEx Meeting Manager and installed on the remote host, reportedly contains a stack-based buffer overflow in its 'NewObject' method. If an attacker can trick a user on the affected host into viewing a specially crafted HTML...

Trend Micro OfficeScan objRemoveCtrl ActiveX buffer overflow

Added: 08/11/2008 CVE: CVE-2008-3364 BID: 30407 OSVDB: 47213 Background Trend Micro OfficeScan is a centralized virus and security scan management system. Problem A buffer overflow in the objRemoveCtrl ActiveX control, which is automatically installed when OfficeScan is installed through the serv...

CVE-2008-3558

Stack-based buffer overflow in the WebexUCFObject ActiveX control in atucfobj.dll in Cisco WebEx Meeting Manager before 20.2008.2606.4919 allows remote attackers to execute arbitrary code via a long argument to the NewObject method...

McAfee Remediation Client ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in McAfee Remediation Agent 4.5.0.41. When sending an overly long string to the DeleteSnapshot method of enginecom.dll 3.7.0.9 an attacker may be able to execute arbitrary code. This control is not marked safe for scripting, so choose your attack vecto...

RealPlayer for Windows < 6.0.14.806 / 6.0.12.1675 Multiple Vulnerabilities

Binary data 4608.prm...

NCTsoft AudFile.dll ActiveX Control Remote Buffer Overflow Exploit

No description provided by source. ----------------------------------------------------------------------------- NCTsoft AudFile.dll ActiveX Control Remote Buffer Overflow url: http://www.nctsoft.com Author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.net This was written for...