GlobalLink 2.6.1.2 - HanGamePlugincn18.dll ActiveX Control Multiple Buffer Overflow Vulnerabilities

GlobalLink 2.6.1.2 - HanGamePlugincn18.dll ActiveX Control Multiple Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/27626/info GlobalLink is prone to multiple buffer-overflow vulnerabilities because it fails to properly bounds-check user-supplied data before copying it...

GlobalLink 2.6.1.2 - 'HanGamePlugincn18.dll' ActiveX Control Multiple Buffer Overflow Vulnerabilities

source: https://www.securityfocus.com/bid/27626/info GlobalLink is prone to multiple buffer-overflow vulnerabilities because it fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory buffer. An attacker can exploit these issues to execute arbitrary...

Facebook Photo Uploader ActiveX Control < 4.5.57.1 Multiple Buffer Overflows

The remote host contains a version of the Facebook Photo Uploader ActiveX control that reportedly is affected by multiple buffer overflows involving, for example, long arguments to the control's 'ExtractExif', 'ExtractIptc', and 'FileMask' properties. If a remote attacker can trick a user on the...

CVE-2007-6699

Multiple buffer overflows in the AIM PicEditor 9.5.1.8 ActiveX control in YGPPicEdit.dll in AOL You've Got Pictures YGP Picture Editor allow remote attackers to cause a denial of service browser crash via a long string in the 1 DisplayName, 2 FinalSavePath, 3 ForceSaveTo, 4 HiddenControls, 5...

Buffer overflow

Multiple buffer overflows in the AIM PicEditor 9.5.1.8 ActiveX control in YGPPicEdit.dll in AOL You've Got Pictures YGP Picture Editor allow remote attackers to cause a denial of service browser crash via a long string in the 1 DisplayName, 2 FinalSavePath, 3 ForceSaveTo, 4 HiddenControls, 5...

CVE-2007-6699

CVE-2007-6699 concerns multiple buffer overflows in the AIM PicEditor 9.5.1.8 ActiveX control (YGPPicEdit.dll) used by AOL You've Got Pictures (YGP) Picture Editor. The vulnerability arises from handling long string values in specific properties (DisplayName, FinalSavePath, ForceSaveTo, HiddenCon...

CVE-2007-6699

Multiple buffer overflows in the AIM PicEditor 9.5.1.8 ActiveX control in YGPPicEdit.dll in AOL You've Got Pictures YGP Picture Editor allow remote attackers to cause a denial of service browser crash via a long string in the 1 DisplayName, 2 FinalSavePath, 3 ForceSaveTo, 4 HiddenControls, 5...

yahoomusic-overflow2.txt

Yahoo! JukeBox MediaGrid ActiveX Control mediagrid.dll AddBitmap Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" +...

CVE-2007-6699: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in the AIM PicEditor 9.5.1.8 ActiveX control in YGPPicEdit.dll in AOL You've Got Pictures YGP Picture Editor allow remote attackers to cause a denial of service browser crash via a long string in the 1 DisplayName, 2 FinalSavePath, 3 ForceSaveTo, 4 HiddenControls, 5...

Aurigma ImageUploader ActiveX control stack buffer overflows

Overview The Aurigma ImageUploader ActiveX control contains multiple stack buffer overflow vulnerabilities, which may allow a remote attacker to execute arbitrary code on a vulnerable system. Description Aurigma ImageUploader is an ActiveX control that provides the ability to upload pictures usin...

Yahoo! Toolbar URL Shortcut ActiveX Control Buffer Overflow (CVE-2007-6535)

Yahoo! Toolbar is a pop-up blocker for Firefox and Internet Explorer that allows instant access to several Yahoo! features. A buffer overflow vulnerability was reported in Yahoo! Toolbar. This vulnerability is due to boundary errors in the Yahoo! Toolbar YShortcut ActiveX Control. To trigger this...

Microsoft Rich Textbox Control Arbitrary File Overwrite (CVE-2008-0237)

Microsoft Rich Textbox is an ActiveX control that comes with Visual Basic. It allows programs to create formatted text in Rich Text Format. Microsoft Rich Textbox control ActiveX control Richtx32.ocx is used for displaying, entering, and manipulating text with formatting. It can also display font...

Yahoo! JukeBox MediaGrid ActiveX mediagrid.dll AddBitmap() BOF Exploit

Exploit for unknown platform in category remote exploits ====================================================================== Yahoo! JukeBox MediaGrid ActiveX mediagrid.dll AddBitmap BOF Exploit ====================================================================== Yahoo! JukeBox MediaGrid...

Yahoo! JukeBox MediaGrid - 'AddBitmap()' ActiveX Buffer Overflow

Yahoo! JukeBox MediaGrid ActiveX Control mediagrid.dll AddBitmap Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" +...

Information disclosure

The NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1 and earlier in Namo Web Editor in Sejoong Namo ActiveSquare 6 allows remote attackers to execute arbitrary code via a URL in the argument to the Install method. NOTE: some of these details are obtained from third party...

CVE-2008-0551

The NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1 and earlier in Namo Web Editor in Sejoong Namo ActiveSquare 6 allows remote attackers to execute arbitrary code via a URL in the argument to the Install method. NOTE: some of these details are obtained from third party...

CVE-2008-0551

The NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1 and earlier in Namo Web Editor in Sejoong Namo ActiveSquare 6 allows remote attackers to execute arbitrary code via a URL in the argument to the Install method. NOTE: some of these details are obtained from third party...

CVE-2008-0551

CVE-2008-0551 documents a vulnerability in the NamoInstaller.NamoInstall.1 ActiveX control (NamoInstaller.dll, version 3.0.0.1 and earlier) used with Sejoong Namo ActiveSquare 6. The flaw allows remote attackers to trigger arbitrary code execution by passing a URL argument to the Install method. ...

Aurigma Image Uploader ActiveX Control < 4.5.70 Multiple Buffer Overflows

The remote host contains a version of the Aurigma Image Uploader ActiveX control that is reportedly affected by multiple stack buffer overflows. If a remote attacker can trick a user on the affected host into visiting a specially crafted web page, this issue could be leveraged to execute arbitrar...

Facebook Photo Uploader 4 ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in Facebook Photo Uploader 4. By sending an overly long string to the "ExtractIptc" property located in the ImageUploader4.ocx 4.5.57.0 Control, an attacker may be able to execute arbitrary code. Module Options msf use...