RKD Software BarCode ActiveX Control 'BarCodeAx.dll' 4.9 - Remote Overflow

:. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: BarCodeAx.dll v. 4.9 ActiveX Control Remote Stack Buffer Overflow ================================================================= Internal ID: VULWAR200706223 Introduction ------------ BarCodeAx.dll is a library...

RKD Software BarCodeAx.dll v4.9 ActiveX Remote Stack Buffer Overflow

This module exploits a stack buffer overflow in RKD Software Barcode Application ActiveX Control 'BarCodeAx.dll'. By sending an overly long string to the BeginPrint method of BarCodeAx.dll v4.9, an attacker may be able to execute arbitrary code. Module Options msf use...

CVE-2007-3296

The ThunderServer.webThunder.1 ActiveX control in xunlei Web Thunderbolt 1.7.3.109 allows remote attackers to download arbitrary files and conduct other unauthorized actions by invoking dangerous methods...

Design/Logic Flaw

The ThunderServer.webThunder.1 ActiveX control in xunlei Web Thunderbolt 1.7.3.109 allows remote attackers to download arbitrary files and conduct other unauthorized actions by invoking dangerous methods...

CVE-2007-3296

The CVE-2007-3296 entry concerns the ThunderServer.webThunder.1 ActiveX control in xunlei Web Thunderbolt 1.7.3.109. The vulnerability arises from the control’s ability to invoke dangerous methods, enabling remote attackers to download arbitrary files and perform other unauthorized actions. This ...

CVE-2007-3296: Undefined Security Weakness

The ThunderServer.webThunder.1 ActiveX control in xunlei Web Thunderbolt 1.7.3.109 allows remote attackers to download arbitrary files and conduct other unauthorized actions by invoking dangerous methods...

Buffer overflow

Multiple buffer overflows in RealNetworks GameHouse dldisplay ActiveX control ghdlctl.dll allow remote attackers to execute arbitrary code via unknown vectors...

CVE-2007-2924: Undefined Security Weakness

Multiple buffer overflows in RealNetworks GameHouse dldisplay ActiveX control ghdlctl.dll allow remote attackers to execute arbitrary code via unknown vectors...

RealNetworks GameHouse dldisplay ActiveX control stack buffer overflows

Overview The RealNetworks GameHouse dldisplay ActiveX control contains multiple stack buffer overflows, which could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description RealNetworks GameHouse is a web site that provides games. GameHouse has an...

Command injection

The launch method in the LocalExec ActiveX control LocalExec.ocx in Novell exteNd Director 4.1 and Portal Services allows remote attackers to execute arbitrary commands...

CVE-2007-2923

The launch method in the LocalExec ActiveX control LocalExec.ocx in Novell exteNd Director 4.1 and Portal Services allows remote attackers to execute arbitrary commands...

CVE-2007-2923

The CVE-2007-2923 issue concerns the LocalExec ActiveX control (LocalExec.ocx) in Novell exteNd Director 4.1 and Portal Services. The launch() method can be abused to execute arbitrary commands on the affected host. A remote attacker could exploit this by enticing a user to visit a crafted page, ...

CVE-2007-2923

The launch method in the LocalExec ActiveX control LocalExec.ocx in Novell exteNd Director 4.1 and Portal Services allows remote attackers to execute arbitrary commands...

Microsoft Office MSODataSourceControl ActiveX Control Denial of Service (CVE-2007-3282)

ActiveX controls are reusable software components based on Microsoft Component Object Model COM. A denial of service vulnerability has been reported in Microsoft Office MSODataSourceControl ActiveX Control.A remote attacker can exploit this vulnerability via a specially crafted web page. Successf...

CVE-2007-2923: Undefined Security Weakness

The launch method in the LocalExec ActiveX control LocalExec.ocx in Novell exteNd Director 4.1 and Portal Services allows remote attackers to execute arbitrary commands...

Novell exteNd Director LocalExec ActiveX (LocalExec.ocx) launch() Method Arbitrary Command Execution

The remote host contains the LocalExec ActiveX control from Novell exteND Director, a set of development tools for creating enterprise web applications. The version of this control on the remote host reportedly contains a method named 'launch' that can be used to execute arbitrary commands. If an...

Security feature bypass

The TEC-IT TBarCode OCX ActiveX control TBarCode7.ocx 7.0.2.3524 allows remote attackers to overwrite arbitrary files via the SaveImage method...

CVE-2007-3233

The TEC-IT TBarCode OCX ActiveX control TBarCode7.ocx 7.0.2.3524 allows remote attackers to overwrite arbitrary files via the SaveImage method...

CVE-2007-3233

The TEC-IT TBarCode OCX ActiveX control TBarCode7.ocx 7.0.2.3524 allows remote attackers to overwrite arbitrary files via the SaveImage method...

Novell exteNd Director 4.1 LocalExec ActiveX control fails to restrict access to dangerous methods

Overview The Novell exteNd Director 4.1 LocalExec ActiveX control fails to restrict access to dangerous methods, which can allow a remote, unauthenticated attacker to execute arbitrary commands on a vulnerable system. Description Novell exteNd Director is a set of software development tools and...