Hummingbird Deployment Wizard 10 'DeployRun.dll' ActiveX Control Multiple Security Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/31799/info Hummingbird Deployment Wizard 10 ActiveX control is prone to multiple vulnerabilities that attackers can exploit to run arbitrary code. The issues stem from insecure methods used within 'DeployRun.dll'. An...

EDraw Flowchart ActiveX Control 2.3 (EDImage.ocx) Remote DoS Exploit (IE)

No description provided by source. EDraw Flowchart ActiveX Control 2.3 EDImage.ocx Remote DoS Exploit IE Vendor: EdrawSoft - http://www.edrawsoft.com Platform Used: MS Win XP Pro SP3 en / IE 8.0 CompanyName EDrawSoft FileDescription EDraw Flowchart ActiveX Control Module FileVersion 2, 3, 0, 6...

Microsoft Log Sink Class ActiveX Control Arbitrary File Creation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12646/info Microsoft Log Sink Class ActiveX control can allow remote attackers to create arbitrary files on an affected computer. A remote attacker can exploit this issue by crafting a malicious Web site that triggers thi...

FathFTP 1.8 (RasIsConnected Method) ActiveX Buffer Overflow (SEH)

No description provided by source. html object classid='clsid:62A989CE-D39A-11D5-86F0-B9C370762176' id='target'/object script language='vbscript' ' Exploit Title: FathFTP 1.8 SEH ActiveX Buffer Overflow ' Author: MadjiX ' Software Link: http://www.fathsoft.com/fathftp.html ' Version 1.7 :...

Oracle ORADC ActiveX Control Remote Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22026/info Oracle ORADC ActiveX control is prone to a remote code-execution vulnerability. Exploiting this issue allows remote attackers to execute arbitrary machine code in the context of applications using the affected...

WMITools ActiveX Remote Command Execution Exploit 0day

No description provided by source. Exploit-DB Notes: Original credit goes to ???? via WooYun: http://www.wooyun.org/bugs/wooyun-2010-01006 html object classid=clsid:2745E5F5-D234-11D0-847A-00C04FD7BB08 id=target/object SCRIPT language=JavaScript //run calc.exe var shellcode =...

MagnetoSoft DNS 4.0.0.9 - ActiveX DNSLookupHostWithServer PoC

No description provided by source. html object classid='clsid:B5ED1577-4576-11D5-851F-00D0B7A934F6' id='target' //object script language='vbscript' 'Magneto Software ActiveX Control ICMP Crash POC 'Discovered by: s4squatch 'Site: www.securestate.com 'Date Discovered: 02/11/10 'Vendor Notified:...

AoA Audio Extractor 2.x - ActiveX ROP exploit

No description provided by source. html p centerAoA Audio Extractor v2.x ActiveX ROP exploitbr / Hadji Samir - s-dz|AT|hotmail.fr & mrme - mrme|AT|net-ninja.netbr //center /p !-- some notes about the exploit: - Tested working on a fully patched windows XP sp3 IE8 VM Last update was done on...

iDefense COMRaider ActiveX Control Multiple Insecure Method Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/35725/info The iDefense COMRaider ActiveX control is prone to multiple insecure-method vulnerabilities. Successfully exploiting these issues allows remote attackers to create arbitrary directories and copy arbitrary local...

RealPlayer ierpplug.dll ActiveX Control Playlist Name Buffer Overflow

No description provided by source. $Id: realplayerimport.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

GameHouse dldisplay ActiveX control 0,Real Server 7.0 Port 7070 DoS

No description provided by source. source: http://www.securityfocus.com/bid/1128/info Sending malformed packets to port 7070 will cause Real Server to stop responding. Restarting the server will be required in order to re-establish normal functionality. http://www.exploit-db.com/sploits/19856-1.e...

WinDVD7 IASystemInfo.DLL ActiveX Control Buffer Overflow

No description provided by source. $Id: windvd7applicationtype.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

MS12-004 midiOutPlayNextPolyEvent Heap Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

AoA Audio Extractor Basic 2.3.7 - ActiveX Exploit

No description provided by source. !-- Exploit Title: AoA Audio Extractor Basic ActiveX Date: 19.05.2014 Author: metacom Website: www.rstforums.com Software Link: www.aoamedia.com/audioextractor.exe Version: 2.3.7 Tested on: Windows xp sp3EN IE 6.0 -- html object...

Novell iPrint Client ActiveX Control call-back-url Buffer Overflow

No description provided by source. $Id: novelliprintcallbackurl.rb 10429 2010-09-21 18:46:29Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

Microsoft Works 7 WkImgSrv.dll WKsPictureInterface() ActiveX Exploit

No description provided by source. $Id: msworkswkspictureinterface.rb 10477 2010-09-25 11:59:02Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

Dell IT Assistant detectIESettingsForITA.ocx ActiveX Control

No description provided by source. !-- Dell IT Assistant detectIESettingsForITA.ocx ActiveX Control readRegVal Remote Registry Dump Vulnerability download uri: ftp://ftp.us.dell.com/sysman/OM-ITAssistant-Dell-Web-WIN-6.5.0-2247A01.21.exe ActiveX settings: CLSID: 6286EF1A-B56E-48EF-90C3-743410657F...

Oracle Document Capture 10g ActiveX Control Buffer Overflow

No description provided by source. $Id: oracledcsubmittoexpress.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

Data Dynamics ActiveBar ActiveX (actbar3.ocx <= 3.1) Insecure Methods

No description provided by source. pre codespan style=font: 10pt Courier New;span class=general1-symbol--------------------------------------------------------------------------------------- bData Dynamics ActiveBar ActiveX Control actbar3.ocx = 3.1 Multiple Inscure Methods/b url:...

Oracle Document Capture empop3.dll Insecure Methods

No description provided by source. Source: http://packetstormsecurity.org/files/view/97868/DSECRG-11-005.txt ActiveX components contain insecure methods. Digital Security Research Group DSecRG Advisory DSECRG-11-005 internal DSECRG-00154 Application: Oracle Document Capture Versions Affected:...