RealNetworks RealPlayer ActiveX Illegal Resource Reference Vulnerability

RealNetworks RealPlayer ActiveX Illegal Resource Reference Vulnerability by cocoruderfrankruderathotmail.com http://ruder.cdut.net Summary: An illegal resource reference vulnerability exists in the ActiveX Control of RealNetworks RealPlayer. For exploiting the vulnerability, the attacker may buil...

RealPlayer multiple security vulnerabilities

Buffer overflow on SWF files parsing. ActiveX memory corruption. ActiveX arbitrary files deletion...

Eyeball MessengerSDK 'CoVideoWindow.ocx' ActiveX控件远程缓冲区溢出漏洞

BUGTRAQ ID: 30424 CNCAN ID：CNCAN-2008073102 Eyeball MessengerSDK提供基于SIP语音和视频的电话的SDK。 Eyeball MessengerSDK 'CoVideoWindow.ocx' ActiveX控件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 问题是'CoVideoWindow.ocx' ActiveX控件对'BgColor'方法缺少正确处理，构建超长字符串作为参数值，可触发缓冲区溢出，精心构建提交数据，可能以应用程序权限执行任意指令。 Eyeball Networks Eyeball...

NCTsoft - 'AudFile.dll' ActiveX Control Remote Buffer Overflow

----------------------------------------------------------------------------- NCTsoft AudFile.dll ActiveX Control Remote Buffer Overflow url: http://www.nctsoft.com Author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.net This was written for educational purpose. Use it at your...

nctsoft-activex.txt

----------------------------------------------------------------------------- NCTsoft AudFile.dll ActiveX Control Remote Buffer Overflow url: http://www.nctsoft.com Author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.net This was written for educational purpose. Use it at your...

NCTsoft AudFile.dll ActiveX Control Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================================== NCTsoft AudFile.dll ActiveX Control Remote Buffer Overflow Exploit ==================================================================...

CVE-2008-3364

Buffer overflow in the ObjRemoveCtrl Class ActiveX control in OfficeScanRemoveCtrl.dll 7.3.0.1020 in Trend Micro OfficeScan Corp Edition OSCE Web-Deployment 7.0, 7.3 build 1343 Patch 4 and other builds, and 8.0; Client Server Messaging Security CSM 3.5 and 3.6; and Worry-Free Business Security WF...

Buffer overflow

Buffer overflow in the ObjRemoveCtrl Class ActiveX control in OfficeScanRemoveCtrl.dll 7.3.0.1020 in Trend Micro OfficeScan Corp Edition OSCE Web-Deployment 7.0, 7.3 build 1343 Patch 4 and other builds, and 8.0; Client Server Messaging Security CSM 3.5 and 3.6; and Worry-Free Business Security WF...

CVE-2008-3364

Trend Micro OfficeScan ObjRemoveCtrl ActiveX control (ObjRemoveCtrl class) is affected by a boundary/stack overflow in OfficeScanRemoveCtrl.dll (OfficeScan Corp Edition Web-Deployment 7.x, 8.0; CSM 3.5/3.6; WFBS 5.0). The vulnerability can be triggered by passing a overly long value to the Server...

siol-overflow.txt

========================================================================= SiOL komunikator IM ActiveX stack overflow condition ========================================================================= Release date: 30.7.2008 Severity: Moderately critical Impact: Stack overflow Remote: Yes Status:...

Eyeball MessengerSDK 'CoVideoWindow.ocx' 5.0.907 - ActiveX Control Remote Buffer Overflow

source: https://www.securityfocus.com/bid/30424/info The 'CoVideoWindow.ocx' ActiveX control of Eyeball MessengerSDK is prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. An attacker can exploit this issue to execute...

Eyeball MessengerSDK CoVideoWindow.ocx 5.0.907 - ActiveX Control Remote Buffer Overflow

Eyeball MessengerSDK CoVideoWindow.ocx 5.0.907 - ActiveX Control Remote Buffer Overflow source: https://www.securityfocus.com/bid/30424/info The 'CoVideoWindow.ocx' ActiveX control of Eyeball MessengerSDK is prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate...

CVE-2008-3066

Stack-based buffer overflow in a certain ActiveX control in rjbdll.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, and RealPlayer 10.5 before build 6.0.12.1675 allows remote attackers to execute arbitrary code by importing a file into a media library and then deleting this file...

Stack overflow

Stack-based buffer overflow in a certain ActiveX control in rjbdll.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, and RealPlayer 10.5 before build 6.0.12.1675 allows remote attackers to execute arbitrary code by importing a file into a media library and then deleting this file...

CVE-2008-3066

RealPlayer RealPlayer Enterprise/RealPlayer 10 and 10.5 contain a stack-based buffer overflow in the ActiveX control in rjbdll.dll. The vulnerability is triggered when a user imports a specially crafted file into the media library and then deletes it, allowing remote code execution in the user’s ...

Trend Micro OfficeScan - ObjRemoveCtrl ActiveX Control Buffer Overflow

Trend Micro OfficeScan - ObjRemoveCtrl ActiveX Control Buffer Overflow Trend Micro OfficeScan ObjRemoveCtrl ActiveX Control Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 =...

RealPlayer rjbdll.dll ActiveX控件Import方式栈溢出漏洞

BUGTRAQ ID: 30379 CVECAN ID: CVE-2008-3066 RealPlayer是一款流行的多媒体播放器。 RealPlayer的rjbdll.dll模块没有正确地删除媒体库文件，如果用户使用ActiveX控件FDC7A535-4070-4B92-A0EA-D9994BCC0DC5将有漏洞的文件导入到用户的媒体库的话，则在删除该文件时就会触发栈溢出，导致执行任意指令。 Real Networks RealPlayer 10.5 Real Networks RealPlayer 10 Real Networks -------------...

RealPlayer for Windows < Build 6.0.14.806 / 6.0.12.1675 Multiple Vulnerabilities

According to its build number, the installed version of RealPlayer / on the remote Windows host suffers from possibly several issues : - Heap memory corruption issues in several ActiveX controls can lead to arbitrary code execution. CVE-2008-1309 - An unspecified local resource reference...

Trend Micro OfficeScan - ObjRemoveCtrl ActiveX Control Buffer Overflow

Trend Micro OfficeScan ObjRemoveCtrl ActiveX Control Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" +...

Novell iPrint Client ActiveX Control Stack Buffer Overflow (CVE-2008-2908)

Novell iPrint is an application that enables users to install and manage printers, or submit print job from a web browser. A stack buffer overflow vulnerability has been reported in Novell iPrint Client. The vulnerability is due to a boundary error in a Novell iPrint ActiveX control. To trigger...