RealPlayer file deletion overflow vulnerability

Overview RealPlayer contains a buffer overflow vulnerability that may allow an attacker to execute code on a vulnerable system. Description RealPlayer media player that is distributed by RealNetworks. RealPlayer supports streaming and local media. Per the Zero Day Initiative advisory ZDI-08-046:...

http://www.zerodayinitiative.com/advisories/ZDI-08-046

ZDI-08-046: RealNetworks RealPlayer Library File Deletion Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-046 July 25, 2008 -- CVE ID: ZDI-CAN-231 -- Affected Vendors: RealNetworks -- Affected Products: RealNetworks RealPlayer -- TippingPointTM IPS Customer...

ZDI-08-047: RealNetworks RealPlayer rmoc3260 ActiveX Control Memory Corruption Vulnerability

ZDI-08-047: RealNetworks RealPlayer rmoc3260 ActiveX Control Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-047 July 25, 2008 -- CVE ID: CVE-2008-1309 -- Affected Vendors: RealNetworks -- Affected Products: RealNetworks RealPlayer -- TippingPointTM IPS Customer...

RealNetworks RealPlayer rmoc3260 ActiveX Control Memory Corruption Vulnerability

This vulnerability allows remote attackers to execute code on vulnerable installations of RealPlayer. User interaction is required in that a user must visit a malicious web site. The specific flaw exists in the rmoc3260 ActiveX control exposed through the following CLSIDs:...

RealNetworks RealPlayer Library File Deletion Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of the RealNetworks RealPlayer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

Microsoft Access (Snapview.ocx 10.0.5529.0) ActiveX Remote Exploit

Exploit for unknown platform in category remote exploits ================================================================== Microsoft Access Snapview.ocx 10.0.5529.0 ActiveX Remote Exploit ================================================================== / Microsoft Access Snapshot Viewer Active...

Microsoft Access - 'Snapview.ocx 10.0.5529.0' ActiveX Remote File Download

/ Microsoft Access Snapshot Viewer ActiveX Control Exploit Ms-Access SnapShot Exploit Snapview.ocx v 10.0.5529.0 Download nice binaries into an arbitrary box Vulnerability discovered by Oliver Lavery https://www.securityfocus.com/bid/8536/info Remote: Yes greetz to str0ke / include include define...

Microsoft Access (Snapview.ocx 10.0.5529.0) ActiveX Remote Exploit

No description provided by source. / Microsoft Access Snapshot Viewer ActiveX Control Exploit Ms-Acees SnapShot Exploit Snapview.ocx v 10.0.5529.0 Download nice binaries into an arbitrary box Vulnerability discovered by Oliver Lavery http://www.securityfocus.com/bid/8536/info Remote: Yes greetz t...

Microsoft Access - Snapview.ocx 10.0.5529.0 ActiveX Remote File Download

Microsoft Access - Snapview.ocx 10.0.5529.0 ActiveX Remote File Download / Microsoft Access Snapshot Viewer ActiveX Control Exploit Ms-Access SnapShot Exploit Snapview.ocx v 10.0.5529.0 Download nice binaries into an arbitrary box Vulnerability discovered by Oliver Lavery...

msaccess-activex.txt

/ Microsoft Access Snapshot Viewer ActiveX Control Exploit Ms-Acees SnapShot Exploit Snapview.ocx v 10.0.5529.0 Download nice binaries into an arbitrary box Vulnerability discovered by Oliver Lavery http://www.securityfocus.com/bid/8536/info Remote: Yes greetz to str0ke / include include define...

CVE-2008-3242

Heap-based buffer overflow in the PPMedia Class ActiveX control in PPMPlayer.dll in PPMate 2.3.1.93 allows remote attackers to execute arbitrary code via a long argument to the StartUrl method. NOTE: some of these details are obtained from third party information...

Heap overflow

Heap-based buffer overflow in the PPMedia Class ActiveX control in PPMPlayer.dll in PPMate 2.3.1.93 allows remote attackers to execute arbitrary code via a long argument to the StartUrl method. NOTE: some of these details are obtained from third party information...

CVE-2008-3242

Heap-based buffer overflow in the PPMedia Class ActiveX control in PPMPlayer.dll in PPMate 2.3.1.93 allows remote attackers to execute arbitrary code via a long argument to the StartUrl method. NOTE: some of these details are obtained from third party information...

CVE-2008-3242

The vulnerability affects the PPMate 2.3.1.93 package, specifically the PPMedia Class ActiveX control in PPMPlayer.dll. A heap-based buffer overflow can be triggered by a long argument to the StartUrl method, enabling remote attackers to execute arbitrary code. Affected component: PPMedia ActiveX...

新浪DLoader Class ActiveX控件任意文件下载漏洞

知道安全于近期捕获该漏洞的利用代码,在7月份网络上已经出现利用此漏洞的攻击代码.可导致用户在访问到黑客构造的攻击网页后,可能将恶意文件下载到系统安装,并且随着系统启动而执行. Sina UC 目前厂商已经发布新浪网络电视修复版本并且进行强制升级.请用户及时更新软件. UC的用户请继续关注http://www.51uc.com/进行更新. 也可以为clsid：78ABDC59-D8E7-44D3-9A76-9A0918C52B4A设置kill bit. Windows Registry Editor Version 5.00...

Heap overflow

Heap-based buffer overflow in the OpenGifFile function in BiGif.dll in Black Ice Document Imaging SDK 10.95 allows remote attackers to execute arbitrary code via a long string argument to the GetNumberOfImagesInGifFile method in the BIImgFrm Control ActiveX control in biimgfrm.ocx. NOTE: some of...

CVE-2008-3209

CVE-2008-3209 describes a heap-based buffer overflow in the OpenGifFile function of BiGif.dll within Black Ice Document Imaging SDK 10.95. An attacker can exploit this by passing a long string to the GetNumberOfImagesInGifFile method of the BIImgFrm Control ActiveX biimgfrm.ocx, allowing remote c...

CVE-2008-3209

Heap-based buffer overflow in the OpenGifFile function in BiGif.dll in Black Ice Document Imaging SDK 10.95 allows remote attackers to execute arbitrary code via a long string argument to the GetNumberOfImagesInGifFile method in the BIImgFrm Control ActiveX control in biimgfrm.ocx. NOTE: some of...

PPMate PPMedia Class ActiveX Control Buffer Overflow PoC

No description provided by source. html body object id=target classid=clsid:72B15B25-2EC8-4CDD-B284-C89A5F8E8D5F/object script language=vbscript arg1=String10000, "A" target.StartURLarg1 /script /body /html...

Black Ice软件Document Imaging SDK/ActiveX控件远程堆溢出漏洞

BUGTRAQ ID: 30243 Document Imaging SDK/ActiveX是用于帮助开发人员和程序员创建图形处理应用的软件开发工具。 Document Imaging SDK/ActiveX控件的BiGif.dll文件中没有正确地验证对OpenGifFile函数的输入参数，如果用户受骗访问了恶意网页并向BIImgFrm Control ActiveX控件（BIImgFrm.ocx）的GetNumberOfImagesInGifFile方式传送了超长字符串的话，就会触发堆溢出，导致执行任意指令。 Black Ice Document Imaging SDK/ActiveX...