CVE-2008-2745

CVE-2008-2745 : A stack-based buffer overflow in BiAnno ActiveX Control (BiAnno.ocx) of the Black Ice Software Annotation Plugin 10.95 allows remote attackers to execute arbitrary code by sending a long parameter to the AnnoSaveToTiff method. The connected documents confirm a remote-code-executio...

Novell iPrint Client ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in Novell iPrint Client 4.34. When sending an overly long string to the GetDriverSettings property of ienipp.ocx an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/browser/novelliprint/getdriversettings msf...

VeryPDF PDFView OCX ActiveX OpenPDF Heap Overflow

The VeryPDF PDFView ActiveX control is prone to a heap buffer-overflow because it fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory buffer. An attacker can exploit this issue to execute arbitrary code within the context of the affected...

Integrity Clientless Security (ICS) Update 3.7.231.0

Check Point Integrity ™ Clientless Security ICS protects your Web site by detecting and disabling spyware processes and allowing you to enforce security policies before a user logs onto your network. Using ICS you can prevent users with potentially harmful software from accessing your Web site, a...

Novell iPrint Client - ActiveX Control Buffer Overflow (Metasploit)

$Id: novelliprintgetdriversettings.rb$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/cor...

Microsoft Windows Speech组件语音识别远程命令执行漏洞（MS08-032）

BUGTRAQ ID: 22359 CVECAN ID: CVE-2007-0675 Microsoft Windows是微软发布的非常流行的操作系统。 如果Windows中启用了语音识别功能的话，则Speech组件sapi.dll中存在远程执行代码漏洞。攻击者可以通过构造嵌入了声音对象的特制网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。成功利用此漏洞的攻击者可以获得与登录用户相同的用户权限。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP1 Microsoft...

BackWeb LiteInstActivator.dll ActiveX控件栈溢出漏洞

BUGTRAQ ID: 29558 CVECAN ID: CVE-2008-0956 BackWeb Lite Install Runner（LiteInstActivator.dll）是用于在Windows系统上安装软件的ActiveX控件。 LiteInstActivator.dll控件捆绑于Logitech鼠标软件中的Logitech Desktop Messenger，该控件没有正确地验证某处参数的输入，如果用户受骗访问了恶意网页并传送了超长参数的话，就可能触发栈溢出，导致执行任意指令。 BackWeb BackWeb 8.1.1.86 Logitech Desktop...

迅雷ActiveX控件远程代码执行漏洞

迅雷是一款在中国非常流行的基于P2SP技术的下载软件。更多详细信息请参考： http://www.xunlei.com 在迅雷5的一个ActiveX控件中存在一个远程代码执行漏洞，远程攻击者可利用此漏洞在被攻击者系统上以当前浏览器权限执行任意代码，进而可安装木马以及间谍程序。 漏洞存在于由ActiveX控件"DapCtrl.dll"导出的"Put"函数中，相关信息如下： InprocServer32: C:\Documents and Settings\All Users\Application Data\Thunder...

CVE-2008-2693

Stack-based buffer overflow in the BITIFF.BITiffCtrl.1 ActiveX control in BITiff.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to execute arbitrary code via a long first argument to the SetByteOrder method...

Stack overflow

Stack-based buffer overflow in the BITIFF.BITiffCtrl.1 ActiveX control in BITiff.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to execute arbitrary code via a long first argument to the SetByteOrder method...

CVE-2008-2693

The CVE-2008-2693 issue is a stack-based overflow in the BITIFF.BITiffCtrl.1 ActiveX control (BITiff.ocx 10.9.3.0) used by Black Ice Barcode SDK 5.01. An attacker can cause remote code execution by supplying a long first argument to SetByteOrder, triggering overflow in the ActiveX control. Affect...

CVE-2008-2684

The BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to execute arbitrary code via long strings in the two arguments to the DownloadImageFileURL method, which trigger memory corruption. NOTE: some of these details are obtained from thir...

Information disclosure

The BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to force the download and storage of arbitrary files by specifying the origin URL in the first argument to the DownloadImageFileURL method, and the local filename in the second...

CVE-2008-2683

The BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to force the download and storage of arbitrary files by specifying the origin URL in the first argument to the DownloadImageFileURL method, and the local filename in the second...

Memory corruption

The BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to execute arbitrary code via long strings in the two arguments to the DownloadImageFileURL method, which trigger memory corruption. NOTE: some of these details are obtained from thir...

CVE-2008-2683

The BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to force the download and storage of arbitrary files by specifying the origin URL in the first argument to the DownloadImageFileURL method, and the local filename in the second...

EUVD-2008-2679

The BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to execute arbitrary code via long strings in the two arguments to the DownloadImageFileURL method, which trigger memory corruption. NOTE: some of these details are obtained from thir...

CVE-2008-2683

CVE-2008-2683 details (Normal mode): The BIDIB.BIDIBCtrl.1 ActiveX control (BIDIB.ocx 10.9.3.0) in Black Ice Barcode SDK 5.01 is vulnerable. A remote attacker can force the download and storage of arbitrary files by calling DownloadImageFileURL with the origin URL as the first argument and the lo...

CVE-2008-2684

CVE-2008-2684 affects the BIDIB.ocx/Black Ice Barcode SDK 5.01 implementation: the BIDIBCtrl.1 ActiveX control allows remote attackers to trigger memory corruption by feeding long strings into the DownloadImageFileURL method, enabling arbitrary code execution. The vulnerability is rooted in how t...

CVE-2008-0956

Multiple stack-based buffer overflows in the BackWeb Lite Install Runner ActiveX control in the BackWeb Web Package ActiveX object in LiteInstActivator.dll in BackWeb before 8.1.1.87, as used in Logitech Desktop Manager LDM before 2.56, allow remote attackers to execute arbitrary code via...