Symantec Backup Exec for Windows Server ActiveX Control Multiple Buffer Overflow Vulnerabilities

Overview The PVATLCalendar.PVCalendar.1 pvcalendar.ocx ActiveX control, a scheduler component of the Media Server in Symantec Backup Exec for Windows Server BEWS, includes the insecure Save method that mishandles long strings assigned to various properties listed below, which can be exploited to...

BFup ActiveX Control buffer overflow vulnerability

Overview BFup ActiveX Control contains a buffer overflow vulnerability. BFup ActiveX Control is developed by an individual that provides file upload and download functionality. BFup ActiveX Control contains a buffer overflow vulnerability. According to the developer of BFup ActiveX Control, this...

Symantec Backup Exec for Windows Server ActiveX Control Multiple Vulnerabilities

Overview The PVATLCalendar.PVCalendar.1 pvcalendar.ocx ActiveX control, a scheduler component of the Media Server in Symantec Backup Exec for Windows Server BEWS, includes the insecure Save method that mishandles strings assigned to certain properties listed below, which can be exploited to cause...

CVE-2008-0957

CVE-2008-0957 concerns the PhotoStockPlus Uploader Tool ActiveX control (PSPUploader.ocx). The Uploader control contains stack-based buffer overflows in multiple initialization parameters, which can allow a remote attacker to execute arbitrary code. Exploitation is described as requiring a user t...

CVE-2008-0957

Multiple stack-based buffer overflows in the PhotoStockPlus Uploader Tool ActiveX control PSPUploader.ocx allow remote attackers to execute arbitrary code via unspecified initialization parameters...

Facebook PhotoUploader ActiveX control ExtractIptc buffer overflow

Added: 05/19/2008 CVE: CVE-2008-0660 BID: 27576 OSVDB: 41073 Background Facebook PhotoUploader is an ActiveX control which allows uploading of photos to the Facebook web site. It uses the Aurigma ImageUploader product. Problem A buffer overflow vulnerability in Facebook PhotoUploader allows comma...

Facebook PhotoUploader ActiveX control ExtractIptc buffer overflow

Added: 05/19/2008 CVE: CVE-2008-0660 BID: 27576 OSVDB: 41073 Background Facebook PhotoUploader is an ActiveX control which allows uploading of photos to the Facebook web site. It uses the Aurigma ImageUploader product. Problem A buffer overflow vulnerability in Facebook PhotoUploader allows comma...

PhotoStockPlus Uploader Tool ActiveX stack buffer overflows

Overview The PhotoStockPlus Uploader Tool ActiveX control contains several stack buffer overflows, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description PhotoStockPlus provides an image uploader ActiveX control, which is provided by the...

Facebook PhotoUploader ActiveX control ExtractIptc buffer overflow

Added: 05/19/2008 CVE: CVE-2008-0660 BID: 27576 OSVDB: 41073 Background Facebook PhotoUploader is an ActiveX control which allows uploading of photos to the Facebook web site. It uses the Aurigma ImageUploader product. Problem A buffer overflow vulnerability in Facebook PhotoUploader allows comma...

Facebook PhotoUploader ActiveX control ExtractIptc buffer overflow

Added: 05/19/2008 CVE: CVE-2008-0660 BID: 27576 OSVDB: 41073 Background Facebook PhotoUploader is an ActiveX control which allows uploading of photos to the Facebook web site. It uses the Aurigma ImageUploader product. Problem A buffer overflow vulnerability in Facebook PhotoUploader allows comma...

CVE-2008-2283

IDAutomation allows remote attackers to overwrite arbitrary files via the argument to the 1 SaveBarCode and 2 SaveEnhWMF methods in a the IDAuto.BarCode.1 ActiveX control in IDAutomationLinear6.dll aka IDAutomation Linear BarCode 1.6.0.6, b the IDAuto.Datamatrix.1 ActiveX control in...

CVE-2008-2283

IDAutomation ActiveX controls (IDAutomationLinear6.dll, IDAutomationDMATRIX6.DLL, IDAutomationPDF417_6.dll, IDAutomationAZTEC.dll) are affected by CVE-2008-2283. The vulnerability allows remote attackers to overwrite arbitrary files via the argument to the SaveBarCode and SaveEnhWMF methods. Affe...

CVE-2008-2283

IDAutomation allows remote attackers to overwrite arbitrary files via the argument to the 1 SaveBarCode and 2 SaveEnhWMF methods in a the IDAuto.BarCode.1 ActiveX control in IDAutomationLinear6.dll aka IDAutomation Linear BarCode 1.6.0.6, b the IDAuto.Datamatrix.1 ActiveX control in...

IDAutomation多个条码ActiveX控件任意文件覆盖漏洞

BUGTRAQ ID: 29204 IDAutomation是美国一家专注于自动识别、条形码技术的公司，IDAutomation的产品包括条形码编辑、识别、打印、扫描功能的字体包、软件、控件产品等。 IDAutomation带的ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞在用户系统上写入任意文件。 IDAutomation所提供的以下条码ActiveX控件： IDAuto.BarCode.1（IDAutomationLinear6.dll） IDAuto.Datamatrix.1（IDAutomationDMATRIX6.DLL）...

IDAutomation Bar Code ActiveX Multiple Remote Vulnerabilities

No description provided by source. ----------------------------------------------------------------------------- IDAutomation Multiple Vulnerabilities url: www.idautomation.com Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational...

idautomation bar code - ActiveX Multiple Vulnerabilities

idautomation bar code - ActiveX Multiple Vulnerabilities ----------------------------------------------------------------------------- IDAutomation Multiple Vulnerabilities url: www.idautomation.com Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was writte...

idautomation bar code - ActiveX Multiple Vulnerabilities

----------------------------------------------------------------------------- IDAutomation Multiple Vulnerabilities url: www.idautomation.com Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose. Use it at your own risk. Autho...

Microsoft Works 7 WkImgSrv.dll ActiveX Remote BOF Exploit

No description provided by source. !– The problem is in wkimgsrv.dll module shipped with many MS Offiice Suite tested on MS OF 2003,MS OF 2007 Actually,this is not the case of buffer overflow attack,just a exploit of insecure method WKsPictureInterface...

With all the 0day,the current through the kill all versions-bug warning-the black bar safety net

Program code SCRIPTwindow. onerror=functionreturn true;/SCRIPT SCRIPT document. writeln"object classid="clsid:61F5C358-60FB-4A23-A312 - D2B556620F20" style='display:none' id='Kazakh'/object"; document. writeln"SCRIPT language="javascript""; document. writeln"var...

联众世界GLIEDown2.dll Active控件任意代码执行漏洞

联众世界是在中国非常流行的在线游戏网站。 联众世界的游戏大厅主程序GLWorld所安装的GLIEDown2.dll ActiveX控件（CLSID：F917534D-535B-416B-8E8F-0C04756C31A8）没有正确地处理某些用户输入参数，如果用户受骗访问了恶意网页并向这些方式传送了特制参数的话，可能导致在用户系统上执行任意指令。 利用此漏洞进行挂马的0day攻击已经出现。 GlobalLink 2.8.1.2 beta 临时解决方法： 为有漏洞的控件设置Kill-Bit： Windows Registry Editor Version 5.00...