Thunder local overflow POC-the exploit-warning-the black bar safety net

By:mad DogB. C. T Previously been in the pass thunder and 0day, the Activex should be almost, but also not neglect, or uninstall it, today the abundance of the initial issuance to a URL, the original pixel a Thunderbolt 0day, see the instructions or remotely! Feel a, look at that vulnerability...

Ourgame 'GLIEDown2.dll' ActiveX Control - Remote Code Execution

source: https://www.securityfocus.com/bid/29118/info Ourgame 'GLIEDown2.dll' ActiveX control is prone to a remote code-execution vulnerability because it fails to sufficiently verify user-supplied input. An attacker can exploit this issue to run arbitrary attacker-supplied code in the context of...

CA Unicenter DSM ITRM Legends ActiveX integer overflow

Overview The CA Unicenter DSM ITRM Legends ActiveX control contains an integer overflow vulnerability, which can allow a remote attacker to execute arbitrary code on a vulnerable system. Description CA Unicenter DSM ITRM Legends is an ActiveX control that is included with multiple CA products. Th...

Ourgame GLIEDown2.dll ActiveX Control - Remote Code Execution

Ourgame GLIEDown2.dll ActiveX Control - Remote Code Execution source: https://www.securityfocus.com/bid/29118/info Ourgame 'GLIEDown2.dll' ActiveX control is prone to a remote code-execution vulnerability because it fails to sufficiently verify user-supplied input. An attacker can exploit this...

Memory corruption

The ActiveX Control yNotifier.dll in Yahoo! Assistant 3.6 and earlier allows remote attackers to execute arbitrary code via unspecified vectors in the Ynoifier COM object that trigger memory corruption...

CVE-2008-2111

The ActiveX Control yNotifier.dll in Yahoo! Assistant 3.6 and earlier allows remote attackers to execute arbitrary code via unspecified vectors in the Ynoifier COM object that trigger memory corruption...

CVE-2008-2111

The CVE-2008-2111 entry concerns the ActiveX Control (yNotifier.dll) in Yahoo! Assistant 3.6 and earlier. The vulnerability is a memory corruption issue in the Ynoifier COM object that enables remote attackers to execute arbitrary code. Affected component: ActiveX/yNotifier.dll within Yahoo! Assi...

Microsoft Works 7 WkImgSrv.dll ActiveX控件远程代码执行漏洞

BUGTRAQ ID: 28820 Microsoft Works是微软在早期所发布的文件处理程序。 Microsoft Works所带的ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 Microsoft Works所提供的wkimgsrv.dll库没有安全地调用WKsPictureInterface方式： 00D473BD PUSH EBP ; Begin of Set WksPictureInterface method 00D473BE MOV EBP,ESP 00D473C0 SUB ESP,1C 00D473C3 MOV EAX,DWORD PTR...

Akamai Download Manager ActiveX控件远程代码执行漏洞

BUGTRAQ ID: 28993 CVECAN ID: CVE-2007-6339 Akamai下载管理器是用于帮助用户方便下载的客户端软件。 Akamai下载管理器的DownloadManager控件没有正确地验证某些对象参数，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 ActiveX控件版本标识如下： 类：DownloadManager Control CLSID：2AF5BD25-90C5-4EEC-88C5-B44DC2905D8B CLSID：FFBB3F3B-0A5A-4106-BE53-DFE1E2340CB1 ProgId：MANAGER.DLMCtrl.1...

Yahoo! 助手(3721) ActiveX远程代码执行漏洞

漏洞存在于ynotifier.dll这个ActiveX控件. 成功利用此漏洞可以使得攻击者能够在安装了Yahoo!助手的电脑上执行任意代码. 成功利用此漏洞需要诱使用户访问特定网页. 在通过IE初始化Ynoifier COM对象时,会出现一个可利用的内存破坏漏洞. c78.fa0: Access violation - code c0000005 first chance First chance exceptions are reported before any exception handling. This exception may be expected and handle...

Yahoo! Assistant 3.6 - 'yNotifier.dll' ActiveX Control Memory Corruption

source: https://www.securityfocus.com/bid/29065/info Yahoo! Assistant 'yNotifier.dll' ActiveX control is prone to a memory-corruption vulnerability. Successfully exploiting this issue may allow remote attackers to execute arbitrary code in the context of the application using the affected ActiveX...

Yahoo! Assistant 3.6 - yNotifier.dll ActiveX Control Memory Corruption

Yahoo! Assistant 3.6 - yNotifier.dll ActiveX Control Memory Corruption source: https://www.securityfocus.com/bid/29065/info Yahoo! Assistant 'yNotifier.dll' ActiveX control is prone to a memory-corruption vulnerability. Successfully exploiting this issue may allow remote attackers to execute...

Microsoft Works 7 WkImgSrv.dll ActiveX Remote BOF Exploit

Exploit for unknown platform in category remote exploits ========================================================= Microsoft Works 7 WkImgSrv.dll ActiveX Remote BOF Exploit ========================================================= MOV ESI,DWORD PTR SS:EBP+8 ; Do some other stuffs, we don't care...

Microsoft Works 7 - 'WkImgSrv.dll' ActiveX Remote Buffer Overflow

MOV ESI,DWORD PTR SS:EBP+8 ; Do some other stuffs, we don't care 00D473D8 LEA EDX,DWORD PTR SS:EBP-1C ; 00D473DB PUSH EDX 00D473DC PUSH EAX 00D473DD MOV DWORD PTR DS:ESI+2A0,EAX ; ============= 00D473E3 == MOV ECX,DWORD PTR DS:EAX ; Here is the problem,the data stored by EAX is referenced and mov...

CVE-2007-6339

The Akamai Download Manager aka DLM or dlmanager ActiveX control DownloadManagerV2.ocx before 2.2.3.5 allows remote attackers to force the download and execution of arbitrary code via unspecified "undocumented object parameters."...

Code injection

The Akamai Download Manager aka DLM or dlmanager ActiveX control DownloadManagerV2.ocx before 2.2.3.5 allows remote attackers to force the download and execution of arbitrary code via unspecified "undocumented object parameters."...

CVE-2007-6339

The CVE-2007-6339 entry is about the Akamai Download Manager ActiveX control (DownloadManagerV2.ocx) before version 2.2.3.5. The vulnerability allows a remote attacker to force the download and execution of arbitrary code via undocumented object parameters in the ActiveX control. Impact is arbitr...

CVE-2007-6339

The Akamai Download Manager aka DLM or dlmanager ActiveX control DownloadManagerV2.ocx before 2.2.3.5 allows remote attackers to force the download and execution of arbitrary code via unspecified "undocumented object parameters."...

iDefense Security Advisory 04.30.08: Akamai Download Manager Arbitrary Program Execution Vulnerability

iDefense Security Advisory 04.30.08 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 30, 2008 I. BACKGROUND Akamai Download Manager is an integral component of Akamai's global distribution service. It is used to deliver big files quickly and reliably to users around world. It has been...

Akamai Download Manager ActiveX Control < 2.2.3.5 Remote Code Execution

The Windows remote host contains the Download Manager ActiveX control from Akamai, which helps users download content. The version of this ActiveX control on the remote host reportedly allows downloading and automatic execution of arbitrary code. If an attacker can trick a user on the affected ho...