CA BrightStor ARCserve Backup r11.5 ActiveX Remote BOF Exploit

No description provided by source. HTML !-- CA BrightStor ARCserve Backup r11.5 AddColumn 0day ActiveX Remote Buffer Overflow Exploit Bug discovered by Krystian Kloskowski h07 [email protected] Tested on: - CA BrightStor ARCserve Backup r11.5 ftp://ftp.ca.com/priv/trial/BABr11/BABLDr115/BABLDr115.zi...

CA BrightStor ListCtrl.ocx ActiveX控件栈溢出漏洞

BUGTRAQ ID: 28268 BrightStor ARCserve Backup可为各种平台的服务器提供备份和恢复保护功能。 BrightStor ARCserve Backup所安装的ListCtrl ActiveX控件（ListCtrl.ocx）没有正确地验证对AddColumn方式的输入，如果用户受骗访问了恶意网页并向该方式传送了超长参数的话，就可能触发栈溢出，导致执行任意指令。 Computer Associates BrightStor ARCserve Backup R11.5 Computer Associates -------------------...

registrypro-insecure.txt

!-- - Registry Pro epRegPro.ocx Remote Insecure Exploit - Author: t0pP8uZz Homepage: h4ck-y0u.org / milw0rm.com Description: ActiveX Remote Insecure Report: Tested on Microsoft Windows XP Pro SP2 Internet Explorer 7 Fully Patched ActiveX: http://www.evansprogramming.com/registrypro.asp The...

HTTP File Upload ActiveX (UUploaderSvrD.dll) File Deletion Exploit

No description provided by source. HTML !-- - Univeral HTTP File Upload UUploaderSvrD.dll - v6.0.0.35 Remote File Deletetion Exploit - Author: t0pP8uZz Homepage: h4ck-y0u.org / milw0rm.com Description: ActiveX Remote File Deletetion Report: Tested on Microsoft Windows XP Pro SP2 Internet Explorer...

hfu-delete.txt

Could Not Load ActiveX Control. / - Univeral HTTP File Upload UUploaderSvrD.dll - v6.0.0.35 Remote File Deletetion Exploit - / / Javascript Code By t0pP8uZz / var x = "C:/tmp.txt"; / Full Path To File To Delete OR directory/ var del = true; var c = 1; whiledel try fileup.RemoveFileOrDirx, c; del ...

Registry Pro (epRegPro.ocx) Remote Insecure Method Exploit

No description provided by source. HTML !-- - Registry Pro epRegPro.ocx Remote Insecure Exploit - Author: t0pP8uZz Homepage: h4ck-y0u.org / milw0rm.com Description: ActiveX Remote Insecure Report: Tested on Microsoft Windows XP Pro SP2 Internet Explorer 7 Fully Patched ActiveX:...

BusinessObjects RptViewerAX ActiveX control stack buffer overflow

Overview The BusinessObjects RptViewerAX ActiveX control contains a stack buffer overflow, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description BusinessObjects 6.5 includes an ActiveX control called RptViewerAX, which is provided by...

caarcserve-overflow.txt

Tested on: - CA BrightStor ARCserve Backup r11.5 ftp://ftp.ca.com/priv/trial/BABr11/BABLDr115/BABLDr115.zip - IE 6 - XP SP2 Polish Details:.. Filename: CA\DSM\bin\ListCtrl.ocx File description: Unicenter DSM r11 List Control ATX CLSID: BF6EFFF3-4558-4C4C-ADAF-A87891C5F3A3 ProgID:...

CA BrightStor ARCserve Backup r11.5 ActiveX Remote BOF Exploit 0day

No description provided by source. HTML !-- CA BrightStor ARCserve Backup r11.5 AddColumn 0day ActiveX Remote Buffer Overflow Exploit Bug discovered by Krystian Kloskowski h07 [email protected] Tested on: - CA BrightStor ARCserve Backup r11.5 ftp://ftp.ca.com/priv/trial/BABr11/BABLDr115/BABLDr115.zi...

CA BrightStor ARCserve Backup r11.5 ActiveX Remote BOF Exploit

Exploit for unknown platform in category remote exploits ============================================================== CA BrightStor ARCserve Backup r11.5 ActiveX Remote BOF Exploit ============================================================== Tested on: - CA BrightStor ARCserve Backup r11.5...

CA BrightStor ARCserve Backup r11.5 - ActiveX Remote Buffer Overflow

Tested on: - CA BrightStor ARCserve Backup r11.5 ftp://ftp.ca.com/priv/trial/BABr11/BABLDr115/BABLDr115.zip - IE 6 - XP SP2 Polish Details:.. Filename: CA\DSM\bin\ListCtrl.ocx File description: Unicenter DSM r11 List Control ATX CLSID: BF6EFFF3-4558-4C4C-ADAF-A87891C5F3A3 ProgID:...

CA BrightStor ARCserve Backup r11.5 - ActiveX Remote Buffer Overflow

CA BrightStor ARCserve Backup r11.5 - ActiveX Remote Buffer Overflow Tested on: - CA BrightStor ARCserve Backup r11.5 ftp://ftp.ca.com/priv/trial/BABr11/BABLDr115/BABLDr115.zip - IE 6 - XP SP2 Polish Details:.. Filename: CA\DSM\bin\ListCtrl.ocx File description: Unicenter DSM r11 List Control ATX...

RealNetworks RealPlayer rmoc3260.dll ActiveX控件内存破坏漏洞

BUGTRAQ ID: 28157 RealPlayer是一款流行的多媒体播放器，支持多种媒体格式。 RealPlayer的rmoc3260.dll ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 rmoc3260.dll ActiveX控件没有正确地处理Console属性的输入参数，如果用户受骗访问了恶意站点的话，就可能触发内存破坏，导致执行任意指令。 Real Networks RealPlayer 11.0.1 build 6.0.14.794 临时解决方法： 在IE中禁用RealPlayer ActiveX控件，为以下CLSID设置kill bit：...

Adobe Form Designer和Form Client多个缓冲区溢出漏洞

BUGTRAQ ID: 28210 CVECAN ID: CVE-2007-6253 Adobe Form Designer是Adobe Designer产品家族的成员，用于自动生成表单、捕获并处理数据。 Adobe Form Designer及其客户端提供了多个ActiveX控件，其中FileDlg.dll库所提供的Adobe File Dialog Button控件和SvrCopy.dll库所提供的Adobe Copy to Server对象中存在缓冲区溢出漏洞。如果用户受骗访问了恶意网页的话，就可能触发这些溢出，导致执行任意指令。 Adobe Form Designer/Clien...

Microsoft Office Web组件ActiveX控件远程代码执行漏洞（MS08-017）

BUGTRAQ ID: 28135,28136 CVECAN ID: CVE-2006-4695,CVE-2007-1201 Microsoft Office Web组件是COM控件集合，用于向Web发布电子表格、图表和数据库，并查看所发布的组件。 Microsoft Office Web组件在解析特制的URL时管理内存资源的方式存在漏洞，如果用户受骗访问了恶意网页的话，就可能触发内存破坏，导致执行任意指令。 Microsoft Office Web Components 2000 临时解决方法： 禁止在Internet Explorer中运行Office Web组件库，为CLSID...

CVE-2008-1307

Heap-based buffer overflow in the KUpdateObj2 Class ActiveX control in UpdateOcx2.dll in Beijing KingSoft Antivirus Online Update Module 2007.12.29.29 allows remote attackers to execute arbitrary code via a long argument to the SetUninstallName method...

Design/Logic Flaw

The RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, RealPlayer 10.5 before build 6.0.12.1675, and RealPlayer 11 before 11.0.3 build 6.0.14.806 does not properly manage memory for the 1 Console or 2 Controls property, which allows...

DSquare Exploit Pack: D2SEC_REALCONSOLE

Name| d2secrealconsole ---|--- CVE| CVE-2008-1309 Exploit Pack| D2ExploitPack Description| RealNetworks RealPlayer rmoc3260.dll ActiveX Control Memory Corruption Notes|...

Heap overflow

Heap-based buffer overflow in the KUpdateObj2 Class ActiveX control in UpdateOcx2.dll in Beijing KingSoft Antivirus Online Update Module 2007.12.29.29 allows remote attackers to execute arbitrary code via a long argument to the SetUninstallName method...

CVE-2008-1309

The RealPlayer rmoc3260.dll ActiveX control in RealPlayer Enterprise/RealPlayer 10/10.5 and RealPlayer 11 (pre-builds) contains a heap-memory corruption flaw in the Console/Controls properties that enables arbitrary code execution or a browser crash after sending long strings, as described in CVE...