Novell iPrint Control ActiveX control ExecuteRequest buffer overflow

Added: 03/11/2008 CVE: CVE-2008-0935 BID: 27939 OSVDB: 42063 Background Novell iPrint is an application which allows users to install and manage printers. Novell iPrint installs the Novell iPrint Control ActiveX control named ienipp.ocx. Problem A buffer overflow vulnerability in the ExecuteReque...

RealNetworks RealPlayer ActiveX controls property heap memory corruption

Overview Multiple RealPlayer ActiveX controls fail to properly handle properties, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description RealNetworks RealPlayer provides multiple ActiveX controls to allow integration with Internet Explorer...

CVE-2008-1282

Buffer overflow in the BFup ActiveX control BFup.dll in B21Soft BFup before 1.0.802.29 allows remote attackers to execute arbitrary code via a long FilePath parameter...

Buffer overflow

Buffer overflow in the BFup ActiveX control BFup.dll in B21Soft BFup before 1.0.802.29 allows remote attackers to execute arbitrary code via a long FilePath parameter...

CVE-2008-1282

Buffer overflow in the BFup ActiveX control BFup.dll in B21Soft BFup before 1.0.802.29 allows remote attackers to execute arbitrary code via a long FilePath parameter...

CVE-2008-1282

CVE-2008-1282 concerns the BFup ActiveX Control (BFup.dll) in B21Soft BFup. A buffer overflow in BFup ActiveX Control before version 1.0.802.29 can be triggered by a long FilePath parameter, allowing a remote attacker to execute arbitrary code with the user’s privileges. Documents confirm the aff...

RealNetworks RealPlayer 'rmoc3260.dll' ActiveX Control Memory Corruption Vulnerability

Description RealNetworks RealPlayer 'rmoc3260.dll' ActiveX control is prone to a memory-corruption vulnerability. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the application using the affected ActiveX control. Failed exploit attempts will...

RealPlayer rmoc3260.dll ActiveX Control Heap Corruption

This module exploits a heap corruption vulnerability in the RealPlayer ActiveX control. By sending a specially crafted string to the 'Console' property in the rmoc3260.dll control, an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/browser/realplayer/console...

ICQ Toolbar 'toolbaru.dll' ActiveX控件'GetPropertyById'远程拒绝服务漏洞

BUGTRAQ ID: 28118 CNCAN ID:CNCAN-2008030705 ICQ是一款流行的即时信息通讯程序。 ICQ工具栏'toolbaru.dll' ActiveX控件存在输入检查问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 问题是'toolbaru.dll' ActiveX控件对'GetPropertyById'方法缺少正确处理，构建恶意WEB页，诱使用户访问，可导致对应用程序进行拒绝服务攻击。 测试方法 !-- Lame ICQToolbar IE DoS - Crash IE and change toolbar color :p -- html...

JVN#10606373 BFup ActiveX Control buffer overflow vulnerability

BFup ActiveX Control is developed by an individual that provides file upload and download functionality. BFup ActiveX Control contains a buffer overflow vulnerability. According to the developer of BFup ActiveX Control, this vulnerability only exists in BFup ActiveX Control developed by the...

ICQ Toolbar 2.3 ActiveX Remote Denial of Service Exploit

No description provided by source. !-- Lame ICQToolbar IE DoS - Crash IE and change toolbar color :p -- html object classid='clsid:855F3B16-6D32-4FE6-8A56-BBB695989046' id='toolbar' /object script language='vbscript' bof=String128, "spdr" toolbar.GetPropertyById "" ,bof /script /html...

ICQ Toolbar 2.3 ActiveX Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ======================================================== ICQ Toolbar 2.3 ActiveX Remote Denial of Service Exploit ======================================================== bof=String128, "spdr" toolbar.GetPropertyById "" ,bof 0day.today 2018-04-02...

Symantec the presence of a remote execution vulnerability 0day-vulnerability warning-the black bar safety net

EXP code: !-- Symantec BackupExec Calendar ControlPVCalendar. ocx BoF Exploit Vulnerability discovered by JJ Reyes of Secunia Research http://secunia.com/advisor... written by e. b. Tested on Windows XP SP2fully patched English, IE6 and IE7, PVCalendar. ocx version 10.0.0.17 Thanks to h. d. m. an...

ICQ Toolbar 2.3 - ActiveX Remote Denial of Service

bof=String128, "spdr" toolbar.GetPropertyById "" ,bof milw0rm.com 2008-03-06...

ICQ Toolbar 2.3 - ActiveX Remote Denial of Service

ICQ Toolbar 2.3 - ActiveX Remote Denial of Service bof=String128, "spdr" toolbar.GetPropertyById "" ,bof milw0rm.com 2008-03-06...

Learn2 STRunner ActiveX Control Multiple Buffer Overflow Vulnerabilities

The Learn2 Corporation's STRunner ActiveX control, used with various online tutorials, is installed on the remote host. It reportedly is affected by multiple and as-yet unspecified stack-based buffer overflows. If a remote attacker can trick a user on the affected host into visiting a specially...

Symantec Backup Exec Calendar ActiveX Control Multiple Vulnerabilities (SYM08-007)

The remote host contains the PVATLCalendar.PVCalendar.1 ActiveX control distributed with Symantec Backup Exec for Windows Servers. The installed version of that control reportedly contains two stack-based buffer overflows and allows for corrupting or saving malicious script code, and overwriting...

EDraw Office Viewer ActiveX (EDraw.OfficeViewer) FtpDownloadFile Method Overflow

The remote host contains the EDraw Office Viewer Component, an ActiveX control for working with Microsoft Office documents. The version of this control installed on the remote host contains a buffer overflow that can be triggered by a long value for the first and second arguments of the...

Stack overflow

Multiple stack-based buffer overflows in the Learn2 Corporation STRunner aka Street Technologies ActiveX control in iestm32.dll allow remote attackers to execute arbitrary code via unspecified vectors...

Design/Logic Flaw

Insecure method vulnerability in the Web Scan Object ActiveX control OL2005.dll in Rising Antivirus Online Scanner allows remote attackers to force the download and execution of arbitrary code by setting the BaseURL property and invoking the UpdateEngine method. NOTE: some of these details are...