SwiftView ActiveX control and plug-in stack buffer overflow

Overview The SwiftView ActiveX control and plug-in contain a stack buffer overflow, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description SwiftView is software used to view or print PCL, HPGL, and TIFF files. SwiftSend is a product used f...

Chilkat Mail ActiveX 7.8 (ChilkatCert.dll) Insecure Method Exploit

No description provided by source. body bgcolor="000000" p align="center"bfont face="Verdana" color="00FF00" size="2"Chilkat Mail ActiveX 7.8 ChilkatCert.dll Insecure Method Exploit/font/b/p p align="center"bfont face="Verdana" size="2" color="00FF00"Site : a href="http://www.chilkatsoft.com"font...

ImageShack Toolbar ImageShackToolbar.dll控件不安全方式漏洞

BUGTRAQ ID: 27439 ImageShack Toolbar是用于向ImageShack网站上传文件的浏览器内嵌工具栏。 ImageShack Toolbar的ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞获取系统文件。 ImageShack Toolbar所安装的ImageShackToolbar.FileUploader.1...

Security feature bypass

A certain ActiveX control in Comodo AntiVirus 2.0 allows remote attackers to execute arbitrary commands via the ExecuteStr method...

CVE-2008-0470

A certain ActiveX control in Comodo AntiVirus 2.0 allows remote attackers to execute arbitrary commands via the ExecuteStr method...

Stack overflow

Stack-based buffer overflow in the QMPUpgrade.Upgrade.1 ActiveX control in QMPUpgrade.dll 1.0.0.1 in Move Networks Upgrade Manager allows remote attackers to execute arbitrary code via a long first argument to the Upgrade method. NOTE: some of these details are obtained from third party informati...

CVE-2008-0477

CVE-2008-0477 describes a stack-based buffer overflow in the QMPUpgrade.Upgrade.1 ActiveX control (QMPUpgrade.dll 1.0.0.1) used by Move Networks Upgrade Manager. An attacker can trigger arbitrary code execution by passing a long first argument to the Upgrade method, enabling remote code execution...

CVE-2008-0470

CVE-2008-0470 involves a vulnerability in Comodo Antivirus 2.0 where a specific ActiveX control allows remote attackers to execute arbitrary commands through the ExecuteStr method. The connected documents confirm the affected product and the root cause (ActiveX control enabling remote command exe...

CVE-2008-0470

A certain ActiveX control in Comodo AntiVirus 2.0 allows remote attackers to execute arbitrary commands via the ExecuteStr method...

CVE-2008-0477

Stack-based buffer overflow in the QMPUpgrade.Upgrade.1 ActiveX control in QMPUpgrade.dll 1.0.0.1 in Move Networks Upgrade Manager allows remote attackers to execute arbitrary code via a long first argument to the Upgrade method. NOTE: some of these details are obtained from third party informati...

Chilkat Mail ActiveX 7.8 - ChilkatCert.dll Insecure Method

Chilkat Mail ActiveX 7.8 - ChilkatCert.dll Insecure Method Chilkat Mail ActiveX 7.8 ChilkatCert.dll Insecure Method Exploit Site : www.chilkatsoft.com =================================================== Tested on Windows XP Professional SP2 , with Internet Explorer 6 Author : darkl0rd E-Mail :...

Chilkat Mail ActiveX 7.8 (ChilkatCert.dll) Insecure Method Exploit

No description provided by source. body bgcolor="000000" p align="center"bfont face="Verdana" color="00FF00" size="2"Chilkat Mail ActiveX 7.8 ChilkatCert.dll Insecure Method Exploit/font/b/p p align="center"bfont face="Verdana" size="2" color="00FF00"Site : a href="http://www.chilkatsoft.com"font...

Chilkat Mail ActiveX 7.8 - 'ChilkatCert.dll' Insecure Method

Chilkat Mail ActiveX 7.8 ChilkatCert.dll Insecure Method Exploit Site : www.chilkatsoft.com =================================================== Tested on Windows XP Professional SP2 , with Internet Explorer 6 Author : darkl0rd E-Mail : lldarkl0rdllatyahoodotcom SaveLastError Sub lose...

Move Networks Quantum Streaming Player ActiveX buffer overflow

QMPUpgrade.dll buffer overflow...

Chilkat Mail ActiveX 7.8 (ChilkatCert.dll) Insecure Method Exploit

Exploit for unknown platform in category remote exploits ================================================================== Chilkat Mail ActiveX 7.8 ChilkatCert.dll Insecure Method Exploit ================================================================== Chilkat Mail ActiveX 7.8 ChilkatCert.dll...

Gateway WebLaunch ActiveX Remote Buffer Overflow Exploit

No description provided by source. !-- Gateway WebLaunch Buffer Overflow Exploit written by e.b. Tested on Windows XP SP2fully patched English, IE6, Weblaunch.ocx: 93CEA8A4-6059-4E0B-ADDD-73848153DD5E Weblaunch2.ocx: 97BB6657-DC7F-4489-9067-51FAB9D8857E Thanks to h.d.m. and the Metasploit crew --...

Gateway WebLaunch ActiveX Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ======================================================== Gateway WebLaunch ActiveX Remote Buffer Overflow Exploit ======================================================== Gateway WebLaunch Buffer Overflow Exploit function Check // win32exec...

Lycos文件上传组件'FileUploader.dll' ActiveX控件缓冲区溢出漏洞

Lycos FileUploader是一款文件上传组件。 Lycos FileUploader包含的ActiveX控件存在缓冲区溢出问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 构建恶意的WEB页,诱使用户打开,可导致以应用程序进程权限执行任意指令. Lycos FileUploader.dll 2.0 2 目前没有详细解决方案提供...

Gateway WebLaunch - ActiveX Remote Buffer Overflow

Gateway WebLaunch Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" + "%u4948%u4949%u4949%u4949%u4949%u4949%u5a51%u436a" +...

Comodo AntiVirus 'ExecuteStr()' ActiveX控件缓冲区溢出漏

Comodo AntiVirus是一款反病毒应用程序。 Comodo AntiVirus包含的ActiveX控件存在缓冲区溢出问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 问题是控件对ExecuteStr方法的参数缺少正确边界处理，构建恶意的WEB页,诱使用户打开,可导致以应用程序进程权限执行任意指令. Comodo AntiVirus 2.0 厂商解决方案 目前没有详细解决方案提供： http://www.personalfirewall.comodo.com/...