Gateway WebLaunch ActiveX Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ======================================================== Gateway WebLaunch ActiveX Remote Buffer Overflow Exploit ======================================================== Gateway WebLaunch Buffer Overflow Exploit function Check // win32exec...

Lycos文件上传组件'FileUploader.dll' ActiveX控件缓冲区溢出漏洞

Lycos FileUploader是一款文件上传组件。 Lycos FileUploader包含的ActiveX控件存在缓冲区溢出问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 构建恶意的WEB页,诱使用户打开,可导致以应用程序进程权限执行任意指令. Lycos FileUploader.dll 2.0 2 目前没有详细解决方案提供...

Gateway WebLaunch - ActiveX Remote Buffer Overflow

Gateway WebLaunch Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" + "%u4948%u4949%u4949%u4949%u4949%u4949%u5a51%u436a" +...

Comodo AntiVirus 'ExecuteStr()' ActiveX控件缓冲区溢出漏

Comodo AntiVirus是一款反病毒应用程序。 Comodo AntiVirus包含的ActiveX控件存在缓冲区溢出问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 问题是控件对ExecuteStr方法的参数缺少正确边界处理，构建恶意的WEB页,诱使用户打开,可导致以应用程序进程权限执行任意指令. Comodo AntiVirus 2.0 厂商解决方案 目前没有详细解决方案提供： http://www.personalfirewall.comodo.com/...

Heap overflow

Heap-based buffer overflow in the FileUploader.FUploadCtl.1 ActiveX control in FileUploader.dll 2.0.0.2 in Lycos FileUploader Module allows remote attackers to execute arbitrary code via a long HandwriterFilename property value. NOTE: some of these details are obtained from third party informatio...

Persits XUpload ActiveX AddFile Buffer Overflow

This module exploits a stack buffer overflow in Persits Software Inc's XUpload ActiveX controlversion 3.0.0.3 thats included in HP LoadRunner 9.5. By passing an overly long string to the AddFile method, an attacker may be able to execute arbitrary code. Module Options msf use...

CVE-2008-0443

Heap-based buffer overflow in the FileUploader.FUploadCtl.1 ActiveX control in FileUploader.dll 2.0.0.2 in Lycos FileUploader Module allows remote attackers to execute arbitrary code via a long HandwriterFilename property value. NOTE: some of these details are obtained from third party informatio...

CVE-2008-0443

The CVE-2008-0443 issue affects the Lycos FileUploader Module, specifically the FileUploader.dll 2.0.0.2 ActiveX control (FileUploader.FUploadCtl.1). A heap-based buffer overflow is triggered by a long HandwriterFilename property value, allowing remote attackers to execute arbitrary code. This is...

CVE-2008-0443

Heap-based buffer overflow in the FileUploader.FUploadCtl.1 ActiveX control in FileUploader.dll 2.0.0.2 in Lycos FileUploader Module allows remote attackers to execute arbitrary code via a long HandwriterFilename property value. NOTE: some of these details are obtained from third party informatio...

Integrity Clientless Security (ICS) Update 3.7.205.0

Check Point Integrity ™ Clientless Security ICS protects your Web site by detecting and disabling spyware processes and allowing you to enforce security policies before a user logs onto your network. Using ICS you can prevent users with potentially harmful software from accessing your Web site, a...

ImageShack Toolbar ActiveX unauthorized access

Insecure method allows local files reading access...

CVE-2008-0437

Multiple buffer overflows in the WebHPVCInstall.HPVirtualRooms14 ActiveX control in HPVirtualRooms14.dll 1.0.0.100, as used in the installation process for HP Virtual Rooms, allow remote attackers to execute arbitrary code via a long 1 AuthenticationURL, 2 PortalAPIURL, or 3 cabroot property valu...

Buffer overflow

Multiple buffer overflows in the WebHPVCInstall.HPVirtualRooms14 ActiveX control in HPVirtualRooms14.dll 1.0.0.100, as used in the installation process for HP Virtual Rooms, allow remote attackers to execute arbitrary code via a long 1 AuthenticationURL, 2 PortalAPIURL, or 3 cabroot property valu...

CVE-2008-0437

Multiple buffer overflows in the WebHPVCInstall.HPVirtualRooms14 ActiveX control in HPVirtualRooms14.dll 1.0.0.100, as used in the installation process for HP Virtual Rooms, allow remote attackers to execute arbitrary code via a long 1 AuthenticationURL, 2 PortalAPIURL, or 3 cabroot property valu...

CVE-2008-0437

The CVE-2008-0437 issue affects the WebHPVCInstall.HPVirtualRooms14 ActiveX control (HPVirtualRooms14.dll 1.0.0.100) used in HP Virtual Rooms installation. According to the connected Nessus entry, multiple buffer-overflow vulnerabilities exist in properties such as AuthenticationURL, PortalAPIURL...

Buffer overflow

Multiple buffer overflows in Toshiba Surveillance Surveillix RecordSend ActiveX control MeIpCamX.DLL 1.0.0.4 allow remote attackers to execute arbitrary code via long arguments to the 1 SetPort and 2 SetIpAddress methods...

CVE-2008-0399

Multiple buffer overflows in Toshiba Surveillance Surveillix RecordSend ActiveX control MeIpCamX.DLL 1.0.0.4 allow remote attackers to execute arbitrary code via long arguments to the 1 SetPort and 2 SetIpAddress methods...

CVE-2008-0399

The vulnerability CVE-2008-0399 affects Toshiba Surveillance (Surveillix) RecordSend ActiveX control (MeIpCamX.DLL 1.0.0.4). It involves multiple buffer overflows that allow remote attackers to execute arbitrary code by supplying long arguments to the SetPort and SetIpAddress methods. This is des...

CVE-2008-0399

Multiple buffer overflows in Toshiba Surveillance Surveillix RecordSend ActiveX control MeIpCamX.DLL 1.0.0.4 allow remote attackers to execute arbitrary code via long arguments to the 1 SetPort and 2 SetIpAddress methods...

RTS Sentry PTZCamPanelCtrl ActiveX控件远程栈溢出漏洞

BUGTRAQ ID: 27304 RTS Sentry是系列视频监控和记录设备。 RTS Sentry的ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 RTS Sentry监控设备客户端所安装的PTZCamPanelCtrl ActiveX控件（CamPanel.dll）没有正确地处理对ConnectServer函数的输入参数，如果用户受骗访问了恶意站点并向该方式传送了超长user参数的话，就可能触发栈溢出，导致执行任意指令。 RTS Sentry CamPanel.dll 2.1.0.2 RTS Sentry ----------...