PT-2007-7113 · Realnetworks · Realplayer

Name of the Vulnerable Software and Affected Versions: RealPlayer version 11 Description: The issue allows remote attackers to cause a denial of service, resulting in a browser crash, by providing a certain argument to the GetSourceTransport method in the RealAudioObjects.RealAudio ActiveX contro...

Yahoo! Toolbar Helper类ActiveX控件远程缓冲区拒绝服务漏洞

Yahoo! Toolbar是基于浏览器的插件。 Yahoo! Toolbar Helper类ActiveX控件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 问题存在于Yahoo! Toolbar Helper类中的c方法中，构建超长字符串作为参数数据，并诱使用户访问，可导致以应用程序进程权限执行任意指令。 Yahoo! Toolbar 1.4.1 目前没有详细解决方案提供： http://toolbar.yahoo.com/ ---------------------- !-- written by e.b. -- html head script...

VideoLAN VLC Media Player 0.86 < 0.86d - ActiveX Remote Bad Pointer Initialization

var mm = null; if target != null var param1 = unescape"%u0505%u0505"; var salame = "defaultV"; var salame2 = 1; var salame3 = 0; ag = unescape"%uCCCC%uCCCC"; sh = unescape"%u9090%u9090%u9090%u9090%u9090%u9090%u9090%u9090%"; sz = sh.length 2;...

RealPlayer RMOC3260.DLL ActiveX控件导入拒绝服务漏洞

RealPlayer是一款流行的媒体播放程序。 RealPlayer包含的RMO3260.DLL ActiveX控件处理存在边界条件错误，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 问题存在于rmoc3260.ll中的GetSourceTransport函数中，构建恶意的文件，诱使用户打开，可导致应用程序崩溃。 Real Networks RealPlayer 11 目前没有解决方案提供： http://www.realnetworks.com/ 1，拷贝和粘贴如下代码到filepoc.wsf。 2，双击运行：...

VLC 0.86 < 0.86d ActiveX Remote Bad Pointer Initialization PoC

Exploit for unknown platform in category dos / poc ============================================================== VLC 0.86 var mm = null; if target != null...

Integrity Clientless Security (ICS) Update 3.7.193.0

Check Point Integrity ™ Clientless Security ICS protects your Web site by detecting and disabling spyware processes and allowing you to enforce security policies before a user logs onto your network. Using ICS you can prevent users with potentially harmful software from accessing your Web site, a...

VLC Activex Bad Pointer Initialization Vulnerability

Advisory ID Internal CORE-2007-1004 1. Advisory Information Title: VLC Activex Bad Pointer Initialization Vulnerability Advisory ID: CORE-2007-1004 Advisory URL: https://www.coresecurity.com/core-labs/advisories/vlc-activex--vulnerability Date published: 2007-12-03 Date of last update: 2007-12-03...

realpdos_au.txt

Type : DOS attack when processing a malformed AU file. Affected : Realplayer 11 ActiveX on Win Vista and Win XP SP2 Date : 01-12-2007 Author : Adonis, Abed safehack.com Link : http://www.safehack.com/Advisory/realpdosau.txt Disclaimer ---------- The information in this text is believed to be true...

US-CERT Technical Cyber Security Alert TA07-334A -- Apple QuickTime RTSP Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA07-334A Apple QuickTime RTSP Buffer Overflow Original release date: November 30, 2007 Last revised: -- Source: US-CERT Systems Affected A buffer overflow in Apple QuickTime affects: Apple...

US-CERT Technical Cyber Security Alert TA07-334A -- Apple QuickTime RTSP Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA07-334A Apple QuickTime RTSP Buffer Overflow Original release date: November 30, 2007 Last revised: -- Source: US-CERT Systems Affected A buffer overflow in Apple QuickTime affects: Apple...

Heap overflow

A certain ActiveX control in 1 OScan8.ocx and 2 Oscan81.ocx in BitDefender Online Anti-Virus Scanner 8.0 allows remote attackers to execute arbitrary code via a long argument to the InitX method that begins with a "%%" sequence, which is misinterpreted as a Unicode string and decoded twice, leadi...

CVE-2007-6189

A certain ActiveX control in 1 OScan8.ocx and 2 Oscan81.ocx in BitDefender Online Anti-Virus Scanner 8.0 allows remote attackers to execute arbitrary code via a long argument to the InitX method that begins with a "%%" sequence, which is misinterpreted as a Unicode string and decoded twice, leadi...

CVE-2007-6189

A certain ActiveX control in 1 OScan8.ocx and 2 Oscan81.ocx in BitDefender Online Anti-Virus Scanner 8.0 allows remote attackers to execute arbitrary code via a long argument to the InitX method that begins with a "%%" sequence, which is misinterpreted as a Unicode string and decoded twice, leadi...

CVE-2007-6189

CVE-2007-6189 affects BitDefender Online Anti-Virus Scanner 8.0 via two ActiveX controls (OScan8.ocx and Oscan81.ocx). A long argument to the InitX method that begins with the sequence “%%” is misparsed as a Unicode string and decoded twice, leading to improper memory allocation and a heap-based ...

RealMedia RealPlayer Ierpplug.DLL PlayerProperty ActiveX Control Buffer Overflow Vulnerability

No description provided by source. !-- written by e.b. -- html head script language="JavaScript" DEFER function Check var s = "AAAA"; while s.length 999999 s=s+s; var obj = new ActiveXObject"IERPCTL.IERPCTL"; //FDC7A535-4070-4B92-A0EA-D9994BCC0DC5...

RichFX Basic Player ActiveX Control Multiple Buffer Overflow Vulnerabilities

No description provided by source. html head script language="JavaScript" DEFER function Check var s = "AAAA"; while s.length 999999 s=s+s; var obj = new ActiveXObject"RFXInstMgr.RFXInstMgr"; //47F59200-8783-11D2-8343-00A0C945A819 obj.DoInstalls; obj.QueryComponentss; /script /head body...

RichFX Basic Player ActiveX控件多个缓冲区溢出漏洞

RichFX Basic Player是一款基于浏览器的媒体播放插件。 RichFX Basic Player包含的控件不正确过滤参数数据，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 问题是控件对DoInstall，QueryComponents方法的参数缺少充分边界检查，构建恶意WEB页，诱使用户打开，可导致以应用程序进程权限执行任意指令。 RichFX RichFX Basic Player 1.1 + Real Networks RealPlayer 11 + Real Networks RealPlayer 11 Beta 6.0.14 550 目前没有解决方案提供：...

PPStream PowerList.OCX SetBkImage ActiveX控件缓冲区溢出漏洞

PPStream是一款在线媒体播放插件。 PPStream包含的PowerList.OCX控件不正确过滤参数数据，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 问题是PowerList.OCX控件对SetBkImage方法的参数缺少充分边界检查，构建恶意WEB页，诱使用户打开，可导致以应用程序进程权限执行任意指令。 PPStream PowerList.ocx 2.1.6 .2916 目前没有解决方案提供： http://www.ppstream.com/ http://www.sebug.net/exploit/2616.html...

Yahoo! Toolbar 1.4.1 Helper - Class ActiveX Control Remote Buffer Overflow (Denial of Service) (PoC)

Yahoo! Toolbar 1.4.1 Helper - Class ActiveX Control Remote Buffer Overflow Denial of Service PoC source: https://www.securityfocus.com/bid/26656/info Yahoo! Toolbar ActiveX Control is prone to a buffer-overflow vulnerability. An attacker can exploit this issue to trigger denial-of-service...

BitDefender Online Scanner 8 ActiveX Heap Overflow Exploit

No description provided by source. =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- BitDefender OScan8.ocx / Oscan81.ocx ActiveX Exploit =-=-=-=-=-=-=-=-=-=-=-=-PRIVATE! NOT PUBLIC!=-=-=-=-=-=-=-=-=-=-=-=- http://research.eeye.com/html/advisories/published/AD20071120.html...