XUpload ActiveX Control AddFolder Method Buffer Overflow

The remote host contains a version of the XUpload ActiveX control from Persits Software that reportedly is affected by a buffer overflow in its 'AddFolder' method that can be triggered by a long argument. If a remote attacker can trick a user on the affected host into visiting a specially crafted...

DivX Player 6.6.0 - ActiveX 'SetPassword()' Denial of Service (PoC)

function crash var buff = ''; fori=0;i DivX SetPassword npUpload.dll Denial of Service Tested on IE 7 and Divx Player 6.6.0 Registers: EAX 00000000 ECX FFFFFFFF EDX 0191CA50 EBX 008E06E0 ESP 0191C9E4 EBP 0191CA50 ESI 00000000 EDI 00000000 EIP 061F2B52 npUpload.061F2B52 Access violation when readi...

Vantage Linguistics AnswerWorks 4 API ActiveX Control BoF Exploit

No description provided by source. !-- Vantage Linguistics AnswerWorks 4 API ActiveX Control Buffer Overflow Exploit Vulnerability discovered by Parvez Anwar Exploit written by e.b. References: http://secunia.com/advisories/26566/ CVE-2007-6387 Tested on Windows XP SP2fully patched English, IE6,...

Buffer overflow

Buffer overflow in a certain ActiveX control in SkyFexClient.ocx 1.0.2.77 in SkyFex Client 1.0 allows remote attackers to execute arbitrary code via long strings in the first four arguments to the Start method...

CVE-2007-6605

CVE-2007-6605 describes a buffer overflow in the SkyFex Client ActiveX control SkyFexClient.ocx 1.0.2.77, where long strings passed to the Start method’s first four arguments can allow remote code execution. The vulnerability affects SkyFex Client 1.0 and is triggered via crafted input sent to th...

Lotus Domino Web Access ActiveX control dwa7w.dll buffer overflow

Added: 12/31/2007 CVE: CVE-2007-4474 BID: 26972 OSVDB: 40954 Background Lotus Domino Web Access provides capabilities similar to those of the Lotus Notes client, delivered through a web browser. Problem A buffer overflow vulnerability in the Lotus Domino Web Access ActiveX control in the dwa7w.dl...

Lotus Domino Web Access ActiveX control dwa7w.dll buffer overflow

Added: 12/31/2007 CVE: CVE-2007-4474 BID: 26972 OSVDB: 40954 Background Lotus Domino Web Access provides capabilities similar to those of the Lotus Notes client, delivered through a web browser. Problem A buffer overflow vulnerability in the Lotus Domino Web Access ActiveX control in the dwa7w.dl...

Vantage Linguistics AnswerWorks 4 - API ActiveX Control Buffer Overflow

Vantage Linguistics AnswerWorks 4 - API ActiveX Control Buffer Overflow Vantage Linguistics AnswerWorks 4 API ActiveX Control Buffer Overflow Exploit function Check var buf = 'A'; while buf.length = 214 buf = buf + 'A'; // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378...

vantage-overflow.txt

Vantage Linguistics AnswerWorks 4 API ActiveX Control Buffer Overflow Exploit function Check var buf = 'A'; while buf.length = 214 buf = buf + 'A'; // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 =...

Vantage Linguistics AnswerWorks 4 API ActiveX Control BoF Exploit

Exploit for unknown platform in category remote exploits ================================================================= Vantage Linguistics AnswerWorks 4 API ActiveX Control BoF Exploit ================================================================= Vantage Linguistics AnswerWorks 4 API...

Lotus Domino Web Access ActiveX control dwa7w.dll buffer overflow

Added: 12/31/2007 CVE: CVE-2007-4474 BID: 26972 OSVDB: 40954 Background Lotus Domino Web Access provides capabilities similar to those of the Lotus Notes client, delivered through a web browser. Problem A buffer overflow vulnerability in the Lotus Domino Web Access ActiveX control in the dwa7w.dl...

Vantage Linguistics AnswerWorks 4 - API ActiveX Control Buffer Overflow

Vantage Linguistics AnswerWorks 4 API ActiveX Control Buffer Overflow Exploit function Check var buf = 'A'; while buf.length = 214 buf = buf + 'A'; // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 =...

Lotus Domino Web Access ActiveX control dwa7w.dll buffer overflow

Added: 12/31/2007 CVE: CVE-2007-4474 BID: 26972 OSVDB: 40954 Background Lotus Domino Web Access provides capabilities similar to those of the Lotus Notes client, delivered through a web browser. Problem A buffer overflow vulnerability in the Lotus Domino Web Access ActiveX control in the dwa7w.dl...

SkyFex Client 1.0 ActiveX Start() Method Remote Stack Overflow

No description provided by source. pre codespan style="font: 8pt Courier New;"span class="general1-symbol"body bgcolor="E0E0E0"----------------------------------------------------------------------------- bSkyFex Client 1.0 "Start" Method Remote Stack Overflow/b url: https://skyfex.com/ Author:...

Persists Software XUpload ActiveX control buffer overflow

Buffer overflow in AddFolder method...

SkyFex Client 1.0 ActiveX Start() Method Remote Stack Overflow

Exploit for unknown platform in category dos / poc ============================================================== SkyFex Client 1.0 ActiveX Start Method Remote Stack Overflow ==============================================================...

AOL YGPPicEdit.dll ActiveX控件多个远程溢出漏洞

BUGTRAQ ID: 27026 YGPPicEdit.dll是AOL产品所安装的图形编辑ActiveX控件。 YGPPicEdit.dll没有正确地验证多个属性的参数，如果用户受骗打开了恶意网页的话，就可能触发缓冲区溢出，导致执行任意指令。 AOL YGPPicEdit.dll 9.5.1.8 厂商补丁： AOL --- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.aol.com/ html head script language="JavaScript" DEFER function Check var s...

Persits Software XUpload ActiveX控件远程栈溢出漏洞

BUGTRAQ ID: 27025 XUpload是功能强大的客户端上传ActiveX控件，允许用户同时上传多个文件。 XUpload ActiveX控件（XUpload.ocx）在处理传送给AddFolder方式的参数时存在栈溢出漏洞，如果用户受骗访问了恶意站点并向该方式传送了超长参数的话，就可能触发这个溢出，导致执行任意指令。 Persits XUpload 2.1.0.1 厂商补丁： Persits ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://xupload.aspupload.com/ html...

SkyFex Client 1.0 - ActiveX Start() Method Remote Stack Overflow

SkyFex Client 1.0 - ActiveX Start Method Remote Stack Overflow ----------------------------------------------------------------------------- SkyFex Client 1.0 "Start" Method Remote Stack Overflow url: https://skyfex.com/ Author: shinnai mail: shinnaiatautisticidotorg site:...

SkyFex Client 1.0 - ActiveX 'Start()' Method Remote Stack Overflow

----------------------------------------------------------------------------- SkyFex Client 1.0 "Start" Method Remote Stack Overflow url: https://skyfex.com/ Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org Technical details: File: SkyFexClient.ocx Ver.: 1.0.2.77...