CVE-2007-6228

The CVE-2007-6228 issue is a stack-based buffer overflow in the yt.ythelper.2 ActiveX control used by Yahoo! Toolbar 1.4.1. A long argument to the c() method can remotely trigger a denial of service (browser crash). Public documentation notes no patch from the vendor at the time of reports; users...

PT-2007-7124 · Realnetworks · Realplayer

Name of the Vulnerable Software and Affected Versions: RealPlayer version 11 Description: A certain ActiveX control in RealPlayer allows remote attackers to cause a denial of service, resulting in an application crash, via a malformed .au file that triggers a divide-by-zero error. Recommendations...

PT-2007-7113 · Realnetworks · Realplayer

Name of the Vulnerable Software and Affected Versions: RealPlayer version 11 Description: The issue allows remote attackers to cause a denial of service, resulting in a browser crash, by providing a certain argument to the GetSourceTransport method in the RealAudioObjects.RealAudio ActiveX contro...

VLC 0.86 < 0.86d ActiveX Remote Bad Pointer Initialization PoC

Exploit for unknown platform in category dos / poc ============================================================== VLC 0.86 var mm = null; if target != null...

Yahoo! Toolbar Helper类ActiveX控件远程缓冲区拒绝服务漏洞

Yahoo! Toolbar是基于浏览器的插件。 Yahoo! Toolbar Helper类ActiveX控件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 问题存在于Yahoo! Toolbar Helper类中的c方法中，构建超长字符串作为参数数据，并诱使用户访问，可导致以应用程序进程权限执行任意指令。 Yahoo! Toolbar 1.4.1 目前没有详细解决方案提供： http://toolbar.yahoo.com/ ---------------------- !-- written by e.b. -- html head script...

Microsoft Windows媒体数码版权管理ActiveX控件缓冲区溢出漏洞

Microsoft Windows Media Digital Rights Management是一款微软公司提供的媒体数字版权管理应用程序。 Microsoft Windows DRM包含的ActiveX控件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 问题是"drmstor.dll"库包含的ActiveX控件对StoreLicense方法的参数缺少充分边界检查，构建恶意的WEB页，诱使用户打开，可导致以应用程序进程权限执行任意指令。 Microsoft Windows Media DRM 目前没有解决方案提供：...

VideoLAN VLC Media Player 0.86 0.86d - ActiveX Remote Bad Pointer Initialization

VideoLAN VLC Media Player 0.86 0.86d - ActiveX Remote Bad Pointer Initialization var mm = null; if target != null var param1 = unescape"%u0505%u0505"; var salame = "defaultV"; var salame2 = 1; var salame3 = 0; ag = unescape"%uCCCC%uCCCC"; sh = unescape"%u9090%u909...

CVE-2007-6235: Improper Input Validation

A certain ActiveX control in RealNetworks RealPlayer 11 allows remote attackers to cause a denial of service application crash via a malformed .au file that triggers a divide-by-zero error. NOTE: this might be related to CVE-2007-4904...

RealPlayer RMOC3260.DLL ActiveX控件导入拒绝服务漏洞

RealPlayer是一款流行的媒体播放程序。 RealPlayer包含的RMO3260.DLL ActiveX控件处理存在边界条件错误，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 问题存在于rmoc3260.ll中的GetSourceTransport函数中，构建恶意的文件，诱使用户打开，可导致应用程序崩溃。 Real Networks RealPlayer 11 目前没有解决方案提供： http://www.realnetworks.com/ 1，拷贝和粘贴如下代码到filepoc.wsf。 2，双击运行：...

VideoLAN VLC Media Player 0.86 < 0.86d - ActiveX Remote Bad Pointer Initialization

var mm = null; if target != null var param1 = unescape"%u0505%u0505"; var salame = "defaultV"; var salame2 = 1; var salame3 = 0; ag = unescape"%uCCCC%uCCCC"; sh = unescape"%u9090%u9090%u9090%u9090%u9090%u9090%u9090%u9090%"; sz = sh.length 2;...

CVE-2007-6228: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the Helper class in the yt.ythelper.2 ActiveX control in Yahoo! Toolbar 1.4.1 allows remote attackers to cause a denial of service browser crash via a long argument to the c method...

Integrity Clientless Security (ICS) Update 3.7.193.0

Check Point Integrity ™ Clientless Security ICS protects your Web site by detecting and disabling spyware processes and allowing you to enforce security policies before a user logs onto your network. Using ICS you can prevent users with potentially harmful software from accessing your Web site, a...

VLC Activex Bad Pointer Initialization Vulnerability

Advisory ID Internal CORE-2007-1004 1. Advisory Information Title: VLC Activex Bad Pointer Initialization Vulnerability Advisory ID: CORE-2007-1004 Advisory URL: https://www.coresecurity.com/core-labs/advisories/vlc-activex--vulnerability Date published: 2007-12-03 Date of last update: 2007-12-03...

realpdos_au.txt

Type : DOS attack when processing a malformed AU file. Affected : Realplayer 11 ActiveX on Win Vista and Win XP SP2 Date : 01-12-2007 Author : Adonis, Abed safehack.com Link : http://www.safehack.com/Advisory/realpdosau.txt Disclaimer ---------- The information in this text is believed to be true...

US-CERT Technical Cyber Security Alert TA07-334A -- Apple QuickTime RTSP Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA07-334A Apple QuickTime RTSP Buffer Overflow Original release date: November 30, 2007 Last revised: -- Source: US-CERT Systems Affected A buffer overflow in Apple QuickTime affects: Apple...

US-CERT Technical Cyber Security Alert TA07-334A -- Apple QuickTime RTSP Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA07-334A Apple QuickTime RTSP Buffer Overflow Original release date: November 30, 2007 Last revised: -- Source: US-CERT Systems Affected A buffer overflow in Apple QuickTime affects: Apple...

Heap overflow

A certain ActiveX control in 1 OScan8.ocx and 2 Oscan81.ocx in BitDefender Online Anti-Virus Scanner 8.0 allows remote attackers to execute arbitrary code via a long argument to the InitX method that begins with a "%%" sequence, which is misinterpreted as a Unicode string and decoded twice, leadi...

CVE-2007-6189

A certain ActiveX control in 1 OScan8.ocx and 2 Oscan81.ocx in BitDefender Online Anti-Virus Scanner 8.0 allows remote attackers to execute arbitrary code via a long argument to the InitX method that begins with a "%%" sequence, which is misinterpreted as a Unicode string and decoded twice, leadi...

CVE-2007-6189

A certain ActiveX control in 1 OScan8.ocx and 2 Oscan81.ocx in BitDefender Online Anti-Virus Scanner 8.0 allows remote attackers to execute arbitrary code via a long argument to the InitX method that begins with a "%%" sequence, which is misinterpreted as a Unicode string and decoded twice, leadi...

CVE-2007-6189

CVE-2007-6189 affects BitDefender Online Anti-Virus Scanner 8.0 via two ActiveX controls (OScan8.ocx and Oscan81.ocx). A long argument to the InitX method that begins with the sequence “%%” is misparsed as a Unicode string and decoded twice, leading to improper memory allocation and a heap-based ...