Macrovision InstallShield Update Service ActiveX Unsafe Method

This module allows attackers to execute code via an unsafe method in Macrovision InstallShield 2008. Module Options msf use exploit/windows/browser/macrovision/unsafe msf undefinedunsafe show actions ...actions... msf undefinedunsafe set ACTION msf undefinedunsafe show options ...show and set...

FlashGet jccatch.dll ActiveX控件多个拒绝服务漏洞

FlashGet －全球最多人使用的下载工具。可支持多种资源格式。 IE浏览器在以畸形参数调用FlashGet的jccatch.dll ActiveX控件时存在漏洞，恶意网站可能利用此漏洞导致用户浏览器崩溃。 如果用户受骗打开了恶意的WEB页面的话，就会触发这个漏洞，导致浏览器崩溃。 FlashGet 1.9.6.1073 临时解决方法： 在IE中禁用 FlashGet jccatch.dll ActiveX控件，为以下CLSID设置kill bit： FB5DA724-162B-11D3-8B9B-AA70B4B0B524 或将以下文本保存为.REG文件并导入： Windows...

RealPlayer playlist name stack buffer overflow

Overview RealPlayer contains a stack buffer overflow in the handling of playlist names, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description RealNetworks RealPlayer is a multimedia application that allows users to view local and remote...

On Yahoo! Messenger 0day exploit ideas-vulnerability warning-the black bar safety net

This vulnerability exposure also have a couple of weeks, the official date has not out patch. Test procedure: http://download.yahoo.com/dl/msgr8/us/ymsgr8us.exe Vulnerability description Yahoo Messenger is a very popular instant messaging tool. Yahoo Messenger of the CYFT ActiveX control is...

RealPlayer 10.010.511 - ierpplug.dll ActiveX Control Import Playlist Name Stack Buffer Overflow

RealPlayer 10.010.511 - ierpplug.dll ActiveX Control Import Playlist Name Stack Buffer Overflow source: https://www.securityfocus.com/bid/26130/info RealPlayer is prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks of user-supplied input befor...

RealPlayer ierpplug.dll ActiveX Control Playlist Name Buffer Overflow

This module exploits a stack buffer overflow in RealOne Player V2 Gold Build 6.0.11.853 and RealPlayer 10.5 Build 6.0.12.1483. By sending an overly long string to the "Import" method, an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/browser/realplayer/impo...

RealPlayer 10.0/10.5/11 - 'ierpplug.dll' ActiveX Control Import Playlist Name Stack Buffer Overflow

source: https://www.securityfocus.com/bid/26130/info RealPlayer is prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks of user-supplied input before copying it to an insufficiently sized memory buffer. Attackers can exploit this issue to execu...

vimpx-overflow.txt

| VImpX ActiveX VImpX.ocx v. 4.7.3.0 Remote Buffer Overflows Exploit RejectedRecordsFile | Code by 'Saw13' | Software Site: http://www.dbsoftlab.com/e107plugins/content/content.php?content.53 | Special Fuck to : Delta Hacking Security Team--Farzad Sharifi- All Lashiayne Fucking MemberZ Special TA...

VImpX ActiveX buffer overflow

Buffer overflow with oversized RejectRecordFile paramater...

VImpX ActiveX (VImpX.ocx v. 4.7.3.0) Remote

!- | VImpX ActiveX VImpX.ocx v. 4.7.3.0 Remote Buffer Overflows Exploit RejectedRecordsFile | Code by 'Saw13' | Software Site: http://www.dbsoftlab.com/e107plugins/content/content.php?content.53 | Special Fuck to : Delta Hacking Security Team--Farzad Sharifi- All Lashiayne Fucking MemberZ Special...

Path traversal

Absolute path traversal vulnerability in a certain ActiveX control in PBEmail7Ax.dll in PBEmail 7 ActiveX Edition allows remote attackers to create or overwrite arbitrary files via a full pathname in the XmlFilePath argument to the SaveSenderToXml method...

Buffer overflow

Buffer overflow in the DB Software Laboratory VImpX VImpAX1 ActiveX control in VImpX.ocx 4.7.3.0 allows remote attackers to execute arbitrary code via a long RejectedRecordsFile parameter, a different vector than CVE-2007-2667...

CVE-2007-5446

Absolute path traversal vulnerability in a certain ActiveX control in PBEmail7Ax.dll in PBEmail 7 ActiveX Edition allows remote attackers to create or overwrite arbitrary files via a full pathname in the XmlFilePath argument to the SaveSenderToXml method...

CVE-2007-5445

Buffer overflow in the DB Software Laboratory VImpX VImpAX1 ActiveX control in VImpX.ocx 4.7.3.0 allows remote attackers to execute arbitrary code via a long RejectedRecordsFile parameter, a different vector than CVE-2007-2667...

CVE-2007-5446

Absolute path traversal vulnerability in a certain ActiveX control in PBEmail7Ax.dll in PBEmail 7 ActiveX Edition allows remote attackers to create or overwrite arbitrary files via a full pathname in the XmlFilePath argument to the SaveSenderToXml method...

CVE-2007-5446

CVE-2007-5446 represents an absolute path traversal in the PBEmail7Ax.dll ActiveX control (PBEmail 7 ActiveX Edition). The vulnerability allows a remote attacker to create or overwrite arbitrary files by supplying a full path to the XmlFilePath parameter of the SaveSenderToXml method. Reported ac...

CVE-2007-5446: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in a certain ActiveX control in PBEmail7Ax.dll in PBEmail 7 ActiveX Edition allows remote attackers to create or overwrite arbitrary files via a full pathname in the XmlFilePath argument to the SaveSenderToXml method...

Code injection

Unspecified vulnerability in a certain ActiveX control in Reconfig.DLL in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7...

CVE-2007-5436

Buffer overflow in a certain ActiveX control in ScanObjectBrowser.DLL in G DATA Antivirus 2007 might allow remote attackers to execute arbitrary code via unspecified parameters to the SelectPath function. NOTE: this issue might not cross privilege boundaries in most environments, since it is not...

CVE-2007-5438

Unspecified vulnerability in a certain ActiveX control in Reconfig.DLL in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7...