Directory traversal

Directory traversal vulnerability in the CLAVSetting.CLSetting.1 ActiveX control in CLAVSetting.DLL 1.00.1829 in the CLAVSetting module in CyberLink PowerDVD 7.0 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the argument to the CreateNewFile method...

Stack overflow

Stack-based buffer overflow in the ADM4 ActiveX control in adm4.dll in Altnet Download Manager 4.0.0.6, as used in 1 Kazaa 3.2.7 and 2 Grokster, allows remote attackers to execute arbitrary code via a long argument to the Install method. NOTE: the provenance of this information is unknown; the...

CVE-2007-5217

Stack-based buffer overflow in the ADM4 ActiveX control in adm4.dll in Altnet Download Manager 4.0.0.6, as used in 1 Kazaa 3.2.7 and 2 Grokster, allows remote attackers to execute arbitrary code via a long argument to the Install method. NOTE: the provenance of this information is unknown; the...

CVE-2007-5219

The CVE-2007-5219 issue affects CyberLink PowerDVD 7.0 via the CLAVSetting.DLL 1.00.1829 CLAVSetting.CLSetting.1 ActiveX control. The vulnerability is a directory traversal in CreateNewFile that allows remote attackers to create or overwrite arbitrary files by supplying a .. sequence in the argum...

Pegasus Imaging ThumbnailXpress 1.0 Remote Arbitrary File Deletion

Exploit for unknown platform in category remote exploits ================================================================== Pegasus Imaging ThumbnailXpress 1.0 Remote Arbitrary File Deletion ==================================================================...

CVE-2007-5217

Stack-based buffer overflow in the ADM4 ActiveX control in adm4.dll in Altnet Download Manager 4.0.0.6, as used in 1 Kazaa 3.2.7 and 2 Grokster, allows remote attackers to execute arbitrary code via a long argument to the Install method. NOTE: the provenance of this information is unknown; the...

CVE-2007-5217

CVE-2007-5217 is a stack-based buffer overflow in the ADM4 ActiveX control (adm4.dll) used by Altnet Download Manager 4.0.0.6, and shipped with Kazaa Media Desktop 3.2.7 (and Grokster). The vulnerability allows remote attackers to execute arbitrary code by passing a long argument to the Install m...

Kazaa Altnet Download Manager ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in the Altnet Download Manager ActiveX Control amd4.dll bundled with Kazaa Media Desktop 3.2.7. By sending an overly long string to the "Install" method, an attacker may be able to execute arbitrary code. Module Options msf use...

edraw53-activex.txt

----------------------------------------------------------------------------- EDraw Office Viewer Component 5.3 "FtpDownloadFile" Remote BoF url: http://www.ocxt.com/officeviewer.php Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educationa...

EDraw Office Viewer ActiveX (officeviewer.ocx) HttpDownloadFileToTempDir Method Overflow

The remote host contains the EDraw Office Viewer Component, an ActiveX control for working with Microsoft Office documents. The version of this control installed on the remote host contains a buffer overflow that can be triggered by a long value for the first argument of the...

Microsoft Visual Studio PDWizard.ocx ActiveX vulnerability

Added: 09/30/2007 CVE: CVE-2007-4891 BID: 25638 OSVDB: 37106 Background Microsoft Visual Studio is a product for facilitating software development on Windows operating systems. Problem ActiveX controls contained in the PDWizard.ocx file in Microsoft Visual Studio 6.0 expose the StartProcess metho...

Microsoft Visual Studio PDWizard.ocx ActiveX vulnerability

Added: 09/30/2007 CVE: CVE-2007-4891 BID: 25638 OSVDB: 37106 Background Microsoft Visual Studio is a product for facilitating software development on Windows operating systems. Problem ActiveX controls contained in the PDWizard.ocx file in Microsoft Visual Studio 6.0 expose the StartProcess metho...

Microsoft Visual Studio PDWizard.ocx ActiveX vulnerability

Added: 09/30/2007 CVE: CVE-2007-4891 BID: 25638 OSVDB: 37106 Background Microsoft Visual Studio is a product for facilitating software development on Windows operating systems. Problem ActiveX controls contained in the PDWizard.ocx file in Microsoft Visual Studio 6.0 expose the StartProcess metho...

Microsoft Visual Studio PDWizard.ocx ActiveX vulnerability

Added: 09/30/2007 CVE: CVE-2007-4891 BID: 25638 OSVDB: 37106 Background Microsoft Visual Studio is a product for facilitating software development on Windows operating systems. Problem ActiveX controls contained in the PDWizard.ocx file in Microsoft Visual Studio 6.0 expose the StartProcess metho...

Ask Toolbar ToolbarSettings ActiveX控件远程栈溢出漏洞

BUGTRAQ ID: 25785 Ask Toolbar是安装在Internet Explorer和Firefox浏览器上的搜索工具栏。 Ask Toolbar的ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 AskJeevesToolBar.SettingsPlugin.1 ActiveX控件（askBar.dll）在处理ShortFormat属性时存在栈溢出漏洞。如果用户受骗访问了恶意网页并向该属性传送了超过500字节的超长字符串的话，就可能触发这个溢出，导致执行任意指令。 Ask.com Ask Toolbar 4.0.2.53...

ebCrypt ActiveX控件任意文件覆盖及拒绝服务漏洞

BUGTRAQ ID: 25789,25787 ebCrypt是一套ActiveX组件集，为VisualBasic、VBScript、JScript等提供强加密算法。 ebCrypt的ActiveX控件实现上存在多个安全漏洞，远程攻击者可能利用这些漏洞控制用户系统或导致拒绝服务。 ebCrypt.ebcPRNGenerator.1 ActiveX控件（ebCrypt.dll）中的SaveToFile方式保存了参数所指定的文件，这可能导致覆盖并破坏系统上的任意文件；如果向AddString方式传送了不少于一个字符的话，还可能导致拒绝服务。以下是异常的dump： Access violati...

Stack overflow

Stack-based buffer overflow in the AskJeevesToolBar.SettingsPlugin.1 ActiveX control in askBar.dll in IAC Search & Media ask.com Ask Toolbar 4.0.2.53 and earlier allows remote attackers to execute arbitrary code via a long ShortFormat property value. NOTE: some of these details are obtained from...

Security feature bypass

A certain ActiveX control in EBCRYPT.DLL 2.0 in EB Design ebCrypt allows remote attackers to cause a denial of service crash via a string argument to the AddString method...

Path traversal

Absolute path traversal vulnerability in the EbCrypt.ebcPRNGenerator.1 ActiveX control in EBCRYPT.DLL 2.0.0.2087 and earlier in EB Design ebCrypt allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the SaveToFile method. NOTE: some of these detail...

CVE-2007-5107

Stack-based buffer overflow in the AskJeevesToolBar.SettingsPlugin.1 ActiveX control in askBar.dll in IAC Search & Media ask.com Ask Toolbar 4.0.2.53 and earlier allows remote attackers to execute arbitrary code via a long ShortFormat property value. NOTE: some of these details are obtained from...