CVE-2007-5111

A certain ActiveX control in EBCRYPT.DLL 2.0 in EB Design ebCrypt allows remote attackers to cause a denial of service crash via a string argument to the AddString method...

CVE-2007-5110

Absolute path traversal vulnerability in the EbCrypt.ebcPRNGenerator.1 ActiveX control in EBCRYPT.DLL 2.0.0.2087 and earlier in EB Design ebCrypt allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the SaveToFile method. NOTE: some of these detail...

CVE-2007-5111

The CVE-2007-5111 entry describes a vulnerability in the EB Design ebCrypt ActiveX control (EBCRYPT.DLL 2.0) where a string argument to the AddString method can be exploited by a remote attacker to cause a crash (DoS). The description specifies the affected component and the root cause (input han...

CVE-2007-5110

Absolute path traversal vulnerability in the EbCrypt.ebcPRNGenerator.1 ActiveX control in EBCRYPT.DLL 2.0.0.2087 and earlier in EB Design ebCrypt allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the SaveToFile method. NOTE: some of these detail...

CVE-2007-5107

The CVE-2007-5107 entry describes a stack-based buffer overflow in the AskJeevesToolBar.SettingsPlugin.1 ActiveX control (askBar.dll) used by the IAC/Ask Toolbar on Windows. A long ShortFormat property value allows remote code execution. Related CVE-2007-5108 is suspected to be the same issue, bu...

CVE-2007-5110

CVE-2007-5110 describes an absolute path traversal in the EB Design ebCrypt ActiveX control (EbCrypt.eb_c_PRNGenerator.1) within EBCRYPT.DLL 2.0.0.2087 and earlier. The vulnerability allows remote attackers to create or overwrite arbitrary files by passing a full pathname to the SaveToFile method...

CVE-2007-5107

Stack-based buffer overflow in the AskJeevesToolBar.SettingsPlugin.1 ActiveX control in askBar.dll in IAC Search & Media ask.com Ask Toolbar 4.0.2.53 and earlier allows remote attackers to execute arbitrary code via a long ShortFormat property value. NOTE: some of these details are obtained from...

CVE-2007-5070

Heap-based buffer overflow in the EasyMailMessagePrinter ActiveX control in emprint.DLL 6.0.1.0 in the Quiksoft EasyMail MessagePrinter Object allows remote attackers to execute arbitrary code via a long string in the first argument to the SetFont method...

Heap overflow

Heap-based buffer overflow in the EasyMailMessagePrinter ActiveX control in emprint.DLL 6.0.1.0 in the Quiksoft EasyMail MessagePrinter Object allows remote attackers to execute arbitrary code via a long string in the first argument to the SetFont method...

CVE-2007-5070

The CVE-2007-5070 entry describes a heap-based buffer overflow in the EasyMailMessagePrinter ActiveX control (emprint.DLL 6.0.1.0) of Quiksoft EasyMail MessagePrinter Object. The vulnerability allows remote code execution via a long string passed as the first argument to SetFont, indicating the i...

CVE-2007-5070

Heap-based buffer overflow in the EasyMailMessagePrinter ActiveX control in emprint.DLL 6.0.1.0 in the Quiksoft EasyMail MessagePrinter Object allows remote attackers to execute arbitrary code via a long string in the first argument to the SetFont method...

Buffer overflow

Buffer overflow in a certain ActiveX control in Xunlei Web Thunder 5.6.9.344, possibly the DapPlayer ActiveX control in DapPlayerNow.dll, allows remote attackers to execute arbitrary code via a long first argument to the DownURL2 method. NOTE: some of these details are obtained from third party...

CVE-2007-5064

Buffer overflow in a certain ActiveX control in Xunlei Web Thunder 5.6.9.344, possibly the DapPlayer ActiveX control in DapPlayerNow.dll, allows remote attackers to execute arbitrary code via a long first argument to the DownURL2 method. NOTE: some of these details are obtained from third party...

CVE-2007-5064

A buffer overflow vulnerability exists in an ActiveX control within Xunlei Web Thunder 5.6.9.344 , specifically potentially affecting the DapPlayer ActiveX control in DapPlayer_Now.dll. The root cause is a failure to perform adequate boundary-checks on user-supplied data, which allows a remote at...

CVE-2007-5064

Buffer overflow in a certain ActiveX control in Xunlei Web Thunder 5.6.9.344, possibly the DapPlayer ActiveX control in DapPlayerNow.dll, allows remote attackers to execute arbitrary code via a long first argument to the DownURL2 method. NOTE: some of these details are obtained from third party...

Ask.comAskJeeves Toolbar Toolbar 4.0.2.53 - ActiveX Remote Buffer Overflow

Ask.comAskJeeves Toolbar Toolbar 4.0.2.53 - ActiveX Remote Buffer Overflow // This is new technique I invent call 'heap fill attack' var str0ke = 0x0d0d0d0d; var sucks = unescape // Launch the system calculator 100 times because what else? // This code currently not work on Solaris/Sparc...

AskJeeves Toolbar 4.0.2.53 activex Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================================= AskJeeves Toolbar 4.0.2.53 activex Remote Buffer Overflow Exploit ================================================================= // This is new technique I invent call 'he...

Ask.com Toolbar askBar.dll ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in Ask.com Toolbar 4.0.2.53. An attacker may be able to execute arbitrary code by sending an overly long string to the "ShortFormat" method in askbar.dll. Module Options msf use exploit/windows/browser/ask/shortformat msf undefinedshortformat show...

Ask.com/AskJeeves Toolbar Toolbar 4.0.2.53 - ActiveX Remote Buffer Overflow

// This is new technique I invent call 'heap fill attack' var str0ke = 0x0d0d0d0d; var sucks = unescape // Launch the system calculator 100 times because what else? // This code currently not work on Solaris/Sparc "%u9090%u9090%uE8FC%u0044%u0000%u458B%u8B3C%u057C%u0178%u8BEF%u184F%u5F8B%u0120" +...

Xunlei Web Thunder ActiveX控件DownURL2方法远程缓冲区溢出漏洞

Xunlei Web Thunder是一款在线加速下载程序。 Xunlei Web Thunder提供的ActiveX控件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 问题存在于DownURL2方法处理中，由于对参数缺少充分过滤，构建恶意WEB页，诱使用户访问，可导致以应用程序权限执行任意指令。 Xunlei Web Thunder 5.6.9.344 目前没有解决方案提供： http://my.xunlei.com/setup.htm OBJECT id=target classid=clsid:...