Move Media Player Quantum Streaming ActiveX控件多个栈溢出漏洞

BUGTRAQ ID: 25529 Move Media Player是一款网络流媒体播放器。 Move Media Player的Quantum Streaming IE Player ActiveX控件在处理Play和Buzzer方式的参数时存在栈溢出漏洞。如果用户受骗访问了恶意站点并向受影响的方式传送了超长字符串的话，就可能触发这些溢出，导致执行任意代码。 Move Networks Move Media Player 1.0.0.1 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.movenetworks.co...

Earth Resource Mapping NCSView ActiveX control stack buffer overflows

Overview The Earth Resource Mapping NCSView ActiveX control contains multiple stack buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The Earth Resource Mapping NCSView ActiveX control, which is provided by...

Stack overflow

Multiple stack-based buffer overflows in the Quantum Streaming Internet Explorer Player ActiveX control in qsp2ie07051001.dll 1.0.0.1 in Move Media Player allow remote attackers to execute arbitrary code via a long string to the 1 Play and 2 Buzzer methods...

Stack overflow

Multiple stack-based buffer overflows in the Intuit QuickBooks Online Edition ActiveX control before 10 allow remote attackers to execute arbitrary code via unspecified vectors...

Path traversal

Multiple unspecified vulnerabilities in the Intuit QuickBooks Online Edition ActiveX control before 10 allow remote attackers to create or overwrite arbitrary files via unspecified arguments to the 1 httpGETToFile, 2 httpPOSTFromFile, and possibly other methods, probably involving path traversal...

CVE-2007-0322

Multiple stack-based buffer overflows in the Intuit QuickBooks Online Edition ActiveX control before 10 allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2007-4471

Multiple unspecified vulnerabilities in the Intuit QuickBooks Online Edition ActiveX control before 10 allow remote attackers to create or overwrite arbitrary files via unspecified arguments to the 1 httpGETToFile, 2 httpPOSTFromFile, and possibly other methods, probably involving path traversal...

CVE-2007-4722

Multiple stack-based buffer overflows in the Quantum Streaming Internet Explorer Player ActiveX control in qsp2ie07051001.dll 1.0.0.1 in Move Media Player allow remote attackers to execute arbitrary code via a long string to the 1 Play and 2 Buzzer methods...

CVE-2007-0322

CVE-2007-0322 describes multiple stack-based buffer overflows in the Intuit QuickBooks Online Edition ActiveX control prior to version 10, enabling remote code execution when a user visits a crafted page. The issue affects the QuickBooks Online Edition ActiveX control used in Internet Explorer; e...

CVE-2007-4471

The CVE-2007-4471 entry relates to multiple vulnerabilities in the Intuit QuickBooks Online Edition ActiveX control prior to version 10. The ActiveX control’s methods, notably httpGETToFile() and httpPOSTFromFile(), could be abused to download or upload arbitrary files and, via path traversal in ...

CVE-2007-4722

CVE-2007-4722 : Multiple stack-based buffer overflows in the Move Media Player’s Quantum Streaming IE ActiveX control (qsp2ie07051001.dll 1.0.0.1) allow remote attackers to execute arbitrary code. The vulnerability arises from insufficient bounds-checking in the ActiveX methods, notably (1) Play ...

CVE-2007-0322

Multiple stack-based buffer overflows in the Intuit QuickBooks Online Edition ActiveX control before 10 allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2007-4722

Multiple stack-based buffer overflows in the Quantum Streaming Internet Explorer Player ActiveX control in qsp2ie07051001.dll 1.0.0.1 in Move Media Player allow remote attackers to execute arbitrary code via a long string to the 1 Play and 2 Buzzer methods...

CVE-2007-4471

Multiple unspecified vulnerabilities in the Intuit QuickBooks Online Edition ActiveX control before 10 allow remote attackers to create or overwrite arbitrary files via unspecified arguments to the 1 httpGETToFile, 2 httpPOSTFromFile, and possibly other methods, probably involving path traversal...

CVE-2007-4471: Improper Limitation of a Pathname to a Restricted Directory

Multiple unspecified vulnerabilities in the Intuit QuickBooks Online Edition ActiveX control before 10 allow remote attackers to create or overwrite arbitrary files via unspecified arguments to the 1 httpGETToFile, 2 httpPOSTFromFile, and possibly other methods, probably involving path traversal...

CVE-2007-0322: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in the Intuit QuickBooks Online Edition ActiveX control before 10 allow remote attackers to execute arbitrary code via unspecified vectors...

McAfee VirusScan 10.0.21 ActiveX control Stack Overflow PoC

Exploit for unknown platform in category dos / poc =========================================================== McAfee VirusScan 10.0.21 ActiveX control Stack Overflow PoC =========================================================== Proof of Concept - Mc Afee Viruscan Stack Overflow v10.0.21 Proof ...

Intuit QuickBooks Online Edition ActiveX control stack buffer overflows

Overview The Intuit QuickBooks Online Edition ActiveX control contains multiple stack buffer overflows, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Intuit QuickBooks Online Edition is a version of QuickBooks that functions withi...

Intuit QuickBooks Online Edition ActiveX control fails to properly restrict access to methods

Overview The Intuit QuickBooks Online Edition ActiveX control fails to properly restrict access to dangerous methods, which could allow a remote attacker to execute arbitrary code on a vulnerable system. Description Intuit QuickBooks Online Edition is a version of QuickBooks that is implemented a...

Broderbund Expressit 3DGreetings Player ActiveX control buffer overflows

Overview The Broderbund Expressit 3DGreetings Player ActiveX control contains multiple buffer overflows, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The 3DGreetings Player is an ActiveX control that displays 3D greeting cards...