NGS-enjoysap-heap.txt

======= Summary ======= Name: EnjoySAP, SAP GUI for Windows - Heap Overflow Release Date: 5 July 2007 Reference: NGS00482 Discover: Mark Litchfield Vendor: SAP Vendor Reference: SECRES-290 Systems Affected: All ASCII Versions Risk: High Status: Fixed ======== TimeLine ======== Discovered: 4 Janua...

NGS-enjoysap-stack.txt

======= Summary ======= Name: EnjoySAP, SAP GUI for Windows - Stack Overflow Release Date: 5 July 2007 Reference: NGS00483 Discover: Mark Litchfield Vendor: SAP Vendor Reference: SECRES-289 Systems Affected: All Versions Risk: High Status: Fixed ======== TimeLine ======== Discovered: 4 January 20...

Chilkat Zip ActiveX Component 12.4 - Multiple Insecure Methods

Chilkat Zip ActiveX Component 12.4 - Multiple Insecure Methods ------------------------------------------------------------------------------ Chilkat Software Chilkat Zip ActiveX Component ChilkatZip2.dll v. 12.4.2.0 "SaveLastError" and "WriteExe" Insecure Methods url: http://www.chilkatsoft.com/...

NeoTracePro 3.25 - ActiveX TraceTarget() Remote Buffer Overflow

NeoTracePro 3.25 - ActiveX TraceTarget Remote Buffer Overflow Date: 24/03/07 México / PRIVATE DON'T DISTRIBUTE PRIVATE DON'T DISTRIBUTE PRIVATE / I found this buffer overflow fuzzing NeoTraceExplorer.dll an ActiveX Control with ComRaider from iDefense. It has a method called TraceTarget which ca...

Chilkat Zip ActiveX Component 12.4 Multiple Insecure Methods Exploit

Exploit for unknown platform in category remote exploits ==================================================================== Chilkat Zip ActiveX Component 12.4 Multiple Insecure Methods Exploit ====================================================================...

McAfee Visual Trace ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in the McAfee Visual Trace 3.25 ActiveX Control NeoTraceExplorer.dll 1.0.0.1. By sending an overly long string to the "TraceTarget" method, an attacker may be able to execute arbitrary code. Module Options msf use...

Chilkat Zip ActiveX Component 12.4 - Multiple Insecure Methods

------------------------------------------------------------------------------ Chilkat Software Chilkat Zip ActiveX Component ChilkatZip2.dll v. 12.4.2.0 "SaveLastError" and "WriteExe" Insecure Methods url: http://www.chilkatsoft.com/ author: shinnai mail: shinnaiatautisticidotorg site:...

Heap overflow

Heap-based buffer overflow in the rfcguisink.rfcguisink.1 ActiveX control in the EnjoySAP SAP GUI, on systems using ASCII versions, allows remote attackers to execute arbitrary code via a long first argument to the LaunchGui function...

DSquare Exploit Pack: D2SEC_KWEDIT

Name| d2seckwedit ---|--- CVE| CVE-2007-3605 Exploit Pack| D2ExploitPack Description| SAP EnjoySAP KWEdit.DLL ActiveX Stack Overflow Notes|...

Stack overflow

Stack-based buffer overflow in the kweditcontrol.kwedit.1 ActiveX control in FrontEnd\SapGui\kwedit.dll in the EnjoySAP SAP GUI allows remote attackers to execute arbitrary code via a long argument to the PrepareToPostHTML function...

Code injection

Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to create certain files via unspecified vectors...

CVE-2007-3605

Stack-based buffer overflow in the kweditcontrol.kwedit.1 ActiveX control in FrontEnd\SapGui\kwedit.dll in the EnjoySAP SAP GUI allows remote attackers to execute arbitrary code via a long argument to the PrepareToPostHTML function...

Code injection

Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to cause a denial of service process crash via unspecified vectors...

CVE-2007-3607

Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to cause a denial of service process crash via unspecified vectors...

CVE-2007-3608

Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to create certain files via unspecified vectors...

CVE-2007-3608

Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to create certain files via unspecified vectors...

CVE-2007-3607

Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to cause a denial of service process crash via unspecified vectors...

CVE-2007-3607

Technical details of CVE-2007-3607 are not publicly provided in the supplied documents. Only a generic description of unspecified ActiveX control vulnerabilities affecting EnjoySAP SAP GUI is available; monitor for official updates.

CVE-2007-3608

CVE-2007-3608 concerns vulnerable ActiveX controls in the EnjoySAP SAP GUI. The available records indicate multiple unspecified vulnerabilities that enable remote attackers to create certain files via unspecified vectors. The description does not specify affected product versions, root cause deta...

CVE-2007-3605

CVE-2007-3605 is a stack-based buffer overflow in SAP GUI’s EnjoySAP KWEdit ActiveX (kwedit.dll) that allows remote code execution via a too-long argument to PrepareToPostHTML. Public references mention kwedit.dll (version 6400.1.1.41 in the Metasploit module) and an exploit presence (Exploit-DB ...