281 matches found
CVE-2010-0990: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in Creative Software AutoUpdate Engine ActiveX Control 2.0.12.0, as used in Creative Software AutoUpdate 1.40.01, allows remote attackers to execute arbitrary code via vectors related to the BrowseFolder method...
Creative Software AutoUpdate Engine - ActiveX Control Buffer Overflow (Metasploit)
$Id: creativesoftwarecachefolder.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
JDownloader Remote Code Execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -- Product JDownloader1 is an open source download manager for One-Click- Filehoster like Rapidshare or Megaupload. The Click'n'Load2 interface allows external applications and websites to send URLs to the local running JDownloader. With Click'n'Loa...
HP ProCurve Identity Driven Manager (IDM)未明特权提升漏洞
Bugraq ID: 36462 CVE ID：CVE-2009-2681 HP ProCurve Identity Driven Manager是一款允许网管员动态分配用户及设备的网络链接及访问，以适应不同业务策略。 在运行IAS的Microsoft Windows 2003和Windows 2008系统平台运行HP ProCurve Identity Driven Manager存在未明错误。 本地攻击者可以利用此漏洞提升特权。 HP ProCurve Identity Driven Manager IDM A.03.00 HP ProCurve Identity Driven...
MailScanner Multiple Insecure Temporary Files Vulnerabilities
MailScanner is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MailScanner Multiple Insecure Temporary Files Vulnerabilities
This host is installed with MailScanner and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmailscannermultvuln.nasl 7823 2017-11-20 08:54:04Z cfischer $ MailScanner Multiple Insecure Temporary Files Vulnerabilities Authors: Sujit Ghosal Copyright: Copyright c 2008 Greenbo...
Design/Logic Flaw
mailscanner 4.55.10 and other versions before 4.74.16-1 might allow local users to overwrite arbitrary files via a symlink attack on certain temporary files used by the 1 f-prot-autoupdate, 2 clamav-autoupdate, 3 panda-autoupdate.new, 4 trend-autoupdate.new, and 5 rav-autoupdate.new scripts in...
CVE-2008-5312: Improper Link Resolution Before File Access
mailscanner 4.55.10 and other versions before 4.74.16-1 might allow local users to overwrite arbitrary files via a symlink attack on certain temporary files used by the 1 f-prot-autoupdate, 2 clamav-autoupdate, 3 panda-autoupdate.new, 4 trend-autoupdate.new, and 5 rav-autoupdate.new scripts in...
CVE-2008-5313: Improper Link Resolution Before File Access
mailscanner 4.68.8 and other versions before 4.74.16-1 might allow local users to overwrite arbitrary files via a symlink attack on certain temporary files used by the 1 f-prot-autoupdate, 2 clamav-autoupdate, 3 avast-autoupdate, and 4 f-prot-6-autoupdate scripts in /etc/MailScanner/autoupdate/;...
Creative软件自动升级引擎ActiveX控件栈溢出漏洞
BUGTRAQ ID: 29391 CVECAN ID: CVE-2008-0955 Creative是生产用于个人电脑和网络方面的数字娱乐产品的厂商。 Creative在很多产品中都提供了软件自动升级引擎ActiveX控件（CTSUEng.ocx），这个控件没有正确地处理CacheFolder属性，如果用户受骗访问了恶意网页并向该属性传送了超长参数的话，就可能触发栈溢出，导致执行任意指令。 Creative Labs AutoUpdate Engine ActiveX 临时解决方法： 在IE中禁用Creative软件自动升级ActiveX控件，为以下CLSID设置kill bit：...
DSquare Exploit Pack: D2SEC_CREATIVE
Name| d2seccreative ---|--- CVE| CVE-2008-0955 Exploit Pack| D2ExploitPack Description| Creative Software AutoUpdate Engine ActiveX Stack Overflow Notes|...
CVE-2008-0955
Stack-based buffer overflow in the Creative Software AutoUpdate Engine ActiveX control in CTSUEng.ocx allows remote attackers to execute arbitrary code via a long CacheFolder property value...
Stack overflow
Stack-based buffer overflow in the Creative Software AutoUpdate Engine ActiveX control in CTSUEng.ocx allows remote attackers to execute arbitrary code via a long CacheFolder property value...
creative-overflow.txt
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ CacheFolder property is vulnerable to stack-based buffer overflow after 260 bytes, @ 512 bytes overwrites SEH and allows code execution reliably. Original Advisory @ http://www.kb.cert.org/vuls/id/501843 and Vulnerability...
CVE-2008-0955: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in the Creative Software AutoUpdate Engine ActiveX control in CTSUEng.ocx allows remote attackers to execute arbitrary code via a long CacheFolder property value...
Creative Software AutoUpdate Engine ActiveX Control Buffer Overflow
This module exploits a stack buffer overflow in Creative Software AutoUpdate Engine. When sending an overly long string to the cachefolder property of CTSUEng.ocx an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/browser/creative/softwarecachefolder msf...
Creative Software AutoUpdate Engine ActiveX (CTSUEng.ocx) Unspecified Overflow
The remote host contains the Creative Software AutoUpdate Engine ActiveX control, which is used to automatically update Creative Labs software. The version of this control installed on the remote host reportedly contains an unspecified stack-based buffer overflow. If an attacker can trick a user ...
Creative Software AutoUpdate Engine ActiveX Stack Overflow Exploit
Exploit for unknown platform in category remote exploits ================================================================== Creative Software AutoUpdate Engine ActiveX Stack Overflow Exploit ==================================================================...
Multiple Firefox / Mozilla / SeaMonkey / Netscape browsers and Thunderbird security vulnerabilities
Memory corruptions, crossite scripting, grame spoofing, RSA signature forgery, Auto update man-int-the-middle attacks. XBL javascript execution with e-mail...