BaoFeng Storm ActiveX Control Buffer Overflow Vulnerability

BaoFeng Storm ActiveX is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Stack overflow

Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote attackers to execute arbitrary code via a long argument to the OnBeforeVideoDownload method, as exploited in the wild in April and May 2009. NOTE: some of these details are...

CVE-2009-1612

Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote attackers to execute arbitrary code via a long argument to the OnBeforeVideoDownload method, as exploited in the wild in April and May 2009. NOTE: some of these details are...

CVE-2009-1612

Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote attackers to execute arbitrary code via a long argument to the OnBeforeVideoDownload method, as exploited in the wild in April and May 2009. NOTE: some of these details are...

BaoFeng Buffer Overflow

BaoFeng mps.dll Remote Code Execution Exploit By: MITBOY Download: www.baofeng.com Problem DLL : mps.dll Problem Func : OnBeforeVideoDownload function test var shellcode =...

BaoFeng ActiveX OnBeforeVideoDownload() Remote BOF Exploit

No description provided by source. BaoFeng mps.dll Remote Code Execution Exploit By: MITBOY Download: www.baofeng.com Problem DLL : mps.dll Problem Func : OnBeforeVideoDownload html body object classid="clsid:6BE52E1D-E586-474F-A6E2-1A85A9B4D9FB" id="target"/object input type="button"...

BaoFeng (mps.dll) Remote Code Execution Exploit-vulnerability warning-the black bar safety net

BaoFeng mps.dll Remote Code Execution Exploit By: MITBOY Download: www.baofeng.com Problem DLL : mps.dll Problem Func : OnBeforeVideoDownload the the the function test var shellcode =...

BaoFeng ActiveX OnBeforeVideoDownload() Remote BOF Exploit

Exploit for windows platform in category remote exploits ========================================================== BaoFeng ActiveX OnBeforeVideoDownload Remote BOF Exploit ========================================================== BaoFeng mps.dll Remote Code Execution Exploit By: MITBOY Download...

BaoFeng - ActiveX 'OnBeforeVideoDownload()' Remote Buffer Overflow

BaoFeng mps.dll Remote Code Execution Exploit By: MITBOY Download: www.baofeng.com Problem DLL : mps.dll Problem Func : OnBeforeVideoDownload function test var shellcode =...

BaoFeng - ActiveX OnBeforeVideoDownload() Remote Buffer Overflow

BaoFeng - ActiveX OnBeforeVideoDownload Remote Buffer Overflow BaoFeng mps.dll Remote Code Execution Exploit By: MITBOY Download: www.baofeng.com Problem DLL : mps.dll Problem Func : OnBeforeVideoDownload function test var shellcode =...

BaoFeng Storm mps.dll ActiveX OnBeforeVideoDownload Buffer Overflow

This module exploits a buffer overflow in BaoFeng's Storm media Player ActiveX control. Versions of mps.dll including 3.9.4.27 and lower are affected. When passing an overly long string to the method "OnBeforeVideoDownload" an attacker can execute arbitrary code. Module Options msf use...

暴风影音3.7.11.13 远程拒绝服务漏洞

暴风影音是一款播放软件，经过测试，暴风影音3.7.11.13存在一个远程DDOS漏洞。 官方网站：http://www.baofeng.com/ 起因是暴风影音自动更新程序会在远程监听一个端口,如果向其发送畸形数据包,就会导致自动更新程序崩溃;如果对其发送精心构造过的数据包,则足以导致用户主机在不知情的情况下被完全控制. 暴风影音3 Build version : 3.7.11.13 Test version : 3.7.11.13,自从带了一个自动升级服务stormlive.exe之后, 会在本地开启一个UDP端口5354,向端口发送恶意封包可造成stormlive崩溃...

Buffer overflow

Multiple buffer overflows in a certain ActiveX control in sparser.dll in Baofeng Storm 2.8 and earlier allow remote attackers to execute arbitrary code via malformed input in an unknown set of arguments or property values, a different DLL than CVE-2007-4816. NOTE: the provenance of this informati...

CVE-2007-4943

Multiple buffer overflows in a certain ActiveX control in sparser.dll in Baofeng Storm 2.8 and earlier allow remote attackers to execute arbitrary code via malformed input in an unknown set of arguments or property values, a different DLL than CVE-2007-4816. NOTE: the provenance of this informati...

CVE-2007-4943

Multiple buffer overflows in a certain ActiveX control in sparser.dll in Baofeng Storm 2.8 and earlier allow remote attackers to execute arbitrary code via malformed input in an unknown set of arguments or property values, a different DLL than CVE-2007-4816. NOTE: the provenance of this informati...

CVE-2007-4943

Technical details for CVE-2007-4943 are not publicly available in the provided documents. Monitor for updates from official advisories.

BaoFeng Storm MPS.DLL ActiveX Control Multiple Remote Buffer Overflow Vulnerabilities

Description BaoFeng Storm ActiveX control is prone to multiple buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied data. Successfully exploiting these issues allows remote attackers to execute arbitrary code in the context of the application using...

暴风影音II mps.dll ActiveX栈溢出漏洞

No description provided by source. html object classid="clsid:6BE52E1D-E586-474f-A6E2-1A85A9B4D9FB" id='target'/object body SCRIPT language="javascript" var shellcode = unescape"%u9090"+"%u9090"+ "%uefe9%u0000%u5a00%ua164%u0030%u0000%u408b%u8b0c" +...