Adobe Form Designer and Advanced Form Client ActiveX controls contain multiple buffer overflows

Overview Adobe Form Designer and Advanced Form Client contain multiple ActiveX buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The Adobe Form Designer and Advanced Form Client software provide multiple ActiveX...

Microsoft Office Web Components Spreadsheet ActiveX control URL parsing stack buffer overflow

Overview The Microsoft Office Web Components ActiveX controls contain a stack buffer overflow in the processing of URLs, which allows a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft Office Web Components are ActiveX controls that provide...

Microsoft Office Web Components Multiple Buffer Overflows (MS08-017; CVE-2006-4695; CVE-2007-1201; CVE-2009-0562; CVE-2009-1136; CVE-2009-1534; CVE-2009-2493; CVE-2009-2496)

Microsoft Office Web Components are a collection of Component Object Model COM controls for publishing spreadsheets, charts, and databases to the Web, and for viewing the published components on the Web. A remote code execution vulnerability has been reported in Microsoft Office Web Components. A...

RealNetworks RealPlayer ActiveX controls property heap memory corruption

Overview Multiple RealPlayer ActiveX controls fail to properly handle properties, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description RealNetworks RealPlayer provides multiple ActiveX controls to allow integration with Internet Explorer...

[Full-disclosure] Canon Multi Function Devices vulnerable to FTP bounce attack

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Indiana University Security Advisory: Canon Multi Function Devices vulnerable to FTP bounce attack. Advisory ID: 20080229 Canon MFD FTP bounce attack Advisory revisions: 02-29-2008 0500 UTC 1.0 Initial Public Release Credit/acknowledgement:...

D-Link MPEG4 SHM Audio Control (VAPGDecoder.dll 1.7.0.5) BOF Exploit

No description provided by source. !-- D-Link MPEG4 SHM Audio Control VAPGDecoder.dll 1.7.0.5 remote overflow exploit Internet Explorer 7/XP SP2 check a live camera demonstration here with DCS-5300 camera series: http://www.dlink.com/products/liveDemo/...

Information disclosure

Parental Controls in Apple Mac OS X 10.5 through 10.5.1 contacts www.apple.com "when a website is unblocked," which allows remote attackers to determine when a system is running Parental Controls...

CVE-2008-0041

Parental Controls in Apple Mac OS X 10.5 through 10.5.1 contacts www.apple.com "when a website is unblocked," which allows remote attackers to determine when a system is running Parental Controls...

CVE-2008-0041

Parental Controls in Apple Mac OS X 10.5 through 10.5.1 contacts www.apple.com "when a website is unblocked," which allows remote attackers to determine when a system is running Parental Controls...

CVE-2008-0041

CVE-2008-0041 concerns Apple Mac OS X 10.5.x where Parental Controls, when a website is unblocked, contacts www.apple.com, allowing remote observers to determine whether Parental Controls is active. The issue is an information-disclosure vulnerability; no exploit details are provided in the sourc...

Mozilla Foundation Security Advisory 2008-02

Mozilla Foundation Security Advisory 2008-02 Title: Multiple file input focus stealing vulnerabilities Impact: Moderate Announced: February 7, 2008 Reporter: hong, Gregory Fleischer Products: Firefox, SeaMonkey Fixed in: Firefox 2.0.0.12 SeaMonkey 1.1.8 Description Security researchers hong and...

Multiple file input focus stealing vulnerabilities — Mozilla

Security researchers hong and Gregory Fleischer each reported a variant on earlier reported bugs regarding focus shifting in file input controls. Their variants used file input controls nested inside tags to take advantage of automatic focus shifting into the file input field noted on the Hacker...

Yahoo! Music Jukebox ActiveX Controls Buffer Overflows

The remote host contains the 'DataGrid' and/or 'MediaGrid' ActiveX controls included with Yahoo! Music Jukebox. These controls are reportedly affected by multiple buffer overflows involving, for example, the 'AddButton' and 'AddImage' methods of the 'DataGrid' control and 'AddBitmap' method of th...

Security feature bypass

Multiple ActiveX controls in MailBee.dll in MailBee Objects 5.5 allow remote attackers to 1 overwrite arbitrary files via the SaveToDisk method, or 2 modify files via the AddStringToFile method...

CVE-2008-0631

Multiple ActiveX controls in MailBee.dll in MailBee Objects 5.5 allow remote attackers to 1 overwrite arbitrary files via the SaveToDisk method, or 2 modify files via the AddStringToFile method...

CVE-2008-0631

Affected product/component: MailBee Objects 5.5, specifically the MailBee.dll ActiveX controls. Vulnerability: Remote attackers can cause file manipulation via two methods—SaveToDisk (overwrite arbitrary files) and AddStringToFile (modify files). Root cause/conditions: Multiple ActiveX controls a...

CVE-2008-0631

Multiple ActiveX controls in MailBee.dll in MailBee Objects 5.5 allow remote attackers to 1 overwrite arbitrary files via the SaveToDisk method, or 2 modify files via the AddStringToFile method...

facebook-overflow.txt

FaceBook PhotoUploader Buffer Overflow Exploit function Check var buf = unescape"%u4141"; while buf.length = 261 buf = buf + unescape"%u4141"; // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 =...

SwiftView ActiveX control and plug-in stack buffer overflow

Overview The SwiftView ActiveX control and plug-in contain a stack buffer overflow, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description SwiftView is software used to view or print PCL, HPGL, and TIFF files. SwiftSend is a product used f...

[Full-disclosure] Macrovision FlexNet Connect DownloadManager Insecure Methods

Who: Macrovision What: Macrovision FlexNext Connect is a software package that allows ISV's to update their software products. It is generally used in conjunction with the InstallShield software deploymnet framework. FlexNet uses a number of ActiveX controls, some of which are marked safe for...