MW6 Technologies Barcode ActiveX 'Barcode.dll' ActiveX控件任意文件覆盖漏洞

BUGTRAQ ID: 31979 CNCAN ID：CNCAN-2008103003 MW6 Barcode ActiveX是一款条形码生成控件。 MW6 Barcode ActiveX 'Barcode.dll'存在设计问题，远程攻击者可以利用漏洞以应用程序权限覆盖系统文件。 控件对SaveAsBMP和SaveAsWMF方法处理存在问题，构建恶意WEB页，诱使用户访问，可导致以应用程序权限覆盖系统文件。 MW6 Technologies Barcode ActiveX 3.0.0.1 目前没有详细解决方案提供： http://www.mw6tech.com/products.html...

Visagesoft eXPert PDF ViewerX (VSPDFViewerX.ocx) File Overwrite

No description provided by source. VISAGESOFT eXPertPDFViewerX VSPDFViewerX.ocx INSECURE METHOD SITE: http://www.visagesoft.com This was written for educational purpose. Use it at your own risk. Author will be not responsible for any damage. Author: Marco Torti mail: marcotorti2atyahoodotcom than...

MW6 DataMatrix 'DataMatrix.dll' ActiveX控件任意文件覆盖漏洞

BUGTRAQ ID: 31980 CNCAN ID：CNCAN-2008103004 MW6 DataMatrix ActiveX是一款数据矩阵条码制作工具。 MW6 DataMatrix ActiveX 'DataMatrix.dll'存在设计问题，远程攻击者可以利用漏洞以应用程序权限覆盖系统文件。 控件对SaveAsBMP和SaveAsWMF方法处理存在问题，构建恶意WEB页，诱使用户访问，可导致以应用程序权限覆盖系统文件。 MW6 Technologies DataMatrix ActiveX 3.0 1 目前没有详细解决方案提供：...

[Backports-security-announce] Security update for openoffice.org

Rene Engelhard uploaded new packages for openoffice.org which fixed the following security problems: Debian BTS 496361 left-over debugging echos writing into an insecure temp file can allow attackers to overwrite files on the system with the prvilieges of the user executing senddoc File - Send...

Visagesoft eXPert PDF ViewerX - VSPDFViewerX.ocx File Overwrite

Visagesoft eXPert PDF ViewerX - VSPDFViewerX.ocx File Overwrite VISAGESOFT eXPertPDFViewerX VSPDFViewerX.ocx INSECURE METHOD SITE: http://www.visagesoft.com This was written for educational purpose. Use it at your own risk. Author will be not responsible for any damage. Author: Marco Torti mail:...

Visagesoft eXPert PDF ViewerX (VSPDFViewerX.ocx) File Overwrite

Exploit for unknown platform in category remote exploits =============================================================== Visagesoft eXPert PDF ViewerX VSPDFViewerX.ocx File Overwrite =============================================================== VISAGESOFT eXPertPDFViewerX VSPDFViewerX.ocx...

Visagesoft eXPert PDF ViewerX - 'VSPDFViewerX.ocx' File Overwrite

VISAGESOFT eXPertPDFViewerX VSPDFViewerX.ocx INSECURE METHOD SITE: http://www.visagesoft.com This was written for educational purpose. Use it at your own risk. Author will be not responsible for any damage. Author: Marco Torti mail: marcotorti2atyahoodotcom thanks UGIS FileVersion: 3.0.990.0 CLSI...

CVE-2008-4639

jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file...

CVE-2008-4639

jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file...

CVE-2008-4639

jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file...

CVE-2008-4583

Insecure method vulnerability in the Chilkat FTP 2.0 ActiveX component ChilkatCert.dll allows remote attackers to overwrite arbitrary files via a full pathname in the SavePkcs8File method...

CVE-2008-4584

Insecure method vulnerability in Chilkat Mail 7.8 ActiveX control ChilkatCert.dll allows remote attackers to overwrite arbitrary files via a full pathname to the SaveLastError method...

CVE-2008-4583

CVE-2008-4583 affects the Chilkat FTP 2.0 ActiveX component (ChilkatCert.dll). The SavePkcs8File method allows a full pathname, enabling remote attackers to overwrite arbitrary files. CVSSv2 base score 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P). References indicate public discussion/exploits exist; no reme...

DEBIAN-CVE-2008-4553

qemu-make-debian-root in qemu 0.9.1-5 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files and directories...

CVE-2008-4553

qemu-make-debian-root in qemu 0.9.1-5 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files and directories...

CVE-2008-4553

qemu-make-debian-root in qemu 0.9.1-5 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files and directories...

CVE-2008-4553

qemu-make-debian-root in qemu 0.9.1-5 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files and directories...

CVE-2008-4553

qemu-make-debian-root in qemu 0.9.1-5 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files and directories...

ASG-Sentry File Check Utility /snmx-cgi/fcheck.exe Arbitrary File Overwrite

The File Check Utility fcheck.exe included with the version of ASG-Sentry installed on the remote host fails to sanitize input before creating index files with filenames and checksums. An unauthenticated remote attacker can leverage this issue to overwrite existing files with either no data or a...

CVE-2008-4477

alert.d/test.alert in mon 0.99.2 allows local users to overwrite arbitrary files via a symlink attack on the test.alert.log temporary file...