Black Ice软件Document Imaging SDK/ActiveX控件远程堆溢出漏洞

BUGTRAQ ID: 30243 Document Imaging SDK/ActiveX是用于帮助开发人员和程序员创建图形处理应用的软件开发工具。 Document Imaging SDK/ActiveX控件的BiGif.dll文件中没有正确地验证对OpenGifFile函数的输入参数，如果用户受骗访问了恶意网页并向BIImgFrm Control ActiveX控件（BIImgFrm.ocx）的GetNumberOfImagesInGifFile方式传送了超长字符串的话，就会触发堆溢出，导致执行任意指令。 Black Ice Document Imaging SDK/ActiveX...

documentimaging-overflow.txt

Asc: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA EAX 001919C0 - Asc: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA EBX 41414141 ECX 00004141 EDX 00150168 - 00000000 EDI 41414141 ESI 001919B8 - Asc: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA EBP 0013EA20 - 0013EAA4 ESP 0013E804...

Document Imaging SDK 10.95 ActiveX Buffer Overflow PoC

No description provided by source. !-- Document Imaging SDK Buffer Overflow Vulnerability DoS Proof of concept Author: r0ut3r Mail : writ3r at gmail.com ----------------------------- -Tested on WinXP Pro SP2 Version: 10.95 Vendor : Black Ice Software Price : $999 File : biimgfrm.ocx CLSID:...

Document Imaging SDK 10.95 - ActiveX Buffer Overflow (PoC)

Document Imaging SDK 10.95 - ActiveX Buffer Overflow PoC Asc: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA EAX 001919C0 - Asc: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA EBX 41414141 ECX 00004141 EDX 00150168 - 00000000 EDI 41414141 ESI 001919B8 - Asc:...

Document Imaging SDK 10.95 - ActiveX Buffer Overflow (PoC)

Asc: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA EAX 001919C0 - Asc: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA EBX 41414141 ECX 00004141 EDX 00150168 - 00000000 EDI 41414141 ESI 001919B8 - Asc: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA EBP 0013EA20 - 0013EAA4 ESP 0013E804...

Document Imaging SDK 10.95 ActiveX Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ====================================================== Document Imaging SDK 10.95 ActiveX Buffer Overflow PoC ====================================================== Asc: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA EAX 001919C0 - Asc:...

Black Ice软件BiAnno.ocx控件远程栈溢出漏洞

BUGTRAQ ID: 29635 Annotation SDK/ActiveX是Black Ice图形工具包中的图形编辑插件。 Annotation SDK/ActiveX插件所安装的BiAnno Control ActiveX控件（BiAnno.ocx）在处理AnnoSaveToTiff函数参数时存在栈溢出漏洞，如果用户受骗访问了恶意网页并向该函数传送了超长参数的话，就可以触发这个溢出，导致执行任意指令。 Black Ice Annotation SDK/ActiveX Plug-In 10.9.5.0 临时解决方法：...

CVE-2008-2745

Stack-based buffer overflow in BiAnno ActiveX Control BiAnno.ocx in Black Ice Software Annotation Plugin 10.95 allows remote attackers to execute arbitrary code via a long parameter to the AnnoSaveToTiff method...

CVE-2008-2745

Stack-based buffer overflow in BiAnno ActiveX Control BiAnno.ocx in Black Ice Software Annotation Plugin 10.95 allows remote attackers to execute arbitrary code via a long parameter to the AnnoSaveToTiff method...

CVE-2008-2745

CVE-2008-2745 : A stack-based buffer overflow in BiAnno ActiveX Control (BiAnno.ocx) of the Black Ice Software Annotation Plugin 10.95 allows remote attackers to execute arbitrary code by sending a long parameter to the AnnoSaveToTiff method. The connected documents confirm a remote-code-executio...

CVE-2008-2745: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in BiAnno ActiveX Control BiAnno.ocx in Black Ice Software Annotation Plugin 10.95 allows remote attackers to execute arbitrary code via a long parameter to the AnnoSaveToTiff method...

Stack overflow

Stack-based buffer overflow in the BITIFF.BITiffCtrl.1 ActiveX control in BITiff.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to execute arbitrary code via a long first argument to the SetByteOrder method...

CVE-2008-2693

Stack-based buffer overflow in the BITIFF.BITiffCtrl.1 ActiveX control in BITiff.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to execute arbitrary code via a long first argument to the SetByteOrder method...

CVE-2008-2693: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the BITIFF.BITiffCtrl.1 ActiveX control in BITiff.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to execute arbitrary code via a long first argument to the SetByteOrder method...

Memory corruption

The BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to execute arbitrary code via long strings in the two arguments to the DownloadImageFileURL method, which trigger memory corruption. NOTE: some of these details are obtained from thir...

Information disclosure

The BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to force the download and storage of arbitrary files by specifying the origin URL in the first argument to the DownloadImageFileURL method, and the local filename in the second...

CVE-2008-2683

The BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to force the download and storage of arbitrary files by specifying the origin URL in the first argument to the DownloadImageFileURL method, and the local filename in the second...

CVE-2008-2684

CVE-2008-2684 affects the BIDIB.ocx/Black Ice Barcode SDK 5.01 implementation: the BIDIBCtrl.1 ActiveX control allows remote attackers to trigger memory corruption by feeding long strings into the DownloadImageFileURL method, enabling arbitrary code execution. The vulnerability is rooted in how t...

EUVD-2008-2679

The BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to execute arbitrary code via long strings in the two arguments to the DownloadImageFileURL method, which trigger memory corruption. NOTE: some of these details are obtained from thir...

CVE-2008-2683

CVE-2008-2683 details (Normal mode): The BIDIB.BIDIBCtrl.1 ActiveX control (BIDIB.ocx 10.9.3.0) in Black Ice Barcode SDK 5.01 is vulnerable. A remote attacker can force the download and storage of arbitrary files by calling DownloadImageFileURL with the origin URL as the first argument and the lo...