1340 matches found
HP Digital Imaging (hpqvwocx.dll v. 2.1.0.556) SaveToFile() Exploit
Exploit for unknown platform in category remote exploits =================================================================== HP Digital Imaging hpqvwocx.dll v. 2.1.0.556 SaveToFile Exploit ===================================================================...
CVE-2007-3487
Absolute path traversal in a certain ActiveX control in hpqxml.dll 2.0.0.133 in Hewlett-Packard HP Photo Digital Imaging allows remote attackers to create or overwrite arbitrary files via the argument to the saveXMLAsFile method...
CVE-2007-3487
CVE-2007-3487 describes an absolute path traversal in HP Photo Digital Imaging’s hpqxml.dll (version 2.0.0.133) ActiveX control. The vulnerability allows remote attackers to create or overwrite arbitrary files by supplying bytes to the saveXMLAsFile method. The impact is partial confidentiality a...
CVE-2007-3487
Absolute path traversal in a certain ActiveX control in hpqxml.dll 2.0.0.133 in Hewlett-Packard HP Photo Digital Imaging allows remote attackers to create or overwrite arbitrary files via the argument to the saveXMLAsFile method...
CVE-2007-3487: Improper Limitation of a Pathname to a Restricted Directory
Absolute path traversal in a certain ActiveX control in hpqxml.dll 2.0.0.133 in Hewlett-Packard HP Photo Digital Imaging allows remote attackers to create or overwrite arbitrary files via the argument to the saveXMLAsFile method...
[SECURITY] Fedora Core 6 Update: gimp-2.2.15-3.fc6
GIMP GNU Image Manipulation Program is a powerful image composition and editing program, which can be extremely useful for creating logos and other graphics for webpages. GIMP has many of the tools and filters you would exp ect to find in similar commercial offerings, and some interesting extras ...
[SECURITY] Fedora Core 5 Update: gimp-2.2.15-3.fc5
GIMP GNU Image Manipulation Program is a powerful image composition and editing program, which can be extremely useful for creating logos and other graphics for webpages. GIMP has many of the tools and filters you would exp ect to find in similar commercial offerings, and some interesting extras ...
hpdi-write.txt
:. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: GoodFellas Security Research Team Technical Detail saveXMLAsFile method receives a filename as an argument, with this format "c:\path\file". Proof of C...
HP Photo Digital Imaging HPQXML.DLL任意文件覆盖漏洞
HP Photo Digital Imaging是一款图象处理软件。 HP Photo Digital Imaging HPQXML.DLL ActiveX控件不正确调用方法，远程攻击者可以利用漏洞覆盖系统任意文件，造成拒绝服务或任意代码执行。 问题存在于HPQXML.DLL中的ActiveX控件，由于不安全调用"saveXMLAsFile"方法，构建恶意的WEB页，诱使用户访问可导致覆盖系统任意文件，造成拒绝服务或任意代码执行。 HP HP Photo Digital Imaging hpqxml.dll 2.0.0.133 目前没有解决方案提供：...
HP Digital Imaging (hpqxml.dll 2.0.0.133) Arbitary Data Write Exploit
No description provided by source. :. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: !-- hpqxml.dll 2.0.0.133 from HP Digital Imaging Arbitary Data Write =============================================== Internal ID: VULWAR200706275. Introduction hpqxml.dll is a libra...
HP Photo Digital Imaging ActiveX unauthorized access
Unsafe saveXMLAsFile method in hpqxml.dll...
[GOODFELLAS - VULN] hpqxml.dll 2.0.0.133 from HP Digital Imaging Arbitary Data Write.
:. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: hpqxml.dll 2.0.0.133 from HP Digital Imaging Arbitary Data Write =================================================== Internal ID: VULWAR200706275. Introduction hpqxml.dll is a library included in the HP Photo Digital...
HP Digital Imaging 'hpqxml.dll 2.0.0.133' - Arbitrary Data Write
:. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: GoodFellas Security Research Team Technical Detail saveXMLAsFile method receives a filename as an argument, with this format "c:\path\file". Proof of Concept -- Hpqxml.dll 2.0.0.133 HP Digital Imaging Arbitary Data...
HP Digital Imaging (hpqxml.dll 2.0.0.133) Arbitary Data Write Exploit
Exploit for unknown platform in category remote exploits ===================================================================== HP Digital Imaging hpqxml.dll 2.0.0.133 Arbitary Data Write Exploit ===================================================================== :. GOODFELLAS Security Research...
HP Digital Imaging hpqxml.dll 2.0.0.133 - Arbitrary Data Write
HP Digital Imaging hpqxml.dll 2.0.0.133 - Arbitrary Data Write :. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: GoodFellas Security Research Team Technical Detail saveXMLAsFile method receives a filename as an argument, with this format "c:\path\file". Proof of...
Pegasus ImagN - ActiveX Control Remote Buffer Overflow
?php / win32adduser - PASS=tzu EXITFUNC=seh USER=sun Size=483 Encoder=PexAlphaNum http://metasploit.com / $shellcode = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49". "\x49\x51\x5a\x56\x54\x58\x36\x33\x30\x56\x58\x34\x41\x30\x42\x36"...
security flaw
Multiple buffer overflows in Sun Java Development Kit JDK and Java Runtime Environment JRE 5.0 Update 7 and earlier, Java System Development Kit SDK and JRE 1.4.212 and earlier 1.4.x versions, and SDK and JRE 1.3.118 and earlier allow attackers to develop Java applets that read, write, or execute...
security flaw
Multiple buffer overflows in Sun Java Development Kit JDK and Java Runtime Environment JRE 5.0 Update 7 and earlier, Java System Development Kit SDK and JRE 1.4.212 and earlier 1.4.x versions, and SDK and JRE 1.3.118 and earlier allow attackers to develop Java applets that read, write, or execute...
Opera < 8.02 Multiple Vulnerabilities
The remote host is using Opera, an alternative web browser. The version of Opera installed on the remote host contains several flaws. One involves imaging dragging and could result in cross-site scripting attacks and user file retrieval. A second may let attackers spoof the file extension in the...
PT-2005-2462 · Ethereal +1 · Ethereal +1
Name of the Vulnerable Software and Affected Versions: Ethereal versions prior to 0.10.11 Description: The issue concerns a denial of service caused by a large memory allocation. This can be triggered by remote attackers via unknown vectors in the DICOM dissector. Recommendations: For versions...