KingSoft Web Shield <= 1.1.0.62 XSS/Code Execution Vulnerability

No description provided by source. KingSoft Web Shield XSS and Remote Code Execution Vulnerability Found by inking Version = 1.1.0.62 Background: KingSoft Web Shield is a popular anti-malwebsites production of KingSoft Inc. around China. Details: When the KSWebShield detects a malwebsite, it send...

KingSoft Web Shield <= 1.1.0.62 XSS/Code Execution Vulnerability

Exploit for windows platform in category remote exploits ================================================================ KingSoft Web Shield = 1.1.0.62 XSS/Code Execution Vulnerability ================================================================ KingSoft Web Shield XSS and Remote Code...

KingSoft Web Shield XSS / Code Execution

KingSoft Web Shield XSS and Remote Code Execution Vulnerability Found by inking Version test Just make a website with evil javascript codes, and browse the url shows above...

KingSoft Web Shield 1.1.0.62 - Cross-Site Scripting / Code Execution

KingSoft Web Shield XSS and Remote Code Execution Vulnerability Found by inking Version test Just make a website with evil javascript codes, and browse the url shows above milw0rm.com 2009-05-19...

KingSoft Web Shield 1.1.0.62 - Cross-Site Scripting Code Execution

KingSoft Web Shield 1.1.0.62 - Cross-Site Scripting Code Execution KingSoft Web Shield XSS and Remote Code Execution Vulnerability Found by inking Version test Just make a website with evil javascript codes, and browse the url shows above milw0rm.com 2009-05-19...

Line of code are not written, penetrating the Jinshan Islands-vulnerability warning-the black bar safety net

Kingsoft files security the island will put the file to protect COPY to My Document\Kingsoft security Island\documents When you want to access the directory of the file, it will prompt reject Penetration method,直接 运行 cmd.exeI'm the My Document directory in the D disk root directory d: d:\cd MYDOC...

Windows Components 0Day vulnerabilities pass to kill IE6 and IE7 browser-vulnerability warning-the black bar safety net

China IT lab 4 on 2 1 reported: recently received a netizen sent a message, reflecting one of the Windows 0Day vulnerabilities. And in its blog is given in the relevant code. 0dayMicrosoft Works 7 WkImgSrv.dll crash POC, dll version 7. 0 3. 0 6 1 6. 0, IE7+Windows XP SP2 test. ! the following is...

Line of code are not written, penetrating the Jinshan Islands-vulnerability warning-the black bar safety net

Kingsoft files security the island will put the file to protect COPY to My Document\ Kingsoft security Island\documents When you want to access the directory of the file, it will prompt reject Penetration method,直接 运行 cmd.exeI'm the My Document directory in the D disk root directory d: d:\cd...

kingsoft-overflow.txt

var str1 = ""; while str1.length !-- .text:1000737B ; DWORD stdcall SetUninstallNameLPVOID thisptr, LPVOID bsUninstallName .text:1000737B SetUninstallName proc near ; DATA XREF: .rdata:1003186C o .text:1000737B ; .rdata:10031A64 o .text:1000737B .text:1000737B thisptr = dword ptr 4 .text:1000737B...

CVE-2008-1307

Heap-based buffer overflow in the KUpdateObj2 Class ActiveX control in UpdateOcx2.dll in Beijing KingSoft Antivirus Online Update Module 2007.12.29.29 allows remote attackers to execute arbitrary code via a long argument to the SetUninstallName method...

Heap overflow

Heap-based buffer overflow in the KUpdateObj2 Class ActiveX control in UpdateOcx2.dll in Beijing KingSoft Antivirus Online Update Module 2007.12.29.29 allows remote attackers to execute arbitrary code via a long argument to the SetUninstallName method...

CVE-2008-1307

CVE-2008-1307 describes a heap-based buffer overflow in the KUpdateObj2 ActiveX control (UpdateOcx2.dll) of Beijing KingSoft Antivirus Online Update Module 2007.12.29.29. A long argument to the SetUninstallName method allows remote attackers to execute arbitrary code. The vulnerability is documen...

CVE-2008-1307: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the KUpdateObj2 Class ActiveX control in UpdateOcx2.dll in Beijing KingSoft Antivirus Online Update Module 2007.12.29.29 allows remote attackers to execute arbitrary code via a long argument to the SetUninstallName method...

Kingsoft Antivirus在线升级模块ActiveX控件远程缓冲区溢出漏洞

BUGTRAQ ID: 28172 CNCAN ID:CNCAN-2008031108 Kingsoft Antivirus Online Update Module是一款反病毒在线升级模块。 Kingsoft Antivirus在线升级模块包含的ActiveX控件不正确处理用户提交的参数数据，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。...

KingSoft UpdateOcx2.dll SetUninstallName() Heap Overflow PoC

No description provided by source. !-- KingSoft UpdateOcx2.dll SetUninstallName Heap Overflow Exploit Date: 2008-02-29 MSN: voidatph4nt0mdotorg http://www.ph4nt0m.org 文件路径: C:\WINDOWS\system32\KingSoft\KOS\UpdateOcx2.dll 文件描述: Kingsoft Antivirus Online Update Module 文件版本: 2007,12,29,29 --...

KingSoft - 'UpdateOcx2.dll SetUninstallName()' Heap Overflow (PoC)

var str1 = ""; while str1.length !-- .text:1000737B ; DWORD stdcall SetUninstallNameLPVOID thisptr, LPVOID bsUninstallName .text:1000737B SetUninstallName proc near ; DATA XREF: .rdata:1003186C o .text:1000737B ; .rdata:10031A64 o .text:1000737B .text:1000737B thisptr = dword ptr 4 .text:1000737B...

KingSoft UpdateOcx2.dll SetUninstallName() Heap Overflow PoC

Exploit for unknown platform in category dos / poc ============================================================ KingSoft UpdateOcx2.dll SetUninstallName Heap Overflow PoC ============================================================ var str1 = ""; while str1.length !-- .text:1000737B ; DWORD stdca...

KingSoft - UpdateOcx2.dll SetUninstallName() Heap Overflow (PoC)

KingSoft - UpdateOcx2.dll SetUninstallName Heap Overflow PoC var str1 = ""; while str1.length !-- .text:1000737B ; DWORD stdcall SetUninstallNameLPVOID thisptr, LPVOID bsUninstallName .text:1000737B SetUninstallName proc near ; DATA XREF: .rdata:1003186C o .text:1000737B ; .rdata:10031A64 o...

KingSoft UpdateOcx2.dll SetUninstallName() Heap Overflow Exploit

金山在线杀毒,百度安全中心在线杀毒,雅虎助手等使用的在线杀毒引擎均受影响. PoC代码: ----------------------------------------------------------------------------------- object classid='clsid:D82303B7-A754-4DCB-8AFC-8CF99435AACE' id='target1'/object object classid='clsid:D82303B7-A754-4DCB-8AFC-8CF99435AACE' id='target2'/object script v...

KLA10239 Multiple vulnerabilities in KIWI CatTools

A buffer overflow was found in Kingsoft Writer. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed WPS file. Below is a complete list of vulnerabilities 1. A directory traversal vulnerability can be...