趋势科技OfficeScan OfficeScanRemoveCtrl.dll控件多个栈溢出漏洞

BUGTRAQ ID: 30407 OfficeScan是一种针对整个网段的分布式杀毒软件。 OfficeScan的Web控制台在通过Web接口部署产品时会使用一些ActiveX控件，其中的objRemoveCtrl控件（OfficeScanRemoveCtrl.dll，CLSID为5EFE8CB1-D095-11D1-88FC-0080C859833B）中用于显示某些属性及其值的代码存在多个栈溢出漏洞。如果用户受骗访问了恶意网页并向有漏洞的属性参数传送了超长字符串的话，就可以触发这些溢出，导致执行任意代码。 如果要利用这个漏洞，控件必须以可视的方式嵌入到网页中，也就是obj = new...

Trend Micro OfficeScan ObjRemoveCtrl ActiveX Control BOF Exploit

No description provided by source. !-- Trend Micro OfficeScan ObjRemoveCtrl ActiveX Control Buffer Overflow Exploit written by e.b. Tested on Windows XP SP2fully patched English, IE6 + IE7, OfficeScan 7.3 patch 4, OfficeScanRemoveCtrl.dll version 7.3.0.1020 The control is installed when you insta...

Trend Micro OfficeScan ObjRemoveCtrl ActiveX Control BOF Exploit

Exploit for unknown platform in category remote exploits ================================================================ Trend Micro OfficeScan ObjRemoveCtrl ActiveX Control BOF Exploit ================================================================ Trend Micro OfficeScan ObjRemoveCtrl ActiveX...

Trend Micro OfficeScan - ObjRemoveCtrl ActiveX Control Buffer Overflow

Trend Micro OfficeScan - ObjRemoveCtrl ActiveX Control Buffer Overflow Trend Micro OfficeScan ObjRemoveCtrl ActiveX Control Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 =...

Trend Micro OfficeScan - ObjRemoveCtrl ActiveX Control Buffer Overflow

Trend Micro OfficeScan ObjRemoveCtrl ActiveX Control Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" +...

Update Protection against Trend Micro OfficeScan CGI Password Decryption Buffer Overflow Vulnerability

A buffer overflow vulnerability exists in Trend Micro OfficeScan. Trend Micro OfficeScan is a centralized virus and security scan management system. A remote attacker may exploit this vulnerability to execute arbitrary code on a vulnerable system. Successful exploitation may allow the attacker to...

CVE-2008-1365

Stack-based buffer overflow in Trend Micro OfficeScan Corporate Edition 8.0 Patch 2 build 1189 and earlier, and 7.3 Patch 3 build 1314 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service crash via a long encrypted password, which triggers the overflow in 1...

Null pointer dereference

Trend Micro OfficeScan Corporate Edition 8.0 Patch 2 build 1189 and earlier, and 7.3 Patch 3 build 1314 and earlier, allows remote attackers to cause a denial of service process consumption via 1 an HTTP request without a Content-Length header or 2 invalid characters in unspecified CGI arguments,...

Stack overflow

Stack-based buffer overflow in Trend Micro OfficeScan Corporate Edition 8.0 Patch 2 build 1189 and earlier, and 7.3 Patch 3 build 1314 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service crash via a long encrypted password, which triggers the overflow in 1...

CVE-2008-1366

Trend Micro OfficeScan Corporate Edition 8.0 Patch 2 build 1189 and earlier, and 7.3 Patch 3 build 1314 and earlier, allows remote attackers to cause a denial of service process consumption via 1 an HTTP request without a Content-Length header or 2 invalid characters in unspecified CGI arguments,...

CVE-2008-1366

CVE-2008-1366 affects Trend Micro OfficeScan Corporate Edition 8.0 (build 1189 and earlier, Patch 2) and 7.3 (build 1314 and earlier, Patch 3). The vulnerability causes a denial of service (process consumption) when handling HTTP requests either without a Content-Length header or with invalid CGI...

CVE-2008-1365

Stack-based buffer overflow in Trend Micro OfficeScan Corporate Edition 8.0 Patch 2 build 1189 and earlier, and 7.3 Patch 3 build 1314 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service crash via a long encrypted password, which triggers the overflow in 1...

CVE-2008-1366

Trend Micro OfficeScan Corporate Edition 8.0 Patch 2 build 1189 and earlier, and 7.3 Patch 3 build 1314 and earlier, allows remote attackers to cause a denial of service process consumption via 1 an HTTP request without a Content-Length header or 2 invalid characters in unspecified CGI arguments,...

CVE-2008-1365

Summary (CVE-2008-1365) : A stack-based buffer overflow in Trend Micro OfficeScan Corporate Edition components allows remote attackers to execute arbitrary code or cause a denial of service via crafted HTTP inputs. Affected are OfficeScan 8.0 Patch 2 build 1189 and earlier and 7.3 Patch 3 build 1...

KLA10370 DoS vulnerability in OfficeScan

Multiple serious vulnerabilities have been found in OfficeScan. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities 1. A buffer overflow can be exploited remotely via a specially designed password; 2. A NULL pointer can be...

CVE-2008-1366: Improper Input Validation

Trend Micro OfficeScan Corporate Edition 8.0 Patch 2 build 1189 and earlier, and 7.3 Patch 3 build 1314 and earlier, allows remote attackers to cause a denial of service process consumption via 1 an HTTP request without a Content-Length header or 2 invalid characters in unspecified CGI arguments,...

CVE-2008-1365: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Trend Micro OfficeScan Corporate Edition 8.0 Patch 2 build 1189 and earlier, and 7.3 Patch 3 build 1314 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service crash via a long encrypted password, which triggers the overflow in 1...

Trend Micro OfficeScan Policy Server CGI buffer overflow

Added: 03/03/2008 CVE: CVE-2008-1365 BID: 28020 OSVDB: 42500 Background Trend Micro OfficeScan is a centralized virus and security scan management system. Problem A buffer overflow vulnerability in the Policy Server for Cisco NAC component allows remote attackers to execute arbitrary commands by...

Trend Micro OfficeScan Policy Server CGI buffer overflow

Added: 03/03/2008 CVE: CVE-2008-1365 BID: 28020 OSVDB: 42500 Background Trend Micro OfficeScan is a centralized virus and security scan management system. Problem A buffer overflow vulnerability in the Policy Server for Cisco NAC component allows remote attackers to execute arbitrary commands by...

Trend Micro OfficeScan Policy Server CGI buffer overflow

Added: 03/03/2008 CVE: CVE-2008-1365 BID: 28020 OSVDB: 42500 Background Trend Micro OfficeScan is a centralized virus and security scan management system. Problem A buffer overflow vulnerability in the Policy Server for Cisco NAC component allows remote attackers to execute arbitrary commands by...