Microsoft Office Web Components ActiveX memory corruption

ActiveX vulnerability is actively used in-the-wild for silent malware installation...

ExcelOCX ActiveX 3.2 - Download File Insecure Method

/ --=0-0-000000000--x==-xxxxxxxxx - Excel Viewer OCX 3.2 homepage: www.officeocx.com download: www.brothersoft.com/excel-viewer-ocx-51797.html - RegKey Safe for Script: True - RegKey Safe for Init: True - Implements IObjectSafety: True - IDisp Safe: Safe for untrusted: caller,data - IPersist Safe...

Cross-browser Code Execution via XSS

Hello 3APA3A! Recently I wrote about cross-browser Code Execution via XSS attack http://websecurity.com.ua/2638/. Earlier I wrote you about Code Execution via XSS in Internet Explorer http://securityvulns.ru/Udocument911.html. In this article I told about Code Execution attack via IE via Cross-Si...

CVE-2008-4587

Insecure method vulnerability in the MSVNClientDownloadManager61Lib.DownloadManager.1 ActiveX control ISDM.exe 6.1.100.61372 in Macrovision FLEXnet Connect 6.1 allows remote attackers to force the download and execution of arbitrary files via the AddFile and RunScheduledJobs methods. NOTE: this...

DSquare Exploit Pack: D2SEC_SNPVW2

Name| d2secsnpvw2 ---|--- CVE| CVE-2008-2463 Exploit Pack| D2ExploitPack Description| Microsoft Office Snapshot Viewer ActiveX Vulnerability - Generic Version Notes|...

the flash vulnerability used in shellcode analysis-vulnerability warning-the black bar safety net

Title: 【original】flash vulnerability used in shellcode analysis Author: Regulus small Cong Time: 2008-06-02,1 9:2 9 Links: http://bbs.pediy.com/showthread.php?t=65907 Author home page: http://hi.baidu.com/yicong2007 The purpose: purely to learn, do not for malicious purposes In recent days flash...

Creative Software AutoUpdate Engine - ActiveX Stack Overflow

Creative Software AutoUpdate Engine - ActiveX Stack Overflow +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ CacheFolder property is vulnerable to stack-based buffer overflow after 260 bytes, @ 512 bytes overwrites SEH and allows code execution reliably. Original Advisory @...

Chilkat FTP ActiveX 2.0 - ChilkatCert.dll Insecure Method

Chilkat FTP ActiveX 2.0 - ChilkatCert.dll Insecure Method ======================================================================= Chilkat FTP ActiveX 2.0 ChilkatCert.dll Insecure Method Web site : www.chilkatsoft.com=======================================================================Author:...

VLC Activex Bad Pointer Initialization Vulnerability

Advisory ID Internal CORE-2007-1004 1. Advisory Information Title: VLC Activex Bad Pointer Initialization Vulnerability Advisory ID: CORE-2007-1004 Advisory URL: https://www.coresecurity.com/core-labs/advisories/vlc-activex--vulnerability Date published: 2007-12-03 Date of last update: 2007-12-03...

Microsoft Visual Studio PDWizard.ocx ActiveX vulnerability

Added: 09/30/2007 CVE: CVE-2007-4891 BID: 25638 OSVDB: 37106 Background Microsoft Visual Studio is a product for facilitating software development on Windows operating systems. Problem ActiveX controls contained in the PDWizard.ocx file in Microsoft Visual Studio 6.0 expose the StartProcess metho...

Microsoft Visual Studio PDWizard.ocx ActiveX vulnerability

Added: 09/30/2007 CVE: CVE-2007-4891 BID: 25638 OSVDB: 37106 Background Microsoft Visual Studio is a product for facilitating software development on Windows operating systems. Problem ActiveX controls contained in the PDWizard.ocx file in Microsoft Visual Studio 6.0 expose the StartProcess metho...

DSquare Exploit Pack: D2SEC_PDWIZARD

Name| d2secpdwizard ---|--- CVE| CVE-2007-4891 Exploit Pack| D2ExploitPack Description| Microsoft Visual Studio PDWizard.ocx ActiveX Arbitrary Code Execution Vulnerability Notes|...

CA eTrust Intrusion Detection CallCode ActiveX vulnerability

Added: 08/09/2007 CVE: CVE-2007-3302 BID: 25050 OSVDB: 37698 Background CA eTrust Intrusion Detection includes the CallCode Caller.dll ActiveX control. Problem The CallCode ActiveX control is incorrectly marked safe for scripting. This ActiveX control contains scriptable functions which, if a use...

IE 6 / Ademco, co., ltd. ATNBaseLoader100 Module Remote BoF Exploit

Exploit for unknown platform in category remote exploits =================================================================== IE 6 / Ademco, co., ltd. ATNBaseLoader100 Module Remote BoF Exploit =================================================================== 'metasploit one, 456 bytes - cmd /c...

Clever Database Comparer ActiveX 2.2 Remote Buffer Overflow PoC

No description provided by source. pre span style="font: 14pt Courier New;"p align="center"b2007/05/14/b/p/span codespan style="font: 10pt Courier New;"span class="general1-symbol"----------------------------------------------------------------------------- bClever Database Comparer ActiveX versi...

Roxio CinePlayer ActiveX buffer overflow

Buffer overflow in SonicDVDDashVRNav.dll...

ActSoft DVD-Tools - 'dvdtools.ocx' Remote Buffer Overflow (PoC)

------------------------------------------------------------------------------------------------- ActSoft DVD-Tools dvdtools.ocx Buffer Overflow developer's url: http://www.activex-soft.com author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org Tested on Windows XP...

VMware 5.5.1 - COM Object Arbitrary Partition Table Delete

http://www.xsec.org Overview: On running windows system, you can't delete, format and change system dirver. \ VMware register a COM Object use for Virtual Disk, but it's very danger. \ I don't know how to name this issue. If you allow unsafe ActiveX and jscript, \ and has VMware installed, the...

Touch arbitrary file execute vulnerability

Title: Touch arbitrary file execute vulnerability Version: Touch Control 2, 0, 0, 55 Discoverer: PARK, GYU TAE [email protected] Advisory No.: NRVA06-04 Critical: Critical Impact: Gain remote user's privilege Where: From remote Operating System: Windows Only Solution: Patched Notice: 16. 06...

Microsoft Internet Explorer DXImageTransform ActiveX Memory Corruption Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. Successful exploitation requires that the target user browse to a malicious web page. The specific flaw exists in the Microsoft ActiveX object...