10860 matches found
Microsoft Internet Explorer Tabular Data Control ActiveX Remote Code Execution
No description provided by source. CVE : CVE-2010-0805 !-- .text:600058F7 and ebp+pv, 0 .text:600058FE lea eax, ebp+pv .text:60005904 push eax ; unsigned int16 .text:60005905 push dword ptr ebx+10h ; struct IOleClientSite .text:60005908 call GetHostURLIOleClientSite ,ushort .text:6000590D mov eax...
Yahoo! Messenger (YVerInfo.dll <= 2007.8.27.1) ActiveX BoF Exploit
No description provided by source. !-- Yahoo! Messenger YVerInfo.dll = 2007.8.27.1 ActiveX Control Buffer Overflows update YM : http://messenger.yahoo.com/securityupdate.php?id=082907 Functions : fvcom or info; RegKey Safe for Script: True RegKey Safe for Init: True - that functions are safely...
IBM ACPRunner 1.2.5 ActiveX Control Dangerous Method Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10561/info It is reported that the IBM acpRunner ActiveX control contains dangerous methods that may result in a remote compromise of a system on which the ActiveX control is installed. These methods may be accessed by a...
Cryptomathic ActiveX Control Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17852/info Cryptomathic ActiveX control is prone to a buffer-overflow vulnerability. The software fails to perform sufficient bounds-checking of user-supplied input before copying it to an insufficiently sized memory...
Yahoo! Webcam ActiveX Control 2.0 .0.107 Buffer Overrun Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8634/info A buffer overrun has been discovered in the Yahoo! Webcam ActiveX control. The problem occurs due to insufficient bounds checking when handling user-supplied Webcam parameters. As a result, an attacker may be...
Barcodewiz 3.29 - Barcode ActiveX Control Remote Heap Spray Exploit (IE6/IE7)
No description provided by source. !-- Title: Barcodewiz 3.29 ActiveX Heap Spray Exploit Coded By: DrIDE Found By: loneferret Tested: Windows XP SP3 on IE6 + IE7 Date: July, 30 2010 -- html object classid='clsid:CD3B09F1-26FB-41CD-B3F2-E178DFD3BCC6' id='target'/object script language='javascript'...
iseemedia / Roxio / MGI Software LPViewer ActiveX Control Buffer Overflow
No description provided by source. $Id: lpviewerurl.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
MS IE 4.0 for Windows 95/Windows NT 4 Setupctl ActiveX Control Buffer Overflow
No description provided by source. Microsoft Internet Explorer 4.0 for Windows 95/Windows NT 4 Setupctl ActiveX Control Buffer Overflow source: http://www.securityfocus.com/bid/667/info There is a buffer overflow in the setupctl ActiveX control that used to ship with some versions of Microsoft's...
Adobe Flash Player Type Confusion Remote Code Execution
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::Remote::BrowserExploitServer def...
Grokster 1.3/2.6,KaZaA Media Desktop 1.3.x/1.6.1/2.0.x ActiveX Control Remote Buffer Overflow
No description provided by source. source: http://www.securityfocus.com/bid/11101/info Altnet is reported prone to a remote buffer overflow vulnerability. This issue presents itself in an ActiveX control installed by the application. Reportedly, a malicious attacker can exploit this issue to...
Oracle Document Capture Insecure READ Method
No description provided by source. Source: http://packetstormsecurity.org/files/view/97872/DSECRG-11-007.txt Digital Security Research Group DSecRG Advisory DSECRG-11-007 Internal DSECRG-00117 Application: Oracle Document Capture Versions Affected: 10.1350.0005 Vendor URL:...
British Telecommunications Consumer Webhelper 2.0.0.7 - Multiple Buffer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/24219/info The British Telecommunications Consumer Webhelper ActiveX control is prone to multiple buffer-overflow vulnerabilities because it fails to bounds-check user-supplied data before copying it into an insufficientl...
Baidu Soba Search Bar 5.4 BaiduBar.DLL ActiveX Control Remote Code Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25121/info An ActiveX control installed with Baidu Soba search bar is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute hostile code on a victim's computer in the context of the...
MS IE 5.0 Media Player ActiveX Error Message Vulnerability
No description provided by source. Microsoft Internet Explorer 5.0 for Windows 2000/Windows 95/Windows 98/Windows NT 4 Media Player ActiveX Error Message Vulnerability source: http://www.securityfocus.com/bid/793/info The Windows Media Player ActiveX control, shipped with IE 5, returns a specific...
Image Viewer CP Gold 5.5 - Image2PDF() Buffer Overflow (msf)
No description provided by source. Image Viewer CP gold v5.5 Buffer Overflow Found by: bz1p AT bshellz.net Impact: Low, NOT marked safe for scripting or initializing CVE: ? 0day msf exploitimageviewercpgold Sending exploit to 172.17.120.211:1061... Sending stage 749056 bytes to 172.17.120.211...
Yahoo! Messenger YVerInfo.dll ActiveX Control Buffer Overflow
No description provided by source. $Id: yahoomessengerfvcom.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...
Cisco Linksys PlayerPT ActiveX Control SetSource sURL argument Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
AoA Audio Extractor Remote ActiveX SEH JIT Spray Exploit (ASLR+DEP Bypass)
No description provided by source. Tested on my XPSP3+IE7+/nx=AlwaysOn, should work on Windows 7 with the proper return value. http://www.exploit-db.com/sploits/DrIDE-AoA-JIT.rar...
Microsoft MSN Messenger Service 1.0 Setup BBS ActiveX Control Buffer Overflow
No description provided by source. source: http://www.securityfocus.com/bid/668/info There is a buffer overflow in the 4.71.0.10 version of the MSN Setup BBS ActiveX control setupbbs.ocx.. This ActiveX control is marked 'Safe for Scripting' . Arbitrary commands may be executed if the ActiveX...
Foxit Reader 3.1.4.1125 - ActiveX Heap Overflow PoC
No description provided by source. Vendor :www.foxitsoftware.com tested on :windows 7 Foxit Reader Version 3.1.4.1125 html object classid='clsid:05563215-225C-45EB-BB34-AFA47217B1DE' id='target' /object script language='vbscript' targetFile = C:\Program Files\Foxit Software\Foxit...