ZDI-12-027 : IBM SPSS VsVIEW6.ocx ActiveX Control SaveDoc Method Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-027 : IBM SPSS VsVIEW6.ocx ActiveX Control SaveDoc Method Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-027 February 8, 2012 - -- CVE ID: CVE-2012-0189 - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P - --...

ZDI-12-019 : IBM SPSS mraboutb.dll ActiveX Control SetLicenseInfoEx Method Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-019 : IBM SPSS mraboutb.dll ActiveX Control SetLicenseInfoEx Method Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-019 January 30, 2012 - -- CVE ID: CVE-2012-0188 - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:...

IBM ActiveX multiple security vulnerabilities

SPSS and Rational Rhapsody ActiveX multiple security vulnerabilities...

Novell iPrint Client < 5.78 Multiple Code Execution Vulnerabilities

The version of Novell iPrint Client installed on the remote host is earlier than 5.78. Such versions are reportedly affected by one or more of the following vulnerabilities that can allow for arbitrary code execution : - An unspecified issue exists in the GetDriverSettings realm in nipplib.dll...

Novell iPrint Client < 5.78 Multiple Code Execution Vulnerabilities

Binary data 6315.prm...

IBM SPSS VsVIEW6.ocx ActiveX Control SaveDoc Method Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM SPSS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the SaveDoc function...

IBM SPSS ExportHTML.dll ActiveX Control Render Method Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM SPSS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the Render method expos...

Edraw Diagram Component 5 - ActiveX Control LicenseName() Method Buffer Overflow

Edraw Diagram Component 5 - ActiveX Control LicenseName Method Buffer Overflow source: https://www.securityfocus.com/bid/51866/info Edraw Diagram Component ActiveX control 'EDBoard.ocx' is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on...

Edraw Diagram Component 5 - ActiveX Control 'LicenseName()' Method Buffer Overflow

source: https://www.securityfocus.com/bid/51866/info Edraw Diagram Component ActiveX control 'EDBoard.ocx' is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code in...

PDF Viewer Component ActiveX DoS

Exploit for windows platform in category dos / poc Title : PDF Viewer Component ActiveX DoS Auther : Senator of Pirates E-Mail : email protected FaceBook : FaceBook.Com/SenatorofPirates Software link : http://www.ocxt.com/download/PDFViewerSetup.exe Date : 05/02/2012 Tested : Windows Xp SP3 EN...

PDF Viewer Component - ActiveX Denial of Service

Title : PDF Viewer Component ActiveX DoS Auther : Senator of Pirates E-Mail : [email protected] FaceBook : FaceBook.Com/SenatorofPirates Software link : http://www.ocxt.com/download/PDFViewerSetup.exe Date : 05/02/2012 Tested : Windows Xp SP3 EN eax=00000000 ebx=00000001...

PDF Viewer Component - ActiveX Denial of Service

PDF Viewer Component - ActiveX Denial of Service Title : PDF Viewer Component ActiveX DoS Auther : Senator of Pirates E-Mail : [email protected] FaceBook : FaceBook.Com/SenatorofPirates Software link : http://www.ocxt.com/download/PDFViewerSetup.exe Date : 05/02/2012 Tested :...

Edraw Diagram Component 5 - ActiveX Buffer Overflow (Denial of Service) (PoC)

Edraw Diagram Component 5 - ActiveX Buffer Overflow Denial of Service PoC Author : Senator of Pirates This exploit tested on Windows Xp SP3 EN http://www.edrawsoft.com/download/EDBoardSetup.exe -------------------------------------------------------------------------------------------------------...

Edraw Diagram Component 5 ActiveX buffer overflow DoS

Exploit for windows platform in category dos / poc Author : Senator of Pirates This exploit tested on Windows Xp SP3 EN http://www.edrawsoft.com/download/EDBoardSetup.exe -------------------------------------------------------------------------------------------------------- targetFile =...

Edraw Diagram Component 5 - ActiveX Buffer Overflow (Denial of Service) (PoC)

Author : Senator of Pirates This exploit tested on Windows Xp SP3 EN http://www.edrawsoft.com/download/EDBoardSetup.exe -------------------------------------------------------------------------------------------------------- targetFile = "C:\Program Files\edboard\EDBoard.ocx" prototype =...

Icona SpA C6 Messenger Downloader Arbitrary File Download / Execute

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Icona SpA C6...

CVE-2012-0977

Stack-based buffer overflow in jp2x.dll in LuraWave JP2 ActiveX Control 2.1.5.5 and other versions before 2.1.5.11 allows remote attackers to execute arbitrary code via a JPEG2000 JP2 file with a crafted Quantization Default QCD marker segment...

CVE-2012-0977

CVE-2012-0977 concerns a stack-based buffer overflow in jp2_x.dll of the LuraWave JP2 ActiveX Control (versions up to 2.1.5.10; fixed in 2.1.5.11). The flaw allows remote attackers to execute arbitrary code by feeding a JP2 file containing a crafted Quantization Default (QCD) marker segment. Affe...

Icona SpA C6 Messenger DownloaderActiveX Control Arbitrary File Execute

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Icona SpA C6 Messenger - DownloaderActiveX Control Arbitrary File Download and Execute (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Icona SpA C6...