10868 matches found
America Online ICQ ActiveX Control Arbitrary File Download and Execute
This module allows remote attackers to download and execute arbitrary files on a users system via the DownloadAgent function of the ICQPhone.SipxPhoneManager ActiveX control. This module requires Metasploit: https://metasploit.com/download Current source:...
DSquare Exploit Pack: D2SEC_XUPLOAD2
Name| d2secxupload2 ---|--- CVE| CVE-2009-3693 Exploit Pack| D2ExploitPack Description| HP LoadRunner XUpload.ocx ActiveX Arbitrary File Download Vulnerability Notes|...
Directory traversal
Directory traversal vulnerability in the Persits.XUpload.2 ActiveX control XUpload.ocx in HP LoadRunner 9.5 allows remote attackers to create arbitrary files via .. backwards slash dot dot sequences in the third argument to the MakeHttpRequest method...
CVE-2009-3693
CVE-2009-3693 involves a directory traversal in Persits.XUpload.2 ActiveX control (XUpload.ocx) shipped with HP LoadRunner 9.5. The flaw arises in the MakeHttpRequest method, where sequences like "..\" can cause arbitrary files to be created on the target. Public details describe this as a write-...
CVE-2009-3693
Directory traversal vulnerability in the Persits.XUpload.2 ActiveX control XUpload.ocx in HP LoadRunner 9.5 allows remote attackers to create arbitrary files via .. backwards slash dot dot sequences in the third argument to the MakeHttpRequest method...
Microsoft Indexing Service ActiveX Memory Corruption (MS09-057; CVE-2009-2507)
The Microsoft Windows Indexing Service is a base service that extracts content from files and constructs an indexed catalog to facilitate efficient and rapid searching. A remote code execution vulnerability has been reported in the Microsoft Indexing Service. The vulnerability is caused by an...
Microsoft Windows Indexing Service ActiveX memory corruption
No description provided...
Microsoft Security Bulletin MS09-055 - Critical Cumulative Security Update of ActiveX Kill Bits (973525)
Microsoft Security Bulletin MS09-055 - Critical Cumulative Security Update of ActiveX Kill Bits 973525 Published: October 13, 2009 Version: 1.0 General Information Executive Summary This security update addresses a privately reported vulnerability that is common to multiple ActiveX controls and i...
MS09-057: Vulnerability in Indexing Service Could Allow Remote Code Execution (969059)
The remote host contains the ixsso.dll ActiveX control. This control is included with the Indexing Service. The version of this control installed on the remote host reportedly has an arbitrary code execution vulnerability. A remote attacker could exploit this by tricking a user into requesting a...
MS09-055: Cumulative Security Update of ActiveX Kill Bits (973525)
Microsoft ActiveX controls that were compiled using the vulnerable Active Template Library described in Microsoft Security Bulletin MS09-035 have remote code execution vulnerabilities. A remote attacker could exploit them to execute arbitrary code by tricking a user into requesting a maliciously...
Microsoft Security Bulletin MS09-055 - Critical Cumulative Security Update of ActiveX Kill Bits (973525)
Microsoft Security Bulletin MS09-060 - Critical Vulnerabilities in Microsoft Active Template Library ATL ActiveX Controls for Microsoft Office Could Allow Remote Code Execution 973965 Published: October 13, 2009 Version: 1.0 General Information Executive Summary This security update resolves...
Microsoft Indexing Service ActiveX Control Remote Code Execution Vulnerability
Description The Microsoft Indexing Service ActiveX control is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting to view a malicious webpage. Successful exploits will allow the attacker to execute arbitrary code within the context of an...
KeyWorks keyhelp.ocx ActiveX控件栈溢出漏洞
BUGTRAQ ID: 36546 KeyHelp是一个免费的ActiveX控件，在线帮助作者和程序员可使用这个控件增强Microsoft HTML帮助系统的功能和控制帮助系统的行为。 KeyHelp.KeyCtrl.1 ActiveX控件（KeyHelp.ocx）的JumpMappedID和JumpURL方式没有正确地验证用户所传送的参数。如果用户受骗访问了恶意网页并向上述方式传送了超过537字节的超长参数，就可以触发栈溢出，导致执行任意指令。 KeyWorks keyhelp.ocx 1.2.3120.0 EMC Captiva QuickScan Pro 4.6 sp1 临时解决方...
Design/Logic Flaw
Use-after-free vulnerability in the Sb.SuperBuddy.1 ActiveX control sb.dll in America Online AOL 9.5.0.1 allows remote attackers to trigger memory corruption or possibly execute arbitrary code via a malformed argument to the SetSuperBuddy method...
CVE-2009-3658
Use-after-free vulnerability in the Sb.SuperBuddy.1 ActiveX control sb.dll in America Online AOL 9.5.0.1 allows remote attackers to trigger memory corruption or possibly execute arbitrary code via a malformed argument to the SetSuperBuddy method...
CVE-2009-3658
The CVE-2009-3658 entry concerns AOL (America Online) 9.5.0.1, specifically the Sb.SuperBuddy.1 ActiveX control (sb.dll). A use-after-free in the SetSuperBuddy method leads to memory corruption and potential remote code execution. Public details across sources confirm RCE risk with this ActiveX c...
CVE-2009-3658
Use-after-free vulnerability in the Sb.SuperBuddy.1 ActiveX control sb.dll in America Online AOL 9.5.0.1 allows remote attackers to trigger memory corruption or possibly execute arbitrary code via a malformed argument to the SetSuperBuddy method...
PT-2009-5930 · Aol · America Online
Name of the Vulnerable Software and Affected Versions: America Online AOL version 9.5.0.1 Description: The issue is related to a use-after-free vulnerability in the Sb.SuperBuddy.1 ActiveX control, which allows remote attackers to trigger memory corruption or possibly execute arbitrary code. This...
SAP GUI VSFlexGrid Active-X Buffer Overflow
Application: SAP GUI VSFlexGrid.VSFlexGridL Part of SAP GUI, SAP BO 2005, SAP BO 2007 Versions Affected: SAP GUI VSFlexGrid Activex Control sp=14 Vendor URL: http://SAP.com Bugs: Buffer Overflovw Exploits: YES Reported: 26.11.2008 Vendor response: 27.11.208 Public Advisory: 06.10.2009 Originaly...
CVE-2009-3573
Multiple insecure method vulnerabilities in the PDIControl.PDI.1 ActiveX control PDIControl.dll 2.2.3160.0 in EMC Captiva PixTools Distributed Imaging 2.2 allow remote attackers to create or overwrite arbitrary files via the 1 SetLogFileName and 2 WriteToLog methods...