CVE-2008-4049

A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to execute arbitrary programs via arguments to the RunApp method...

CVE-2008-4048

CVE-2008-4048 describes a heap-based buffer overflow in an ActiveX control of the fwRemoteCfg.dll 3.3.3.1 component used by the Friendly Technologies FriendlyPPPoE Client 3.0.0.57. The overflow is triggered by a long third argument to the CreateURLShortcut method, allowing remote attackers to exe...

Design/Logic Flaw

The Microsoft Windows Image Acquisition Logger ActiveX control allows remote attackers to force the download of arbitrary files onto a client system via a URL in the first argument to the Open method, in conjunction with a full destination pathname in the first argument to the Save method. NOTE:...

CVE-2008-3008

Stack-based buffer overflow in the WMEncProfileManager ActiveX control in wmex.dll in Microsoft Windows Media Encoder 9 Series allows remote attackers to execute arbitrary code via a long first argument to the GetDetailsString method, aka "Windows Media Encoder Buffer Overrun Vulnerability."...

Adobe Acrobat 9 ActiveX Remote Denial of Service Exploit

No description provided by source. !-- Jeremy Brown [email protected]/jbrownsec.blogspot.com Adobe Acrobat 9 Remote DoS -- Tested on AA9/IE7/Vista I can't seem to reproduce this on XP! Oh well. Of course the most popular app for reading pdfs is SfS/SfI : Basically it will crash with any uri th...

Microsoft Windows Image Acquisition Logger ActiveX控件任意文件覆盖漏洞

BUGTRAQ ID: 31069 CNCAN ID：CNCAN-2008090905 Microsoft Windows Image Acquisition是一款用于数码相机和扫描仪之类的影像设备的服务。 Microsoft Windows Image Acquisition Logger ActiveX控件存在设计问题，远程攻击者可以利用漏洞以应用程序权限覆盖系统任意文件。 相关的ActiveX控件的CLSID为A1E75357-881A-419E-83E2-BB16DB197C68，由于对Save方法缺少充分检查，可导致以应用程序权限覆盖系统任意文件。 Microsoft...

Adobe Acrobat 9 - ActiveX Remote Denial of Service

arg1="acroie:///DoS" target.src = arg1 milw0rm.com 2008-09-11...

Adobe Acrobat 9 - ActiveX Remote Denial of Service

Adobe Acrobat 9 - ActiveX Remote Denial of Service arg1="acroie:///DoS" target.src = arg1 milw0rm.com 2008-09-11...

Microsoft Windows Media Encoder 9 'wmex.dll' ActiveX控件缓冲区溢出漏洞（MS08-055）

BUGTRAQ ID: 31065 CVE ID：CVE-2008-3008 CNCVE ID：CNCVE-20083008 Microsoft Windows Media Encoder 9是一款视频音频编码工具。 Microsoft Windows Media Encoder 9包含的WMEX.DLL ActiveX存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 构建特殊的WEB页，诱使用户访问，可触发此漏洞。目前没有详细漏洞细节提供。 Microsoft Windows Media Encoder 9 x64 + Microsoft Advanced Windo...

Adobe Acrobat 9 ActiveX Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ======================================================== Adobe Acrobat 9 ActiveX Remote Denial of Service Exploit ======================================================== arg1="acroie:///DoS" target.src = arg1 0day.today 2018-04-02...

sqlvdir-overflow.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z - r4s4al ---QKrun1x-P47tr1ck - FeDeReR -MAGE -JeTFyrE and all darkc0de members ---...

CVE-2008-3008

CVE-2008-3008 affects Windows Media Encoder 9 Series. A stack-based buffer overflow in the WMEncProfileManager ActiveX control (wmex.dll) can be triggered by passing a very long first argument to GetDetailsString, enabling remote code execution. The vulnerability is associated with Microsoft MS08...

VMware Products Multiple Vulnerabilities (VMSA-2008-0014)

A VMware product installed on the remote host is affected by multiple vulnerabilities : - ActiveX controls provided by VMware for IE could be exploited to cause a denial of service condition or execute arbitrary code on the remote system. CVE-2007-5438, CVE-2008-3691-CVE-2008-3696, CVE-2008-3892 ...

Peachtree Accounting 2004 (PAWWeb11.ocx) ActiveX Insecure Method

Exploit for unknown platform in category remote exploits ================================================================ Peachtree Accounting 2004 PAWWeb11.ocx ActiveX Insecure Method ================================================================ arg1="C:/WINDOWS/system32/calc.exe"...

Microsoft Windows Media Encoder ActiveX code execution

Control supports unsafe methods...

Peachtree Accounting 2004 - 'PAWWeb11.ocx' ActiveX Insecure Method

arg1="C:/WINDOWS/system32/calc.exe" target.ExecutePreferredApplication arg1 milw0rm.com 2008-09-10...

Peachtree Accounting 2004 (PAWWeb11.ocx) ActiveX Insecure Method

No description provided by source. !-- Jeremy Brown [email protected]/jbrownsec.blogspot.com Peachtree Accounting Remote SfS/SfI Exploit Tested on Peachtree Accounting 2004 / Windows XP / IE6 All Peachtree software that includes PAWWeb11.ocx are assumed vulnerable -- htmlbody object id=target...

Peachtree Accounting 2004 - PAWWeb11.ocx ActiveX Insecure Method

Peachtree Accounting 2004 - PAWWeb11.ocx ActiveX Insecure Method arg1="C:/WINDOWS/system32/calc.exe" target.ExecutePreferredApplication arg1 milw0rm.com 2008-09-10...

CVE-2008-3957

CVE-2008-3957 involves the Microsoft Windows Image Acquisition Logger ActiveX control. The vulnerability allows remote attackers to force the download of arbitrary files onto a client system by supplying a URL in the first argument to Open, combined with a full destination pathname in the first a...

CVE-2008-3957

The Microsoft Windows Image Acquisition Logger ActiveX control allows remote attackers to force the download of arbitrary files onto a client system via a URL in the first argument to the Open method, in conjunction with a full destination pathname in the first argument to the Save method. NOTE:...