MW6 Technologies QRCode ActiveX 3.0 - Remote File Overwrite

----------------------------------------------------------------------------- MW6 Technologies QRCode ActiveX 3.0 MW6QRCode.dll Remote File Overwrite url: www.mw6tech.com Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose. U...

mw6-overwrite.txt

----------------------------------------------------------------------------- MW6 Technologies QRCode ActiveX 3.0 MW6QRCode.dll Remote File Overwrite url: www.mw6tech.com Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose. U...

Photo Upload Plugin ActiveX控件多个缓冲区溢出漏洞

BUGTRAQ ID: 25685 CVECAN ID: CVE-2007-0326 Photo Upload Plugin ActiveX控件允许用户使用Internet Explorer上传数码相片。 Photo Upload Plugin ActiveX控件中存在多个缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 如果用户受骗浏览了恶意的HTML文档的话，就可能触发这些溢出，导致以当前用户的权限执行任意指令或浏览器崩溃。 PhotoChannel Networks Inc Photo Upload Plugin 2.0.0.9 临时解决方法： 在IE中禁用Photo...

Path traversal

Absolute path traversal vulnerability in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto Component allows remote attackers to write to arbitrary files via a full pathname in the argument to the SaveToFile method...

Buffer overflow

Multiple buffer overflows in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto Component allow remote attackers to execute arbitrary code via 1 a long string in the first argument to the AcquireContext method or 2 an unspecified vector to the DeleteContext method...

CVE-2007-4902

Absolute path traversal vulnerability in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto Component allows remote attackers to write to arbitrary files via a full pathname in the argument to the SaveToFile method...

CVE-2007-4903

Multiple buffer overflows in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto Component allow remote attackers to execute arbitrary code via 1 a long string in the first argument to the AcquireContext method or 2 an unspecified vector to the DeleteContext method...

CVE-2007-4903

CVE-2007-4903 describes multiple buffer overflows in a specific ActiveX control used by Ultra Crypto Component, affecting CryptoX.dll 2.0 and earlier. The vulnerability allows remote arbitrary code execution via (1) a long string passed to AcquireContext and (2) an unspecified vector to DeleteCon...

CVE-2007-4902

Absolute path traversal vulnerability in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto Component allows remote attackers to write to arbitrary files via a full pathname in the argument to the SaveToFile method...

CVE-2007-4903

Multiple buffer overflows in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto Component allow remote attackers to execute arbitrary code via 1 a long string in the first argument to the AcquireContext method or 2 an unspecified vector to the DeleteContext method...

CVE-2007-4902

CVE-2007-4902 describes an absolute path traversal in an ActiveX control within CryptoX.dll (versions ≤ 2.0) and the Ultra Crypto Component. The flaw allows remote attackers to write to arbitrary files by supplying a full pathname to the SaveToFile method, enabling overwriting of files on the aff...

[GOODFELLAS-VULN] ActiveX hpqutil!ListFiles hpqutil.dll - Remote heap overflow

:. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: ActiveX hpqutil!ListFiles hpqutil.dll - Remote heap overflow. ============================================================= Internal ID: VULWAR200706041 introduction ------------ GOODFELLAS security research team has...

CVE-2007-4891

A certain ActiveX control in PDWizard.ocx 6.0.0.9782 and earlier in Microsoft Visual Studio 6.0 exposes dangerous 1 StartProcess, 2 SyncShell, 3 SaveAs, 4 CABDefaultURL, 5 CABFileName, and 6 CABRunFile methods, which allows remote attackers to execute arbitrary programs and have other impacts, as...

Directory traversal

Absolute directory traversal vulnerability in a certain ActiveX control in the VB To VSI Support Library VBTOVSI.DLL 1.0.0.0 in Microsoft Visual Studio 6.0 allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the SaveAs method. NOTE: contents can b...

Code injection

A certain ActiveX control in PDWizard.ocx 6.0.0.9782 and earlier in Microsoft Visual Studio 6.0 exposes dangerous 1 StartProcess, 2 SyncShell, 3 SaveAs, 4 CABDefaultURL, 5 CABFileName, and 6 CABRunFile methods, which allows remote attackers to execute arbitrary programs and have other impacts, as...

CVE-2007-4890

Absolute directory traversal vulnerability in a certain ActiveX control in the VB To VSI Support Library VBTOVSI.DLL 1.0.0.0 in Microsoft Visual Studio 6.0 allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the SaveAs method. NOTE: contents can b...

DSquare Exploit Pack: D2SEC_PDWIZARD

Name| d2secpdwizard ---|--- CVE| CVE-2007-4891 Exploit Pack| D2ExploitPack Description| Microsoft Visual Studio PDWizard.ocx ActiveX Arbitrary Code Execution Vulnerability Notes|...

CVE-2007-4891

A certain ActiveX control in PDWizard.ocx 6.0.0.9782 and earlier in Microsoft Visual Studio 6.0 exposes dangerous 1 StartProcess, 2 SyncShell, 3 SaveAs, 4 CABDefaultURL, 5 CABFileName, and 6 CABRunFile methods, which allows remote attackers to execute arbitrary programs and have other impacts, as...

CVE-2007-4890

CVE-2007-4890 affects the VB To VSI Support Library (VBTOVSI.DLL) 1.0.0.0 within Microsoft Visual Studio 6.0. The vulnerability is an absolute directory traversal in the SaveAs method that allows remote attackers to create or overwrite arbitrary files via a full pathname; the Load method can copy...

CVE-2007-4891

CVE-2007-4891 concerns the PDWizard.ocx ActiveX control in Microsoft Visual Studio 6.0. Affected component: PDWizard.ocx (Visual Studio 6.0) with versions 6.0.0.9782 and earlier. Root cause: the PDWizard.ocx ActiveX control exposes dangerous methods (StartProcess, SyncShell, SaveAs, CABDefaultURL...