Move Networks Quantum Streaming Player ActiveX stack buffer overflows

Overview The Move Networks Quantum Streaming Player ActiveX controls contain multiple stack buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Move Networks Quantum Streaming Player is an ActiveX video player for use ...

Move Media Player 1.0 Quantum Streaming - ActiveX Control Multiple Buffer Overflow Vulnerabilities

source: https://www.securityfocus.com/bid/25529/info Move Media Player is prone to multiple remote buffer-overflow vulnerabilities because the application fails to properly bounds-check user-supplied data before copying it into insufficiently sized memory buffers. Exploiting these issues allows...

Thunder 5.6.9.344 ActiveX 0day Remote Code Executi-vulnerability warning-the black bar safety net

Has been successfully tested,not card,is off IE OBJECT id=target classid=clsid:EEDD6FF9-13DE-496B-9A1C-D78B3215E266/OBJECT SCRIPT language=javascript var she132132132132llc13ode = unescape"%u9090"+"%u9090"+ "%uefe9%u0000%u5a00%ua164%u0030%u0000%u408b%u8b0c" +...

PPStream (PowerPlayer.dll 2.0.1.3829) Activex Remote Overflow Exploit-vulnerability warning-the black bar safety net

Source: milw0rm // author: dummy // written by [email protected] 2 0 0 7 define CRTSECURENODEPRECATE include windows. h include stdio. h const unsigned char shellcode1 7 4 = 0xE8, 0x00, 0x00, 0x00, 0x00, 0x6A, 0x03, 0xEB, 0x21, 0x7E, 0xD8, 0xE2, 0x73, 0x98, 0xFE, 0x8A, 0x0E, 0x8E, 0x4E, 0x0E, 0xEC,...

Move Media Player 1.0 Quantum Streaming - ActiveX Control Multiple Buffer Overflow Vulnerabilities

Move Media Player 1.0 Quantum Streaming - ActiveX Control Multiple Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/25529/info Move Media Player is prone to multiple remote buffer-overflow vulnerabilities because the application fails to properly bounds-check user-supplie...

Yahoo! Messenger (YVerInfo.dll <= 2007.8.27.1) ActiveX BoF Exploit

No description provided by source. !-- Yahoo! Messenger YVerInfo.dll = 2007.8.27.1 ActiveX Control Buffer Overflows update YM : http://messenger.yahoo.com/securityupdate.php?id=082907 Functions : fvcom or info; RegKey Safe for Script: True RegKey Safe for Init: True - that functions are safely...

Yahoo! Messenger (YVerInfo.dll <= 2007.8.27.1) ActiveX BoF Exploit

Exploit for unknown platform in category remote exploits ================================================================== Yahoo! Messenger YVerInfo.dll that functions are safely scriptable and exploitable by HeapSpray Technique Tested : Windows XP Professional SP2 all patched,Internet Explorer ...

Yahoo! Messenger - YVerInfo.dll 2007.8.27.1 ActiveX Buffer Overflow

Yahoo! Messenger - YVerInfo.dll 2007.8.27.1 ActiveX Buffer Overflow that functions are safely scriptable and exploitable by HeapSpray Technique Tested : Windows XP Professional SP2 all patched,Internet Explorer 7 That functions within this class can only be called if the control believes it is...

Yahoo! Messenger - 'YVerInfo.dll 2007.8.27.1' ActiveX Buffer Overflow

that functions are safely scriptable and exploitable by HeapSpray Technique Tested : Windows XP Professional SP2 all patched,Internet Explorer 7 That functions within this class can only be called if the control believes it is being run from the yahoo.com domain. - I used "Simple DNS Plus" for...

PPStream (PowerPlayer.dll 2.0.1.3829) Activex Remote Overflow Exploit

No description provided by source. // author: dummy // written by [email protected] 2007 define CRTSECURENODEPRECATE include windows.h include stdio.h const unsigned char shellcode174 = 0xE8, 0x00, 0x00, 0x00, 0x00, 0x6A, 0x03, 0xEB, 0x21, 0x7E, 0xD8, 0xE2, 0x73, 0x98, 0xFE, 0x8A, ...

CVE-2007-4515

Buffer overflow in a certain ActiveX control in YVerInfo.dll before 2007.8.27.1 in the Yahoo! services suite for Yahoo! Messenger before 8.1.0.419 allows remote attackers to execute arbitrary code via unspecified vectors involving arguments to the 1 fvCom and 2 info methods. NOTE: some of these...

Buffer overflow

Buffer overflow in a certain ActiveX control in YVerInfo.dll before 2007.8.27.1 in the Yahoo! services suite for Yahoo! Messenger before 8.1.0.419 allows remote attackers to execute arbitrary code via unspecified vectors involving arguments to the 1 fvCom and 2 info methods. NOTE: some of these...

CVE-2007-4515

CVE-2007-4515 is a buffer overflow vulnerability in Yahoo! Messenger’s YVerInfo.dll ActiveX control (pre-7/27/2007 build). The issue allows remote code execution via faulty arguments to fvCom and info methods, affecting Messenger prior to 8.1.0.419. Documents show public exploitation modules (e.g...

CVE-2007-4515

Buffer overflow in a certain ActiveX control in YVerInfo.dll before 2007.8.27.1 in the Yahoo! services suite for Yahoo! Messenger before 8.1.0.419 allows remote attackers to execute arbitrary code via unspecified vectors involving arguments to the 1 fvCom and 2 info methods. NOTE: some of these...

Trend Micro OfficeScan Client ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in Trend Micro OfficeScan Corporate Edition 7.3. By sending an overly long string to the "CgiOnUpdate" method located in the OfficeScanSetupINI.dll Control, an attacker may be able to execute arbitrary code. This module requires Metasploit:...

Buffer overflow

Buffer overflow in the EasyMailSMTPObj ActiveX control in emsmtp.dll 6.0.1 in the Quiksoft EasyMail SMTP Object, as used in Postcast Server Pro 3.0.61 and other products, allows remote attackers to execute arbitrary code via a long argument to the SubmitToExpress method, a different vulnerability...

DSquare Exploit Pack: D2SEC_JINITIATOR

Name| d2secjinitiator ---|--- CVE| CVE-2007-4467 Exploit Pack| D2ExploitPack Description| Oracle JInitiator ActiveX Buffer Overflow Notes|...

CVE-2007-4607

Buffer overflow in the EasyMailSMTPObj ActiveX control in emsmtp.dll 6.0.1 in the Quiksoft EasyMail SMTP Object, as used in Postcast Server Pro 3.0.61 and other products, allows remote attackers to execute arbitrary code via a long argument to the SubmitToExpress method, a different vulnerability...

CVE-2007-4607

Buffer overflow in the EasyMailSMTPObj ActiveX control in emsmtp.dll 6.0.1 in the Quiksoft EasyMail SMTP Object, as used in Postcast Server Pro 3.0.61 and other products, allows remote attackers to execute arbitrary code via a long argument to the SubmitToExpress method, a different vulnerability...

CVE-2007-4467

Multiple stack-based buffer overflows in the Oracle JInitiator ActiveX control beans.ocx 1.1.8.16 and earlier, as used by Oracle Forms applications from Oracle and third parties, allow remote attackers to execute arbitrary code via unspecified "initialization parameters." NOTE: it was later...