Clever Internet ActiveX Suite 6.2 Arbitrary File Download/Overwrite

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"------------------------------------------------------------------------------------------------- bClever Internet ActiveX Suite 6.2 CLINETSUITEX6.OCX Arbitrary file download/overwrite...

Clever Internet ActiveX Suite 6.2 - Arbitrary File DownloadOverwrite

Clever Internet ActiveX Suite 6.2 - Arbitrary File DownloadOverwrite ------------------------------------------------------------------------------------------------- Clever Internet ActiveX Suite 6.2 CLINETSUITEX6.OCX Arbitrary file download/overwrite Exploit url:...

Buffer overflow

Buffer overflow in the IEToolbar.IEContextMenu.1 ActiveX control in LinkedInIEToolbar.dll in the LinkedIn Toolbar 3.0.2.1098 allows remote attackers to execute arbitrary code via a long second argument varBrowser argument to the search method. NOTE: some of these details are obtained from third...

CVE-2007-3955

Buffer overflow in the IEToolbar.IEContextMenu.1 ActiveX control in LinkedInIEToolbar.dll in the LinkedIn Toolbar 3.0.2.1098 allows remote attackers to execute arbitrary code via a long second argument varBrowser argument to the search method. NOTE: some of these details are obtained from third...

CVE-2007-3955

Buffer overflow in the IEToolbar.IEContextMenu.1 ActiveX control in LinkedInIEToolbar.dll in the LinkedIn Toolbar 3.0.2.1098 allows remote attackers to execute arbitrary code via a long second argument varBrowser argument to the search method. NOTE: some of these details are obtained from third...

CVE-2007-3955

The CVE-2007-3955 issue is a buffer overflow in the LinkedIn Toolbar’s IEToolbar.IEContextMenu.1 ActiveX control (LinkedInIEToolbar.dll in LinkedIn Toolbar 3.0.2.1098). The flaw occurs when a very long second argument (varBrowser argument) is passed to the search method, allowing remote code exec...

Citrix Access Gateway Citrix EPA ActiveX code execution

ActiveX control allows to download and execute any executable module...

Data Dynamics ActiveReport ActiveX (actrpt2.dll <= 2.5) Inscure Method

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"----------------------------------------------------------------------------------------------- bData Dynamics ActiveReport ActiveX Control actrpt2.dll = 2.5 "SaveLayout" Inscure Method/b ur...

SYMSA-2007-006: Citrix EPA ActiveX Control Design Flaw

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2007-006 Advisory Title: Citrix EPA ActiveX Control Design Flaw Author: Michael White / [email protected] Release Date: 19-07-2007 Applicatio...

Data Dynamics ActiveReport ActiveX (actrpt2.dll <= 2.5) Inscure Method

Exploit for unknown platform in category remote exploits ====================================================================== Data Dynamics ActiveReport ActiveX actrpt2.dll ----------------------------------------------------------------------------------------------- Data Dynamics ActiveReport...

Data Dynamics ActiveReport - ActiveX actrpt2.dll 2.5 Insecure Method

Data Dynamics ActiveReport - ActiveX actrpt2.dll 2.5 Insecure Method ----------------------------------------------------------------------------------------------- Data Dynamics ActiveReport ActiveX Control actrpt2.dll url: http://www.datadynamics.com/default.aspx author: shinnai mail:...

Data Dynamics ActiveReport - ActiveX 'actrpt2.dll 2.5' Insecure Method

----------------------------------------------------------------------------------------------- Data Dynamics ActiveReport ActiveX Control actrpt2.dll url: http://www.datadynamics.com/default.aspx author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written...

Security feature bypass

The Data Dynamics ActiveBar ActiveX control actbar3.ocx 3.2 and earlier allows remote attackers to create or overwrite files via a full pathname in 1 the second argument to the Save method, or the first argument to the 2 SaveLayoutChanges or 3 SaveMenuUsageData method...

CVE-2007-3883

The Data Dynamics ActiveBar ActiveX control actbar3.ocx 3.2 and earlier allows remote attackers to create or overwrite files via a full pathname in 1 the second argument to the Save method, or the first argument to the 2 SaveLayoutChanges or 3 SaveMenuUsageData method...

CVE-2007-3883

CVE-2007-3883 affects the Data Dynamics ActiveBar ActiveX control (actbar3.ocx) version 3.2 and earlier. The vulnerability allows remote attackers to create or overwrite files by providing a full pathname as an argument to the Save method, or to the first argument of SaveLayoutChanges or SaveMenu...

CVE-2007-3883

The Data Dynamics ActiveBar ActiveX control actbar3.ocx 3.2 and earlier allows remote attackers to create or overwrite files via a full pathname in 1 the second argument to the Save method, or the first argument to the 2 SaveLayoutChanges or 3 SaveMenuUsageData method...

EnjoySAP SAP GUI ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in SAP KWEdit ActiveX Control kwedit.dll 6400.1.1.41 provided by EnjoySAP GUI. By sending an overly long string to the "PrepareToPostHTML" method, an attacker may be able to execute arbitrary code. This module requires Metasploit:...

InterActual Player IAMCE和IAKey控件远程栈溢出漏洞

BUGTRAQ ID: 24919 InterActual是一款DVD播放器。 InterActual播放器的IAMCE（IAMCE.dll）ActiveX控件在处理超过256字节的超长FailURL属性时存在栈溢出漏洞；IAKey（IAKey.dll）ActiveX控件在处理超过900字节的超长URLCode属性时存在另一个栈溢出漏洞，如果用户受骗加载了恶意媒体文件的话，就可能触发这些溢出，导致执行任意指令。 Roxio CinePlayer 3.2 InterActual Technologies InterActual Player 2.60.12.0717 厂商补丁：...

Stack overflow

Multiple stack-based buffer overflows in a InterActual Player 2.60.12.0717 and b Roxio CinePlayer 3.2 allow remote attackers to execute arbitrary code via a 1 long FailURL attribute in the IAMCE ActiveX Control IAMCE.dll or a 2 long URLCode attribute in the IAKey ActiveX Control IAKey.dll. NOTE:...

CVE-2007-3829

Multiple stack-based buffer overflows in a InterActual Player 2.60.12.0717 and b Roxio CinePlayer 3.2 allow remote attackers to execute arbitrary code via a 1 long FailURL attribute in the IAMCE ActiveX Control IAMCE.dll or a 2 long URLCode attribute in the IAKey ActiveX Control IAKey.dll. NOTE:...