Chilkat Zip ActiveX控件任意文件覆盖漏洞

BUGTRAQ ID: 24806 Chilkat Zip是一个功能强大的ActiveX控件，允许建立及管理压缩文件。 Chilkat Zip ActiveX控件在处理请求参数时存在漏洞，远程攻击者可能利用此漏洞破坏用户系统上的文件。 Chilkat Zip ActiveX控件（ChilkatZip2.dll）的SaveLastError和WriteExe方式没有正确地验证用户输入。如果用户受骗访问了恶意站点并向上述方式传送了恶意参数的话，就可能导致覆盖任意系统文件。 Chilkat Software Chilkat Zip 12.4.2.0...

neotracepro-overflow.txt

Date: 24/03/07 México / PRIVATE DON'T DISTRIBUTE PRIVATE DON'T DISTRIBUTE PRIVATE / I found this buffer overflow fuzzing NeoTraceExplorer.dll an ActiveX Control with ComRaider from iDefense. It has a method called TraceTarget which can be exploited passing a large string 486 bytes due there's no...

chilkat-multi.txt

------------------------------------------------------------------------------ Chilkat Software Chilkat Zip ActiveX Component ChilkatZip2.dll v. 12.4.2.0 "SaveLastError" and "WriteExe" Insecure Methods url: http://www.chilkatsoft.com/ author: shinnai mail: shinnaiatautisticidotorg site:...

CVE-2007-3633

CVE-2007-3633 concerns an absolute path traversal in the ChilkatZip2.dll 12.4.2.0 Chilkat Zip ActiveX control. The vulnerability arises from passing a full pathname to the SaveLastError or possibly the WriteExe method, enabling remote attackers to create or overwrite arbitrary files. Affected com...

CVE-2007-3633

Absolute path traversal vulnerability in the Chilkat Software Chilkat Zip ActiveX control in ChilkatZip2.dll 12.4.2.0 allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the 1 SaveLastError method and probably the 2 WriteExe method...

McAfee Visual Trace ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in the McAfee Visual Trace 3.25 ActiveX Control NeoTraceExplorer.dll 1.0.0.1. By sending an overly long string to the "TraceTarget" method, an attacker may be able to execute arbitrary code. This module requires Metasploit:...

Chilkat Zip ActiveX Component 12.4 Multiple Insecure Methods Exploit

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"------------------------------------------------------------------------------ bChilkat Software Chilkat Zip ActiveX Component ChilkatZip2.dll v. 12.4.2.0...

NeoTracePro 3.25 ActiveX TraceTarget() Remote BoF Exploit

No description provided by source. !-- / PUBLIC SINCE MAY 31th 2007 / / PRIVATE DON'T DISTRIBUTE PRIVATE DON'T DISTRIBUTE PRIVATE / NeoTracePro 3.25 ActiveX Control "TraceTarget" b0f NeoTraceExplorer.dll Remote 0-day Exploit Risk Level: High Impact: Remote command execution Author: A. Alejandro...

NeoTracePro 3.25 - ActiveX TraceTarget() Remote Buffer Overflow

NeoTracePro 3.25 - ActiveX TraceTarget Remote Buffer Overflow Date: 24/03/07 México / PRIVATE DON'T DISTRIBUTE PRIVATE DON'T DISTRIBUTE PRIVATE / I found this buffer overflow fuzzing NeoTraceExplorer.dll an ActiveX Control with ComRaider from iDefense. It has a method called TraceTarget which ca...

NGS-enjoysap-heap.txt

======= Summary ======= Name: EnjoySAP, SAP GUI for Windows - Heap Overflow Release Date: 5 July 2007 Reference: NGS00482 Discover: Mark Litchfield Vendor: SAP Vendor Reference: SECRES-290 Systems Affected: All ASCII Versions Risk: High Status: Fixed ======== TimeLine ======== Discovered: 4 Janua...

NGS-enjoysap-stack.txt

======= Summary ======= Name: EnjoySAP, SAP GUI for Windows - Stack Overflow Release Date: 5 July 2007 Reference: NGS00483 Discover: Mark Litchfield Vendor: SAP Vendor Reference: SECRES-289 Systems Affected: All Versions Risk: High Status: Fixed ======== TimeLine ======== Discovered: 4 January 20...

Chilkat Zip ActiveX Component 12.4 - Multiple Insecure Methods

Chilkat Zip ActiveX Component 12.4 - Multiple Insecure Methods ------------------------------------------------------------------------------ Chilkat Software Chilkat Zip ActiveX Component ChilkatZip2.dll v. 12.4.2.0 "SaveLastError" and "WriteExe" Insecure Methods url: http://www.chilkatsoft.com/...

Chilkat Zip ActiveX Component 12.4 Multiple Insecure Methods Exploit

Exploit for unknown platform in category remote exploits ==================================================================== Chilkat Zip ActiveX Component 12.4 Multiple Insecure Methods Exploit ====================================================================...

Chilkat Zip ActiveX Component 12.4 - Multiple Insecure Methods

------------------------------------------------------------------------------ Chilkat Software Chilkat Zip ActiveX Component ChilkatZip2.dll v. 12.4.2.0 "SaveLastError" and "WriteExe" Insecure Methods url: http://www.chilkatsoft.com/ author: shinnai mail: shinnaiatautisticidotorg site:...

CVE-2007-3607

Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to cause a denial of service process crash via unspecified vectors...

Code injection

Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to cause a denial of service process crash via unspecified vectors...

DSquare Exploit Pack: D2SEC_KWEDIT

Name| d2seckwedit ---|--- CVE| CVE-2007-3605 Exploit Pack| D2ExploitPack Description| SAP EnjoySAP KWEdit.DLL ActiveX Stack Overflow Notes|...

Heap overflow

Heap-based buffer overflow in the rfcguisink.rfcguisink.1 ActiveX control in the EnjoySAP SAP GUI, on systems using ASCII versions, allows remote attackers to execute arbitrary code via a long first argument to the LaunchGui function...

Code injection

Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to create certain files via unspecified vectors...

Stack overflow

Stack-based buffer overflow in the kweditcontrol.kwedit.1 ActiveX control in FrontEnd\SapGui\kwedit.dll in the EnjoySAP SAP GUI allows remote attackers to execute arbitrary code via a long argument to the PrepareToPostHTML function...