10868 matches found
TEC-IT TBarCode OCX ActiveX Remote Arbitrary File Overwrite Exploit
No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"----------------------------------------------------------------------------------------------------------------- bTEC-IT TBarCode OCX ActiveX Control TBarCode7.ocx v. 7.0.2.3524 "SaveImage"...
Microsoft Speech API ActiveX control Remote BoF Exploit (xp sp2)
No description provided by source. !-- 6.30 10/06/2007 Microsoft Windows DirectSpeechSynthesis Module XVoice.dll 4.0.4.2512 / DirectSpeechRecognition Module Xlisten.dll 4.0.4.2512 remote buffer overflow exploit/ xp sp2 version both dlls are vulnerable, this is the poc for the first one...
[EXPL] Microsoft Windows XVoice.dll and Xlisten.dll Buffer Overflow (Exploit)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
Microsoft Speech API memory corruption
Added: 06/13/2007 CVE: CVE-2007-2222 BID: 24426 OSVDB: 35353 Background Microsoft Speech API allows development of Windows applications supporting speech-based interaction. Problem A memory corruption vulnerability in Microsoft Speech API 4 allows command execution when a user loads a specially...
Microsoft Windows speech recognition / synthesis ActiveX buffer overflow
Buffer overflows in DirectSpeechSynthesis Module XVoice.dll / DirectSpeechRecognition Module Xlisten.dll...
Microsoft Speech API memory corruption
Added: 06/13/2007 CVE: CVE-2007-2222 BID: 24426 OSVDB: 35353 Background Microsoft Speech API allows development of Windows applications supporting speech-based interaction. Problem A memory corruption vulnerability in Microsoft Speech API 4 allows command execution when a user loads a specially...
Microsoft Speech API ActiveX Control (Windows XP SP2) - Remote Buffer Overflow (MS07-033)
REM metasploit, add a user 'su' with pass 'tzu' scode =...
Microsoft Speech API ActiveX Control (Windows 2000 SP4) - Remote Buffer Overflow (MS07-033)
object...
MS Windows DirectSpeechSynthesis Module Remote BoF Exploit win2k
No description provided by source. !-- 01/06/2007 23.19.50 Microsoft Windows DirectSpeechSynthesis Module XVoice.dll / DirectSpeechRecognition Module Xlisten.dll remote buffer overflow exploit / 2k sp4 seh version both the dlls are located in %SystemRoot%\speech folder and they are vulnerable to...
Microsoft Speech API ActiveX Control (Windows XP SP2) - Remote Buffer Overflow (MS07-033)
Microsoft Speech API ActiveX Control Windows XP SP2 - Remote Buffer Overflow MS07-033 REM metasploit, add a user 'su' with pass 'tzu' scode =...
Microsoft Speech API ActiveX Control (Windows 2000 SP4) - Remote Buffer Overflow (MS07-033)
Microsoft Speech API ActiveX Control Windows 2000 SP4 - Remote Buffer Overflow MS07-033 !-- 01/06/2007 23.19.50 Microsoft Windows DirectSpeechSynthesis Module XVoice.dll / DirectSpeechRecognition Module Xlisten.dll remote buffer overflow exploit / 2k sp4 seh version both the dlls are located in...
Microsoft Speech API ActiveX control Remote BoF Exploit (win2k sp4)
Exploit for unknown platform in category remote exploits =================================================================== Microsoft Speech API ActiveX control Remote BoF Exploit win2k sp4 =================================================================== !-- 01/06/2007 23.19.50 Microsoft...
Microsoft Speech API memory corruption
Added: 06/13/2007 CVE: CVE-2007-2222 BID: 24426 OSVDB: 35353 Background Microsoft Speech API allows development of Windows applications supporting speech-based interaction. Problem A memory corruption vulnerability in Microsoft Speech API 4 allows command execution when a user loads a specially...
Microsoft Speech API memory corruption
Added: 06/13/2007 CVE: CVE-2007-2222 BID: 24426 OSVDB: 35353 Background Microsoft Speech API allows development of Windows applications supporting speech-based interaction. Problem A memory corruption vulnerability in Microsoft Speech API 4 allows command execution when a user loads a specially...
Microsoft Speech API ActiveX control Remote BoF Exploit (xp sp2)
Exploit for unknown platform in category remote exploits ================================================================ Microsoft Speech API ActiveX control Remote BoF Exploit xp sp2 ================================================================ REM metasploit, add a user 'su' with pass 'tzu'...
[EXPL] Microsoft Windows XVoice.dll and Xlisten.dll Buffer Overflow (Exploit)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
Corel / Micrografx ActiveCGM Browser ActiveX control buffer overflows
Overview The Corel / Micrografx ActiveCGM Browser ActiveX control contains multiple buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The Corel ActiveCGM Browser is an ActiveX control that allows viewing of Computer...
CVE-2007-2222
Multiple buffer overflows in the 1 ActiveListen Xlisten.dll and 2 ActiveVoice Xvoice.dll speech controls, as used by Microsoft Internet Explorer 5.01, 6, and 7, allow remote attackers to execute arbitrary code via a crafted ActiveX object that triggers memory corruption, as demonstrated via the...
Buffer overflow
Multiple buffer overflows in the 1 ActiveListen Xlisten.dll and 2 ActiveVoice Xvoice.dll speech controls, as used by Microsoft Internet Explorer 5.01, 6, and 7, allow remote attackers to execute arbitrary code via a crafted ActiveX object that triggers memory corruption, as demonstrated via the...
CVE-2007-2222
CVE-2007-2222 pertains to memory corruption in Microsoft Speech API (ActiveListen/ActiveVoice) ActiveX controls Xlisten.dll and Xvoice.dll used by Internet Explorer 5.01–7. The root cause is memory corruption from uninitialized/deleted objects and related prototype-variable/table-cell handling, a...