CVE-2007-2814

The vulnerability CVE-2007-2814 affects the Pegasus ImagN’ ActiveX control IMW32O40.OCX (version 4.00.041). The issue comprises multiple stack-based buffer overflows that could allow remote code execution. Exploitation vectors include a long FileName parameter and several functions such as BeginR...

CVE-2007-2814

Multiple stack-based buffer overflows in the Pegasus ImagN' ActiveX control IMW32O40.OCX 4.00.041 allow remote attackers to execute arbitrary code via 1 a long FileName parameter, or unspecified vectors involving the 2 BeginReport, 3 CreatePictureExA, 4 DefineImage, 5 DefineImageEx, 6...

KSign KSignSWAT 2.0.3.3 - ActiveX Control Remote Buffer Overflow

KSign KSignSWAT 2.0.3.3 - ActiveX Control Remote Buffer Overflow www.ksign.com - KSignSWAT SWATLogin PoC code function GetHeapPadHeapJam, SizeofHeapPad whileHeapJam.length2 SizeofHeapPad HeapJam +=HeapJam; HeapJam = HeapJam.substring0, SizeofHeapPad/2; return HeapJam; // buffer 671 bytes write,...

KSign KSignSWAT <= 2.0.3.3 ActiveX Control Remote BoF Exploit

Exploit for unknown platform in category remote exploits ============================================================= KSign KSignSWAT www.ksign.com - KSignSWAT SWATLogin PoC code function GetHeapPadHeapJam, SizeofHeapPad whileHeapJam.length2 SizeofHeapPad HeapJam +=HeapJam; HeapJam =...

Pegasus ImagN ActiveX Control Remote Buffer Overflow Exploit

No description provided by source. !- IE 6 / Pegasus ImagN' ActiveX Control IMW32O40.OCX V4.00.041 remote buffer overflow exploit windows xp sp2 it version / eip overwrite method by rgod site: http://retrogod.altervista.org mail: retrog at alice dot it software site: http://www.pegasusimaging.com...

Dart ZipLite Compression 1.8.5.3 - DartZipLite.dll ActiveX Control Buffer Overflow

Dart ZipLite Compression 1.8.5.3 - DartZipLite.dll ActiveX Control Buffer Overflow source: https://www.securityfocus.com/bid/24099/info The Dart ZipLite Compression ActiveX control is prone to a buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before...

KSign KSignSWAT 2.0.3.3 - ActiveX Control Remote Buffer Overflow

www.ksign.com - KSignSWAT SWATLogin PoC code function GetHeapPadHeapJam, SizeofHeapPad whileHeapJam.length2 SizeofHeapPad HeapJam +=HeapJam; HeapJam = HeapJam.substring0, SizeofHeapPad/2; return HeapJam; // buffer 671 bytes write, then EIP overwrite. var O5pad=unescape...

Dart ZipLite Compression 1.8.5.3 - 'DartZipLite.dll' ActiveX Control Buffer Overflow

source: https://www.securityfocus.com/bid/24099/info The Dart ZipLite Compression ActiveX control is prone to a buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. Successfully exploiting this issue...

Stack overflow

Stack-based buffer overflow in the BrowseDir function in the 1 lttmb14E.ocx or 2 LTRTM14e.DLL ActiveX control in LeadTools Raster Thumbnail Object Library 14.5.0.44 allows remote attackers to execute arbitrary code via a long argument...

CVE-2007-2787

LeadTools Raster Thumbnail Object Library 14.5.0.44 contains a stack-based buffer overflow in the BrowseDir function of the (1) lttmb14E.ocx and (2) LTRTM14e.DLL ActiveX controls, allowing remote arbitrary-code execution via a long argument. Affected component/version is LeadTools Raster Thumbnai...

CVE-2007-2787

Stack-based buffer overflow in the BrowseDir function in the 1 lttmb14E.ocx or 2 LTRTM14e.DLL ActiveX control in LeadTools Raster Thumbnail Object Library 14.5.0.44 allows remote attackers to execute arbitrary code via a long argument...

CVE-2007-2771

Stack-based buffer overflow in the LEAD Technologies LeadTools JPEG 2000 LEADJ2K.LEADJ2K.140 ActiveX control LTJ2K14.ocx 14.5.0.35 allows remote attackers to execute arbitrary code via a long BitmapDataPath property...

Stack overflow

Stack-based buffer overflow in the LEAD Technologies LeadTools JPEG 2000 LEADJ2K.LEADJ2K.140 ActiveX control LTJ2K14.ocx 14.5.0.35 allows remote attackers to execute arbitrary code via a long BitmapDataPath property...

CVE-2007-2771

The CVE-2007-2771 entry concerns the LEAD Technologies LeadTools JPEG 2000 LEADJ2K.LEADJ2K.140 ActiveX control (LTJ2K14.ocx) version 14.5.0.35, where a stack-based buffer overflow via a long BitmapDataPath property allows remote code execution. Affected component: LTJ2K14.ocx in LeadTools JPEG 20...

Pegasus ImagN - ActiveX Control Remote Buffer Overflow

?php / win32adduser - PASS=tzu EXITFUNC=seh USER=sun Size=483 Encoder=PexAlphaNum http://metasploit.com / $shellcode = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49". "\x49\x51\x5a\x56\x54\x58\x36\x33\x30\x56\x58\x34\x41\x30\x42\x36"...

Pegasus ImagN ActiveX Control Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================================ Pegasus ImagN ActiveX Control Remote Buffer Overflow Exploit ============================================================ ?php / win32adduser - PASS=tzu EXITFUNC=seh USER=sun...

Pegasus ImagN - ActiveX Control Remote Buffer Overflow

Pegasus ImagN - ActiveX Control Remote Buffer Overflow ?php / win32adduser - PASS=tzu EXITFUNC=seh USER=sun Size=483 Encoder=PexAlphaNum http://metasploit.com / $shellcode = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49"...

Norton Personal Firewall ISAlertDataCOM ActiveX控件缓冲区溢出漏洞

Norton Personal Firewall是一款个人防火墙应用程序。 Norton Personal Firewall包含的ISAlertDataCOM ActiveX控件处理参数输入缺少正确边界检查，远程攻击者可以利用漏洞对应用程序进行缓冲区溢出攻击，可能以进程权限执行任意指令。 当ISLAlert.dll处理"Set"和"Get"方法时存在边界错误，提交超长参数可导致缓冲区溢出，构建恶意WEB页，诱使用户访问，可导致应用程序崩溃。 Symantec Norton Internet Security 2004 Symantec Norton Internet Security...

Buffer overflow

Buffer overflow in the UnlockSupport function in the LockModules subsystem in a certain ActiveX control in ltmm15.dll in Sienzo Digital Music Mentor DMM 2.6.0.4 allows remote attackers to execute arbitrary code via a long string in the second argument, a different issue than CVE-2007-2564...

CVE-2007-2763

Buffer overflow in the UnlockSupport function in the LockModules subsystem in a certain ActiveX control in ltmm15.dll in Sienzo Digital Music Mentor DMM 2.6.0.4 allows remote attackers to execute arbitrary code via a long string in the second argument, a different issue than CVE-2007-2564...