CVE-2007-1680

Stack-based buffer overflow in the createAndJoinConference function in the AudioConf ActiveX control yacscom.dll in Yahoo! Messenger before 20070313 allows remote attackers to execute arbitrary code via long 1 socksHostname and 2 hostname properties...

CVE-2007-1684

CVE-2007-1684 affects SolidWorks sldimdownload ActiveX control (sldimdownload.dll) prior to 16.0.0.6. The Run() method accepts installerpath and applicationarguments and can execute arbitrary commands, potentially giving remote code execution to the user running IE when a victim views a crafted p...

Design/Logic Flaw

Kaspersky Anti-Virus 6.0 and Internet Security 6.0 exposes unsafe methods in the a AXKLPROD60Lib.KAV60Info AxKLProd60.dll and b AXKLSYSINFOLib.SysInfo AxKLSysInfo.dll ActiveX controls, which allows remote attackers to "download" or delete arbitrary files via crafted arguments to the 1 DeleteFile,...

Design/Logic Flaw

The StartUploading function in KL.SysInfo ActiveX control AxKLSysInfo.dll in Kaspersky Anti-Virus 6.0 and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows remote attackers to read arbitrary files by triggering an outbound anonymous FTP session that invokes the PUT command...

CVE-2007-1112

Kaspersky Anti-Virus 6.0 and Internet Security 6.0 exposes unsafe methods in the a AXKLPROD60Lib.KAV60Info AxKLProd60.dll and b AXKLSYSINFOLib.SysInfo AxKLSysInfo.dll ActiveX controls, which allows remote attackers to "download" or delete arbitrary files via crafted arguments to the 1 DeleteFile,...

CVE-2007-1879

The StartUploading function in KL.SysInfo ActiveX control AxKLSysInfo.dll in Kaspersky Anti-Virus 6.0 and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows remote attackers to read arbitrary files by triggering an outbound anonymous FTP session that invokes the PUT command...

CVE-2007-1879

The StartUploading function in KL.SysInfo ActiveX control AxKLSysInfo.dll in Kaspersky Anti-Virus 6.0 and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows remote attackers to read arbitrary files by triggering an outbound anonymous FTP session that invokes the PUT command...

iDefense Security Advisory 04.04.07: Kaspersky AntiVirus SysInfo ActiveX Control Information Disclosure Vulnerability

Kaspersky AntiVirus SysInfo ActiveX Control Information Disclosure Vulnerability iDefense Security Advisory 04.04.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 04, 2007 I. BACKGROUND Kaspersky AntiVirus offers comprehensive protection from computer viruses and malware threats. Mor...

CVE-2007-1112

Kaspersky Anti-Virus 6.0 and Internet Security 6.0 exposes unsafe methods in the a AXKLPROD60Lib.KAV60Info AxKLProd60.dll and b AXKLSYSINFOLib.SysInfo AxKLSysInfo.dll ActiveX controls, which allows remote attackers to "download" or delete arbitrary files via crafted arguments to the 1 DeleteFile,...

CVE-2007-1879

The CVE-2007-1879 entry concerns Kaspersky Anti-Virus 6.0/Internet Security 6.0 (pre-Maintenance Pack 2 build 6.0.2.614). The StartUploading function of the KL.SysInfo ActiveX control (AxKLSysInfo.dll) allows remote attackers to read arbitrary files by triggering an outbound anonymous FTP session...

[Full-disclosure] ZDI-07-014: Kaspersky Anti-Virus ActiveX Control Unsafe Method Exposure Vulnerablity

ZDI-07-014: Kaspersky Anti-Virus ActiveX Control Unsafe Method Exposure Vulnerablity http://www.zerodayinitiative.com/advisories/ZDI-07-014.html April 5, 2007 -- CVE ID: CVE-2007-1112 -- Affected Vendor: Kaspersky -- Affected Products: Anti-Virus 6.0 Internet Security 6.0 -- TippingPointTM IPS...

CVE-2007-1112

CVE-2007-1112 affects Kaspersky Anti-Virus 6.0 and Internet Security 6.0. The issue is exposed in ActiveX controls AXKLPROD60Lib.KAV60Info (AxKLProd60.dll) and AXKLSYSINFOLib.SysInfo (AxKLSysInfo.dll), allowing remote attackers to download or delete arbitrary files via crafted arguments to Delete...

Multiple Kaspersky Antivirus / Internet Security security vulnerabilities

Multiple unsafe ActiveX methods allows files uploading from vulnerable host. Buffer overflow on ARJ files parsing. Local driver buffer overflow...

aol-activex.txt

require 'msf/core' module Msf class Exploits::Windows::Browser::AOLSuperBuddyLinkSBIcons 'AOL Sb.Superbuddy vulnerability', 'Description' = %q This module exploits a flaw in AOL Sb.SuperBuddy. We stole this code from a pre-existing metasploit module. , 'License' = MSFLICENSE, 'Author' = 'kradchad...

Kaspersky Antivirus ActiveX Unsafe Methods Vulnerability

This vulnerability allows remote attackers to download and remove any file on vulnerable installations of Kaspersky Anti-Virus. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaws exist within the ActiveX controls...

AOL SuperBuddy ActiveX fails to properly validate method arguments

Overview The AOL SuperBuddy ActiveX control does not properly validate arguments to the LinkSBIcons method. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The AOL SuperBuddy ActiveX control Sb.SuperBuddy.1 is a compone...

Yahoo! Messenger ActiveX buffer overflow

Buffer overflow in Yahoo.AudioConf control...

AOL SuperBuddy - ActiveX Control Remote Code Execution (Metasploit)

AOL SuperBuddy - ActiveX Control Remote Code Execution Metasploit require 'msf/core' module Msf class Exploits::Windows::Browser::AOLSuperBuddyLinkSBIcons 'AOL Sb.Superbuddy vulnerability', 'Description' = %q This module exploits a flaw in AOL Sb.SuperBuddy. We stole this code from a pre-existing...

AOL SuperBuddy - ActiveX Control Remote Code Execution (Metasploit)

require 'msf/core' module Msf class Exploits::Windows::Browser::AOLSuperBuddyLinkSBIcons 'AOL Sb.Superbuddy vulnerability', 'Description' = %q This module exploits a flaw in AOL Sb.SuperBuddy. We stole this code from a pre-existing metasploit module. , 'License' = MSFLICENSE, 'Author' = 'kradchad...

SolidWorks Sldimdownload ActiveX Control Arbitrary Code Execution

The remote host contains a version of the 'sldimdownload' ActiveX control included with SolidWorks' 3D CAD software. The version of this ActiveX control on the remote host fails to sanitize input to the 'installerpath' and 'applicationarguments' parameters of the 'Run' method. If an attacker can...