CVE-2007-0174

Multiple stack-based multiple buffer overflows in the BRWOSSRE2UC.dll ActiveX Control in Sina UC2006 and earlier allow remote attackers to execute arbitrary code via a long string in the 1 astrVerion parameter to the SendChatRoomOpt function or 2 the astrDownDir parameter to the SendDownLoadFile...

CVE-2007-0174

CVE-2007-0174 affects Sina UC2006 and earlier via the BRWOSSRE2UC.dll ActiveX Control. Two vulnerable paths: SendChatRoomOpt with a long astrVerion string, and SendDownLoadFile with a long astrDownDir string. This causes stack-based buffer overflows that allow remote code execution. Exploitation ...

Integrity Clientless Security (ICS) Update 3.7.128.0

Check Point Integrity ™ Clientless Security ICS protects your Web site by detecting and disabling spyware processes and allowing you to enforce security policies before a user logs onto your network. Using ICS you can prevent users with potentially harmful software from accessing your Web site, a...

Sina UC 2006 Activex SendChatRoomOpt Exploit

新浪UC是中国非常流行的IM工具之一 http://www.51uc.com 漏洞的起因是Sina UC的多个ActiveX控件的参数缺乏必要的验证，攻击者构造恶意网页，可以远程完全控制安装了Sina UC 的用户的计算机， 多个控件存在栈溢出问题，包括但不限于： 1. clsid:77AE4780-75E0-4CB0-A162-D1BBE3D50384 C:\Program Files\sina\UC\ActiveX\BROWSER2UC.dll Sub SendChatRoomOpt ByVal astrVerion As String , ByVal astrUserID As...

Sina UC 2 0 0 6 Activex SendChatRoomOpt Exploit-vulnerability warning-the black bar safety net

Ghost boy: I compile, download address: ! 2007011012544.rar "http://201314.free.fr/attachments/200701/2007011012544.rar" Source: Ph4nt0m ////////////////////////////////////////////////////////////////////////////////////////////////////////////// // Sina UC ActiveX multiple remote stack overflow...

RealPlayer 10.5 (ActiveX Control) denial of service attack Exploit-vulnerability warning-the black bar safety net

RealPlayer10.5 的 rpau3260.dll cause ie denial of service vulnerability In xp sp2+ie7 to test effective The following code is only for test, do not for illegal purposes! !-- --------------------------------------------------------------------------- RealPlayer 10.5 rpau3260.dll Internet Explorer...

winzip overflow exploit-vulnerability warning-the black bar safety net

Before seen a FileView ActiveX control overflow,but not this function,published online in the overflow code is also not very good, This is CreateNewFolderFromName function overflow,but since the front is a vulnerability issue,! Microsoft seems to have disabled this control, The test can be delete...

Sina UC ActiveX Multiple Remote Stack Overflow

Sina UC ActiveX Multiple Remote Stack Overflow By Sowhat of Nevis Labs Date: 2007.01.09 http://www.nevisnetworks.com http://secway.org/advisory/20070109EN.txt http://secway.org/advisory/20070109CN.txt CVE: NO-CVE-Num Vendor Sina Inc. =UC2006 are vulnerable Overview: Sina UC is one of most popular...

VulnCheck KEV: CVE-2006-4704

Cross-zone scripting vulnerability in the WMI Object Broker WMIScriptUtils.WMIObjectBroker2 ActiveX control WmiScriptUtils.dll in Microsoft Visual Studio 2005 allows remote attackers to bypass Internet zone restrictions and execute arbitrary code by instantiating dangerous objects, aka "WMI...

CVE-2006-6884

CVE-2006-6884 reports a Buffer Overflow in the WinZip FileView ActiveX control (WZFILEVIEW.FileViewCtrl.61) used by WinZip 10.0 Build 6667. The flaw allows remote code execution when a long argument is passed to CreateNewFolderFromName, a distinct issue from CVE-2006-5198. Public sources in the c...

CVE-2006-6885

An ActiveX control in SwDir.dll in Macromedia Shockwave 10 allows remote attackers to cause a denial of service Internet Explorer 7 crash via a long string in the swURL attribute...

CVE-2006-6885

The CVE describes a vulnerability in Macromedia Shockwave 10 where an ActiveX control in SwDir.dll (SwDir ActiveX) can be abused by sending a long string in the swURL attribute to cause a denial of service (IE7 crash). Affected component: SwDir.dll ActiveX control within Shockwave 10. Root cause:...

CVE-2006-6884

Buffer overflow in the WZFILEVIEW.FileViewCtrl.61 ActiveX control aka Sky Software "FileView" ActiveX control for WinZip 10.0 Build 6667 allows remote attackers to execute arbitrary code via a long argument to the CreateNewFolderFromName method, a different vulnerability than CVE-2006-5198...

Rediff Bol Downloader ActiveX控件远程代码执行漏洞

Rediff Bol Downloader ActiveX控件是一款下载文件控件。 Rediff Bol Downloader ActiveX控件存在设计问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意命令。 Microsoft Internet Explorer在Downloader ActiveX控件指向Intenet上的可执行文件时，可报警，但是如果指向本地文件会没任何提示。构建恶意WEB页，诱使用户处理，可导致泄露敏感信息或下载执行任意命令。 Rediff Bol Downloader ActiveX control 目前没有解决方案提供：...

Iconics Dialog Wrapper Module ActiveX控件未明远程堆栈缓冲区溢出漏洞

Iconics Dialog Wrapper模块ActiveX控件存在一个未明缓冲区溢出问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 目前没有详细漏洞细节提供。 ICONICS, Inc. Dialog Wrapper Module ActiveX Control 升级程序： ICONICS, Inc. Dialog Wrapper Module ActiveX Control 0 ICONICS, Inc. FreeToolsActiveXDlgWrapperHotFix.zip...

Macromedia Flash Flash8b.OCX ActiveX控件远程拒绝服务漏洞

Macromedia Flash是一款流行的处理FLASH动画的应用程序。 Macromedia Flash Flash8b.OCX存在安全问题，远程攻击者可以利用漏洞使调用flash的Internet explorer崩溃，造成拒绝服务攻击。 由于对Flash8b.OCX控件处理存在问题，构建恶意参数传递给Flash8b.OCX处理，可使调用Macromedia Flash的Internet explorer崩溃。 Macromedia Flash 8.0.24 .0 Macromedia Flash 8.0.22 .0 Macromedia Flash 8.0.33.0...

Citrix ICA Client ActiveX control buffer overflow

Overview A vulnerability in an ActiveX control provided with the Citrix Presentation Server Client could allow a remote attacker to execute arbitrary code on an affected system. Description The Citrix Presentation Server Client software provides an ActiveX control that can be used to integrate th...

WinZip FileView ActiveX控件CreateNewFolderFromName方法缓冲区溢出漏洞

WinZip是一款流行的文件压缩/解压工具。 WinZip的FileView ActiveX控件（WZFILEVIEW.FileViewCtrl.61，CLSID为A09AE68F-B14D-43ED-B713- BA413F034904）中存在堆溢出漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 WinZip FileView ActiveX控件的CreateNewFolderFromName方法在处理超长畸形的参数时存在堆溢出漏洞，远程攻击者可能利用此漏洞通过诱使用户点击访问恶意的网页来控制用户的机器。 WinZip WinZip 10.0 Build 6667...

Macromedia Shockwave 10 (SwDir.dll) ActiveX控件远程拒绝服务漏洞

Macromedia Shockwave是一款流行的网络多媒体应用程序。 Macromedia Shockwave 10 SwDir.dll存在安全问题，远程攻击者可以利用漏洞使调用Shockwave的Internet explorer崩溃，造成拒绝服务攻击。 由于对Shockwave控件处理存在问题，构建恶意参数传递给Shockwave处理，可使调用Macromedia Shockwave的Internet explorer崩溃。 Macromedia Shockwave 10 目前没有解决方案提供： http://www.macromedia.com/...

CVE-2006-6488

The CVE-2006-6488 issue is a stack-based buffer overflow in ICONICS Dialog Wrapper Module ActiveX (DlgWrapper.dll) DoModal function, exploited by ICONICS OPC-enabled Gauge/Switch/Vessel ActiveX prior to version 8.4.166.0. An attacker can remotely execute arbitrary code by sending a long FileName ...