47 matches found
activePDF WebGrabber - ActiveX Control Buffer Overflow (Metasploit)
$Id: activepdfwebgrabber.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
activePDF WebGrabber ActiveX Control Buffer Overflow
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' class Metasploit3 'activePD...
activePDF WebGrabber ActiveX Control Buffer Overflow
This module exploits a stack buffer overflow in activePDF WebGrabber 3.8. When sending an overly long string to the GetStatus method of APWebGrb.ocx 3.8.2.0 an attacker may be able to execute arbitrary code. This control is not marked safe for scripting, so choose your attack vector accordingly...
Secunia Research: activePDF DocConverter Applix Graphics Parsing Vulnerabilities
====================================================================== Secunia Research 08/04/2008 - activePDF DocConverter Applix Graphics Parsing Vulnerabilities - ====================================================================== Table of Contents Affected...
ActivePDF / Lotus Notes / Symantec Mail Security / Autonomy Keyview multiple security vulnerabilities
Multiple buffer overflows on Folio Flat File / Applix graphics format parsing...
Secunia Research: activePDF DocConverter Folio Flat File Parsing Buffer Overflows
====================================================================== Secunia Research 08/04/2008 - activePDF DocConverter Folio Flat File Parsing Buffer Overflows - ====================================================================== Table of Contents Affected...
Buffer overflow
Multiple buffer overflows in kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy formerly Verity KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, allow remote attackers to execute arbitrary code via a .ag file with 1 a long ENCODING...
Code injection
kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy formerly Verity KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, does not properly parse long tokens, which allows remote attackers to cause a denial of service CPU and memory...
Stack overflow
Multiple stack-based buffer overflows in foliosr.dll in the Folio Flat File speed reader in Autonomy formerly Verity KeyView 10.3.0.0, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, allow remote attackers to execute arbitrary code via a long attribute value in a 1...
CVE-2007-5406
kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy formerly Verity KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, does not properly parse long tokens, which allows remote attackers to cause a denial of service CPU and memory...
CVE-2007-5405
Multiple buffer overflows in kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy formerly Verity KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, allow remote attackers to execute arbitrary code via a .ag file with 1 a long ENCODING...
CVE-2007-6020
CVE-2007-6020 describes multiple stack-based buffer overflows in the Folio Flat File speed reader (foliosr.dll) of Autonomy KeyView 10.3.0.0, used by IBM Lotus Notes and Symantec Mail Security (SMSSMTP/Exchange/Domino) and activePDF DocConverter. Secunia and NVD detail that boundary errors occur ...
CVE-2007-5406
CVE-2007-5406 affects Autonomy KeyView (kpagrdr.dll) components used in Applix graphics parsing, including versions 2.0.0.2 and 10.3.0.0. Secunia notes that parsing the ENCODING attribute and long tokens in Applix documents can trigger buffer overflows, enabling remote attackers to cause a denial...
CVE-2007-5405
CVE-2007-5405 is an Autonomy KeyView (kpagrdr.dll) buffer-overflow vulnerability affecting Applix Graphics (.ag) parsing. Secunia and related advisories document three overflow paths: (1) unsafe parsing of ENCODING in the *BEGIN tag, (2) boundary errors from overly long tokens, and (3) initial *B...
activePDF Server < 3.8.6 Packet Handling Remote Overflow (credentialed check)
activePDF Server is installed on the remote host. It is used to provide PDF generation and conversion from within enterprise and web applications. The version of activePDF Server installed on the remote host contains a heap-based buffer overflow that can be triggered by sending a packet specifyin...
activePDF Server < 3.8.6 Packet Handling Remote Overflow
activePDF Server is installed on the remote host. It is used to provide PDF generation and conversion from within enterprise and web applications. The version of activePDF Server installed on the remote host contains a heap-based buffer overflow that can be triggered by sending a packet specifyin...
activePDF服务器报文处理远程堆溢出漏洞
BUGTRAQ ID: 28013 CVECAN ID: CVE-2007-5397 activePDF服务器用于为企业或Web应用提供集成的PDF生成和动态PDF转换功能。 activePDF Server服务（APServer.exe）在处理畸形客户端数据时存在堆溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 如果用户连接到了该服务（默认端口53535/TCP）并在发送的报文中指定的大小小于之后数据的实际大小的话，就可能触发这个溢出，导致执行任意指令。 activePDF activePDF 3.8.5.14 activePDF activePDF 3.8.4 厂商补丁：...
Heap overflow
Heap-based buffer overflow in the activePDF Server service aka APServer.exe in activePDF Server 3.8.4 and 3.8.5.14, and possibly other versions before 3.8.6.16, allows remote attackers to execute arbitrary code via a packet with a size field that is less than the actual size of the data...
CVE-2007-5397
Heap-based buffer overflow in the activePDF Server service aka APServer.exe in activePDF Server 3.8.4 and 3.8.5.14, and possibly other versions before 3.8.6.16, allows remote attackers to execute arbitrary code via a packet with a size field that is less than the actual size of the data...
CVE-2007-5397
Heap-based buffer overflow in the activePDF Server service aka APServer.exe in activePDF Server 3.8.4 and 3.8.5.14, and possibly other versions before 3.8.6.16, allows remote attackers to execute arbitrary code via a packet with a size field that is less than the actual size of the data...