[DSECRG-09-015] SAP GUI 6.4 Buffer Overflow vulnerability

Digital Security Research Group DSecRG Advisory DSECRG-09-015 Original Advisory: http://dsecrg.com/pages/vul/show.php?id=115 Application: SAP GUI for Windows, EnjoySAP Versions Affected: Version 6.4 Vendor URL: http://SAP.com Bugs: Buffer Overflow Exploits: YES Reported: 13.11.2008 Vendor respons...

Integrity Clientless Security (ICS) Update 3.7.256.0

Check Point Integrity ™ Clientless Security ICS protects your Web site by detecting and disabling spyware processes and allowing you to enforce security policies before a user logs onto your network. Using ICS you can prevent users with potentially harmful software from accessing your Web site, a...

Integrity Clientless Security (ICS) Update 3.7.249.0

Check Point Integrity ™ Clientless Security ICS protects your Web site by detecting and disabling spyware processes and allowing you to enforce security policies before a user logs onto your network. Using ICS you can prevent users with potentially harmful software from accessing your Web site, a...

SAP GUI VSFlexGrid.VSFlexGridL sp 14 - Remote Buffer Overflow

SAP GUI VSFlexGrid.VSFlexGridL sp 14 - Remote Buffer Overflow Application: SAP GUI VSFlexGrid.VSFlexGridL Part of SAP GUI, SAP BO 2005, SAP BO 2007 Versions Affected: SAP GUI VSFlexGrid Activex Control sp=14 Vendor URL: http://SAP.com Bugs: Buffer Overflovw Exploits: YES Reported: 26.11.2008 Vend...

SAP GUI VSFlexGrid.VSFlexGridL sp 14 - Remote Buffer Overflow

Application: SAP GUI VSFlexGrid.VSFlexGridL Part of SAP GUI, SAP BO 2005, SAP BO 2007 Versions Affected: SAP GUI VSFlexGrid Activex Control sp=14 Vendor URL: http://SAP.com Bugs: Buffer Overflovw Exploits: YES Reported: 26.11.2008 Vendor response: 27.11.208 Public Advisory: 06.10.2009 Originaly...

SAP GUI VSFlexGrid.VSFlexGridL sp<=14 Buffer Overflow

No description provided by source. Application: SAP GUI VSFlexGrid.VSFlexGridL Part of SAP GUI, SAP BO 2005, SAP BO 2007 Versions Affected: SAP GUI VSFlexGrid Activex Control sp=14 Vendor URL: http://SAP.com Bugs: Buffer Overflovw Exploits: YES Reported: 26.11.2008 Vendor response: 27.11.208 Publ...

VeryPDF PDFView - ActiveX Component Heap Buffer Overflow

VeryPDF PDFView - ActiveX Component Heap Buffer Overflow source: https://www.securityfocus.com/bid/32313/info The VeryPDF PDFView ActiveX control is prone to a heap buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it into an insufficiently...

chilkatcrypt-exec.txt

----------------------------------------------------------------------------- Chilkat Crypt Activex Component Arbitrary File Creation/Execution url: http://www.chilkatsoft.com File: ChilkatCrypt2.dll CLSID: 3352B5B9-82E8-4FFD-9EB1-1A3E60056904 ProgID: ChilkatCrypt2.ChilkatCrypt2.1 Descr.: Chilkat...

Instant Expert Analysis ActiveX控件任意代码下载和执行漏洞

BUGTRAQ ID: 31752 CVECAN ID: CVE-2008-4385 Instant Expert Analysis允许站点通过单击方式快速分析用户的软硬件。 Instant Expert Analysis对Firefox或Netscape浏览器使用签名的Java Applet（SRLApplet.class，由sysreqlab2.jar或sysreqlab.jar提供），对Internet Explorer使用签名的ActiveX控件（sysreqlab.dll、sysreqlabsli.dll或sysreqlab2.dll）。...

CVE-2008-4583

Insecure method vulnerability in the Chilkat FTP 2.0 ActiveX component ChilkatCert.dll allows remote attackers to overwrite arbitrary files via a full pathname in the SavePkcs8File method...

Security feature bypass

Insecure method vulnerability in the Chilkat FTP 2.0 ActiveX component ChilkatCert.dll allows remote attackers to overwrite arbitrary files via a full pathname in the SavePkcs8File method...

PT-2008-5592 · Numedia Soft · Nms Dvd Burning Sdk

Name of the Vulnerable Software and Affected Versions: NuMedia Soft NMS DVD Burning SDK Activex NMSDVDX.DVDEngineX.1 version 1.013C and earlier Description: The issue allows remote attackers to overwrite and create arbitrary files via calls to the EnableLog and LogMessage methods. This can...

Stack overflow

Stack-based buffer overflow in the Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 in Ultra Shareware Ultra Office Control allows remote attackers to execute arbitrary code via long strUrl, strFile, and strPostData parameters to the HttpUpload method...

Core Security Technologies Advisory 2008.0624

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Anzio Web Print Object Buffer Overflow Advisory Information Title: Anzio Web Print Object Buffer Overflow Advisory ID: CORE-2008-0624 Advisory URL:...

Anzio Web Print Object <= 3.2.30 ActiveX Buffer Overflow Exploit

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Anzio Web Print Object Buffer Overflow Advisory Information Title: Anzio Web Print Object Buffer Overflow Advisory ID: CORE-2008-06...

Anzio Web Print Object Buffer Overflow

Advisory ID Internal CORE-2008-0624 Advisory Information Title: Anzio Web Print Object Buffer Overflow Advisory ID: CORE-2008-0624 Advisory URL:http://www.coresecurity.com/content/anzio-web-print-object-buffer-overflow Date published: 2008-08-20 Date of last update: 2008-08-20 Vendors contacted:...

Anzio Web Print Object 3.2.30 - ActiveX Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Anzio Web Print Object Buffer Overflow Advisory Information Title: Anzio Web Print Object Buffer Overflow Advisory ID: CORE-2008-0624 Advisory URL:...

Integrity Clientless Security (ICS) Update 3.7.221.0

Check Point Integrity ™ Clientless Security ICS protects your Web site by detecting and disabling spyware processes and allowing you to enforce security policies before a user logs onto your network. Using ICS you can prevent users with potentially harmful software from accessing your Web site, a...

Citrix Presentation Server Client - 'WFICA.OCX' ActiveX Heap Buffer Overflow

Citrix Presentation Server Client WFICA.OCX ActiveX Component Heap Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" +...

Citrix Presentation Server Client - WFICA.OCX ActiveX Heap Buffer Overflow

Citrix Presentation Server Client - WFICA.OCX ActiveX Heap Buffer Overflow Citrix Presentation Server Client WFICA.OCX ActiveX Component Heap Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var...