Microsoft Internet Explorer - 'wshom.ocx' ActiveX Control Remote Code Execution

IE ActiveX remote bof remote code excution version: all versions Author: germayax & D3V!L FUCKER special thanx: for my best friend his0k4. Geetz 2 :Sarbot511 ,thrid-devil. tested on : windows 7 , windows vista ,windows xp sp2 arg1="c:\WINDOWS\system32\calc.exe" target.Exec arg1...

Microsoft Internet Explorer - wshom.ocx ActiveX Control Remote Code Execution

Microsoft Internet Explorer - wshom.ocx ActiveX Control Remote Code Execution IE ActiveX remote bof remote code excution version: all versions Author: germayax & D3V!L FUCKER special thanx: for my best friend his0k4. Geetz 2 :Sarbot511 ,thrid-devil. tested on : windows 7 , windows vista ,windows ...

Movie Player Pro SDK ActiveX控件DrawText()方式栈溢出漏洞

Movie Player Pro SDK ActiveX是用于播放多媒体文件的ActiveX控件。 MOVIEPLAYER.MoviePlayerCtrl.1 ActiveX控件（MoviePlayer.ocx）没有正确地过滤用户提交给DrawText方式的strFontName参数，用户受骗访问了恶意网页并传送了超长的字体名称参数就可以触发栈溢出，导致执行任意指令。 Viscom Softwares Movie Player Pro SDK ActiveX 6.8.0.0 厂商补丁： Viscom Softwares ----------------...

Adobe Acrobat < 9.3 / 8.2 Multiple Vulnerabilities (APSB10-02)

The version of Adobe Acrobat installed on the remote host is earlier than 9.3 / 8.2. Such versions are reportedly affected by multiple vulnerabilities : - A use-after-free vulnerability in 'Multimedia.api' can lead to code execution. CVE-2009-4324 - An array boundary issue in 'U3D' support can le...

Adobe Reader < 9.3 / 8.2 Multiple Vulnerabilities (APSB10-02)

The version of Adobe Reader installed on the remote host is earlier than 9.3 / 8.2. Such versions are reportedly affected by multiple vulnerabilities : - A use-after-free vulnerability in 'Multimedia.api' can lead to code execution. CVE-2009-4324 - An array boundary issue in 'U3D' support can lea...

CVE-2010-0278

A certain ActiveX control in msgsc.14.0.8089.726.dll in Microsoft Windows Live Messenger 2009 build 14.0.8089.726 on Windows Vista and Windows 7 allows remote attackers to cause a denial of service msnmsgr.exe crash by calling the ViewProfile method with a crafted argument during an MSN Messenger...

Session fixation

A certain ActiveX control in msgsc.14.0.8089.726.dll in Microsoft Windows Live Messenger 2009 build 14.0.8089.726 on Windows Vista and Windows 7 allows remote attackers to cause a denial of service msnmsgr.exe crash by calling the ViewProfile method with a crafted argument during an MSN Messenger...

CVE-2010-0278

The CVE-2010-0278 entry covers a vulnerability in an ActiveX control (msgsc.14.0.8089.726.dll) used by Microsoft Windows Live Messenger 2009 (build 14.0.8089.726) on Windows Vista/7. The flaw is triggered by calling the ViewProfile method with a crafted argument during an MSN Messenger session, c...

CVE-2010-0278

A certain ActiveX control in msgsc.14.0.8089.726.dll in Microsoft Windows Live Messenger 2009 build 14.0.8089.726 on Windows Vista and Windows 7 allows remote attackers to cause a denial of service msnmsgr.exe crash by calling the ViewProfile method with a crafted argument during an MSN Messenger...

Novell iPrint Client ienipp.ocx target-frame buffer overflow

Added: 01/12/2010 CVE: CVE-2009-1568 BID: 37242 OSVDB: 60803 Background Novell iPrint is an application which allows users to install and manage printers. Novell iPrint installs the Novell iPrint Control ActiveX control named ienipp.ocx. Problem A buffer overflow in ienipp.ocx allows command...

Novell iPrint Client ienipp.ocx target-frame buffer overflow

Added: 01/12/2010 CVE: CVE-2009-1568 BID: 37242 OSVDB: 60803 Background Novell iPrint is an application which allows users to install and manage printers. Novell iPrint installs the Novell iPrint Control ActiveX control named ienipp.ocx. Problem A buffer overflow in ienipp.ocx allows command...

Windows XP Macromedia Flash 6 ActiveX control use-after-free vulnerability

Overview The Macromedia Flash ActiveX control that is provided with Windows XP contains a memory corruption vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft Windows XP provides the Macromedia Flash ActiveX...

Novell iPrint Client ienipp.ocx target-frame buffer overflow

Added: 01/12/2010 CVE: CVE-2009-1568 BID: 37242 OSVDB: 60803 Background Novell iPrint is an application which allows users to install and manage printers. Novell iPrint installs the Novell iPrint Control ActiveX control named ienipp.ocx. Problem A buffer overflow in ienipp.ocx allows command...

Novell iPrint Client ienipp.ocx target-frame buffer overflow

Added: 01/12/2010 CVE: CVE-2009-1568 BID: 37242 OSVDB: 60803 Background Novell iPrint is an application which allows users to install and manage printers. Novell iPrint installs the Novell iPrint Control ActiveX control named ienipp.ocx. Problem A buffer overflow in ienipp.ocx allows command...

Windows Live Messenger 2009 ActiveX DoS Vulnerability

No description provided by source. Product: Windows Live Messenger 2009 Build 14.0.8089.726 Vulnerability: ActiveX - Denial of Service Discussion: Vulnerability is in Activex Controlmsgsc.14.0.8089.726.dll Sending a string to ViewProfile , cause a crash on msnmsgr.exe must be signed in Msn...

Windows Live Messenger 2009 Denial Of Service

Product: Windows Live Messenger 2009 Build 14.0.8089.726 Vulnerability: ActiveX - Denial of Service Discussion: Vulnerability is in Activex Controlmsgsc.14.0.8089.726.dll Sending a string to ViewProfile , cause a crash on msnmsgr.exe must be signed in Msn Messenger account for triggerin the...

SuSE 10 Security Update : IBM Java 1.5.0 (ZYPP Patch Number 6740)

IBM Java 5 was updated to Service Refresh 11. It fixes lots of bugs and security issues. The timezone update to 1.6.9s with the latest Fiji change. - A vulnerability in the Java Runtime Environment with decoding DER encoded data might allow a remote client to cause the JRE to crash, resulting in ...

CVE-2009-4588

Heap-based buffer overflow in the WindsPlayerIE.View.1 ActiveX control in WindsPly.ocx 3.5.0.0 Beta, 3.0.0.5, and earlier in AwingSoft Awakening Web3D Player and Winds3D Viewer allows remote attackers to cause a denial of service application crash or execute arbitrary code via a long SceneUrl...

CVE-2009-4588

CVE-2009-4588 describes a heap-based buffer overflow in the WindsPlayerIE.View.1 ActiveX control (WindsPly.ocx) used by AwingSoft Awakening Web3D Player and Winds3D Viewer. The vulnerability allows remote attackers to crash the application or execute arbitrary code by supplying a long SceneUrl va...

Touch22 Image22 ActiveX Control Buffer Overflow

Touch22 Image22 ActiveX is an application to create images for Microsoft Windows. A buffer overflow vulnerability has been discovered in Touch22 Image22 ActiveX. The vulnerability is due to an error in the application that fails to properly bounds check user-supplied data before copying it into a...