5643 matches found
Adobe Reader < 9.2 / 8.1.7 / 7.1.4 Multiple Vulnerabilities (APSB09-15)
The version of Adobe Reader installed on the remote host is earlier than 9.2 / 8.1.7 / 7.1.4. Such versions are potentially affected by multiple vulnerabilities : - A heap overflow vulnerability. CVE-2009-3459 - A memory corruption issue. CVE-2009-2985 - Multiple heap overflow vulnerabilities...
Adobe Acrobat < 9.2 / 8.1.7 / 7.1.4 Multiple Vulnerabilities (APSB09-15)
The version of Adobe Acrobat installed on the remote host is earlier than 9.2 / 8.1.7 / 7.1.4. Such versions are reportedly affected by multiple vulnerabilities : - A heap overflow vulnerability. CVE-2009-3459 - A memory corruption issue. CVE-2009-2985 - Multiple heap overflow vulnerabilities...
America Online ICQ ActiveX Control Arbitrary File Download and Execute
This module allows remote attackers to download and execute arbitrary files on a users system via the DownloadAgent function of the ICQPhone.SipxPhoneManager ActiveX control. This module requires Metasploit: https://metasploit.com/download Current source:...
Directory traversal
Directory traversal vulnerability in the Persits.XUpload.2 ActiveX control XUpload.ocx in HP LoadRunner 9.5 allows remote attackers to create arbitrary files via .. backwards slash dot dot sequences in the third argument to the MakeHttpRequest method...
CVE-2009-3693
Directory traversal vulnerability in the Persits.XUpload.2 ActiveX control XUpload.ocx in HP LoadRunner 9.5 allows remote attackers to create arbitrary files via .. backwards slash dot dot sequences in the third argument to the MakeHttpRequest method...
CVE-2009-3693
CVE-2009-3693 involves a directory traversal in Persits.XUpload.2 ActiveX control (XUpload.ocx) shipped with HP LoadRunner 9.5. The flaw arises in the MakeHttpRequest method, where sequences like "..\" can cause arbitrary files to be created on the target. Public details describe this as a write-...
MS09-057: Vulnerability in Indexing Service Could Allow Remote Code Execution (969059)
The remote host contains the ixsso.dll ActiveX control. This control is included with the Indexing Service. The version of this control installed on the remote host reportedly has an arbitrary code execution vulnerability. A remote attacker could exploit this by tricking a user into requesting a...
Microsoft Indexing Service ActiveX Control Remote Code Execution Vulnerability
Description The Microsoft Indexing Service ActiveX control is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting to view a malicious webpage. Successful exploits will allow the attacker to execute arbitrary code within the context of an...
Design/Logic Flaw
Use-after-free vulnerability in the Sb.SuperBuddy.1 ActiveX control sb.dll in America Online AOL 9.5.0.1 allows remote attackers to trigger memory corruption or possibly execute arbitrary code via a malformed argument to the SetSuperBuddy method...
CVE-2009-3658
Use-after-free vulnerability in the Sb.SuperBuddy.1 ActiveX control sb.dll in America Online AOL 9.5.0.1 allows remote attackers to trigger memory corruption or possibly execute arbitrary code via a malformed argument to the SetSuperBuddy method...
CVE-2009-3658
The CVE-2009-3658 entry concerns AOL (America Online) 9.5.0.1, specifically the Sb.SuperBuddy.1 ActiveX control (sb.dll). A use-after-free in the SetSuperBuddy method leads to memory corruption and potential remote code execution. Public details across sources confirm RCE risk with this ActiveX c...
CVE-2009-3658
Use-after-free vulnerability in the Sb.SuperBuddy.1 ActiveX control sb.dll in America Online AOL 9.5.0.1 allows remote attackers to trigger memory corruption or possibly execute arbitrary code via a malformed argument to the SetSuperBuddy method...
PT-2009-5930 · Aol · America Online
Name of the Vulnerable Software and Affected Versions: America Online AOL version 9.5.0.1 Description: The issue is related to a use-after-free vulnerability in the Sb.SuperBuddy.1 ActiveX control, which allows remote attackers to trigger memory corruption or possibly execute arbitrary code. This...
CVE-2009-3573
Multiple insecure method vulnerabilities in the PDIControl.PDI.1 ActiveX control PDIControl.dll 2.2.3160.0 in EMC Captiva PixTools Distributed Imaging 2.2 allow remote attackers to create or overwrite arbitrary files via the 1 SetLogFileName and 2 WriteToLog methods...
CVE-2009-3573
CVE-2009-3573 affects EMC Captiva PixTools Distributed Imaging 2.2, specifically the PDIControl.PDI.1 ActiveX (PDIControl.dll) 2.2. The vulnerability arises from insecure methods SetLogFileName and WriteToLog, which allow remote attackers to create or overwrite arbitrary files via the affected Co...
CVE-2009-3573
Multiple insecure method vulnerabilities in the PDIControl.PDI.1 ActiveX control PDIControl.dll 2.2.3160.0 in EMC Captiva PixTools Distributed Imaging 2.2 allow remote attackers to create or overwrite arbitrary files via the 1 SetLogFileName and 2 WriteToLog methods...
AOL 9.1 SuperBuddy ActiveX Control SetSuperBuddy() remote code execution exploit
!-- AOL 9.1 SuperBuddy ActiveX Control SetSuperBuddy remote code execution exploit IE7/heap spray version by nine:situations:group::trotzkista Is possible to execute arbitrary code by setting the first argument to an overlong url and the second argument to a 16 bytes long string which overwrite...
EMC Captiva QuickScan Pro KeyHelp ActiveX Control JumpURL buffer overflow
Added: 10/02/2009 BID: 36546 OSVDB: 58423 Background EMC Captiva QuickScan Pro is a document capture solution. It includes KeyHelp, a free ActiveX control used for enhancing HTML help systems. Problem A buffer overflow vulnerability in the KeyHelp ActiveX Control allows command execution when a...
AOL 9.1 SuperBuddy SetSuperBuddy() Code Execution
Set obj = CreateObject"Sb.SuperBuddy.1" shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949" + "%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a" + "%u5058%u4230%u4231%u6b41%u4141%u3255%u4241%u3241" + "%u4142%u4230%u5841%u3850%u4241%u6d75%u6b39%u494c" +...
EMC Captiva QuickScan Pro KeyHelp ActiveX Control JumpURL buffer overflow
Added: 10/02/2009 BID: 36546 OSVDB: 58423 Background EMC Captiva QuickScan Pro is a document capture solution. It includes KeyHelp, a free ActiveX control used for enhancing HTML help systems. Problem A buffer overflow vulnerability in the KeyHelp ActiveX Control allows command execution when a...