Update Protection against IBM Access Support ActiveX GetXMLValue Method Buffer Overflow

IBM Access Support ActiveX Control contains a buffer overflow vulnerability. The IBM Access Support ActiveX control is used by the vendor to collect system information, such as make, model, serial number, OS version, etc. This control is available on the IBM / Lenovo web site, and may also come...

Chance-i DiViS-Web DVR System ActiveX Control Heap Overflow PoC

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-09-035 original advisory: http://dsecrg.com/pages/vul/DSECRG-09-035.html Application: Chance-i DiViS-Web DVR System ActiveX control Versions Affected: 3,0,0,7 Vendor URL: http://www.chance-i.com/ Bug: Heap...

Chance-i DiViS-Web DVR System Active-X Control

Digital Security Research Group DSecRG Advisory DSECRG-09-035 original advisory: http://dsecrg.com/pages/vul/DSECRG-09-035.html Application: Chance-i DiViS-Web DVR System ActiveX control Versions Affected: 3,0,0,7 Vendor URL: http://www.chance-i.com/ Bug: Heap Overflow Exploits: YES Reported:...

Chance-i DiViS-Web DVR System ActiveX Control Heap Overflow PoC

Exploit for unknown platform in category dos / poc =============================================================== Chance-i DiViS-Web DVR System ActiveX Control Heap Overflow PoC =============================================================== Digital Security Research Group DSecRG Advisory...

Chance-i DiViS-Web DVR System - ActiveX Control Heap Overflow (PoC)

Digital Security Research Group DSecRG Advisory DSECRG-09-035 original advisory: http://dsecrg.com/pages/vul/DSECRG-09-035.html Application: Chance-i DiViS-Web DVR System ActiveX control Versions Affected: 3,0,0,7 Vendor URL: http://www.chance-i.com/ Bug: Heap Overflow Exploits: YES Reported:...

IntraLaunch ActiveX控件多个方式不安全调用漏洞

BUGTRAQ ID: 34395 CVECAN ID: CVE-2009-0218 IntraLaunch ActiveX控件允许网页链接本地或跨网络执行Word或PDF等文档所关联的应用程序。 IntraLaunch ActiveX控件（由IntraLaunch.ocx提供）没有限定到特定的域或Internet Explorer区，这允许任何站点都可以在安装了该控件的系统上通过调用该控件导致运行任意代码。 Particle Software IntraLaunch Particle Software -----------------...

CVE-2008-6638

The CVE-2008-6638 entry concerns the Versalsoft HTTP Image Uploader ActiveX control. The affected component is UUploaderSvrD.dll version 6.0.0.35, and the vulnerability arises from an insecure method that allows an attacker to delete arbitrary files via the RemoveFileOrDir function. This is a cli...

CVE-2008-6638

Insecure method vulnerability in the Versalsoft HTTP Image Uploader ActiveX control UUploaderSvrD.dll 6.0.0.35 allows remote attackers to delete arbitrary files via the RemoveFileOrDir method...

Particle Software IntraLaunch Application Launcher ActiveX control fails to restrict access to dangerous methods

Overview The Particle Software IntraLaunch Application Launcher ActiveX control allows arbitrary code execution. Description Particle Software IntraLaunch is an ActiveX control that "... allows web page links to execute anything from applications to associations such as Word or Acrobat PDF...

Autodesk IDrop ActiveX Control Heap Corruption

The IDrop ActiveX control, a utility from Autodesk that provides the ability to drag and drop web content into a drawing session, is installed on the remote Windows host. Manipulation of the control's 'Src', 'Background', and 'PackageXml' properties reportedly can be abused to trigger a...

Autodesk IDrop ActiveX Control Heap Corruption Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Who: Autodesk http://www.autodesk.com What: Autodesk IDrop ActiveX Control http://usa.autodesk.com/adsk/servlet/index?siteID=123112&id=2753219& linkID=9240618 IDrop.ocx version 17.1.51.160 21E0CB95-1198-4945-A3D2-4BF804295F78 How: The Src, Background,...

SAP AG SAPgui EAI WebViewer3D Buffer Overflow

This module exploits a stack buffer overflow in Siemens Unigraphics Solutions Teamcenter Visualization EAI WebViewer3D ActiveX control that is bundled with SAPgui. When passing an overly long string the SaveViewToSessionFile method, arbitrary code may be executed. This module requires Metasploit:...

SAP AG WebViewer3D ActiveX控件栈溢出漏洞

BUGTRAQ ID: 34310 CVECAN ID: CVE-2007-4475,CVE-2009-1205 SAPgui是SAP软件的图形用户界面客户端。 SAPgui提供了一个名为EAI WebViewer3D的ActiveX控件（webviewer3d.dll），该控件没有正确地验证对 SaveViewToSessionFile方式所传送的参数。如果用户受骗访问了恶意网页并向该方式传送了超长参数的话，就可以触发栈溢出，导致执行任意代码。 SAP Sapgui 7.10 Patch Level 8 临时解决方法： 在IE中禁用EAI WebViewer3D...

Stack overflow

Stack-based buffer overflow in EAI WebViewer3D ActiveX control webviewer3d.dll in SAP AG SAPgui before 7.10 Patch Level 9 allows remote attackers to execute arbitrary code via a long argument to the SaveViewToSessionFile method...

CVE-2007-4475

Stack-based buffer overflow in EAI WebViewer3D ActiveX control webviewer3d.dll in SAP AG SAPgui before 7.10 Patch Level 9 allows remote attackers to execute arbitrary code via a long argument to the SaveViewToSessionFile method...

CVE-2007-4475

Summary: CVE-2007-4475 describes a stack-based buffer overflow in the EAI WebViewer3D ActiveX control (webviewer3d.dll) bundled with SAPgui. The vulnerability arises when processing a long argument to the SaveViewToSessionFile method, enabling remote code execution. Affected software/versions: SA...

CVE-2009-1212

Multiple insecure method vulnerabilities in PRECIS2.DLL in the PrecisionID Datamatrix ActiveX control DMATRIXLib.Datamatrix allow remote attackers to overwrite arbitrary files via the 1 SaveBarCode and 2 SaveEnhWMF methods...

CVE-2009-1212

PrecisionID Data Matrix ActiveX control (DMATRIXLib.Datamatrix) contains insecure input validation in SaveBarCode and SaveEnhWMF, enabling remote arbitrary file writes. Affected component: PRECIS~2.DLL within PrecisionID Data Matrix ActiveX. Impact: potential overwrite of arbitrary files on the h...

CVE-2009-1212

Multiple insecure method vulnerabilities in PRECIS2.DLL in the PrecisionID Datamatrix ActiveX control DMATRIXLib.Datamatrix allow remote attackers to overwrite arbitrary files via the 1 SaveBarCode and 2 SaveEnhWMF methods...

PrecisionID File Overwrite

Digital Security Research Group DSecRG Advisory DSECRG-09-030 !!! original advisory !!! http://dsecrg.com/pages/vul/DSECRG-09-030.html Application: PrecisionID activeX controls Versions Affected: Vendor URL: http://PrecisionID.com Bugs: Arbitrary File overwriting Exploits: YES Reported: 03.03.200...