Symantec AppStream客户端LaunchObj ActiveX控件任意文件下载漏洞

BUGTRAQ ID: 33247 CVECAN ID: CVE-2008-4388 Symantec AppStream是Windows的应用程序部署框架。 AppStream Windows客户端所提供的LaunchObj ActiveX控件没有安全地调用installAppMgr方式，如果用户受骗访问了恶意网页并对该方式传送了特制参数的话，就会导致向用户系统下载并执行任意代码。 Symantec AppStream Client 5.2 临时解决方法： 在IE中禁用LaunchObj ActiveX控件，为以下CLSID设置kill bit：...

Symantec AppStream LaunchObj ActiveX control vulnerable to arbitrary code download and execution

Overview The Symantec AppStream LaunchObj ActiveX control contains methods that can be used to download and execute arbitrary code. Description Symantec AppStream is an application deployment framework for Microsoft Windows. One of the components of the AppStream Windows Client is an ActiveX...

Office Viewer ActiveX Control 3.0.1 Remote File Execution Exploit

No description provided by source. =======================================================================================br Author: Houssamix br =======================================================================================br Office Viewer ActiveX Control v 3.0.1 Remote File execution...

Office Viewer 3.0.1 File Execution

======================================================================================= Author: Houssamix ======================================================================================= Office Viewer ActiveX Control v 3.0.1 Remote File execution exploit download :...

Office Viewer ActiveX Control 3.0.1 - Remote Command Execution

======================================================================================= Author: Houssamix ======================================================================================= Office Viewer ActiveX Control v 3.0.1 Remote File execution exploit download :...

Office Viewer ActiveX Control 3.0.1 (Save) Remote File Overwrite Exploit

Exploit for unknown platform in category remote exploits ======================================================================== Office Viewer ActiveX Control 3.0.1 Save Remote File Overwrite Exploit ========================================================================...

Office Viewer ActiveX Control 3.0.1 - Remote Command Execution

Office Viewer ActiveX Control 3.0.1 - Remote Command Execution ======================================================================================= Author: Houssamix ======================================================================================= Office Viewer ActiveX Control v 3.0.1...

Office Viewer ActiveX Control 3.0.1 Remote File Execution Exploit

Exploit for unknown platform in category remote exploits ================================================================= Office Viewer ActiveX Control 3.0.1 Remote File Execution Exploit =================================================================...

ExcelOCX ActiveX 3.2 (Download File) Insecure Method Exploit

No description provided by source. html body / --=0-0-000000000--x==-xxxxxxxxxbr/ - Excel Viewer OCX 3.2 br/ homepage: www.officeocx.com br/ download: www.brothersoft.com/excel-viewer-ocx-51797.html br/ - RegKey Safe for Script: Truebr/ - RegKey Safe for Init: True br/ - Implements IObjectSafety:...

Office Viewer Active-X Control File Overwrite

======================================================================================= Author: Houssamix ======================================================================================= Office Viewer ActiveX Control v 3.0.1 Remote File Overwrite exploit Tested on Windows XP Professional S...

Office Viewer ActiveX Control 3.0.1 - 'Save' Remote File Overwrite

======================================================================================= Author: Houssamix ======================================================================================= Office Viewer ActiveX Control v 3.0.1 Remote File Overwrite exploit Tested on Windows XP Professional S...

ExcelOCX 3.2 Insecure Method

/ --=0-0-000000000--x==-xxxxxxxxx - Excel Viewer OCX 3.2 homepage: www.officeocx.com download: www.brothersoft.com/excel-viewer-ocx-51797.html - RegKey Safe for Script: True - RegKey Safe for Init: True - Implements IObjectSafety: True - IDisp Safe: Safe for untrusted: caller,data - IPersist Safe...

Secunia Research: TSC2 Help Desk CTab ActiveX Control Buffer Overflow

====================================================================== Secunia Research 07/01/2009 - TSC2 Help Desk CTab ActiveX Control Buffer Overflow - ====================================================================== Table of Contents Affected...

Norton AntiSpam 2004 SymSpamHelper ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in Norton AntiSpam 2004. When sending an overly long string to the LaunchCustomRuleWizard method of symspam.dll 2004.1.0.147 an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current...

Virgilio Toolbar Toolbar ActiveX Control Remote Denial of Service Exploit

!-- // Virgilio Toolbar Toolbar ActiveX Control Remote Denial of Service Exploit // Version == 1.3.0.0 // Internet Explorer ver 6.0 , 7.0 // Tested on Windows SP2 Bug discovered by cN4phux. Greet'z ^to : Blub , Knuthy , Djug , Xacker , DATASNIPER , His0k4 , Heurs etc . . . And all Algerians...

SizerOne ActiveX Control AddTab Method Remote Buffer Overflow

The SizerOne ActiveX control is installed on the remote system. It is included with ComponentOne Studio Enterprise as well as other applications such as TSC2 Help Desk and SAP GUI. The installed version of the control is affected by a heap-based buffer overflow vulnerability that can be triggered...

Microsoft Works WkImgSrv.dll ActiveX Control WksPictureInterface vulnerability

Added: 01/08/2009 CVE: CVE-2008-1898 BID: 28820 OSVDB: 44458 Background Microsoft Works is a suite of productivity tools for home users. Problem The WkImgSrv.dll ActiveX control included in Microsoft Works allows command execution when a user loads a web page which instantiates the control with a...

Microsoft Works WkImgSrv.dll ActiveX Control WksPictureInterface vulnerability

Added: 01/08/2009 CVE: CVE-2008-1898 BID: 28820 OSVDB: 44458 Background Microsoft Works is a suite of productivity tools for home users. Problem The WkImgSrv.dll ActiveX control included in Microsoft Works allows command execution when a user loads a web page which instantiates the control with a...

Microsoft Works WkImgSrv.dll ActiveX Control WksPictureInterface vulnerability

Added: 01/08/2009 CVE: CVE-2008-1898 BID: 28820 OSVDB: 44458 Background Microsoft Works is a suite of productivity tools for home users. Problem The WkImgSrv.dll ActiveX control included in Microsoft Works allows command execution when a user loads a web page which instantiates the control with a...

Microsoft Works WkImgSrv.dll ActiveX Control WksPictureInterface vulnerability

Added: 01/08/2009 CVE: CVE-2008-1898 BID: 28820 OSVDB: 44458 Background Microsoft Works is a suite of productivity tools for home users. Problem The WkImgSrv.dll ActiveX control included in Microsoft Works allows command execution when a user loads a web page which instantiates the control with a...