Code injection

The Macrovision InstallShield InstallScript One-Click Install OCI ActiveX control 12.0 before SP2 does not validate the DLL files that are named as parameters to the control, which allows remote attackers to download arbitrary library code onto a client machine...

CVE-2007-5661

The Macrovision InstallShield InstallScript One-Click Install OCI ActiveX control 12.0 before SP2 does not validate the DLL files that are named as parameters to the control, which allows remote attackers to download arbitrary library code onto a client machine...

PT-2008-1509 · Macrovision · Installshield Installscript One-Click Install (Oci) Activex Control

Name of the Vulnerable Software and Affected Versions: Macrovision InstallShield InstallScript One-Click Install OCI ActiveX control version 12.0 before SP2 Description: The issue concerns the failure of the Macrovision InstallShield InstallScript One-Click Install OCI ActiveX control to validate...

CA BrightStor ARCserve Backup ListCtrl ActiveX (ListCtrl.ocx) AddColumn() Method Overflow

The version of the ListCtrl ActiveX control included with various CA products and installed on the remote host contains a buffer overflow that can be triggered by a long argument to the 'AddColumn' method. If an attacker can trick a user on the affected host into visiting a specially- crafted web...

Real Player rmoc3260.dll ActiveX Control Remote Code Execution Exploit

No description provided by source. !-- Real Player rmoc3260.dll ActiveX Control Remote Code Execution ExploitHeap Corruption written by e.b. Tested on Windows XP SP2fully patched English, IE6, rmoc3260.dll version 6.0.10.45 Thanks to h.d.m. and the Metasploit crew -- html head titleReal Player...

realplayer-activexexec.txt

Real Player rmoc3260.dll ActiveX Control Remote Code Execution Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" +...

RealPlayer rmoc3260.dll ActiveX Control Heap Corruption

This module exploits a heap corruption vulnerability in the RealPlayer ActiveX control. By sending a specially crafted string to the 'Console' property in the rmoc3260.dll control, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download...

Real Player - rmoc3260.dll ActiveX Control Remote Code Execution

Real Player - rmoc3260.dll ActiveX Control Remote Code Execution Real Player rmoc3260.dll ActiveX Control Remote Code Execution Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 =...

Real Player - 'rmoc3260.dll' ActiveX Control Remote Code Execution

Real Player rmoc3260.dll ActiveX Control Remote Code Execution Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" +...

iDefense Security Advisory 03.31.08: Macrovision InstallShield InstallScript One-Click Install Untrusted Library Loading Vulnerability

iDefense Security Advisory 03.31.08 http://labs.idefense.com/intelligence/vulnerabilities/ Mar 31, 2008 I. BACKGROUND Macrovision InstallShield InstallScript One-Click Install OCI is a web based installer technology that allows software publishers to distribute minimal installer packages which...

Real Player rmoc3260.dll ActiveX Control Remote Code Execution Exploit

Exploit for unknown platform in category remote exploits ====================================================================== Real Player rmoc3260.dll ActiveX Control Remote Code Execution Exploit ====================================================================== Real Player rmoc3260.dll...

CA Multiple Products DSM ListCtrl ActiveX Control Buffer Overflow Vulnerability

Title: CA Multiple Products DSM ListCtrl ActiveX Control Buffer Overflow Vulnerability CVE: CVE-2008-1472 CA Advisory Date: 2008-03-28 Reported By: Exploit code posted at milw0rm.com Impact: A remote attacker can cause a denial of service or execute arbitrary code. Summary: CA products that...

Buffer overflow

Buffer overflow in a certain Aurigma ActiveX control in ImageUploader4.ocx 4.1.36.0, as used with Piczo aka Pizco and possibly other online services, allows remote attackers to execute arbitrary code via unspecified vectors, possibly involving a long Action property, a different CLSID than...

LeadTools MultiMedia 15 - 'LTMM15.dll' ActiveX Control Arbitrary File Overwrite

source: https://www.securityfocus.com/bid/28442/info LEADTOOLS Multimedia is prone to multiple vulnerabilities that allow attackers to overwrite arbitrary files. These issues affect multiple ActiveX controls. An attacker can exploit these issues by enticing an unsuspecting victim to view a...

CVE-2008-1472

Stack-based buffer overflow in the ListCtrl ActiveX Control ListCtrl.ocx, as used in multiple CA products including BrightStor ARCserve Backup R11.5, Desktop Management Suite r11.1 through r11.2, and Unicenter products r11.1 through r11.2, allows remote attackers to execute arbitrary code or caus...

CVE-2008-1472

CVE-2008-1472 corresponds to a stack-based buffer overflow in the CA BrightStor ARCserve Backup ListCtrl.ocx ActiveX control (AddColumn method). The vulnerability can be triggered remotely by sending a too-long argument to AddColumn, potentially allowing arbitrary code execution or a denial-of-se...

CVE-2007-6254

Stack-based buffer overflow in the SAP Business Objects BusinessObjects RptViewerAX ActiveX control in RptViewerAX.dll in Business Objects 6.5 before CHF74 allows remote attackers to execute arbitrary code via unspecified vectors...

hfu-delete.txt

Could Not Load ActiveX Control. / - Univeral HTTP File Upload UUploaderSvrD.dll - v6.0.0.35 Remote File Deletetion Exploit - / / Javascript Code By t0pP8uZz / var x = "C:/tmp.txt"; / Full Path To File To Delete OR directory/ var del = true; var c = 1; whiledel try fileup.RemoveFileOrDirx, c; del ...

HTTP File Upload ActiveX (UUploaderSvrD.dll) File Deletion Exploit

No description provided by source. HTML !-- - Univeral HTTP File Upload UUploaderSvrD.dll - v6.0.0.35 Remote File Deletetion Exploit - Author: t0pP8uZz Homepage: h4ck-y0u.org / milw0rm.com Description: ActiveX Remote File Deletetion Report: Tested on Microsoft Windows XP Pro SP2 Internet Explorer...

Registry Pro (epRegPro.ocx) Remote Insecure Method Exploit

No description provided by source. HTML !-- - Registry Pro epRegPro.ocx Remote Insecure Exploit - Author: t0pP8uZz Homepage: h4ck-y0u.org / milw0rm.com Description: ActiveX Remote Insecure Report: Tested on Microsoft Windows XP Pro SP2 Internet Explorer 7 Fully Patched ActiveX:...