CVE-2007-2848

The CVE-2007-2848 entry describes a stack-based buffer overflow in the SetPath function of the shComboBox ActiveX control (shcmb80.ocx) within Sky Software Shell MegaPack ActiveX 8.0, allowing remote code execution via a long argument. Connected records confirm the affected component and vulnerab...

KSign KSignSWAT <= 2.0.3.3 ActiveX Control Remote BoF Exploit

No description provided by source. !-- /////////////////////////////////////////////////////////////////// // KSignSWAT SWATLogin PoC Code. // // // // URL : www.ksign.com // // Author : KIM Kee-hong [email protected] // // Date : 2007/05/13 &...

Heap overflow

Heap-based buffer overflow in LEAD Technologies LEADTOOLS ISIS ActiveX Control ltisi14E.ocx 14.5.0.44 and earlier allows remote attackers to execute arbitrary code via a long DriverName property...

CVE-2007-2827

Heap-based buffer overflow in LEAD Technologies LEADTOOLS ISIS ActiveX Control ltisi14E.ocx 14.5.0.44 and earlier allows remote attackers to execute arbitrary code via a long DriverName property...

Stack overflow

Multiple stack-based buffer overflows in the KSign KSignSWAT ActiveX Control AxKSignSWAT.dll 2.0.3.3 allow remote attackers to execute arbitrary code via long arguments to the 1 SWATInit, 2 SWATInitEx, 3 SWATInitEx2, 4 SWATInitEx3, and 5 SWATLogin functions...

CVE-2007-2827

Heap-based buffer overflow in LEAD Technologies LEADTOOLS ISIS ActiveX Control ltisi14E.ocx 14.5.0.44 and earlier allows remote attackers to execute arbitrary code via a long DriverName property...

CVE-2007-2827

The CVE-2007-2827 issue affects LEAD Technologies LEADTOOLS ISIS ActiveX Control (ltisi14E.ocx) up to version 14.5.0.44. It is a heap-based buffer overflow in the DriverName property that allows a remote attacker to execute arbitrary code. Exploitation details are not provided in the connected do...

Stack overflow

Multiple stack-based buffer overflows in the Pegasus ImagN' ActiveX control IMW32O40.OCX 4.00.041 allow remote attackers to execute arbitrary code via 1 a long FileName parameter, or unspecified vectors involving the 2 BeginReport, 3 CreatePictureExA, 4 DefineImage, 5 DefineImageEx, 6...

CVE-2007-2814

Multiple stack-based buffer overflows in the Pegasus ImagN' ActiveX control IMW32O40.OCX 4.00.041 allow remote attackers to execute arbitrary code via 1 a long FileName parameter, or unspecified vectors involving the 2 BeginReport, 3 CreatePictureExA, 4 DefineImage, 5 DefineImageEx, 6...

CVE-2007-2814

The vulnerability CVE-2007-2814 affects the Pegasus ImagN’ ActiveX control IMW32O40.OCX (version 4.00.041). The issue comprises multiple stack-based buffer overflows that could allow remote code execution. Exploitation vectors include a long FileName parameter and several functions such as BeginR...

KSign KSignSWAT 2.0.3.3 - ActiveX Control Remote Buffer Overflow

KSign KSignSWAT 2.0.3.3 - ActiveX Control Remote Buffer Overflow www.ksign.com - KSignSWAT SWATLogin PoC code function GetHeapPadHeapJam, SizeofHeapPad whileHeapJam.length2 SizeofHeapPad HeapJam +=HeapJam; HeapJam = HeapJam.substring0, SizeofHeapPad/2; return HeapJam; // buffer 671 bytes write,...

KSign KSignSWAT <= 2.0.3.3 ActiveX Control Remote BoF Exploit

Exploit for unknown platform in category remote exploits ============================================================= KSign KSignSWAT www.ksign.com - KSignSWAT SWATLogin PoC code function GetHeapPadHeapJam, SizeofHeapPad whileHeapJam.length2 SizeofHeapPad HeapJam +=HeapJam; HeapJam =...

Dart ZipLite Compression 1.8.5.3 - DartZipLite.dll ActiveX Control Buffer Overflow

Dart ZipLite Compression 1.8.5.3 - DartZipLite.dll ActiveX Control Buffer Overflow source: https://www.securityfocus.com/bid/24099/info The Dart ZipLite Compression ActiveX control is prone to a buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before...

KSign KSignSWAT 2.0.3.3 - ActiveX Control Remote Buffer Overflow

www.ksign.com - KSignSWAT SWATLogin PoC code function GetHeapPadHeapJam, SizeofHeapPad whileHeapJam.length2 SizeofHeapPad HeapJam +=HeapJam; HeapJam = HeapJam.substring0, SizeofHeapPad/2; return HeapJam; // buffer 671 bytes write, then EIP overwrite. var O5pad=unescape...

Dart ZipLite Compression 1.8.5.3 - 'DartZipLite.dll' ActiveX Control Buffer Overflow

source: https://www.securityfocus.com/bid/24099/info The Dart ZipLite Compression ActiveX control is prone to a buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. Successfully exploiting this issue...

Stack overflow

Stack-based buffer overflow in the BrowseDir function in the 1 lttmb14E.ocx or 2 LTRTM14e.DLL ActiveX control in LeadTools Raster Thumbnail Object Library 14.5.0.44 allows remote attackers to execute arbitrary code via a long argument...

CVE-2007-2787

Stack-based buffer overflow in the BrowseDir function in the 1 lttmb14E.ocx or 2 LTRTM14e.DLL ActiveX control in LeadTools Raster Thumbnail Object Library 14.5.0.44 allows remote attackers to execute arbitrary code via a long argument...

Stack overflow

Stack-based buffer overflow in the LEAD Technologies LeadTools JPEG 2000 LEADJ2K.LEADJ2K.140 ActiveX control LTJ2K14.ocx 14.5.0.35 allows remote attackers to execute arbitrary code via a long BitmapDataPath property...

CVE-2007-2771

Stack-based buffer overflow in the LEAD Technologies LeadTools JPEG 2000 LEADJ2K.LEADJ2K.140 ActiveX control LTJ2K14.ocx 14.5.0.35 allows remote attackers to execute arbitrary code via a long BitmapDataPath property...

Pegasus ImagN - ActiveX Control Remote Buffer Overflow

?php / win32adduser - PASS=tzu EXITFUNC=seh USER=sun Size=483 Encoder=PexAlphaNum http://metasploit.com / $shellcode = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49". "\x49\x51\x5a\x56\x54\x58\x36\x33\x30\x56\x58\x34\x41\x30\x42\x36"...