10860 matches found
Adobe Flash Player 7.0.x/8.0.x/9.0.x ActiveX Control 'navigateToURL' API Cross Domain Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26960/info The Adobe Flash Player ActiveX control is prone to a cross-domain scripting vulnerability. An attacker may leverage this issue to execute arbitrary JavaScript in the context of another domain. This issue affect...
Real Networks Arcade Games StubbyUtil.ProcessMgr ActiveX Arbitrary Code Execution
No description provided by source. $Id: realarcadeinstallerdlg.rb 12286 2011-04-09 18:24:43Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
Camtron CMNC-200 IP Camera ActiveX Buffer Overflow Vulnerability
No description provided by source. Finding 1: Buffer Overflow in ActiveX Control CVE: CVE-2010-4230 The CMNC-200 IP Camera ActiveX control identified by CLSID DD01C8CA-5DA0-4B01-9603-B7194E561D32 is vulnerable to a stack overflow on the first argument of the connect method. The vulnerability can ...
EMC Captiva PixTools 2.2 Distributed Imaging ActiveX Control Multiple Insecure Method Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/36566/info The EMC Captiva PixTools Distributed Imaging ActiveX control is prone to multiple insecure-method vulnerabilities that affect the PDIControl.PDI.1 ActiveX control PDIControl.dll. Successfully exploiting these...
AOL 9.5 ActiveX 0day Exploit (heap spray)
No description provided by source. html head titleAOL 9.5 ActiveX 0day Exploit heap spray /title br+ AOL 9.5 ActiveX 0day Exploit heap spray/br br+ Author : Dzattacker/br br+ Discovered by: Hellcode Research http://www.hellcode.net br+ Reference: http://www.exploit-db.com/exploits/11190 br+ Teste...
HP Instant Support ActiveX Control Driver Check Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24730/info HP Instant Support ActiveX control is prone to a remote buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied input before copying it to an insufficiently sized memory buffer...
Crystal Report Viewer 8.0.0.371 - ActiveX Denial of Service Vulnerability
No description provided by source. html Crystal Reporting Viewer v8.0.0.371 Author: Matthew Bergin Website: www.berginpentesting.com Website: www.smashthestack.org object classid='clsid:C4847596-972C-11D0-9567-00A0C9273C2A' id='target' /object script language='vbscript' targetFile =...
Symantec Altiris Deployment Solution ActiveX Control Buffer Overflow
No description provided by source. $Id: symantecaltirisdeploymentruncmd.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensi...
AoA Audio Extractor 2.x - ActiveX ROP exploit
No description provided by source. html p centerAoA Audio Extractor v2.x ActiveX ROP exploitbr / Hadji Samir - s-dz|AT|hotmail.fr & mrme - mrme|AT|net-ninja.netbr //center /p !-- some notes about the exploit: - Tested working on a fully patched windows XP sp3 IE8 VM Last update was done on...
EnjoySAP ActiveX kweditcontrol.kwedit.1 - Remote Stack Overflow PoC
No description provided by source. !-- ======= Summary ======= Name: EnjoySAP, SAP GUI for Windows - Stack Overflow Release Date: 5 July 2007 Reference: NGS00483 Discover: Mark Litchfield [email protected] Vendor: SAP Vendor Reference: SECRES-289 Systems Affected: All Versions Risk: High Statu...
Quest vWorkspace 7.5 Connection Broker Client ActiveX Control (pnllmcli.dll 7.5.304.547) SaveMiniLaunchFile() Method Remote File Creation / Overwrite PoC
No description provided by source. !-- Quest vWorkspace 7.5 Connection Broker Client ActiveX Control pnllmcli.dll 7.5.304.547 SaveMiniLaunchFile Method Remote File Creation / Overwrite ie7/8 vendor site: http://www.quest.com/ file tested: QuestvWorkspace-75--32-bit75.zip Binary Path:...
CA Internet Security Suite - 'UmxEventCli.dll' ActiveX Control Arbitrary File Overwrite Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29406/info A Computer Associates Internet Security Suite ActiveX control is prone to a vulnerability that lets attackers overwrite files with arbitrary, attacker-controlled content. The issue occurs because the control...
SmartVMD 1.3 ActiveX Control 'VideoMovementDetection.dll' Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/36217/info SmartVMD ActiveX control is prone to a buffer-overflow vulnerability because the application fails to adequately check boundaries on user-supplied input. An attacker can exploit this issue to execute arbitrary...
ComponentOne VSFlexGrid 7 & 8 - "Archive()" method Remote Buffer Overflow Exploit
No description provided by source. Tilte: ComponentOne VSFlexGrid v. 7 & 8 Archive method Remote Buffer Overflow Exploit Date....................: 19-05-2010 Author..................: Ma3sTr0-Dz Location ...............: Algeria Software ...............: ComponentOne VSFlexGrid v. 7 & 8...
Chilkat Zip ActiveX Component 12.4 - Multiple Insecure Methods Exploit
No description provided by source. pre codespan style=font: 10pt Courier New;span class=general1-symbol------------------------------------------------------------------------------ bChilkat Software Chilkat Zip ActiveX Component ChilkatZip2.dll v. 12.4.2.0 SaveLastError and WriteExe Insecure...
Microsoft Windows Script Host 5.1/5.5 GetObject() File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1718/info It is possible for an outside attacker to view known files on a remote system if the target user visits a website or opens an email containing a specially formed script containing the JScript function 'GetObject...
LiquidXML Studio 2010 ActiveX Remote 0day
No description provided by source. html object classid='clsid:E68E401C-7DB0-4F3A-88E1-159882468A79' id='target'//object script var sofa = ..\..\..\..\..\..\..\..\..\Documents and Settings\All Users\Start Menu\Programs\Startup\thedoctorisin.hta; var king = Oh noz, Look what DrIDE...
Novell GroupWise Client 7.0.3.1294 'gxmim1.dll' ActiveX Control Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/36398/info Novell GroupWise Client is prone to an unspecified buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Successful exploits allow remote attacke...
AOL 9.5 ActiveX Heap Overflow Vulnerability
No description provided by source. Product: AOL 9.5 Vulnerability: ActiveX - Heap Overflow Discussion: Vulnerability is in Activex Control CDDBControl.dll Sending a string to BindToFile , triggering the vulnerability. Successful exploitation allow remote attackers to execute arbitrary code...