Cisco Linksys PlayerPT - ActiveX Control Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 HttpClients::IE, :uaminver = "6.0",...

CVE-2011-2658

The ISList.ISAvi ActiveX control in AdminStudio in Novell ZENworks Configuration Management ZCM 10.2, 10.3, and 11 SP1 provides access to the mscomct2.ocx file, which allows remote attackers to execute arbitrary code by leveraging unspecified mscomct2 flaws...

Directory traversal

Directory traversal vulnerability in the LaunchProcess function in the LaunchHelp.HelpLauncher.1 ActiveX control in LaunchHelp.dll in AdminStudio in Novell ZENworks Configuration Management ZCM 10.2, 10.3, and 11 SP1 allows remote attackers to execute arbitrary commands via a pathname in the firs...

Buffer overflow

Buffer overflow in the DoFindReplace function in the ISGrid.Grid2.1 ActiveX control in InstallShield/ISGrid2.dll in AdminStudio in Novell ZENworks Configuration Management ZCM 10.2, 10.3, and 11 SP1 allows remote attackers to execute arbitrary code via a long bstrReplaceText parameter...

DSquare Exploit Pack: D2SEC_LAUNCHHELP

Name| d2seclaunchhelp ---|--- CVE| CVE-2011-2657 Exploit Pack| D2ExploitPack Description| Novell Zenworks Software Packaging LaunchHelp.dll ActiveX Control Remote Code Execution Vulnerability Notes|...

CVE-2011-2658

The ISList.ISAvi ActiveX control in AdminStudio in Novell ZENworks Configuration Management ZCM 10.2, 10.3, and 11 SP1 provides access to the mscomct2.ocx file, which allows remote attackers to execute arbitrary code by leveraging unspecified mscomct2 flaws...

CVE-2011-3174

Buffer overflow in the DoFindReplace function in the ISGrid.Grid2.1 ActiveX control in InstallShield/ISGrid2.dll in AdminStudio in Novell ZENworks Configuration Management ZCM 10.2, 10.3, and 11 SP1 allows remote attackers to execute arbitrary code via a long bstrReplaceText parameter...

CVE-2011-2658

The CVE-2011-2658 vulnerability concerns the ISList.ISAvi ActiveX control used by AdminStudio within Novell ZENworks Configuration Management (ZCM) versions 10.2, 10.3, and 11 SP1. The issue stems from access to the mscomct2.ocx file, allowing remote code execution via unspecified flaws in mscomc...

CVE-2011-2657

CVE-2011-2657 affects the AdminStudio LaunchHelp.dll ActiveX control (LaunchHelp.HelpLauncher.1) used by Novell ZENworks Configuration Management (ZCM) 10.2, 10.3, and 11 SP1. The vulnerability arises in the LaunchProcess() function where a directory traversal string supplied as the first argumen...

BarcodeWiz.dll remote Buffer Overflow PoC

Exploit for windows platform in category dos / poc Exploit Title: BarCodeWiz Barcode ActiveXBarcodeWiz.dll remote Buffer Overflow PoC Date: July 25, 2012 Author: coolkaveh email protected Https://twitter.com/coolkaveh Vendor Homepage: http://barcodewiz.com/ Version: 4.0.0.0 Tested on: windows 7 S...

Barcodewiz 'Barcodewiz.dll' ActiveX Control - 'Barcode' Method Remote Buffer Overflow

source: https://www.securityfocus.com/bid/54701/info BarCodeWiz ActiveX control is prone to a buffer-overflow vulnerability because it fails to sufficiently bounds-check user-supplied input. An attacker may exploit this issue by enticing victims into opening a malicious webpage or HTML email that...

Barcodewiz Barcodewiz.dll ActiveX Control - Barcode Method Remote Buffer Overflow

Barcodewiz Barcodewiz.dll ActiveX Control - Barcode Method Remote Buffer Overflow source: https://www.securityfocus.com/bid/54701/info BarCodeWiz ActiveX control is prone to a buffer-overflow vulnerability because it fails to sufficiently bounds-check user-supplied input. An attacker may exploit...

BarCodeWiz Barcode 4.0.0.0 Buffer Overflow

Exploit Title: BarCodeWiz Barcode ActiveXBarcodeWiz.dll remote Buffer Overflow PoC Date: July 25, 2012 Author: coolkaveh [email protected] Https://twitter.com/coolkaveh Vendor Homepage: http://barcodewiz.com/ Version: 4.0.0.0 Tested on: windows 7 SP2 awesome coolkaveh...

Morovia Barcode File Overwrite

Exploit Title: Morovia Barcode ActiveX Professional 3 File Overwrite Exploit Date: July 24, 2012 Author: coolkaveh [email protected] Https://twitter.com/coolkaveh Vendor Homepage:http://www.morovia.com/component/barcode-activex/ Version: 3.8.0 Tested on: windows 7 awesome coolkaveh...

Cisco Linksys PlayerPT ActiveX Control SetSource() Multiple Overflows

The Cisco Linksys PlayerPT ActiveX Control is installed on the remote Windows host. The installed version of the control is affected by the following buffer overflow vulnerabilities in the SetSource method : - The 'base64string' argument is not properly sanitized. EBD-ID 18641 - The 'sURL' argume...

Sony VAIO Wireless Manager ActiveX Control WifiMan.dll Multiple Buffer Overflows

The Sony VAIO Wireless Manager ActiveX control installed on the remote Windows host is affected by buffer overflow vulnerabilities in 'SetTmpProfileOption' and 'ConnectToNetWokrkOption' in WifiMan.dll. By tricking a victim into visiting a specially crafted page, an attacker may be able to execute...

Advantech Studio ISSymbol ActiveX Control Multiple Buffer Overflow Vulnerabilities

Binary data scadaadvantechstudioissymbolactivexbof.nbin...

CVE-2012-0284

Stack-based buffer overflow in the SetSource method in the Cisco Linksys PlayerPT ActiveX control 1.0.0.15 in PlayerPT.ocx on the Cisco WVC200 Wireless-G PTZ Internet video camera allows remote attackers to execute arbitrary code via a long URL in the first argument aka the sURL argument...

Stack overflow

Stack-based buffer overflow in the SetSource method in the Cisco Linksys PlayerPT ActiveX control 1.0.0.15 in PlayerPT.ocx on the Cisco WVC200 Wireless-G PTZ Internet video camera allows remote attackers to execute arbitrary code via a long URL in the first argument aka the sURL argument...

CVE-2012-0284

Stack-based buffer overflow in the SetSource method in the Cisco Linksys PlayerPT ActiveX control 1.0.0.15 in PlayerPT.ocx on the Cisco WVC200 Wireless-G PTZ Internet video camera allows remote attackers to execute arbitrary code via a long URL in the first argument aka the sURL argument...