PT-2010-2539 · Microsoft · Activex +9

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer 8 Developer Tools versions in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1...

Microsoft Internet Explorer 8 Developer Tools Remote Code Execution Vulnerability

Description Microsoft Internet Explorer 8 Developer Tools 'iedvtool.dll' ActiveX control is prone to a remote code-execution vulnerability that stems from a memory-corruption issue. An attacker can exploit this issue to execute arbitrary code in the context of the application, usually Internet...

Microsoft Excel 'DBQueryExt' ActiveX Data Object (ADO) Parsing Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Excel '.xls' file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running...

Worldweaver DX Studio Player 3.0.29 - 'shell.execute()' Command Execution (Metasploit)

$Id: dxstudioplayerexec.rb 9375 2010-05-26 22:39:56Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Rumba FTP客户端FTPSFtp.dll ActiveX控件缓冲区溢出漏洞

BUGTRAQ ID: 40309 Rumba FTP是一款图形化的FTP客户端。 Rumba FTP客户端所安装的FTPSFtp.dll ActiveX控件没有正确地过滤提交给OpenSession方式的字符串参数，用户受骗访问了恶意网页并向该方式传送了超长参数就可以触发缓冲区溢出，导致执行任意指令。 NetManage Rumba FTP 4.2 临时解决方法： 为clsid 677A6F83-52A0-4931-8E62-EC713EE9B949设置kill bit。 厂商补丁： NetManage --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下...

CommuniCrypt Mail 1.16 SMTP ActiveX Stack Buffer Overflow

$Id: communicryptmailactivex.rb 9363 2010-05-25 02:09:42Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

ComponentOne VSFlexGrid 7/8 - 'Archive()' method Remote Buffer Overflow

Tilte: ComponentOne VSFlexGrid v. 7 & 8 "Archive" method Remote Buffer Overflow Exploit Date....................: 19-05-2010 Author..................: Ma3sTr0-Dz Location ...............: Algeria Software ...............: ComponentOne VSFlexGrid v. 7 & 8 Impact..................: Remote Tested On...

ComponentOne VSFlexGrid 78 - Archive() method Remote Buffer Overflow

ComponentOne VSFlexGrid 78 - Archive method Remote Buffer Overflow Tilte: ComponentOne VSFlexGrid v. 7 & 8 "Archive" method Remote Buffer Overflow Exploit Date....................: 19-05-2010 Author..................: Ma3sTr0-Dz Location ...............: Algeria Software ...............:...

Reflection X r2axctrl.ocx ActiveX控件ControlID参数缓冲区溢出漏洞

BUGTRAQ ID: 40243 Reflection X用于将Windows用户连接到UNIX、Linux、OpenVMS和Unixys系统上基于图形和字符应用程序。 Reflection X产品所安装的r2axctrl.ocx ActiveX控件没有正确地验证用户所提交的ControlID参数，用户受骗访问了恶意网页并传送了超长的字符串参数就可以触发缓冲区溢出，导致拒绝服务或执行任意代码。 Attachmate Reflection X 14.0 Attachmate Reflection X 13.0 Attachmate Reflection Standard Suite 20...

CommuniCrypt Mail 1.16 (ANSMTP.dll/AOSMTP.dll) ActiveX

No description provided by source. html !-- |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | |...

CommuniCrypt Mail 1.16 - 'ANSMTP.dll/AOSMTP.dll' ActiveX

!-- |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | [email protected] | | |...

Attachmate 13.0 / 14.0 Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Exploit Title: Reflection Attachmate Reflection Standard Suite 2008 activex buffer overflow Date: Mar 11, 2010 found Author: Rad L. Sneak JB Software Link: http://www.attachmate.com/Evals/ruo2/eval-form.htm Version: 13.0 & 14.0 Tested on: WinXP SP3 &...

CommuniCrypt Mail 1.16 (ANSMTP.dll/AOSMTP.dll) ActiveX

Exploit for windows platform in category remote exploits ====================================================== CommuniCrypt Mail 1.16 ANSMTP.dll/AOSMTP.dll ActiveX ====================================================== !-- |------------------------------------------------------------------| | | ...

CommuniCrypt Mail 1.16 - ANSMTP.dllAOSMTP.dll ActiveX

CommuniCrypt Mail 1.16 - ANSMTP.dllAOSMTP.dll ActiveX !-- |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800...

CommuniCrypt Mail 1.16 SMTP ActiveX Stack Buffer Overflow

This module exploits a stack buffer overflow in the ANSMTP.dll/AOSMTP.dll ActiveX Control provided by CommuniCrypt Mail 1.16. By sending an overly long string to the "AddAttachments" method, an attacker may be able to execute arbitrary code. Module Options msf use...

Attachmate Reflection Standard Suite 2008 - ActiveX Buffer Overflow (PoC)

Attachmate Reflection Standard Suite 2008 - ActiveX Buffer Overflow PoC Exploit Title: Attachmate Reflection Standard Suite 2008 activex buffer overflow Date: Mar 11, 2010 found Author: Rad L. Sneak JB Software Link: http://www.attachmate.com/Evals/ruo2/eval-form.htm Version: 13.0 & 14.0 Tested o...

Reflection Attachmate Reflection Standard Suite 2008 ActiveX BOF

Exploit for windows platform in category dos / poc ============================================================================ Reflection Attachmate Reflection Standard Suite 2008 ActiveX Buffer Overflow ============================================================================ Exploit Title:...

Attachmate Reflection Standard Suite 2008 - ActiveX Buffer Overflow (PoC)

Exploit Title: Attachmate Reflection Standard Suite 2008 activex buffer overflow Date: Mar 11, 2010 found Author: Rad L. Sneak JB Software Link: http://www.attachmate.com/Evals/ruo2/eval-form.htm Version: 13.0 & 14.0 Tested on: WinXP SP3 & Win7 64bit CVE : None yet Attachmate Reflection Standard...

Trusted Sites Zone (Whitelisting)

Keep in mind that when the Internet Zone is set to High, you may encounter web sites that do not function properly due to one or more of the associated security settings. This is where the Trusted sites zone can help. If you trust that the site will not contain malicious content, you can add it t...

Disable ActiveX Controls

For a more fine-grained control over what features are allowed in the zone, click the Custom Level button. At this point, you can control the specific security options that apply to the current zone. For example ActiveX can be disabled by selecting Disable for Run ActiveX controls and plug-ins...