Autodesk IDrop - ActiveX Control Heap Memory Corruption (Metasploit)

$Id: autodeskidrop.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Webmoney Advisor - ActiveX Remote Denial of Service

Pwnage Page targetFile = "C:\Program Files\WebMoney Advisor\wmadvisor.dll" prototype = "Sub Redirect ByVal url As String " memberName = "Redirect" progid = "TOOLBAR3Lib.ToolbarObj" argCount = 1 arg1=String1337, "A" target.Redirect arg1...

Webmoney Advisor ActiveX Remote DoS Exploit

Exploit for windows platform in category dos / poc =========================================== Webmoney Advisor ActiveX Remote DoS Exploit =========================================== Pwnage Page targetFile = "C:\Program Files\WebMoney Advisor\wmadvisor.dll" prototype = "Sub Redirect ByVal url As...

Webmoney Advisor - ActiveX Remote Denial of Service

Webmoney Advisor - ActiveX Remote Denial of Service Pwnage Page targetFile = "C:\Program Files\WebMoney Advisor\wmadvisor.dll" prototype = "Sub Redirect ByVal url As String " memberName = "Redirect" progid = "TOOLBAR3Lib.ToolbarObj" argCount = 1 arg1=String1337, "A" target.Redirect arg1...

Adobe下载管理器gp.ocx ActiveX控件缓冲区溢出漏洞

BUGTRAQ ID: 39615 CVE ID: CVE-2010-1278 Adobe Download Manager直接与Adobe服务器配合工作, 可帮助控制Adobe Reader、Adobe Acrobat及其他Adobe文件的下载过程。 Adobe Download Manager所安装的gp.ocx ActiveX控件在初始化期间将两个参数值拷贝到了固定长度的缓冲区，如果用户受骗访问了恶意网页并传送了超长参数就可以触发缓冲区溢出，导致执行任意代码。 Adobe Acrobat 9.x Adobe Acrobat 8.x Adobe Download Manager...

Update Protection against Novell iPrint Client ienipp.ocx target-frame Stack Buffer Overflow

A buffer overflow vulnerability exists in Novell iPrint Client, an application that allows users to install and manage printers, or submit print jobs from a web browser. The vulnerability is due to a boundary error in the ActiveX control when parsing target-frame parameter values. A remote attack...

Update Protection against SAP GUI SAPBExCommonResources ActiveX Command Execution

A buffer overflow vulnerability has been reported in SAP GUI, the GUI client in SAP's 3-tier architecture of database, application server and client. The vulnerability exists in the SAP GUI SAPBExCommonResources ActiveX control. The vulnerability may allow remote attackers to execute arbitrary...

EDraw Flowchart Active-X Control 2.3 Buffer Overflow

!/usr/bin/perl Title: EDraw Flowchart ActiveX Control 2.3 .edd parsing Remote Buffer Overflow PoC Vendor: EdrawSoft Product Web Page: http://www.edrawsoft.com Summary: Do you want to learn how to draw? Now you can online! Learn how to draw like a local application with Edraw Flowchart ActiveX...

Update Protection against IBM Lotus Domino Web Access ActiveX Controls Buffer Overflow

A vulnerability has been reported in IBM Lotus Domino, a Web browser-based client platform that provides functionality similar to that of IBM Lotus Notes. The vulnerability is due to a boundary error while handling malformed data passed to the iNotes Web Access ActiveX controls. A remote attacker...

CVE-2010-1278

Buffer overflow in the Atlcom.getatlcom ActiveX control in gp.ocx in Adobe Download Manager, as used in Adobe Reader and Acrobat 8.x before 8.2 and 9.x before 9.3, allows remote attackers to execute arbitrary code via unspecified parameters...

Buffer overflow

Buffer overflow in the Atlcom.getatlcom ActiveX control in gp.ocx in Adobe Download Manager, as used in Adobe Reader and Acrobat 8.x before 8.2 and 9.x before 9.3, allows remote attackers to execute arbitrary code via unspecified parameters...

CVE-2010-1278

Buffer overflow in the Atlcom.getatlcom ActiveX control in gp.ocx in Adobe Download Manager, as used in Adobe Reader and Acrobat 8.x before 8.2 and 9.x before 9.3, allows remote attackers to execute arbitrary code via unspecified parameters...

CVE-2010-1278

CVE-2010-1278 describes a buffer overflow in the gp.ocx ActiveX control (Atlcom.get_atlcom) used by Adobe Download Manager, affecting Adobe Reader/Acrobat 8.x before 8.2 and 9.x before 9.3. During initialization, two parameters are copied into a fixed-length buffer; oversized values can overflow ...

Internet Explorer Tabular Data Control DataURL memory corruption

Added: 04/22/2010 CVE: CVE-2010-0805 BID: 39025 OSVDB: 63329 Background Tabular Data Control.aspx is an ActiveX control which can be used to display data from a delimited text file. Problem A memory corruption vulnerability allows command execution when a user loads a web page which invokes Tabul...

EDraw Flowchart ActiveX Control 2.3 (EDImage.ocx) DoS Exploit (IE)

Exploit for windows platform in category dos / poc ========================================================================= EDraw Flowchart ActiveX Control 2.3 EDImage.ocx Remote DoS Exploit IE ========================================================================= EDraw Flowchart ActiveX...

EDraw Flowchart ActiveX Control 2.3 (EDImage.ocx) Remote DoS Exploit (IE)

Summary Do you want to learn how to draw? Now you can online! Learn how to draw like a local application with Edraw Flowchart ActiveX Control that lets you quickly build basic flowcharts, organizational charts, business charts, hr diagram, work flow, programming flowchart and network diagrams...

Internet Explorer Tabular Data Control DataURL memory corruption

Added: 04/22/2010 CVE: CVE-2010-0805 BID: 39025 OSVDB: 63329 Background Tabular Data Control is an ActiveX control which can be used to display data from a delimited text file. Problem A memory corruption vulnerability allows command execution when a user loads a web page which invokes Tabular Da...

Internet Explorer Tabular Data Control DataURL memory corruption

Added: 04/22/2010 CVE: CVE-2010-0805 BID: 39025 OSVDB: 63329 Background Tabular Data Control.aspx is an ActiveX control which can be used to display data from a delimited text file. Problem A memory corruption vulnerability allows command execution when a user loads a web page which invokes Tabul...

ZDI-10-077: Adobe Download Manager Atlcom.get_atlcom ActiveX Control Remote Code Execution Vulnerability

ZDI-10-077: Adobe Download Manager Atlcom.getatlcom ActiveX Control Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-077 April 21, 2010 -- CVE ID: CVE-2010-1278 -- Affected Vendors: Adobe -- Affected Products: Adobe Download Manager -- TippingPointTM IPS...

EDraw Flowchart ActiveX Control 2.3 (.edd parsing) Remote Buffer Overflow PoC

Summary Do you want to learn how to draw? Now you can online! Learn how to draw like a local application with Edraw Flowchart ActiveX Control that lets you quickly build basic flowcharts, organizational charts, business charts, hr diagram, work flow, programming flowchart and network diagrams...