EMC Captiva PixTools Distributed Imaging ActiveX crafted web page

EMC Captiva PixTools is a suite of software developer toolkits that provides image scanning, viewing, and processing functionality. This software application can be integrated into existing applications serving as either a centralized or distributed document capture module. EMC Captiva PixTools...

Oracle Document Capture ImportBodyText — read files

Application: Oracle Document Capture Versions Affected: 10.1350.0005 Vendor URL: Oracle Bugs: Unsecure READ method Exploits: YES Reported: 29.01.2010 Second report: 02.02.2010 Date of Public Advisory: 24.01.2010 CVE-number:CVE-2010-3595 Author: Alexey Sintsov Description EasyMail ActiveX Control...

AOL 9.5 Phobos.Playlist Import() Stack-based Buffer Overflow

This module exploits a stack-based buffer overflow within Phobos.dll of AOL 9.5. By setting an overly long value to 'Import', an attacker can overrun a buffer and execute arbitrary code. NOTE: This ActiveX control is NOT marked safe for scripting or initialization. This module requires Metasploit...

Novell iPrint Client ienipp.ocx persistence parameter parsing buffer overflow

Added: 01/28/2010 CVE: CVE-2009-1569 BID: 37242 OSVDB: 60804 Background Novell iPrint is an application which allows users to install and manage printers. Novell iPrint installs the Novell iPrint Control ActiveX control named ienipp.ocx. Problem A buffer overflow in ienipp.ocx allows command...

Novell iPrint Client ienipp.ocx persistence parameter parsing buffer overflow

Added: 01/28/2010 CVE: CVE-2009-1569 BID: 37242 OSVDB: 60804 Background Novell iPrint is an application which allows users to install and manage printers. Novell iPrint installs the Novell iPrint Control ActiveX control named ienipp.ocx. Problem A buffer overflow in ienipp.ocx allows command...

Microsoft Agent Crafted URL Stack Buffer Overflow (MS07-051; CVE-2007-3040)

The Microsoft Agent ActiveX control, exposes a set of methods and properties that can be used for scripting in HTML pages. There exists a buffer overflow vulnerability in Microsoft Windows Agent application. The flaw is due to wrongfully copying an overly large string to a fixed-size stack buffer...

Novell iPrint Client ienipp.ocx persistence parameter parsing buffer overflow

Added: 01/28/2010 CVE: CVE-2009-1569 BID: 37242 OSVDB: 60804 Background Novell iPrint is an application which allows users to install and manage printers. Novell iPrint installs the Novell iPrint Control ActiveX control named ienipp.ocx. Problem A buffer overflow in ienipp.ocx allows command...

Novell iPrint Client ienipp.ocx persistence parameter parsing buffer overflow

Added: 01/28/2010 CVE: CVE-2009-1569 BID: 37242 OSVDB: 60804 Background Novell iPrint is an application which allows users to install and manage printers. Novell iPrint installs the Novell iPrint Control ActiveX control named ienipp.ocx. Problem A buffer overflow in ienipp.ocx allows command...

Microsoft IE远程内存破坏漏洞(MS10-002)

BUGTRAQ ID: 37893 CVE ID: CVE-2010-0247 Internet Explorer是Windows操作系统中默认捆绑的web浏览器。 Internet Explorer访问尚未正确初始化或已被删除的对象的方式中存在一个远程执行代码漏洞。攻击者可以通过构建特制的网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 Microsoft Internet Explorer 5.0.1 SP4 临时解决方法：...

AOL 9.5 Phobos.Playlist Import() Stack-based Buffer Overflow

aolphobosbof.rb AOL 9.5 Phobos.Playlist 'Import' Stack-based Buffer Overflow exploit for the Metasploit Framework Tested successfully on the following platforms: - AOL 9.5 Revision 4337.155 on Internet Explorer 7, Windows XP SP3 Phobos.dll version tested: File Version: 9.5.0.1 ClassID:...

AOL 9.5 Phobos.Playlist 'Import()' Buffer Overflow Exploit (Meta)

No description provided by source. view source print? aolphobosbof.rb AOL 9.5 Phobos.Playlist 'Import' Stack-based Buffer Overflow exploit for the Metasploit Framework Tested successfully on the following platforms: - AOL 9.5 Revision 4337.155 on Internet Explorer 7, Windows XP SP3 Phobos.dll...

AOL 9.5 - Phobos.Playlist Import() Remote Buffer Overflow (Metasploit)

AOL 9.5 - Phobos.Playlist Import Remote Buffer Overflow Metasploit aolphobosbof.rb AOL 9.5 Phobos.Playlist 'Import' Stack-based Buffer Overflow exploit for the Metasploit Framework Tested successfully on the following platforms: - AOL 9.5 Revision 4337.155 on Internet Explorer 7, Windows XP SP3...

AOL 9.5 Phobos.Playlist 'Import()' Buffer Overflow Exploit (Meta)

Exploit for unknown platform in category remote exploits ================================================================= AOL 9.5 Phobos.Playlist 'Import' Buffer Overflow Exploit Meta ================================================================= aolphobosbof.rb AOL 9.5 Phobos.Playlist 'Impor...

Microsoft Internet Explorer vbDevKit.dll Code Execution

IE vbDevKit.dll ActiveX Control Multti Remote Code Execution +Date : 22 January 2010 +version : all versions +Author : ahwak2000 +Contact : z.u5athotmail.com +Geetz 2 : germayax +tested on : windows xp sp2&sp3 EN +Reference : http://downloads.securityfocus.com/vulnerabilities/exploits/35725.pl +1...

MS Internet Explorer wshom.ocx (Run) ActiveX Remote Code Execution

Exploit for unknown platform in category remote exploits ==================================================================================== MS Internet Explorer wshom.ocx Run ActiveX Remote Code Execution add admin user...

Microsoft IE表格布局重用远程代码执行漏洞（MS10-002）

BUGTRAQ ID: 37892 CVE ID: CVE-2010-0245 Internet Explorer是Windows操作系统中默认捆绑的web浏览器。 在表格容器中使用特定的元素时，如果删除了其中一个元素，IE就会错误的从布局树中解除对该元素的链接。之后在遍历这个树的时候，IE会重新使用已经释放的对象。 攻击者可以通过构建特制的网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。 Microsoft Internet Explorer 8.0 临时解决方法： 将Internet...

Microsoft IE基线标签渲染远程代码执行漏洞（MS10-002）

BUGTRAQ ID: 37895 CVE ID: CVE-2010-0245 Internet Explorer是Windows操作系统中默认捆绑的web浏览器。 如果交错的strike和center标签中包含用用于操控sub或sup等字体基线的元素的话，则在IE渲染该标签时存在释放后使用错误。在删除这个元素指针的时候，IE之后会引用已被释放的指针。 攻击者可以通过构建特制的网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。 Microsoft Internet Explorer 8.0 临时解决方法： 将Internet...

Microsoft Internet Explorer - 'wshom.ocx' (Run) ActiveX Code Execution (Add Admin)

Exploit Title: IE wshom.ocx Run ActiveX Remote Code Execution add admin user Date: 22/01/2010 Author: Stack Version: ALL Tested on: winsp2 arg1="cmd /c net user username password /add && net localgroup Administrateurs username /add" target.run arg1...

Microsoft Internet Explorer wshom.ocx Code Execution

Exploit Title: IE wshom.ocx Run ActiveX Remote Code Execution add admin user Date: 22/01/2010 Author: Stack Version: ALL Tested on: winsp2 arg1="cmd /c net user username password /add && net localgroup Administrateurs username /add" target.run arg1...

Microsoft IE克隆DOM对象内存破坏漏洞（MS10-002）

BUGTRAQ ID: 37894 CVE ID: CVE-2010-0248 Internet Explorer是Windows操作系统中默认捆绑的web浏览器。 Internet Explorer在处理JavaScript中克隆DOM对象时存在内存破坏漏洞，特制的对象克隆序列可能导致使用已经释放的指针。攻击者可以通过构建特制的网页来利用该漏洞，当用户查看网页时，漏洞可能允许远程执行代码。 Microsoft Internet Explorer 8.0 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 SP1...