10868 matches found
Stack overflow
Stack-based buffer overflow in the MOVIEPLAYER.MoviePlayerCtrl.1 ActiveX control in MoviePlayer.ocx 6.8.0.0 in Viscom Software Movie Player Pro SDK ActiveX 6.8 allows remote attackers to execute arbitrary code via a long strFontName parameter to the DrawText method...
CVE-2010-0356
Viscom Software Movie Player Pro SDK ActiveX 6.8 exposes a stack-based buffer overflow in MOVIEPLAYER.MoviePlayerCtrl.1 (MoviePlayer.ocx 6.8.0.0). A long strFontName passed to DrawText can allow remote code execution. Public exploits exist (Metasploit and others) and show attacker-hosted pages or...
CVE-2010-0356
Stack-based buffer overflow in the MOVIEPLAYER.MoviePlayerCtrl.1 ActiveX control in MoviePlayer.ocx 6.8.0.0 in Viscom Software Movie Player Pro SDK ActiveX 6.8 allows remote attackers to execute arbitrary code via a long strFontName parameter to the DrawText method...
Windows Media Player 11 ActiveX launchURL() files download
No description provided by source. !------- This is a vulnerability into Windows Media Player ActiveX launchURL function which someone can download what ever file into the vulnerable machine !!! Discovered and written by Jacky! Tested version: 11.0.5358.4827 Tested machine: Windows XP SP3 & Windo...
Gracenote CDDBControl - ActiveX Control 'ViewProfile' Method Heap Buffer Overflow (PoC)
source: https://www.securityfocus.com/bid/37834/info Gracenote CDDBControl is prone to a stack-based buffer-overflow vulnerability because the application fails to adequately check boundaries on user-supplied input. An attacker can exploit this issue to execute arbitrary code in the context of th...
PT-2010-2142 · Viscom · Viscom Software Movie Player Pro Sdk Activex
Name of the Vulnerable Software and Affected Versions: Viscom Software Movie Player Pro SDK ActiveX version 6.8.0.0 Description: The issue is related to a stack-based buffer overflow in the MOVIEPLAYER.MoviePlayerCtrl.1 ActiveX control. This occurs when a long strFontName parameter is passed to t...
Gracenote CDDBControl - ActiveX Control ViewProfile Method Heap Buffer Overflow (PoC)
Gracenote CDDBControl - ActiveX Control ViewProfile Method Heap Buffer Overflow PoC source: https://www.securityfocus.com/bid/37834/info Gracenote CDDBControl is prone to a stack-based buffer-overflow vulnerability because the application fails to adequately check boundaries on user-supplied inpu...
MS KB979267: Flash 6 ActiveX Control On Windows XP Multiple Vulnerabilities
The Macromedia Flash Player 6 ActiveX control that comes bundled with Windows XP is installed on the remote host. This version has multiple memory corruption vulnerabilities. By tricking a user into viewing a specially crafted web page, a remote attacker may be able to exploit these issues to...
TrendMicro Web-Deployment ActiveX Remote Exec 0day POC
Exploit for unknown platform in category remote exploits ====================================================== TrendMicro Web-Deployment ActiveX Remote Exec 0day POC ====================================================== Exploit Title: TrendMicro Web-Deployment ActiveX Remote Exec 0day POC Date:...
Adobe GetPlus get_atlcom ActiveX Remote Exec 0day POC
No description provided by source. Exploit Title: Adobe GetPlus getatlcom ActiveX Remote Exec 0day POC Date: 2010.01.17 Author: superli Software Link: http://get.adobe.com/flashplayer/?promoid=BUIGP Version: 1,6,2,48 Tested on: xpsp3 ie6 Code :...
Trend Micro Web-Deployment - ActiveX Remote Execution
Trend Micro Web-Deployment - ActiveX Remote Execution Exploit Title: TrendMicro Web-Deployment ActiveX Remote Exec 0day POC Date: 2010.01.17 Author: superli Software Link: http://www.trendmicro.com Version: 8.0 Tested on: xpsp3 ie6 Download:...
Vulnerability Note VU#204889 Windows XP Macromedia Flash 6 ActiveX control use-after-free vulnerability
Vulnerability Note VU204889 Windows XP Macromedia Flash 6 ActiveX control use-after-free vulnerability Overview The Macromedia Flash ActiveX control that is provided with Windows XP contains a memory corruption vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary...
Adobe GetPlus get_atlcom 1.6.2.48 - ActiveX Remote Execution
Adobe GetPlus getatlcom 1.6.2.48 - ActiveX Remote Execution PARAM NAME="Service-URL"...
Baidu Security Center FireFoxProxy ActiveX Remote Exec 0day POC
No description provided by source. Exploit Title: Baidu Security Center FireFoxProxy ActiveX Remote Exec 0day POC Date: 2010.01.17 Author: superli Software Link: http://an.baidu.com/ Version: 2.0 Tested on: xpsp3 ie6 Greeting to all the guys of Baidu Security Center,please dont use Kingsoft sht t...
QvodPlayer ColorFilter Codec ActiveX Remote Exec 0day POC
No description provided by source. Exploit Title: QvodPlayer ColorFilter Codec ActiveX Remote Exec 0day POC Date: 2010.01.17 Author: superli Software Link: http://www.qvod.com/ Version: 3.5.0 Tested on: xpsp3 ie6 most of the video player contain the ColoeFilter codec which offered by...
Xunlei XPPlayer 5.9.14.1246 - ActiveX Remote Execution (PoC)
Xunlei XPPlayer 5.9.14.1246 - ActiveX Remote Execution PoC Author: superli Version: = 5.9.14.1246 Tested on: xpsp3 ie6 Greeting to Xunlei Security Center guys,your guys still not yet release patch or new version to fix the vunl which also can attack Xunlei KanKan...
TrendMicro Web-Deployment ActiveX Remote Exec 0day POC
No description provided by source. Exploit Title: TrendMicro Web-Deployment ActiveX Remote Exec 0day POC Date: 2010.01.17 Author: superli Software Link: http://www.trendmicro.com Version: 8.0 Tested on: xpsp3 ie6 http://paper.sebug.net/2010-exploits/1001-exploits/TrendMicro Web-Deployment ActiveX...
Xunlei Aplayer ActiveX Remote Exec 0day POC
No description provided by source. Exploit Title: Xunlei Aplayer ActiveX Remote Exec 0day POC Date: 2010.01.17 Author: superli Software Link: http://down.sandai.net/Thunder5.9.14.1246.exe Version: 5.9.14.1246 Tested on: xpsp3 ie6 Code : object id=TestObj...
Windows Media Player 11 ActiveX launchURL() files download
Exploit for unknown platform in category remote exploits ========================================================== Windows Media Player 11 ActiveX launchURL files download ========================================================== arg1='http://'; test.launchURLarg1; 0day.today 2018-01-01...
PPmate PMChannel and CTVUAxCtrl ActiveX Remote Exec 0day POC
No description provided by source. Exploit Title: PPmate PMChannel and CTVUAxCtrl ActiveX Remote Exec 0day POC Date: 2010.01.17 Author: superli Software Link: http://www.ppmate.com Version: 2.3.3.6 Tested on: xpsp3 ie6 Code : object id=TestObj classid="CLSID:2BE6A92D-D51C-4659-B372-BB18C99BC439"...