SAP GUI WebViewer3D ActiveX Control Arbitrary File Overwrite (CVE-2007-4475)

The SAP GUI is the GUI client in SAP's 3-tier architecture of database, application server and client. A vulnerability was reported in the SAP GUI. The vulnerability is caused due to a boundary error in the bundled EAI WebViewer3D ActiveX control webviewer3d.dll when processing arguments passed t...

SAP RFC SDK — Memory Corruption

Application: RFC SDK SAP AG Versions Affected: RFC SDK 6400-7.20 and SAP GUI 7.10-7.20 Vendor URL: Bugs: Buffer Overflow Exploits: YES Reported: 16.12.2009 Vendor response: 16.12.2009 Date of SAP Security Note Published: 14.09.2010 Date of Public Advisory: 14.12.2010 Author: Alexey Sintsov...

HP LoadRunner XUpload.ocx ActiveX Control Arbitrary File Download

An arbitrary file download vulnerability exists in an HP LoadRunner ActiveX control. The vulnerability is due to a design flaw in a certain method. The method can be leveraged by attackers to execute arbitrary programs on the vulnerable host...

SAP RFC SDK — Format String

Application: RFC SDK SAP AG Versions Affected: RFC SDK 6.40 7.11 Vendor URL: Bugs: Format String Vulnerability Exploits: YES Reported: 15.12.2009 Vendor response: 18.12.2009 Date of SAP Security Note Published: 14.09.2010 Date of Public Advisory: 14.12.2010 Author: Alexey Sintsov Description SAP...

NCTAudioFile2 v2.x ActiveX Control SetFormatLikeSample() Buffer Overflow

This module exploits a stack buffer overflow in the NCTAudioFile2.Audio ActiveX Control provided by various audio applications. By sending an overly long string to the "SetFormatLikeSample" method, an attacker may be able to execute arbitrary code. This module requires Metasploit:...

Facebook Photo Uploader ActiveX Control FileMask Method Buffer Overflow (CVE-2008-0660)

Facebook is a social networking website which allows its users to publish their photos. The website publishes an ActiveX control, ImageUploader4.ocx, to assist photo uploading. A buffer overflow vulnerability exists in the Facebook Photo Uploader ActiveX control. The flaw is due to a boundary err...

Oracle Document Capture ActiveX — Insecure method, buffer overflow

Application: Oracle Document Capture Versions Affected: Oracle Document Capture 10.1.3.5 Vendor URL: Bugs: Insecure method. Buffer overflow. Exploits: YES Reported: 14.12.2009 Vendor response: 15.12.2009 Date of Public Advisory: 24.01.2011 CVE-number: CVE-2010-3599 Author: Alexandr Polyakov...

Microsoft VB Common Controls Animation Object Buffer Overflow (MS08-070; CVE-2008-4255)

The Microsoft Visual Studio 6.0 integrated development environment IDE suite is designed for building Windows based applications and Web solutions. The product contains several tools which can be used to design programs in languages such as Visual C++, or Visual Basic. Microsoft Basic 6.0 is...

Internet Explorer COM Object Instantiation Memory Corruption (CVE-2006-4495)

Microsoft Internet Explorer allows HTML documents to embed ActiveX controls for the authoring of dynamic web content. ActiveX controls are based on Component Object Model COM technology. The invocation of an ActiveX control is performed by Internet Explorer by internally instantiating an object. ...

Microsoft IE XHTML DOM操控内存破坏漏洞（MS09-072）

BUGTRAQ ID: 37188 CVE ID: CVE-2009-3671 Internet Explorer是Windows操作系统中默认捆绑的WEB浏览器。 Internet Explorer操控和解析某些HTML标签的方式存在内存破坏漏洞，以畸形方式获得各种对象会导致调用悬浮指针，这可以通过heap spray进一步利用。攻击者可以通过构建特制的网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。成功利用此漏洞的攻击者可以获得与登录用户相同的用户权限。 Microsoft Internet Explorer 8.0 临时解决方法： 将Internet...

Adobe Flash Player ActiveX控件信息泄漏漏洞

Bugraq ID: 37272 CVE ID：CVE-2009-3951 Adobe Flash Player是一款Flash文件处理程序。 Flash Player ActiveX控件中漏洞，允许获得windows平台本地文件名，导致敏感信息泄漏。 攻击者可以构建恶意WEB页，诱使用户访问来触发。 Adobe Flex 3.0 Adobe Flash Player 10.0.32 18 Adobe Flash Player 10.0.22 .87 Adobe Flash Player 10.0.15 .3 Adobe Flash Player 10.0.12 .36 Adobe...

Microsoft IE CAttrArray对象远程代码执行漏洞（MS09-072）

BUGTRAQ ID: 37213 CVE ID: CVE-2009-3674 Internet Explorer是Windows操作系统中默认捆绑的WEB浏览器。 Internet Explorer在解除分配对CAttrArray对象的循环引用期间存在内存破坏漏洞。如果在关闭网页之前释放了CAttrArray对象，IE在解除分配循环指针期间会访问已释放的内存，这可能导致以当前登录用户的权限执行任意指令。 Microsoft Internet Explorer 8.0 临时解决方法： 将Internet...

Design/Logic Flaw

Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 on Windows allows remote attackers to obtain the names of local files via unknown vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-482...

CVE-2009-3951

Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 on Windows allows remote attackers to obtain the names of local files via unknown vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-482...

CVE-2009-3951

Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 on Windows allows remote attackers to obtain the names of local files via unknown vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-482...

SAP GUI for Windows - sapirrfc.dll ActiveX Overflow

SAP GUI for Windows - sapirrfc.dll ActiveX Overflow SAP GUI for Windows sapirrfc.dll Accecpt Activex Overflow www.Abysssec.com Public Exploit / Application: SAP GUI for Windows, EnjoySAP Versions Affected: Version 6.4 Vendor URL: http://SAP.com Bugs: Buffer Overflow Exploits: YES Reported:...

EasyMail SMTP ActiveX Control AddAttachment buffer overflow

Added: 12/10/2009 BID: 36440 OSVDB: 59939 Background QuikSoft EasyMail Objects is a set of ActiveX controls which provide e-mail functionality. QuikSoft EasyMail Objects is included with Oracle Document Capture among other products. Problem A stack buffer overflow vulnerability in the...

SAP GUI for Windows sapirrfc.dll Activex Overflow Exploit

No description provided by source. html title SAP GUI for Windows sapirrfc.dll Accecpt Activex Overflow /title center h1 www.Abysssec.com Public Exploit h1 /center object classid='clsid:77F12F8A-F117-11D0-8CF1-00A0C91D9D87' id='target' / script / Application: SAP GUI for Windows, EnjoySAP Version...

SAP GUI for Windows - 'sapirrfc.dll' ActiveX Overflow

SAP GUI for Windows sapirrfc.dll Accecpt Activex Overflow www.Abysssec.com Public Exploit / Application: SAP GUI for Windows, EnjoySAP Versions Affected: Version 6.4 Vendor URL: http://SAP.com Bugs: Buffer Overflow Exploits: YES Reported: 13.11.2008 Vendor response: 17.11.2008 Date of Public...

EasyMail SMTP ActiveX Control AddAttachment buffer overflow

Added: 12/10/2009 BID: 36440 OSVDB: 59939 Background QuikSoft EasyMail Objects is a set of ActiveX controls which provide e-mail functionality. QuikSoft EasyMail Objects is included with Oracle Document Capture among other products. Problem A stack buffer overflow vulnerability in the...