Symantec WinFax ActiveX buffer overflow

Buffer overflow in Symantec Fax Viewer Control ActiveX...

BaoFeng ActiveX OnBeforeVideoDownload() Remote BOF Exploit

No description provided by source. BaoFeng mps.dll Remote Code Execution Exploit By: MITBOY Download: www.baofeng.com Problem DLL : mps.dll Problem Func : OnBeforeVideoDownload html body object classid="clsid:6BE52E1D-E586-474F-A6E2-1A85A9B4D9FB" id="target"/object input type="button"...

BaoFeng ActiveX OnBeforeVideoDownload() Remote BOF Exploit

Exploit for windows platform in category remote exploits ========================================================== BaoFeng ActiveX OnBeforeVideoDownload Remote BOF Exploit ========================================================== BaoFeng mps.dll Remote Code Execution Exploit By: MITBOY Download...

Symantec Fax Viewer Control ActiveX Control AppendFax Overflow

The version of the Symantec Fax Viewer Control ActiveX control, a component included with Symantec Winfax Pro and installed on the remote Windows host, reportedly contains a stack-based buffer overflow that can be triggered by calling the 'AppendFax' method with an overly long argument. If an...

BaoFeng - ActiveX 'OnBeforeVideoDownload()' Remote Buffer Overflow

BaoFeng mps.dll Remote Code Execution Exploit By: MITBOY Download: www.baofeng.com Problem DLL : mps.dll Problem Func : OnBeforeVideoDownload function test var shellcode =...

BaoFeng - ActiveX OnBeforeVideoDownload() Remote Buffer Overflow

BaoFeng - ActiveX OnBeforeVideoDownload Remote Buffer Overflow BaoFeng mps.dll Remote Code Execution Exploit By: MITBOY Download: www.baofeng.com Problem DLL : mps.dll Problem Func : OnBeforeVideoDownload function test var shellcode =...

Symantec Fax Viewer Control 10 (DCCFAXVW.DLL) Remote BOF Exploit

No description provided by source. !-- Symantec Fax Viewer Control v10 DCCFAXVW.DLL remote buffer overflow exploit IE7 by Nine:Situations:Group::trotzkista site: http://retrogod.altervista.org/ tested against: Symantec WinFax Pro 10.03 Internet Explorer 7, XP SP3 some details: CLSID:...

Autodesk IDrop ActiveX Code Execution

Autodesk IDrop RCE Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" + "%u4948%u4949%u4949%u4949%u4949%u4949%u5a51%u436a" +...

Autodesk IDrop - ActiveX Remote Code Execution

Autodesk IDrop - ActiveX Remote Code Execution Autodesk IDrop RCE Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" +...

Autodesk IDrop ActiveX Remote Code Execution Exploit

Exploit for windows platform in category remote exploits ==================================================== Autodesk IDrop ActiveX Remote Code Execution Exploit ==================================================== Autodesk IDrop RCE Exploit function Check // win32exec - EXITFUNC=seh...

Autodesk IDrop ActiveX Remote Code Execution Exploit

No description provided by source. html head titleAutodesk IDrop RCE Exploit/title script language="JavaScript" defer function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 =...

Dranzer: Fuzzing for ActiveX vulnerabilities

The United States Computer Emergency Response Team US-CERT has released a new ActiveX fuzzer to help developers pinpoint browser-based security vulnerabilities. The tool, called Dranzer, lets software developers test ActiveX controls for vulnerabilities before the software is released to the...

Symantec Norton Ghost 'EasySetupInt.dll' ActiveX控件远程拒绝服务漏洞

BUGTRAQ ID: 34696 CNCAN ID：CNCAN-2009042404 Symantec Norton Ghost是一款提供备份恢复功能的软件。 Symantec Norton Ghost包含的ActiveX控件存在安全问题，远程攻击者可以利用漏洞使应用程序崩溃。 Symantec Norton Ghost包含的'EasySetupInt.dll' ActiveX控件对SetupDeleteVolume方法缺少正确处理，构建恶意WEB页，诱使用户打开，可导致应用程序崩溃。 Symantec Norton Ghost 14.0 Symantec Norton Ghost...

Danske Bank Danske e-Sec ActiveX控件缓冲区溢出漏洞

BUGTRAQ ID: 34549 CVE ID：CVE-2008-1107 CNCVE ID：CNCVE-20081107 Danske Bank Danske e-Sec控制模块ActvieX控件存在安全漏洞，远程攻击者可以利用漏洞以应用程序安全上下文执行任意指令。 DanskeSikker.ocx中的日志函数存在边界错误，当ActiveX控件在部分行为下初始化时提交超长输入给部分方法，可导致基于栈的缓冲区溢出。 成功利用该漏洞可以以应用程序安全上下文执行任意指令。 Danske Bank DanskeSikker.ocx 3.1 48 目前没有解决方案提供：...

CVE-2008-1107

Multiple stack-based buffer overflows in the Danske Bank e-Sec Control Module ActiveX control DanskeSikker.ocx 3.1.0.48, and possibly earlier versions, allow remote attackers to execute arbitrary code via long arguments to unspecified methods, which are not properly handled by a logging function...

Stack overflow

Multiple stack-based buffer overflows in the Danske Bank e-Sec Control Module ActiveX control DanskeSikker.ocx 3.1.0.48, and possibly earlier versions, allow remote attackers to execute arbitrary code via long arguments to unspecified methods, which are not properly handled by a logging function...

Danske Bank Danske e-Sec ActiveX buffer overflow

Buffer overflow in logging function...

Secunia Research: SAP GUI KWEdit ActiveX Control "SaveDocumentAs()" Insecure Method

====================================================================== Secunia Research 15/04/2009 - SAP GUI KWEdit ActiveX Control "SaveDocumentAs" Insecure Method - ====================================================================== Table of Contents Affected...

Versalsoft HTTP Image Uploader ActiveX Vulnerability

Versalsoft HTTP Image Uploader is prone to ActiveX vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-1107

Multiple stack-based buffer overflows in the Danske Bank e-Sec Control Module ActiveX control DanskeSikker.ocx 3.1.0.48, and possibly earlier versions, allow remote attackers to execute arbitrary code via long arguments to unspecified methods, which are not properly handled by a logging function...