Microsoft explains how ActiveX in Office is abused by attackers

On the Microsoft Secure Windows Iniative blog, software engineer Chengyun discusses the default behaviour of ActiveX controls embedded in Office documents. The software giant also provides information on how can an attacker abuse ActiveX and how Office users can change the behavior of ActiveX...

Imera ImeraIEPlugin ActiveX Control Remote Code Execution Exploit

No description provided by source. Who: Imerahttp://www.imera.com Imera TeamLinks Clienthttp://teamlinks.imera.com/install.html What: ImeraIEPlugin.dll Version 1.0.2.54 Dated 12/02/2008 75CC8584-86D4-4A50-B976-AA72618322C6 http://teamlinks.imera.com/ImeraIEPlugin.cab How: This control is used to...

"Imera ImeraIEPlugin ActiveX Control Remote Code Execution Exploit"

No description provided by source. Who: Imerahttp://www.imera.com Imera TeamLinks Clienthttp://teamlinks.imera.com/install.html What: ImeraIEPlugin.dll Version 1.0.2.54 Dated 12/02/2008 75CC8584-86D4-4A50-B976-AA72618322C6 http://teamlinks.imera.com/ImeraIEPlugin.cab How: This control is used to...

Imera ImeraIEPlugin ActiveX Control Remote Code Execution Exploit

Exploit for unknown platform in category remote exploits ================================================================= Imera ImeraIEPlugin ActiveX Control Remote Code Execution Exploit ================================================================= Who: Imerahttp://www.imera.com Imera...

Imera ImeraIEPlugin - ActiveX Control Remote Code Execution

Imera ImeraIEPlugin - ActiveX Control Remote Code Execution Who: Imerahttp://www.imera.com Imera TeamLinks Clienthttp://teamlinks.imera.com/install.html What: ImeraIEPlugin.dll Version 1.0.2.54 Dated 12/02/2008 75CC8584-86D4-4A50-B976-AA72618322C6 http://teamlinks.imera.com/ImeraIEPlugin.cab How:...

Imera ImeraIEPlugin - ActiveX Control Remote Code Execution

Who: Imerahttp://www.imera.com Imera TeamLinks Clienthttp://teamlinks.imera.com/install.html What: ImeraIEPlugin.dll Version 1.0.2.54 Dated 12/02/2008 75CC8584-86D4-4A50-B976-AA72618322C6 http://teamlinks.imera.com/ImeraIEPlugin.cab How: This control is used to install the Imera TeamLinks Client...

FlipViewer FViewerLoading ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in E-BOOK Systems FlipViewer 4.0. The vulnerability is caused due to a boundary error in the FViewerLoading FlipViewerX.dll ActiveX control when handling the "LoadOpf" method. This module requires Metasploit: https://metasploit.com/download Current...

HP Virtual Rooms ActiveX控件不安全方式调用漏洞

BUGTRAQ ID: 33918 CVECAN ID: CVE-2009-0208 HP Virtual Rooms是一款在线协作软件。 HP Virtual Rooms需要使用Internet Explorer才能运行，因为HPVirtualRooms32.dll库提供了一个名为HPVirtualRooms32的ActiveX控件组件。该控件包含有多个危险的调用方式，但对可使用这个控件的站点没有任何限制。如果用户受骗访问了恶意网页的话，就可能通过这些调用向用户系统上下载并执行任意程序。 HP Virtual Rooms 7 HP Virtual Rooms 6 临时解决方法：...

iDefense COMRaider - ActiveX Control write() Arbitrary File Overwrite

iDefense COMRaider - ActiveX Control write Arbitrary File Overwrite source: https://www.securityfocus.com/bid/33942/info iDefense COMRaider ActiveX control is prone to a vulnerability that lets attackers overwrite arbitrary local files on the victim's computer in the context of the vulnerable...

iDefense COMRaider - ActiveX Control 'write()' Arbitrary File Overwrite

source: https://www.securityfocus.com/bid/33942/info iDefense COMRaider ActiveX control is prone to a vulnerability that lets attackers overwrite arbitrary local files on the victim's computer in the context of the vulnerable application using the ActiveX control typically Internet Explorer...

HP Virtual Rooms ActiveX code execution

No description provided...

HP Virtual Rooms ActiveX control fails to restrict access to dangerous methods

Overview The HP Virtual Rooms ActiveX control contains methods that can be used to download and execute arbitrary code from an arbitrary server. Description HP Virtual Rooms is software for online collaboration. HP Virtual Rooms requires Internet Explorer, as one of the components is an ActiveX...

JVN#16767117 Buffer overflow vulnerability in ActiveX Control for Sony SNC series network cameras

The ActiveX Control for Sony SNC series network cameras is a software to monitor images over the network using a web browser. This ActiveX Control contains a heap-based buffer overflow vulnerability triggered by the improper processing of some configuration variables. Impact A remote attacker cou...

GeoVision LiveX ActiveX控件SnapShotToFile()方式任意文件覆盖漏洞

BUGTRAQ ID: 33782 GeoVision LiveX是用于管理GeoVision视频监控系统的软件。 GeoVision的LiveXv7000（clsid DA8484DE-52DB-4860-A986-61A8682E298A）和LiveXv8120（clsid F4421170-DB22-4551-BBFB-FFCFFB419F6F）ActiveX控件没有正确地验证对SnapShotToFile和SnapShotX方式输入的参数，如果用户受骗访问了恶意网页并向上述方式传送了恶意参数的话，就会导致向用户系统写入任意文件。 GeoVision LiveX ActiveX...

GeoVision LiveX_v8200 ActiveX (LIVEX_~1.OCX) File Corruption PoC

No description provided by source. !-- GeoVision LiveXv8200 ActiveX Control LIVEX1.OCX remote file corruption poc by Nine:Situations:Group::SnoopyAssault site: http://retrogod.altervista.org/ working against IE8b/xpsp3, safe for scripting and for initialize. LiveXv7000 with clsid...

GeoVision LiveX_v8200 ActiveX (LIVEX_~1.OCX) File Corruption PoC

Exploit for unknown platform in category remote exploits ================================================================ GeoVision LiveXv8200 ActiveX LIVEX1.OCX File Corruption PoC ================================================================ function sleepn var now = new Date; var exitTime =...

GeoVision LiveX 8200 - ActiveX 'LIVEX_~1.OCX' File Corruption

function sleepn var now = new Date; var exitTime = now.getTime + n1000; while true now = new Date; if now.getTime exitTime return; param name="SvrType" va...

GeoVision ActiveX File Corruption

function sleepn var now = new Date; var exitTime = now.getTime + n1000; while true now = new Date; if now.getTime exitTime return; param name="AutoLogin" v...

GeoVision LiveX 8200 - ActiveX LIVEX_~1.OCX File Corruption

GeoVision LiveX 8200 - ActiveX LIVEX1.OCX File Corruption function sleepn var now = new Date; var exitTime = now.getTime + n1000; while true now = new Date; if now.getTime exitTime return; par...

Update Protection against Akamai Download Manager Arbitrary Program Execution

In its Update Rollup for ActiveX Kill Bits from February 2009 960715, Microsoft has released a security update to set a kill bit for an ActiveX control developed by Akamai Technologies. Akamai Technologies has released a security update that addresses a vulnerability in the affected...