BlackBerry Application Web Loader ActiveX控件栈溢出漏洞

BUGTRAQ ID: 33663 CVECAN ID: CVE-2009-0305 BlackBerry Application Web Loader是用于通过PC和Internet Explorer向BlackBerry设备加载应用程序的ActiveX控件。 BlackBerry Application Web Loader ActiveX控件（AxLoader.ocx或AxLoader.dll）的load和loadJad方式存在栈溢出漏洞。如果用户受骗访问了恶意网页并向上述方式传送了超长输入的话，就可以触发这个溢出，导致在用户浏览器会话中执行任意代码。 Research In...

Nokia Phoenix Service Software ActiveX控件多个缓冲区溢出漏洞

BUGTRAQ ID: 33726 Nokia Phoenix Service Software是用于刷机诺基亚手机的软件。 Nokia Phoenix Service...

Synactis All-In-The-Box ActiveX Remote Code Execution Vulnerability

This host is installed with All-In-The-Box ActiveX and is prone to Remote Code Execution Vulnerability. OpenVAS Vulnerability Test $Id: gbsynactisallintheboxactivexcodeexecvuln.nasl 5369 2017-02-20 14:48:07Z cfi $ Synactis All-In-The-Box ActiveX Remote Code Execution Vulnerability Authors: Sujit...

Synactis All-In-The-Box ActiveX RCE Vulnerability

All-In-The-Box ActiveX is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nokia Phoenix Service Software ActiveX buffer overflow

SelectDevice method buffer overflow...

MS KB960715: Cumulative Security Update of ActiveX Kill Bits

The remote host is missing a list of kill bits for ActiveX controls that are known to contain vulnerabilities. If these ActiveX controls are ever installed on the remote host, either now or in the future, they would expose it to various security issues. %NASLMINLEVEL 70300 C Tenable Network...

CVE-2009-0305

Multiple stack-based buffer overflows in the Research in Motion RIM AxLoader ActiveX control in AxLoader.ocx and AxLoader.dll in BlackBerry Application Web Loader 1.0 allow remote attackers to execute arbitrary code via unspecified use of the 1 load or 2 loadJad method...

DSquare Exploit Pack: D2SEC_AXLOADER

Name| d2secaxloader ---|--- CVE| CVE-2009-0305 Exploit Pack| D2ExploitPack Description| BlackBerry Application Web Loader ActiveX Buffer Overflow Notes|...

CVE-2009-0305

CVE-2009-0305 involves stack-based buffer overflows in the BlackBerry Application Web Loader ActiveX control (AxLoader.ocx/AxLoader.dll) used by the RIM BlackBerry Application Web Loader 1.0. The vulnerability affects the load() and loadJad() entry points, triggered by processing overly long inpu...

CVE-2009-0465

The SaveDoc method in the AllInTheBox.AllBox ActiveX control in ALLINTHEBOX.OCX in Synactis ALL In-The-Box ActiveX 3 allows remote attackers to create and overwrite arbitrary files via an argument ending in a '\0' character, which bypasses the intended .box filename extension, as demonstrated by ...

Code injection

The SaveDoc method in the AllInTheBox.AllBox ActiveX control in ALLINTHEBOX.OCX in Synactis ALL In-The-Box ActiveX 3 allows remote attackers to create and overwrite arbitrary files via an argument ending in a '\0' character, which bypasses the intended .box filename extension, as demonstrated by ...

Nokia Phoenix 2008.4.7 Service Software - ActiveX Controls Multiple Buffer Overflow Vulnerabilities

source: https://www.securityfocus.com/bid/33726/info Nokia Phoenix Service Software ActiveX controls are prone to multiple buffer-overflow vulnerabilities because they fail to properly bounds-check user-supplied data before copying it into insufficiently sized memory buffers. An attacker can...

Nokia Phoenix 2008.4.7 Service Software - ActiveX Controls Multiple Buffer Overflow Vulnerabilities

Nokia Phoenix 2008.4.7 Service Software - ActiveX Controls Multiple Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/33726/info Nokia Phoenix Service Software ActiveX controls are prone to multiple buffer-overflow vulnerabilities because they fail to properly bounds-check...

RIM BlackBerry Application Web Loader ActiveX stack buffer overflow

Overview The RIM BlackBerry Application Web Loader ActiveX control contains a stack buffer overflow, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The RIM BlackBerry Application Web Loader is an ActiveX control that is used to loa...

AutoDesk LiveUpdate ActiveX Control ApplyPatch Method Execution

The version of the LiveUpdate ActiveX control, a component included with AutoCAD-based products and installed on the remote Windows host, reportedly allows execution of arbitrary programs via the second argument to the control's 'ApplyPatch' method. If an attacker can trick a user on the affected...

SAP GUI 7.1 WebViewer2D ActiveX — Insecure Methods

Application: EAI WebViewer2D EnjoySAP, SAP GUI for Windows 6.4 and 7.1 Versions Affected:Tested on 7100.2.7.1038 PL 7 Vendor URL: Bugs: Insecure method, File owervriting Exploits: YES Reported: 02.07.2009 Vendor response: 02.07.2009 Date of Public Advisory: 28.09.2009 Author: Alexandr Polyakov...

SAP GUI 7.1 WebViewer3D ActiveX — Insecure Methods

Application: EnjoySAP, SAP GUI for Windows 6.4 and 7.1 Versions Affected: Tested on 7100.2.7.1038 PL 7 Vendor URL: Bugs: Insecure method, File owervriting Exploits: YES Reported: 02.07.2009 Vendor response: 02.07.2009 Date of Public Advisory: 28.09.2009 Author: Alexandr Polyakov Description SAP G...

CVE-2009-0465

The CVE-2009-0465 entry describes a vulnerability in Synactis ALL In-The-Box ActiveX 3, specifically the All_In_The_Box.AllBox ActiveX control (ALL_IN_THE_BOX.OCX). The SaveDoc method is exploitable to remotely create and overwrite arbitrary files by passing an argument that ends with a null char...

Update Protection against AXIS Communications Camera Control image_pan_tilt Buffer Overflow

A buffer overflow vulnerability was reported in the ActiveX Camera Control by AXIS Communications. A remote image/video monitoring solution, AXIS Camera Control is an ActiveX control with multiple functions that can be used over HTTP. The vulnerability is due to a boundary error that can be...

WoW ActiveX Multiple Remote Code Execution Vulnerabilities

This host is installed with WoW ActiveX and is prone to Multiple Remote Code Execution Vulnerabilities. OpenVAS Vulnerability Test $Id: gbwowactivexmultremotecodeexecvuln.nasl 5369 2017-02-20 14:48:07Z cfi $ WoW ActiveX Multiple Remote Code Execution Vulnerabilities Authors: Sujit Ghosal Copyrigh...