WoW ActiveX 2.x Multiple RCE Vulnerabilities

WoW ActiveX is prone to multiple remote code execution RCE vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Detection of Dangerous ActiveX Control

This script will list all the vulnerable ActiveX controls installed on the remote windows machine with references and cause. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Synactis ALL In-The-Box ActiveX控件SaveDoc()方法覆盖任意文件漏洞

Synactis ALL In-The-Box ActiveX控件是一种PDF及图像文件自动化生成及输出工具。 ALL In-The-Box ActiveX控件AllInTheBox.ocx的SaveDoc方法实现上存在漏洞，远程攻击者可能利用此漏洞通过指定以NULL结尾的文件名覆盖系统上的任意文件，导致拒绝服务或任意命令执行。 Synactis ALL In-The-Box ActiveX 3.x 厂商补丁： Synactis -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.synactis.com...

Design/Logic Flaw

Multiple insecure method vulnerabilities in the Web On Windows WOW ActiveX control in WOW ActiveX 2 allow remote attackers to 1 create and overwrite arbitrary files via the WriteIniFileString method, 2 execute arbitrary programs via the ShellExecute method, 3 read from the registry via unspecifie...

CVE-2009-0389

Multiple insecure method vulnerabilities in the Web On Windows WOW ActiveX control in WOW ActiveX 2 allow remote attackers to 1 create and overwrite arbitrary files via the WriteIniFileString method, 2 execute arbitrary programs via the ShellExecute method, 3 read from the registry via unspecifie...

CVE-2009-0389

WoW ActiveX 2.x is vulnerable to multiple remote code execution (RCE) vulnerabilities in the Web On Windows WOW ActiveX control. The CVE-2009-0389 description cites insecure methods (WriteIniFileString, ShellExecute) that can lead to arbitrary file writes or execution, and possible registry acces...

CVE-2009-0389

Multiple insecure method vulnerabilities in the Web On Windows WOW ActiveX control in WOW ActiveX 2 allow remote attackers to 1 create and overwrite arbitrary files via the WriteIniFileString method, 2 execute arbitrary programs via the ShellExecute method, 3 read from the registry via unspecifie...

MW6 Barcode ActiveX控件远程缓冲区溢出漏洞

MW6 Barcode ActiveX是用于创建一维条码的工具。 MW6 Barcode ActiveX的实现上存在缓冲溢出漏洞，远程攻击者可能利用此漏洞控制用户客户端系统。 Barcode.MW6Barcode.1 ActiveX控件Barcode.dll在处理超长的Supplement参数数据时存在堆溢出问题，远程恶意网站可以通过包含超长参数的网页ActiveX调用在用户客户端系统上执行任意指令。 MW6 Technologies Barcode ActiveX 3.x 厂商补丁： MW6 Technologies ----------------...

FlexCell Grid ActiveX控件SaveFile()和ExportToXML()方法任意文件覆盖漏洞

FlexCell Grid ActiveX控件是一款表格控制工具，提供拷贝、拷贝预览、图表、合并单元格等全面功能。 FlexCell Grid ActiveX控件没有正确地验证对SaveFile和ExportToXML方法的输入参数，如果远程攻击者受骗访问了恶意网站并向该方式传送了特制参数的话，就可能导致以当前登录用户的权限覆盖任意系统文件。 FlexCell Technologies FlexCell Grid ActiveX 5.x 厂商补丁： FlexCell Technologies ---------------------...

Synactis All_IN_THE_BOX ActiveX v3 Null byte File Overwrite Vuln

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-09-006 http://www.dsecrg.com/pages/vul/show.php?id=62 Application: Synactis AllINTHEBOX ActiveX Versions Affected: 3 Vendor URL: http://synactis.com Bugs: Null byte File overwriting Exploits: YES Reported:...

NCTVideoStudio ActiveX DLLs Version 1.6 Remote Heap Overflow PoC

No description provided by source. html ----------------------------------------------------------- br/ Author : Mountassif Mouad Stack br/ ----------------------------------------------------------- br/ NCTVideoStudio ActiveX DLLs Version 1.6 Reamote Heap Overflow Poc br/...

MW6 Technologies Barcode ActiveX Buffer Overflow Vulnerability

MW6 Technologies Barcode ActiveX is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MetaProducts MetaTreeX ActiveX控件SaveToBMP()方式任意文件覆盖漏洞

BUGTRAQ ID: 33318 MetaTreeX是用于在Visual Basic、C++、VBA和Delphi应用程序中显示多级树状信息的ActiveX控件。 SaveToBMP.MetaTreeX ActiveX控件（MTXControl.OCX）没有正确地验证SaveToBMP方式的输入参数，如果远程攻击者受骗访问了恶意网页并向该方式传送了特制参数的话，就可能导致以当前登录用户权限覆盖任意系统文件。 MetaProducts MetaTreeX 1.5.100 临时解决方法： 为Clsid：67E66985-F81A-11D6-BC0F-F7B40157DC26设置kill...

MW6 Technologies Barcode ActiveX Buffer Overflow Vulnerability

This host is installed with MW6 Technologies Barcode ActiveX and is prone to Buffer Overflow Vulnerability. OpenVAS Vulnerability Test $Id: secpodmw6barcodebofvuln.nasl 5369 2017-02-20 14:48:07Z cfi $ MW6 Technologies Barcode ActiveX Buffer Overflow Vulnerability Authors: Sujit Ghosal Copyright:...

SmartVmd ActiveX v 1.1 Remote File Deletion Exploit

No description provided by source. HTML BODY b Author : Houssamix br/ br/ br/ SmartVmd ActiveX V 1.1 remote file deletion exploit br/ download : http://www.smartvmd.com/setup/SetupActiveXVmd.msi br/ Note : StartVideoSaving insecure method allowed us to delete files in pc vitime br/ b/ object...

SmartVmd ActiveX v 1.1 Remote File Overwrite Exploit

No description provided by source. HTML BODY b Author : Houssamix br/ br/ br/ SmartVmd ActiveX v 1.1 remote File Overwrite Exploit br/ download : http://www.smartvmd.com/setup/SetupActiveXVmd.msi br/ b/ object id=hsmx classid="clsid:E3462D53-47A6-11D8-8EF6-DAE89272743C"/object SCRIPT / Report for...

NCTVideoStudio ActiveX DLLs 1.6 Insecure Method File Creation Exploit

No description provided by source. HTML b NCTVideoStudio ActiveX DLLs Version 1.6 Insecure Method File Creation /b b br/br/ Author : Mountassif Moad a.k.a Stack br/ br/ br/ b/ RegKey Safe for Script: Falsebr/ RegKey Safe for Init: Falsebr/ Implements IObjectSafety: Truebr/ IDisp Safe: Safe for...

WOW - Web On Windows ActiveX Control 2 Remote Code Execution

No description provided by source. Written By Michael Brooks Special thanks to str0ke! software:WOW - Web On Windows ActiveX Control 2 - Remote Code Execution exploit type: Remote File Upload and Remote Code Execution Download:...

MW6 Barcode ActiveX (Barcode.dll) Reamote Heap Overflow PoC

No description provided by source. html ----------------------------------------------------------- br/ Author : Houssamix br/ ----------------------------------------------------------- br/ MW6 Barcode ActiveX Barcode.dll Reamote Heap Overflow Poc br/...

Synactis All_IN_THE_BOX ActiveX 3.0 - Null Byte File Overwrite

Synactis AllINTHEBOX ActiveX 3.0 - Null Byte File Overwrite Digital Security Research Group DSecRG Advisory DSECRG-09-006 http://www.dsecrg.com/pages/vul/show.php?id=62 Application: Synactis AllINTHEBOX ActiveX Versions Affected: 3 Vendor URL: http://synactis.com Bugs: Null byte File overwriting...