CVE-2008-4388

The LaunchObj ActiveX control before 5.2.2.865 in launcher.dll in Symantec AppStream Client 5.2.x before 5.2.2 SP3 MP1 does not properly validate downloaded files, which allows remote attackers to execute arbitrary code via the installAppMgr method and unspecified other methods...

Code injection

The LaunchObj ActiveX control before 5.2.2.865 in launcher.dll in Symantec AppStream Client 5.2.x before 5.2.2 SP3 MP1 does not properly validate downloaded files, which allows remote attackers to execute arbitrary code via the installAppMgr method and unspecified other methods...

CVE-2008-4388

CVE-2008-4388 affects Symantec AppStream Client 5.x with the LaunchObj ActiveX control (launcher.dll) prior to 5.2.2 SP3 MP1. The issue arises in the installAppMgr() method (and unspecified other methods), where downloaded files are not properly validated, enabling remote code execution via a cra...

CVE-2008-4388

The LaunchObj ActiveX control before 5.2.2.865 in launcher.dll in Symantec AppStream Client 5.2.x before 5.2.2 SP3 MP1 does not properly validate downloaded files, which allows remote attackers to execute arbitrary code via the installAppMgr method and unspecified other methods...

SmartVmd ActiveX 1.1 - Remote File Overwrite

SmartVmd ActiveX 1.1 - Remote File Overwrite Author : Houssamix SmartVmd ActiveX v 1.1 remote File Overwrite Exploit download : http://www.smartvmd.com/setup/SetupActiveXVmd.msi / Report for Clsid: E3462D53-47A6-11D8-8EF6-DAE89272743C RegKey Safe for Script: Faux RegKey Safe for Init: Faux...

SmartVmd ActiveX 1.1 - Remote File Deletion

Author : Houssamix SmartVmd ActiveX V 1.1 remote file deletion exploit download : http://www.smartvmd.com/setup/SetupActiveXVmd.msi Note : StartVideoSaving insecure method allowed us to delete files in pc vitime / Report for Clsid: E3462D53-47A6-11D8-8EF6-DAE89272743C RegKey Safe for Script: Faux...

SmartVmd ActiveX 1.1 - Remote File Overwrite

Author : Houssamix SmartVmd ActiveX v 1.1 remote File Overwrite Exploit download : http://www.smartvmd.com/setup/SetupActiveXVmd.msi / Report for Clsid: E3462D53-47A6-11D8-8EF6-DAE89272743C RegKey Safe for Script: Faux RegKey Safe for Init: Faux Implements IObjectSafety: Vrai IDisp Safe: Safe for...

SmartVmd ActiveX v 1.1 Remote File Deletion Exploit

Exploit for unknown platform in category remote exploits =================================================== SmartVmd ActiveX v 1.1 Remote File Deletion Exploit =================================================== Author : Houssamix SmartVmd ActiveX V 1.1 remote file deletion exploit download :...

SmartVmd ActiveX 1.1 - Remote File Deletion

SmartVmd ActiveX 1.1 - Remote File Deletion Author : Houssamix SmartVmd ActiveX V 1.1 remote file deletion exploit download : http://www.smartvmd.com/setup/SetupActiveXVmd.msi Note : StartVideoSaving insecure method allowed us to delete files in pc vitime / Report for Clsid:...

Symantec AppStream LaunchObj ActiveX Control Arbitrary File Download and Execute

This module exploits a vulnerability in Symantec AppStream Client 5.x. The vulnerability is in the LaunchObj ActiveX control launcher.dll 5.1.0.82 containing the "installAppMgr" method. The insecure method can be exploited to download and execute arbitrary files in the context of the currently...

Excel Viewer ActiveX buffer overflow

Buffer overflow in Open method...

Symantec AppStream Client LaunchObj ActiveX Control Multiple Unsafe Methods (SYM09-001)

The version of the LaunchObj ActiveX control, a component included with Symantec AppStream Client / Altiris Streaming Agent and installed on the remote Windows host, reportedly contains a number of unsafe methods, such as 'installAppMgr', that can be used to download and execute arbitrary code. I...

CVE-2009-0134

Insecure method vulnerability in the EasyGrid.SGCtrl.32 ActiveX control in EasyGrid.ocx 1.0.0.1 in AAA EasyGrid ActiveX 3.51 allows remote attackers to create and overwrite arbitrary files via the 1 DoSaveFile or 2 DoSaveHtmlFile method. NOTE: vector 1 could be leveraged for code execution by...

Design/Logic Flaw

Insecure method vulnerability in the EasyGrid.SGCtrl.32 ActiveX control in EasyGrid.ocx 1.0.0.1 in AAA EasyGrid ActiveX 3.51 allows remote attackers to create and overwrite arbitrary files via the 1 DoSaveFile or 2 DoSaveHtmlFile method. NOTE: vector 1 could be leveraged for code execution by...

CVE-2009-0134

The CVE-2009-0134 entry concerns the EasyGrid.ocx 1.0.0.1 EasyGrid ActiveX control (AAA EasyGrid ActiveX 3.51). The vulnerability is an insecure method vulnerability in the SGCtrl.32 control that allows remote attackers to create and overwrite arbitrary files via DoSaveFile or DoSaveHtmlFile. Not...

CVE-2009-0134

Insecure method vulnerability in the EasyGrid.SGCtrl.32 ActiveX control in EasyGrid.ocx 1.0.0.1 in AAA EasyGrid ActiveX 3.51 allows remote attackers to create and overwrite arbitrary files via the 1 DoSaveFile or 2 DoSaveHtmlFile method. NOTE: vector 1 could be leveraged for code execution by...

MetaProducts MetaTreeX 1.5.100 - ActiveX File Overwrite

MetaProducts MetaTreeX 1.5.100 - ActiveX File Overwrite Author : Houssamix MetaProducts MetaTreeX V 1.5.100 Remote File Overwrite Exploit Note : SaveToFile is vuln to / Report for Clsid: 67E66985-F81A-11D6-BC0F-F7B40157DC26 RegKey Safe for Script: Faux RegKey Safe for Init: Faux Implements...

Symantec AppStream客户端LaunchObj ActiveX控件任意文件下载漏洞

BUGTRAQ ID: 33247 CVECAN ID: CVE-2008-4388 Symantec AppStream是Windows的应用程序部署框架。 AppStream Windows客户端所提供的LaunchObj ActiveX控件没有安全地调用installAppMgr方式，如果用户受骗访问了恶意网页并对该方式传送了特制参数的话，就会导致向用户系统下载并执行任意代码。 Symantec AppStream Client 5.2 临时解决方法： 在IE中禁用LaunchObj ActiveX控件，为以下CLSID设置kill bit：...

Easy Grid ActiveX控件任意文件覆盖漏洞

BUGTRAQ ID: 33272 Easy Grid ActiveX控件是用于打印、预览表格、图标、公式、表达式的工具。 EasyGrid.SGCtrl.32 ActiveX控件（EasyGrid.ocx）没有安全地调用DoSaveFile方式，如果用户受骗访问了恶意网页并向该方式传送了特制参数的话，就会导致向用户系统写入任意文件。 Easy Grid Control Team Easy Grid ActiveX 3.51 厂商补丁： Easy Grid Control Team ----------------------...

MetaProducts MetaTreeX V 1.5.100 ActiveX File Overwrite Exploit

Exploit for unknown platform in category remote exploits =============================================================== MetaProducts MetaTreeX V 1.5.100 ActiveX File Overwrite Exploit =============================================================== Author : Houssamix MetaProducts MetaTreeX V...