CVE-2008-2432

Insecure method vulnerability in the GetFileList method in an unspecified ActiveX control in Novell iPrint Client before 5.06 allows remote attackers to list the image files in an arbitrary directory via a directory name in the argument...

CVE-2008-2432

CVE-2008-2432 affects Novell iPrint Client before 5.06 through an insecure GetFileList method in an unspecified ActiveX control, allowing remote attackers to enumerate image files in arbitrary directories. Remediation: update to version 5.06 (per Secunia Secura advisory). Other sources corroborat...

CVE-2008-5231

CVE-2008-5231 describes a stack-based buffer overflow in the ExecuteRequest method of the Novell iPrint ActiveX control (ienipp.ocx) in Novell iPrint Client 5.06 and earlier. The vulnerability allows remote attackers to execute arbitrary code by supplying a long target-frame option value. Red Hat...

CVE-2008-2431

The CVE-2008-2431 entry concerns Novell iPrint Client before 5.06, where the ienipp.ocx ActiveX control contains multiple buffer overflow vulnerabilities due to insufficient boundary checking. The issues affect various methods (e.g., GetDriverFile, GetPrinterURLList, GetFileList, GetServerVersion...

CVE-2008-5232

CVE-2008-5232 : Buffer overflow in the CallHTMLHelp method of the Windows Media Services nskey.dll ActiveX control (version 4.1.00.3917) on Windows NT/2000 and Avaya Media/Message Application servers. Remote attackers can execute arbitrary code via a long argument. Affected component: ActiveX con...

FlexCell Grid ActiveX控件任意文件覆盖漏洞

BUGTRAQ ID: 32443 FlexCell Grid ActiveX控件是一款表格控制工具，提供拷贝、拷贝预览、图表、合并单元格等全面功能。 FlexCell Grid ActiveX控件（FlexCell.ocx）没有正确地验证对HttpDownloadFile方式的输入参数，如果远程攻击者受骗访问了恶意网站并向该方式传送了特制参数的话，就可能导致以当前登录用户的权限覆盖任意系统文件。 FlexCell Technologies FlexCell Grid ActiveX 5.7.0.1 FlexCell Technologies ---------------------...

SAP GUI VSFlexGrid.VSFlexGridL sp 14 - Remote Buffer Overflow

SAP GUI VSFlexGrid.VSFlexGridL sp 14 - Remote Buffer Overflow Application: SAP GUI VSFlexGrid.VSFlexGridL Part of SAP GUI, SAP BO 2005, SAP BO 2007 Versions Affected: SAP GUI VSFlexGrid Activex Control sp=14 Vendor URL: http://SAP.com Bugs: Buffer Overflovw Exploits: YES Reported: 26.11.2008 Vend...

SAP GUI VSFlexGrid.VSFlexGridL sp<=14 Buffer Overflow

No description provided by source. Application: SAP GUI VSFlexGrid.VSFlexGridL Part of SAP GUI, SAP BO 2005, SAP BO 2007 Versions Affected: SAP GUI VSFlexGrid Activex Control sp=14 Vendor URL: http://SAP.com Bugs: Buffer Overflovw Exploits: YES Reported: 26.11.2008 Vendor response: 27.11.208 Publ...

SAP GUI VSFlexGrid.VSFlexGridL sp 14 - Remote Buffer Overflow

Application: SAP GUI VSFlexGrid.VSFlexGridL Part of SAP GUI, SAP BO 2005, SAP BO 2007 Versions Affected: SAP GUI VSFlexGrid Activex Control sp=14 Vendor URL: http://SAP.com Bugs: Buffer Overflovw Exploits: YES Reported: 26.11.2008 Vendor response: 27.11.208 Public Advisory: 06.10.2009 Originaly...

Code Execution via XSS in Internet Explorer

Hello 3APA3A! Recently I wrote about Code Execution via XSS attack http://websecurity.com.ua/2635/. In this article I told about Code Execution attack via Cross-Site Scripting vulnerability in Internet Explorer http://websecurity.com.ua/1241/, which I disclosed in August 2007. Last year and this...

LPViewer ActiveX Control url property buffer overflow

Added: 11/21/2008 CVE: CVE-2008-4384 BID: 31604 OSVDB: 48946 Background The LPViewer ActiveX Control installs with the iseemedia ZOOM control viewer and allows viewing of images created with iseemedia software. Problem A buffer overflow vulnerability allows command execution when a user opens a w...

LPViewer ActiveX Control url property buffer overflow

Added: 11/21/2008 CVE: CVE-2008-4384 BID: 31604 OSVDB: 48946 Background The LPViewer ActiveX Control installs with the iseemedia ZOOM control viewer and allows viewing of images created with iseemedia software. Problem A buffer overflow vulnerability allows command execution when a user opens a w...

LPViewer ActiveX Control url property buffer overflow

Added: 11/21/2008 CVE: CVE-2008-4384 BID: 31604 OSVDB: 48946 Background The LPViewer ActiveX Control installs with the iseemedia ZOOM control viewer and allows viewing of images created with iseemedia software. Problem A buffer overflow vulnerability allows command execution when a user opens a w...

LPViewer ActiveX Control url property buffer overflow

Added: 11/21/2008 CVE: CVE-2008-4384 BID: 31604 OSVDB: 48946 Background The LPViewer ActiveX Control installs with the iseemedia ZOOM control viewer and allows viewing of images created with iseemedia software. Problem A buffer overflow vulnerability allows command execution when a user opens a w...

vBulletin 3.7.3 Visitor Message XSS/XSRF + worm Exploit

Exploit for unknown platform in category web applications ======================================================= vBulletin 3.7.3 Visitor Message XSS/XSRF + worm Exploit ======================================================= / ----------------------------- Author = Mx Title = vBulletin 3.7.3...

Chilkat Socket ActiveX SaveLastError()任意文件覆盖漏洞

BUGTRAQ ID: 32333 Chilkat socket组件为TCP/IP套接字编程提供简单易用的API。 ChilkatSocket.ChilkatSocket.1 ActiveX控件（ChilkatSocket.dll）没有正确地验证对SaveLastError方式所提供的输入参数，如果远程攻击者受骗访问了恶意网页并向该方式传送了恶意输入的话，就可能导致以当前登录用户的权限覆盖和破坏系统上的任意文件。 Chilkat Software ChilkatSocket.DLL 2.3.1.1 临时解决方法： 为clsid...

VeryDOC PDFView ActiveX组件堆溢出漏洞

BUGTRAQ ID: 32313 VeryDOC的PDF Viewer ActiveX是一个PDF文件查看器组件。 PDFVIEW.PdfviewCtrl.1 ActiveX控件（pdfview.ocx）的OpenPDF方式没有正确地验证用户输入参数，如果用户受骗访问了恶意网页并向该方式传送了超长字符串参数的话，就可以触发堆溢出，导致执行任意指令。 VeryDOC PDF Viewer ActiveX 2.0.0.1 临时解决方法： 为CLSID 433268D7-2CD4-43E6-AA24-2188672E7252设置kill-bit。 厂商补丁： VeryDOC -------...

GungHo LoadPrgAx vulnerable to arbitrary Java program execution

Overview LoadPrgAx ActiveX control from GungHo Online Entertainment, Inc. contains a vulnerability that allows an attacker to execute an arbitrary Java program. LoadPrgAx from GungHo Online Entertainment, Inc. is an ActiveX control that runs games provided by the company. LoadPrgAx contains a...

Novell iPrint Client nipplib.dll ActiveX Control Buffer Overflow (CVE-2008-2436)

Novell iPrint is an application that enables users to install and manage printers, or submit print job from a web browser. A buffer overflow vulnerability has been reported in Novell iPrint Client. The vulnerability is due to a boundary error in the Novell iPrint Client nipplib.dll ActiveX contro...

Microsoft Visual Studio MaskedEdit ActiveX Control Buffer Overflow (MS08-070; CVE-2008-3704)

Microsoft Visual Studio is designed for building Windows based applications and Web solutions. A buffer overflow vulnerability has been reported in Microsoft Visual Studio. The vulnerability is due to a memory corruption error in the Visual Basic MaskedEdit ActiveX control when it fails to proper...