Microsoft XML Core Services DTD跨域信息泄露漏洞（MS08-069）

BUGTRAQ ID: 32155 CVECAN ID: CVE-2008-4029 Microsoft XML Core Services（MSXML）允许使用JScript、VBScript和Visual Studio 6.0的用户开发基于XML的应用，以与其他遵循XML 1.0标准的应用程序交互操作。 Microsoft XML Core Services处理外部文档类型定义（DTD）的错误检查的方式中存在一个信息泄露漏洞。如果用户浏览包含特制内容的网站或打开特制HTML电子邮件，此漏洞可能允许用户读取另一个Internet Explorer域中的网页的数据。 Microsoft...

SAP GUI 6.4 Buffer Overflow Vulnerability

Application: EnjoySAP, SAP GUI for Windows Versions Affected: Version 6.4 Vendor URL: Bugs: Buffer Overflow Exploits: YES Reported: 13.11.2008 Vendor response: 17.11.2008 Date of Public Advisory: 08.06.2009 Author: Alexandr Polyakov Description SAP GUI for Windows version 6.4 contains ActiveX...

Autodesk LiveUpdate ActiveX Control Code Execution (CVE-2008-4471; CVE-2008-4472)

Autodesk provides several software products for professional designing of buildings and other infrastructure. A code execution vulnerability has been reported in Autodesk LiveUpdate ActiveX control within multiple products. The vulnerability is due to an error in the Autodesk LiveUpdate ActiveX...

Flash Player APSB08-18 / APSB08-20 Multiple Vulnerabilities

Binary data 4746.prm...

Chilkat Crypt ActiveX Control 'ChilkatCrypt2.dll' File Overwrite Vulnerability

Chilkat Crypt is prone to an ActiveX Control based arbitrary file overwrite vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Visual Basic ActiveX Controls Remote Code Execution (MS08-070; CVE-2008-3704; CVE-2008-4252; CVE-2008-4253; CVE-2008-4254; CVE-2008-4255; CVE-2008-4256)

Visual Basic is an event-driven programming language that was created by Microsoft for building stand alone Windows-based programs. Developers can use it for quickly building GUI applications. Several remote code execution vulnerabilities have been reported in Microsoft Visual Basic: CVE-2008-425...

SAP AG SAPgui mdrmsap.dll ActiveX控件远程代码执行漏洞

BUGTRAQ ID: 32186 CVECAN ID: CVE-2008-4387 SAPgui是SAP软件的图形用户界面客户端。 SAPgui的一个组件提供名为MDrmSap的ActiveX控件（mdrmsap.dll）。该控件没有正确地验证某些用户输入参数，如果用户使用IE打开了恶意HTML文档并试图实例化该控件，就会导致浏览器崩溃或执行任意代码。 SAP Sapgui 临时解决方法： 在IE中禁用MDrmSap ActiveX控件，为以下CLSID设置kill bit： B01952B0-AF66-11D1-B10D-0060086F6D97 或将以下文本保存为.REG文件并导入...

DSquare Exploit Pack: D2SEC_SAPGUI

Name| d2secsapgui ---|--- CVE| CVE-2008-4387 Exploit Pack| D2ExploitPack Description| SAP AG SAPgui mdrmsap.dll ActiveX Stack Overflow Notes|...

Code injection

Unspecified vulnerability in the Simba MDrmSap ActiveX control in mdrmsap.dll in SAP SAPgui allows remote attackers to execute arbitrary code via unknown vectors involving instantiation by Internet Explorer...

CVE-2008-5002

Insecure method vulnerability in the ChilkatCrypt2.ChilkatCrypt2.1 ActiveX control ChilkatCrypt2.dll 4.3.2.1 in Chilkat Crypt ActiveX Component allows remote attackers to create and overwrite arbitrary files via the WriteFile method. NOTE: this could be leveraged for code execution by creating...

CVE-2008-4820

Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player 9.0.124.0 and earlier on Windows allows attackers to obtain sensitive information via unknown vectors...

Security feature bypass

Insecure method vulnerability in the ChilkatCrypt2.ChilkatCrypt2.1 ActiveX control ChilkatCrypt2.dll 4.3.2.1 in Chilkat Crypt ActiveX Component allows remote attackers to create and overwrite arbitrary files via the WriteFile method. NOTE: this could be leveraged for code execution by creating...

Security feature bypass

Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player 9.0.124.0 and earlier on Windows allows attackers to obtain sensitive information via unknown vectors...

CVE-2008-5002

Insecure method vulnerability in the ChilkatCrypt2.ChilkatCrypt2.1 ActiveX control ChilkatCrypt2.dll 4.3.2.1 in Chilkat Crypt ActiveX Component allows remote attackers to create and overwrite arbitrary files via the WriteFile method. NOTE: this could be leveraged for code execution by creating...

CVE-2008-4820

CVE-2008-4820 affects the Flash Player ActiveX control in Adobe Flash Player 9.0.124.0 and earlier on Windows, enabling information disclosure via unknown vectors. Connected sources indicate this issue was not fully resolved by a prior fix and that CVE-2009-3951 notes the vulnerability exists bec...

CVE-2008-4820

Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player 9.0.124.0 and earlier on Windows allows attackers to obtain sensitive information via unknown vectors...

CVE-2008-5002

CVE-2008-5002 affects Chilkat Crypt ActiveX Control (ChilkatCrypt2.dll 4.3.2.1). The Insecure method vulnerability allows remote creation/overwrite of arbitrary files via the WriteFile method, with potential code execution through startup-folder DLLs or hcp:// URLs. Public PoCs/exploits exist (e....

NOS GetPlus download manager ActiveX buffer overflow / Acrobat Reader

No description provided...

iDefense Security Advisory 11.04.08: Multiple Vendor NOS Microsystems getPlus Downloader Stack Buffer Overflow Vulnerability

iDefense Security Advisory 11.04.08 http://labs.idefense.com/intelligence/vulnerabilities/ Nov 04, 2008 I. BACKGROUND The getPlus Download Manager is a software management tool. It is used to download, install, and update other software through the browser. The getPlus Download Manager consists o...

SAP AG SAPgui MDrmSap ActiveX control code execution vulnerability

Overview The MDrmSap ActiveX control, which is provide with the SAP AG SAPgui software, contains a vulnerability that can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description SAPgui is a graphical user interface client for SAP software. One of the...