windows-ms08053.txt

============================================================================= MS08-053 Windows Media Encoder wmex.dll ActiveX Control Buffer Overflow ============================================================================= Calc execution POC Exploit for WinXP SP2 PRO English / IE6.0 SP2 Foun...

Peachtree Accounting 'PAWWeb11.ocx' ActiveX控件不安全方法漏洞

BUGTRAQ ID: 31096 CNCAN ID：CNCAN-2008091105 Peachtree Accounting是一款商务会计软件。 Peachtree Accounting包含的'PAWWeb11.ocx' ActiveX控件存在不安全方法调用问题，远程攻击者可以利用漏洞以应用程序权限执行任意应用程序。 "ExecutePreferredApplication"方法对用户提交的参数缺少正确检查，直接提交系统应用程序可导致以控件权限执行。 Sage Peachtree Accounting 2004...

Windows Media Encoder wmex.dll ActiveX Control BOF Exploit (MS08-053)

No description provided by source. html pre ============================================================================= MS08-053 Windows Media Encoder wmex.dll ActiveX Control Buffer Overflow ============================================================================= Calc execution POC Exploi...

Microsoft SQL Server sqlvdir.dll ActiveX控件缓冲区溢出漏洞

BUGTRAQ ID: 31129 Microsoft SQL Server是一款流行的SQL数据库系统。 SQL Server所安装的sqlvdir.dll ActiveX控件（默认路径为C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlvdir.dll，clsid：FC13BAA2-9C1A-4069-A221-31A147636038）所暴露的ISQLVDirControl接口没有正确的验证用户输入参数，如果用户受骗访问了恶意网页并向该方式传送了超长参数的话，就可能触发缓冲区溢出，导致执行任意代码。 Microsoft S...

Microsoft Windows Media Encoder (XP SP2) - wmex.dll ActiveX Buffer Overflow (MS08-053)

Microsoft Windows Media Encoder XP SP2 - wmex.dll ActiveX Buffer Overflow MS08-053 ============================================================================= MS08-053 Windows Media Encoder wmex.dll ActiveX Control Buffer Overflow...

Windows Media Encoder wmex.dll ActiveX BOF Exploit (MS08-053)

Exploit for unknown platform in category remote exploits ============================================================= Windows Media Encoder wmex.dll ActiveX BOF Exploit MS08-053 =============================================================...

Microsoft Windows Media Encoder 9 ActiveX Control Buffer Overflow (MS08-053; CVE-2008-3008)

Windows Media Encoder is a tool for capturing audio and video content. A remote code execution vulnerability has been reported in the Windows Media Encoder 9 Series.The vulnerability is due to an error in a Windows Media Encoder 9 Series ActiveX control that was never intended to be instantiated ...

Windows Media Encoder wmex.dll ActiveX BOF Exploit (MS08-053)

No description provided by source. html pre ============================================================================= MS08-053 Windows Media Encoder wmex.dll ActiveX Control Buffer Overflow ============================================================================= Calc execution POC Exploi...

Microsoft Windows Media Encoder (XP SP2) - 'wmex.dll' ActiveX Buffer Overflow (MS08-053)

============================================================================= MS08-053 Windows Media Encoder wmex.dll ActiveX Control Buffer Overflow ============================================================================= Calc execution POC Exploit for WinXP SP2 PRO English / IE6.0 SP2 Foun...

CVE-2008-4050

A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to 1 create and read arbitrary registry values via the RegistryValue method, and 2 read arbitrary files via the GetTextFile method...

CVE-2008-4048

Heap-based buffer overflow in a certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to execute arbitrary code via a long third argument to the CreateURLShortcut method...

CVE-2008-4049

A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to execute arbitrary programs via arguments to the RunApp method...

Design/Logic Flaw

A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to 1 create and read arbitrary registry values via the RegistryValue method, and 2 read arbitrary files via the GetTextFile method...

Heap overflow

Heap-based buffer overflow in a certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to execute arbitrary code via a long third argument to the CreateURLShortcut method...

Security feature bypass

A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to execute arbitrary programs via arguments to the RunApp method...

CVE-2008-4050

A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to 1 create and read arbitrary registry values via the RegistryValue method, and 2 read arbitrary files via the GetTextFile method...

EUVD-2008-4035

A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to 1 create and read arbitrary registry values via the RegistryValue method, and 2 read arbitrary files via the GetTextFile method...

CVE-2008-4049

CVE-2008-4049 affects the Friendly Technologies FriendlyPPPoE Client (version 3.0.0.57) via the ActiveX control fwRemoteCfg.dll version 3.3.3.1. The RunApp method accepts arguments that allow remote attackers to execute arbitrary programs. This vulnerability is described across multiple sources i...

CVE-2008-4048

Heap-based buffer overflow in a certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to execute arbitrary code via a long third argument to the CreateURLShortcut method...

CVE-2008-4049

A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to execute arbitrary programs via arguments to the RunApp method...