CVE-2008-4050

The CVE-2008-4050 entry concerns a flaw in the ActiveX control fwRemoteCfg.dll (version 3.3.3.1) used by Friendly Technologies’ FriendlyPPPoE Client (v3.0.0.57). The vulnerability allows remote attackers to (1) create and read arbitrary registry values via the RegistryValue method and (2) read ar...

CVE-2008-4048

CVE-2008-4048 describes a heap-based buffer overflow in an ActiveX control of the fwRemoteCfg.dll 3.3.3.1 component used by the Friendly Technologies FriendlyPPPoE Client 3.0.0.57. The overflow is triggered by a long third argument to the CreateURLShortcut method, allowing remote attackers to exe...

Design/Logic Flaw

The Microsoft Windows Image Acquisition Logger ActiveX control allows remote attackers to force the download of arbitrary files onto a client system via a URL in the first argument to the Open method, in conjunction with a full destination pathname in the first argument to the Save method. NOTE:...

CVE-2008-3008

Stack-based buffer overflow in the WMEncProfileManager ActiveX control in wmex.dll in Microsoft Windows Media Encoder 9 Series allows remote attackers to execute arbitrary code via a long first argument to the GetDetailsString method, aka "Windows Media Encoder Buffer Overrun Vulnerability."...

Adobe Acrobat 9 ActiveX Remote Denial of Service Exploit

No description provided by source. !-- Jeremy Brown [email protected]/jbrownsec.blogspot.com Adobe Acrobat 9 Remote DoS -- Tested on AA9/IE7/Vista I can't seem to reproduce this on XP! Oh well. Of course the most popular app for reading pdfs is SfS/SfI : Basically it will crash with any uri th...

Microsoft Windows Image Acquisition Logger ActiveX控件任意文件覆盖漏洞

BUGTRAQ ID: 31069 CNCAN ID：CNCAN-2008090905 Microsoft Windows Image Acquisition是一款用于数码相机和扫描仪之类的影像设备的服务。 Microsoft Windows Image Acquisition Logger ActiveX控件存在设计问题，远程攻击者可以利用漏洞以应用程序权限覆盖系统任意文件。 相关的ActiveX控件的CLSID为A1E75357-881A-419E-83E2-BB16DB197C68，由于对Save方法缺少充分检查，可导致以应用程序权限覆盖系统任意文件。 Microsoft...

Adobe Acrobat 9 - ActiveX Remote Denial of Service

arg1="acroie:///DoS" target.src = arg1 milw0rm.com 2008-09-11...

Adobe Acrobat 9 - ActiveX Remote Denial of Service

Adobe Acrobat 9 - ActiveX Remote Denial of Service arg1="acroie:///DoS" target.src = arg1 milw0rm.com 2008-09-11...

sqlvdir-overflow.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z - r4s4al ---QKrun1x-P47tr1ck - FeDeReR -MAGE -JeTFyrE and all darkc0de members ---...

Microsoft Windows Media Encoder 9 'wmex.dll' ActiveX控件缓冲区溢出漏洞（MS08-055）

BUGTRAQ ID: 31065 CVE ID：CVE-2008-3008 CNCVE ID：CNCVE-20083008 Microsoft Windows Media Encoder 9是一款视频音频编码工具。 Microsoft Windows Media Encoder 9包含的WMEX.DLL ActiveX存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 构建特殊的WEB页，诱使用户访问，可触发此漏洞。目前没有详细漏洞细节提供。 Microsoft Windows Media Encoder 9 x64 + Microsoft Advanced Windo...

Adobe Acrobat 9 ActiveX Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ======================================================== Adobe Acrobat 9 ActiveX Remote Denial of Service Exploit ======================================================== arg1="acroie:///DoS" target.src = arg1 0day.today 2018-04-02...

CVE-2008-3008

CVE-2008-3008 affects Windows Media Encoder 9 Series. A stack-based buffer overflow in the WMEncProfileManager ActiveX control (wmex.dll) can be triggered by passing a very long first argument to GetDetailsString, enabling remote code execution. The vulnerability is associated with Microsoft MS08...

VMware Products Multiple Vulnerabilities (VMSA-2008-0014)

A VMware product installed on the remote host is affected by multiple vulnerabilities : - ActiveX controls provided by VMware for IE could be exploited to cause a denial of service condition or execute arbitrary code on the remote system. CVE-2007-5438, CVE-2008-3691-CVE-2008-3696, CVE-2008-3892 ...

Peachtree Accounting 2004 (PAWWeb11.ocx) ActiveX Insecure Method

Exploit for unknown platform in category remote exploits ================================================================ Peachtree Accounting 2004 PAWWeb11.ocx ActiveX Insecure Method ================================================================ arg1="C:/WINDOWS/system32/calc.exe"...

Microsoft Windows Media Encoder ActiveX code execution

Control supports unsafe methods...

Peachtree Accounting 2004 - 'PAWWeb11.ocx' ActiveX Insecure Method

arg1="C:/WINDOWS/system32/calc.exe" target.ExecutePreferredApplication arg1 milw0rm.com 2008-09-10...

Peachtree Accounting 2004 - PAWWeb11.ocx ActiveX Insecure Method

Peachtree Accounting 2004 - PAWWeb11.ocx ActiveX Insecure Method arg1="C:/WINDOWS/system32/calc.exe" target.ExecutePreferredApplication arg1 milw0rm.com 2008-09-10...

Peachtree Accounting 2004 (PAWWeb11.ocx) ActiveX Insecure Method

No description provided by source. !-- Jeremy Brown [email protected]/jbrownsec.blogspot.com Peachtree Accounting Remote SfS/SfI Exploit Tested on Peachtree Accounting 2004 / Windows XP / IE6 All Peachtree software that includes PAWWeb11.ocx are assumed vulnerable -- htmlbody object id=target...

CVE-2008-3957

CVE-2008-3957 involves the Microsoft Windows Image Acquisition Logger ActiveX control. The vulnerability allows remote attackers to force the download of arbitrary files onto a client system by supplying a URL in the first argument to Open, combined with a full destination pathname in the first a...

CVE-2008-3957

The Microsoft Windows Image Acquisition Logger ActiveX control allows remote attackers to force the download of arbitrary files onto a client system via a URL in the first argument to the Open method, in conjunction with a full destination pathname in the first argument to the Save method. NOTE:...