10868 matches found
webex-activex.txt
// ksOSe 08/08/2008 // tested in IE6, XP SP1 var shellcode =...
CVE-2008-0082
CVE-2008-0082 concerns an ActiveX control (Messenger.UIAutomation.1) in Windows Messenger 4.7 and 5.1 that is marked as safe-for-scripting. This vulnerability allows a remote attacker to hijack the Messenger client, enabling actions such as changing user state, viewing or obtaining contact inform...
JComSoft AniGIF.ocx ActiveX控件多个栈溢出漏洞
BUGTRAQ ID: 30621 Animation GIF ActiveX控件（anigif.ocx）用于在OLE容器中显示GIF文件。 anigif.ocx控件没有正确地验证对ReadGIF和ReadGIF2方式所传送的输入参数，如果用户受骗访问了恶意网页并向上述方式传送了超长参数的话，就可以触发栈溢出，导致执行任意指令。 JComSoft Animation GIF ActiveX 2.4.7 JComSoft Animation GIF ActiveX 1.12b JComSoft Animation GIF ActiveX 1.12a JComSoft --------...
Microsoft Visual Studio 'Msmask32.ocx' ActiveX Control Remote Buffer Overflow Vulnerability
Description The Microsoft Visual Studio ActiveX control, MaskedEdit, is prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. An attacker can exploit this issue to execute arbitrary code in the context of an application...
MS KB953839: Cumulative Security Update of ActiveX Kill Bits
The remote host is missing a list of kill bits for ActiveX controls that are known to contain vulnerabilities. If these ActiveX controls are ever installed on the remote host, either now or in the future, they would expose it to various security issues. %NASLMINLEVEL 70300 C Tenable Network...
MS08-041: Vulnerability in the ActiveX Control for the Snapshot Viewer for Microsoft Access Could Allow Remote Code Execution (955617)
The remote host contains a version of the ActiveX control for the Snapshot Viewer for Microsoft Access which is vulnerable to a security flaw that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and entice a victim to visit it. C Tenable...
Microsoft Security Bulletin MS08-041 – Critical Vulnerability in the ActiveX Control for the Snapshot Viewer for Microsoft Access Could Allow Remote Code Execution (955617)
Microsoft Security Bulletin MS08-041 – Critical Vulnerability in the ActiveX Control for the Snapshot Viewer for Microsoft Access Could Allow Remote Code Execution 955617 Published: August 12, 2008 Version: 1.0 General Information Executive Summary This security update resolves a privately report...
Microsoft Security Bulletin MS08-050 – Important Vulnerability in Windows Messenger Could Allow Information Disclosure (955702)
Microsoft Security Bulletin MS08-050 – Important Vulnerability in Windows Messenger Could Allow Information Disclosure 955702 Published: August 12, 2008 Version: 1.0 General Information Executive Summary This security update resolves a publicly reported vulnerability in supported versions of...
Trend Micro产品ObjRemoveCtrl类缓冲区溢出漏洞
BUGTRAQ ID:30633 CVE ID：CVE-2008-3364 CNCVE ID：CNCVE-20083364 多个Trend Micro产品处理ObjRemoveCtrl类存在安全问题，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 当通过WEB接口配置产品时OfficeScan Web控制台利用多个ActiveX控件，其中ObjRemoveCtrl类ActiveX控件存在边界错误，可触发基于堆栈的缓冲区溢出，精心构建WEB页，诱使用户访问可导致应用程序权限执行任意指令。 Trend Micro Client Server Messaging Security for...
Microsoft Access ActiveX file download
SnapShot Viewer ActiveX allows file download to any location...
Trend Micro OfficeScan objRemoveCtrl ActiveX buffer overflow
Added: 08/11/2008 CVE: CVE-2008-3364 BID: 30407 OSVDB: 47213 Background Trend Micro OfficeScan is a centralized virus and security scan management system. Problem A buffer overflow in the objRemoveCtrl ActiveX control, which is automatically installed when OfficeScan is installed through the serv...
webshell upload asp file called Server ActiveX control overflow access shell-vulnerability warning-the black bar safety net
| --- Do windows System penetration testing when there is a webshell, but don't get the shell, used to elevate privileges, it is a very depressing thing. In General, the use of mdb jet engine overflow is more common, but sometimes depending on the server installed on third-party software, the use...
Trend Micro OfficeScan objRemoveCtrl ActiveX buffer overflow
Added: 08/11/2008 CVE: CVE-2008-3364 BID: 30407 OSVDB: 47213 Background Trend Micro OfficeScan is a centralized virus and security scan management system. Problem A buffer overflow in the objRemoveCtrl ActiveX control, which is automatically installed when OfficeScan is installed through the serv...
WebEx Meeting Manager WebexUCFObject ActiveX Control Buffer Overflow
The atucfobj module of the WebexUCFObject ActiveX control, used by WebEx Meeting Manager and installed on the remote host, reportedly contains a stack-based buffer overflow in its 'NewObject' method. If an attacker can trick a user on the affected host into viewing a specially crafted HTML...
Trend Micro OfficeScan objRemoveCtrl ActiveX buffer overflow
Added: 08/11/2008 CVE: CVE-2008-3364 BID: 30407 OSVDB: 47213 Background Trend Micro OfficeScan is a centralized virus and security scan management system. Problem A buffer overflow in the objRemoveCtrl ActiveX control, which is automatically installed when OfficeScan is installed through the serv...
Cisco WebEx Meeting Manager (atucfobj.dll) ActiveX Remote BOF Exploit
No description provided by source. html body object classid=clsid:32E26FD9-F435-4A20-A561-35D4B987CFDC id=target / /object script language=javascript // ksOSe 08/08/2008 // tested in IE6, XP SP1 var shellcode =...
Trend Micro OfficeScan objRemoveCtrl ActiveX buffer overflow
Added: 08/11/2008 CVE: CVE-2008-3364 BID: 30407 OSVDB: 47213 Background Trend Micro OfficeScan is a centralized virus and security scan management system. Problem A buffer overflow in the objRemoveCtrl ActiveX control, which is automatically installed when OfficeScan is installed through the serv...
Cisco WebEx Meeting Manager (atucfobj.dll) ActiveX Remote BOF Exploit
Exploit for unknown platform in category remote exploits ===================================================================== Cisco WebEx Meeting Manager atucfobj.dll ActiveX Remote BOF Exploit ===================================================================== // ksOSe 08/08/2008 // tested in...
