CVE-2008-3558

Stack-based buffer overflow in the WebexUCFObject ActiveX control in atucfobj.dll in Cisco WebEx Meeting Manager before 20.2008.2606.4919 allows remote attackers to execute arbitrary code via a long argument to the NewObject method...

DSquare Exploit Pack: D2SEC_WEBEX

Name| d2secwebex ---|--- CVE| CVE-2008-3558 Exploit Pack| D2ExploitPack Description| WebEx Meeting Manager atucfobj.dll ActiveX Stack Overflow Notes|...

Aurigma Image Uploader多个ActiveX控件存在未明安全漏洞

BUGTRAQ ID: 30548 CNCAN ID：CNCAN-2008080603 Aurigma Image Uploader是一款功能强大的图像上传工具。 Aurigma Image Uploader多个ActiveX控件存在未明安全问题，远程攻击者可以利用漏洞以应用程序权限执行任意指令等攻击。 目前没有详细漏洞细节提供。 Aurigma Image Uploader 5.1 Aurigma Image Uploader 4.7 可参考如下解决方案工具： Aurigma Image Uploader 5.1 Aurigma AurigmaKillBit.zip...

RealPlayer for Windows < 6.0.14.806 / 6.0.12.1675 Multiple Vulnerabilities

Binary data 4608.prm...

RealPlayer rjbdll.dll ActiveX Control file import buffer overflow

Added: 08/01/2008 CVE: CVE-2008-3066 BID: 30379 OSVDB: 48286 Background RealPlayer and RealOne Player include a number of ActiveX controls allowing functions to be called by scripts embedded in web pages. Problem A buffer overflow vulnerability in an ActiveX control in rjbdll.dll allows command...

RealPlayer rjbdll.dll ActiveX Control file import buffer overflow

Added: 08/01/2008 CVE: CVE-2008-3066 BID: 30379 OSVDB: 48286 Background RealPlayer and RealOne Player include a number of ActiveX controls allowing functions to be called by scripts embedded in web pages. Problem A buffer overflow vulnerability in an ActiveX control in rjbdll.dll allows command...

RealPlayer rjbdll.dll ActiveX Control file import buffer overflow

Added: 08/01/2008 CVE: CVE-2008-3066 BID: 30379 OSVDB: 48286 Background RealPlayer and RealOne Player include a number of ActiveX controls allowing functions to be called by scripts embedded in web pages. Problem A buffer overflow vulnerability in an ActiveX control in rjbdll.dll allows command...

NCTsoft AudFile.dll ActiveX Control Remote Buffer Overflow Exploit

No description provided by source. ----------------------------------------------------------------------------- NCTsoft AudFile.dll ActiveX Control Remote Buffer Overflow url: http://www.nctsoft.com Author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.net This was written for...

RealPlayer rjbdll.dll ActiveX Control file import buffer overflow

Added: 08/01/2008 CVE: CVE-2008-3066 BID: 30379 OSVDB: 48286 Background RealPlayer and RealOne Player include a number of ActiveX controls allowing functions to be called by scripts embedded in web pages. Problem A buffer overflow vulnerability in an ActiveX control in rjbdll.dll allows command...

Buffer overflow

Buffer overflow in the CoVideoWindow.ocx ActiveX control 5.0.907.1 in Eyeball MessengerSDK, as used in products such as SiOL Komunikator 1.3, allows remote attackers to execute arbitrary code via a large argument supplied to the BGColor method. NOTE: this might only be a vulnerability in certain...

CVE-2008-3430

Buffer overflow in the CoVideoWindow.ocx ActiveX control 5.0.907.1 in Eyeball MessengerSDK, as used in products such as SiOL Komunikator 1.3, allows remote attackers to execute arbitrary code via a large argument supplied to the BGColor method. NOTE: this might only be a vulnerability in certain...

CVE-2008-3430

Buffer overflow in the CoVideoWindow.ocx ActiveX control 5.0.907.1 in Eyeball MessengerSDK, as used in products such as SiOL Komunikator 1.3, allows remote attackers to execute arbitrary code via a large argument supplied to the BGColor method. NOTE: this might only be a vulnerability in certain...

CVE-2008-3430

The CVE affects the CoVideoWindow.ocx ActiveX control (version 5.0.907.1) in Eyeball MessengerSDK, used by products such as SiOL Komunikator 1.3. The vulnerability is a buffer overflow triggered by a large argument to the BGColor method, allowing remote code execution. This payload could be reach...

RealPlayer multiple security vulnerabilities

Buffer overflow on SWF files parsing. ActiveX memory corruption. ActiveX arbitrary files deletion...

RealNetworks RealPlayer ActiveX Illegal Resource Reference Vulnerability

RealNetworks RealPlayer ActiveX Illegal Resource Reference Vulnerability by cocoruderfrankruderathotmail.com http://ruder.cdut.net Summary: An illegal resource reference vulnerability exists in the ActiveX Control of RealNetworks RealPlayer. For exploiting the vulnerability, the attacker may buil...

aflistenerdirectorytraversal-08_006.txt

Portcullis Security Advisory - 08-006 Vulnerable System: Affinium Campaign Vulnerability Title: The Listener is vulnerable to directory traversal. Vulnerability Discovery And Development: Portcullis Security Testing Services. Credit For Discovery: Tim Brown - Portcullis Computer-Security Ltd...

NCTsoft - AudFile.dll ActiveX Control Remote Buffer Overflow

NCTsoft - AudFile.dll ActiveX Control Remote Buffer Overflow ----------------------------------------------------------------------------- NCTsoft AudFile.dll ActiveX Control Remote Buffer Overflow url: http://www.nctsoft.com Author: shinnai mail: shinnaiatautisticidotorg site:...

aflistenerdos-08_007.txt

Portcullis Security Advisory - 08-007 Vulnerable System: Affinium Campaign Vulnerability Title: The listener is vulnerable to Denial of Service. Vulnerability Discovery And Development: Portcullis Security Testing Services. Credit For Discovery: Neil Kettle and Tim Brown - Portcullis...

NCTsoft - 'AudFile.dll' ActiveX Control Remote Buffer Overflow

----------------------------------------------------------------------------- NCTsoft AudFile.dll ActiveX Control Remote Buffer Overflow url: http://www.nctsoft.com Author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.net This was written for educational purpose. Use it at your...

Eyeball MessengerSDK 'CoVideoWindow.ocx' ActiveX控件远程缓冲区溢出漏洞

BUGTRAQ ID: 30424 CNCAN ID：CNCAN-2008073102 Eyeball MessengerSDK提供基于SIP语音和视频的电话的SDK。 Eyeball MessengerSDK 'CoVideoWindow.ocx' ActiveX控件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 问题是'CoVideoWindow.ocx' ActiveX控件对'BgColor'方法缺少正确处理，构建超长字符串作为参数值，可触发缓冲区溢出，精心构建提交数据，可能以应用程序权限执行任意指令。 Eyeball Networks Eyeball...