nctsoft-activex.txt

----------------------------------------------------------------------------- NCTsoft AudFile.dll ActiveX Control Remote Buffer Overflow url: http://www.nctsoft.com Author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.net This was written for educational purpose. Use it at your...

NCTsoft AudFile.dll ActiveX Control Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================================== NCTsoft AudFile.dll ActiveX Control Remote Buffer Overflow Exploit ==================================================================...

Buffer overflow

Buffer overflow in the ObjRemoveCtrl Class ActiveX control in OfficeScanRemoveCtrl.dll 7.3.0.1020 in Trend Micro OfficeScan Corp Edition OSCE Web-Deployment 7.0, 7.3 build 1343 Patch 4 and other builds, and 8.0; Client Server Messaging Security CSM 3.5 and 3.6; and Worry-Free Business Security WF...

CVE-2008-3364

Buffer overflow in the ObjRemoveCtrl Class ActiveX control in OfficeScanRemoveCtrl.dll 7.3.0.1020 in Trend Micro OfficeScan Corp Edition OSCE Web-Deployment 7.0, 7.3 build 1343 Patch 4 and other builds, and 8.0; Client Server Messaging Security CSM 3.5 and 3.6; and Worry-Free Business Security WF...

CVE-2008-3364

Trend Micro OfficeScan ObjRemoveCtrl ActiveX control (ObjRemoveCtrl class) is affected by a boundary/stack overflow in OfficeScanRemoveCtrl.dll (OfficeScan Corp Edition Web-Deployment 7.x, 8.0; CSM 3.5/3.6; WFBS 5.0). The vulnerability can be triggered by passing a overly long value to the Server...

siol-overflow.txt

========================================================================= SiOL komunikator IM ActiveX stack overflow condition ========================================================================= Release date: 30.7.2008 Severity: Moderately critical Impact: Stack overflow Remote: Yes Status:...

Eyeball MessengerSDK 'CoVideoWindow.ocx' 5.0.907 - ActiveX Control Remote Buffer Overflow

source: https://www.securityfocus.com/bid/30424/info The 'CoVideoWindow.ocx' ActiveX control of Eyeball MessengerSDK is prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. An attacker can exploit this issue to execute...

Eyeball MessengerSDK CoVideoWindow.ocx 5.0.907 - ActiveX Control Remote Buffer Overflow

Eyeball MessengerSDK CoVideoWindow.ocx 5.0.907 - ActiveX Control Remote Buffer Overflow source: https://www.securityfocus.com/bid/30424/info The 'CoVideoWindow.ocx' ActiveX control of Eyeball MessengerSDK is prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate...

CVE-2008-3066

Stack-based buffer overflow in a certain ActiveX control in rjbdll.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, and RealPlayer 10.5 before build 6.0.12.1675 allows remote attackers to execute arbitrary code by importing a file into a media library and then deleting this file...

Stack overflow

Stack-based buffer overflow in a certain ActiveX control in rjbdll.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, and RealPlayer 10.5 before build 6.0.12.1675 allows remote attackers to execute arbitrary code by importing a file into a media library and then deleting this file...

CVE-2008-3066

RealPlayer RealPlayer Enterprise/RealPlayer 10 and 10.5 contain a stack-based buffer overflow in the ActiveX control in rjbdll.dll. The vulnerability is triggered when a user imports a specially crafted file into the media library and then deletes it, allowing remote code execution in the user’s ...

RealPlayer rjbdll.dll ActiveX控件Import方式栈溢出漏洞

BUGTRAQ ID: 30379 CVECAN ID: CVE-2008-3066 RealPlayer是一款流行的多媒体播放器。 RealPlayer的rjbdll.dll模块没有正确地删除媒体库文件，如果用户使用ActiveX控件FDC7A535-4070-4B92-A0EA-D9994BCC0DC5将有漏洞的文件导入到用户的媒体库的话，则在删除该文件时就会触发栈溢出，导致执行任意指令。 Real Networks RealPlayer 10.5 Real Networks RealPlayer 10 Real Networks -------------...

Trend Micro OfficeScan - ObjRemoveCtrl ActiveX Control Buffer Overflow

Trend Micro OfficeScan - ObjRemoveCtrl ActiveX Control Buffer Overflow Trend Micro OfficeScan ObjRemoveCtrl ActiveX Control Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 =...

RealPlayer for Windows < Build 6.0.14.806 / 6.0.12.1675 Multiple Vulnerabilities

According to its build number, the installed version of RealPlayer / on the remote Windows host suffers from possibly several issues : - Heap memory corruption issues in several ActiveX controls can lead to arbitrary code execution. CVE-2008-1309 - An unspecified local resource reference...

Trend Micro OfficeScan - ObjRemoveCtrl ActiveX Control Buffer Overflow

Trend Micro OfficeScan ObjRemoveCtrl ActiveX Control Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" +...

Novell iPrint Client ActiveX Control Stack Buffer Overflow (CVE-2008-2908)

Novell iPrint is an application that enables users to install and manage printers, or submit print job from a web browser. A stack buffer overflow vulnerability has been reported in Novell iPrint Client. The vulnerability is due to a boundary error in a Novell iPrint ActiveX control. To trigger...

RealPlayer file deletion overflow vulnerability

Overview RealPlayer contains a buffer overflow vulnerability that may allow an attacker to execute code on a vulnerable system. Description RealPlayer media player that is distributed by RealNetworks. RealPlayer supports streaming and local media. Per the Zero Day Initiative advisory ZDI-08-046:...

ZDI-08-047: RealNetworks RealPlayer rmoc3260 ActiveX Control Memory Corruption Vulnerability

ZDI-08-047: RealNetworks RealPlayer rmoc3260 ActiveX Control Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-047 July 25, 2008 -- CVE ID: CVE-2008-1309 -- Affected Vendors: RealNetworks -- Affected Products: RealNetworks RealPlayer -- TippingPointTM IPS Customer...

http://www.zerodayinitiative.com/advisories/ZDI-08-046

ZDI-08-046: RealNetworks RealPlayer Library File Deletion Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-046 July 25, 2008 -- CVE ID: ZDI-CAN-231 -- Affected Vendors: RealNetworks -- Affected Products: RealNetworks RealPlayer -- TippingPointTM IPS Customer...

RealNetworks RealPlayer rmoc3260 ActiveX Control Memory Corruption Vulnerability

This vulnerability allows remote attackers to execute code on vulnerable installations of RealPlayer. User interaction is required in that a user must visit a malicious web site. The specific flaw exists in the rmoc3260 ActiveX control exposed through the following CLSIDs:...