HP Instant Support 1.0.22 - HPISDataManager.dll ActiveX Control Arbitrary File Delete

HP Instant Support 1.0.22 - HPISDataManager.dll ActiveX Control Arbitrary File Delete source: https://www.securityfocus.com/bid/29536/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to a vulnerability that lets attackers delete arbitrary files on the affected computer in th...

the flash vulnerability used in shellcode analysis-vulnerability warning-the black bar safety net

Title: 【original】flash vulnerability used in shellcode analysis Author: Regulus small Cong Time: 2008-06-02,1 9:2 9 Links: http://bbs.pediy.com/showthread.php?t=65907 Author home page: http://hi.baidu.com/yicong2007 The purpose: purely to learn, do not for malicious purposes In recent days flash...

C6 Messenger ActiveX Remote Download & Execute Exploit

Exploit for unknown platform in category remote exploits ====================================================== C6 Messenger ActiveX Remote Download & Execute Exploit ====================================================== !-- C6 Messenger Installation Url DownloaderActiveX Control Remote Download...

HP Instant Support 1.0.22 - HPISDataManager.dll ExtractCab ActiveX Control Buffer Overflow

HP Instant Support 1.0.22 - HPISDataManager.dll ExtractCab ActiveX Control Buffer Overflow source: https://www.securityfocus.com/bid/29529/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary...

HP Instant Support 1.0.22 - 'HPISDataManager.dll' ActiveX Control Arbitrary File Delete

source: https://www.securityfocus.com/bid/29536/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to a vulnerability that lets attackers delete arbitrary files on the affected computer in the context of the application using the ActiveX control. Successful attacks can result ...

HP Instant Support 1.0.22 - HPISDataManager.dll ActiveX Control Arbitrary File Creation

HP Instant Support 1.0.22 - HPISDataManager.dll ActiveX Control Arbitrary File Creation source: https://www.securityfocus.com/bid/29535/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to a vulnerability that lets attackers create and overwrite files with arbitrary,...

HP Instant Support 1.0.22 - HPISDataManager.dll StartApp ActiveX Control Insecure Method

HP Instant Support 1.0.22 - HPISDataManager.dll StartApp ActiveX Control Insecure Method source: https://www.securityfocus.com/bid/29533/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to an insecure-method vulnerability. Successfully exploiting this issue allows remote...

HP Instant Support 1.0.22 - 'HPISDataManager.dll ExtractCab' ActiveX Control Buffer Overflow

source: https://www.securityfocus.com/bid/29529/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. An attacker can exploit this issue to execute arbitrary cod...

HP Instant Support 1.0.22 - 'HPISDataManager.dll' ActiveX Control Arbitrary File Creation

source: https://www.securityfocus.com/bid/29535/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to a vulnerability that lets attackers create and overwrite files with arbitrary, attacker-controlled content. Successful exploits may compromise affected computers and aid in...

C6 Messenger - ActiveX Remote Download and Execute

!-- C6 Messenger Installation Url DownloaderActiveX Control Remote Download & Execute Exploit by Nine:Situations:Group::SnoopyAssault site: http://retrogod.altervista.org/ "C6 Messenger is an instant messaging program produced by Telecom Italia Group, specifically by Alice distribution, Icon Spa...

C6 Messenger - ActiveX Remote Download and Execute

C6 Messenger - ActiveX Remote Download and Execute !-- C6 Messenger Installation Url DownloaderActiveX Control Remote Download & Execute Exploit by Nine:Situations:Group::SnoopyAssault site: http://retrogod.altervista.org/ "C6 Messenger is an instant messaging program produced by Telecom Italia...

HP Instant Support 1.0.22 - 'HPISDataManager.dll StartApp' ActiveX Control Insecure Method

source: https://www.securityfocus.com/bid/29533/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to an insecure-method vulnerability. Successfully exploiting this issue allows remote attackers to launch arbitrary applications with the privileges of the application running th...

CVE-2008-2511

Directory traversal vulnerability in the UmxEventCli.CachedAuditDataList.1 aka UmxEventCliLib ActiveX control in UmxEventCli.dll in CA Internet Security Suite 2008 allows remote attackers to create and overwrite arbitrary files via a .. dot dot in the argument to the SaveToFile method. NOTE: this...

CVE-2008-2511

CVE-2008-2511 describes a directory traversal vulnerability in the CA Internet Security Suite 2008’s UmxEventCli.dll (UmxEventCli.CachedAuditDataList/UmxEventCliLib) ActiveX control. The flaw lets remote attackers supply a ... path to the SaveToFile method, enabling creation or overwriting of arb...

VMware Server Console ActiveX DOS POC-exploit warning-the black bar safety net

XML/HTML code 1. html 2. titleVMware Server Console ActiveX DOS POC/title 3. !-- 4. Author:Shennan Wang 5. blog:http://hi. baidu. com/nansec 6. stuff:http://www. d4rkn3t. cn 7. thanks: 8. Robinh00d,ayarei,void 9. -- 1 0. head 1 1. script language="JavaScript" 1 2. function test 1 3. var bufA =...

NCTAudioInformation2 ActiveX控件栈溢出漏洞

CVECAN ID: CVE-2008-0959 NCTAudioInformation是Online Media Technologies（之前名为NCT公司）推出的用于更改声音文件中信息的ActiveX 控件，支持WAV、MP3、WMA等格式的文件。 NCTAudioInformation2控件（NCTAudioInformation2.dll）没有正确地处理GetAudioInformation和SetAudioInformation属性的参数，如果用户受骗访问了恶意网页并向这些参数传送了超长参数的话，就可以触发栈溢出，导致执行任意指令。 Online Media...

NCTAudioGrabber2 ActiveX控件栈溢出漏洞

CVECAN ID: CVE-2008-0958 NCTAudioEditor是Online Media Technologies（之前名为NCT公司）推出的音频文件编辑工具，支持多种音频文件格式。 NCTAudioEditor所提供的NCTAudioGrabber2 ActiveX控件（NCTAudioGrabber2.dll）在处理某些属性或方式时存在栈溢出漏洞，如果用户受骗访问了恶意网页并传送了超长参数的话，就可以触发这些溢出，导致执行任意指令。 Online Media Technologies NCTAudioGrabber2.dll Online Media...

Creative软件自动升级引擎ActiveX控件栈溢出漏洞

BUGTRAQ ID: 29391 CVECAN ID: CVE-2008-0955 Creative是生产用于个人电脑和网络方面的数字娱乐产品的厂商。 Creative在很多产品中都提供了软件自动升级引擎ActiveX控件（CTSUEng.ocx），这个控件没有正确地处理CacheFolder属性，如果用户受骗访问了恶意网页并向该属性传送了超长参数的话，就可能触发栈溢出，导致执行任意指令。 Creative Labs AutoUpdate Engine ActiveX 临时解决方法： 在IE中禁用Creative软件自动升级ActiveX控件，为以下CLSID设置kill bit：...

DSquare Exploit Pack: D2SEC_CREATIVE

Name| d2seccreative ---|--- CVE| CVE-2008-0955 Exploit Pack| D2ExploitPack Description| Creative Software AutoUpdate Engine ActiveX Stack Overflow Notes|...

Stack overflow

Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioGrabber2 ActiveX control in NCTAudioGrabber2.dll allow remote attackers to execute arbitrary code via unspecified vectors...