CVE-2008-2283

IDAutomation allows remote attackers to overwrite arbitrary files via the argument to the 1 SaveBarCode and 2 SaveEnhWMF methods in a the IDAuto.BarCode.1 ActiveX control in IDAutomationLinear6.dll aka IDAutomation Linear BarCode 1.6.0.6, b the IDAuto.Datamatrix.1 ActiveX control in...

IDAutomation多个条码ActiveX控件任意文件覆盖漏洞

BUGTRAQ ID: 29204 IDAutomation是美国一家专注于自动识别、条形码技术的公司，IDAutomation的产品包括条形码编辑、识别、打印、扫描功能的字体包、软件、控件产品等。 IDAutomation带的ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞在用户系统上写入任意文件。 IDAutomation所提供的以下条码ActiveX控件： IDAuto.BarCode.1（IDAutomationLinear6.dll） IDAuto.Datamatrix.1（IDAutomationDMATRIX6.DLL）...

IDAutomation Bar Code ActiveX Multiple Remote Vulnerabilities

No description provided by source. ----------------------------------------------------------------------------- IDAutomation Multiple Vulnerabilities url: www.idautomation.com Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational...

idautomation bar code - ActiveX Multiple Vulnerabilities

idautomation bar code - ActiveX Multiple Vulnerabilities ----------------------------------------------------------------------------- IDAutomation Multiple Vulnerabilities url: www.idautomation.com Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was writte...

idautomation bar code - ActiveX Multiple Vulnerabilities

----------------------------------------------------------------------------- IDAutomation Multiple Vulnerabilities url: www.idautomation.com Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose. Use it at your own risk. Autho...

Microsoft Works 7 WkImgSrv.dll ActiveX Remote BOF Exploit

No description provided by source. !– The problem is in wkimgsrv.dll module shipped with many MS Offiice Suite tested on MS OF 2003,MS OF 2007 Actually,this is not the case of buffer overflow attack,just a exploit of insecure method WKsPictureInterface...

With all the 0day,the current through the kill all versions-bug warning-the black bar safety net

Program code SCRIPTwindow. onerror=functionreturn true;/SCRIPT SCRIPT document. writeln"object classid="clsid:61F5C358-60FB-4A23-A312 - D2B556620F20" style='display:none' id='Kazakh'/object"; document. writeln"SCRIPT language="javascript""; document. writeln"var...

联众世界GLIEDown2.dll Active控件任意代码执行漏洞

联众世界是在中国非常流行的在线游戏网站。 联众世界的游戏大厅主程序GLWorld所安装的GLIEDown2.dll ActiveX控件（CLSID：F917534D-535B-416B-8E8F-0C04756C31A8）没有正确地处理某些用户输入参数，如果用户受骗访问了恶意网页并向这些方式传送了特制参数的话，可能导致在用户系统上执行任意指令。 利用此漏洞进行挂马的0day攻击已经出现。 GlobalLink 2.8.1.2 beta 临时解决方法： 为有漏洞的控件设置Kill-Bit： Windows Registry Editor Version 5.00...

Thunder local overflow POC-the exploit-warning-the black bar safety net

By:mad DogB. C. T Previously been in the pass thunder and 0day, the Activex should be almost, but also not neglect, or uninstall it, today the abundance of the initial issuance to a URL, the original pixel a Thunderbolt 0day, see the instructions or remotely! Feel a, look at that vulnerability...

Ourgame 'GLIEDown2.dll' ActiveX Control - Remote Code Execution

source: https://www.securityfocus.com/bid/29118/info Ourgame 'GLIEDown2.dll' ActiveX control is prone to a remote code-execution vulnerability because it fails to sufficiently verify user-supplied input. An attacker can exploit this issue to run arbitrary attacker-supplied code in the context of...

CA Unicenter DSM ITRM Legends ActiveX integer overflow

Overview The CA Unicenter DSM ITRM Legends ActiveX control contains an integer overflow vulnerability, which can allow a remote attacker to execute arbitrary code on a vulnerable system. Description CA Unicenter DSM ITRM Legends is an ActiveX control that is included with multiple CA products. Th...

Ourgame GLIEDown2.dll ActiveX Control - Remote Code Execution

Ourgame GLIEDown2.dll ActiveX Control - Remote Code Execution source: https://www.securityfocus.com/bid/29118/info Ourgame 'GLIEDown2.dll' ActiveX control is prone to a remote code-execution vulnerability because it fails to sufficiently verify user-supplied input. An attacker can exploit this...

Memory corruption

The ActiveX Control yNotifier.dll in Yahoo! Assistant 3.6 and earlier allows remote attackers to execute arbitrary code via unspecified vectors in the Ynoifier COM object that trigger memory corruption...

CVE-2008-2111

The ActiveX Control yNotifier.dll in Yahoo! Assistant 3.6 and earlier allows remote attackers to execute arbitrary code via unspecified vectors in the Ynoifier COM object that trigger memory corruption...

CVE-2008-2111

The CVE-2008-2111 entry concerns the ActiveX Control (yNotifier.dll) in Yahoo! Assistant 3.6 and earlier. The vulnerability is a memory corruption issue in the Ynoifier COM object that enables remote attackers to execute arbitrary code. Affected component: ActiveX/yNotifier.dll within Yahoo! Assi...

Microsoft Works 7 WkImgSrv.dll ActiveX控件远程代码执行漏洞

BUGTRAQ ID: 28820 Microsoft Works是微软在早期所发布的文件处理程序。 Microsoft Works所带的ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 Microsoft Works所提供的wkimgsrv.dll库没有安全地调用WKsPictureInterface方式： 00D473BD PUSH EBP ; Begin of Set WksPictureInterface method 00D473BE MOV EBP,ESP 00D473C0 SUB ESP,1C 00D473C3 MOV EAX,DWORD PTR...

Akamai Download Manager ActiveX控件远程代码执行漏洞

BUGTRAQ ID: 28993 CVECAN ID: CVE-2007-6339 Akamai下载管理器是用于帮助用户方便下载的客户端软件。 Akamai下载管理器的DownloadManager控件没有正确地验证某些对象参数，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 ActiveX控件版本标识如下： 类：DownloadManager Control CLSID：2AF5BD25-90C5-4EEC-88C5-B44DC2905D8B CLSID：FFBB3F3B-0A5A-4106-BE53-DFE1E2340CB1 ProgId：MANAGER.DLMCtrl.1...

Yahoo! 助手(3721) ActiveX远程代码执行漏洞

漏洞存在于ynotifier.dll这个ActiveX控件. 成功利用此漏洞可以使得攻击者能够在安装了Yahoo!助手的电脑上执行任意代码. 成功利用此漏洞需要诱使用户访问特定网页. 在通过IE初始化Ynoifier COM对象时,会出现一个可利用的内存破坏漏洞. c78.fa0: Access violation - code c0000005 first chance First chance exceptions are reported before any exception handling. This exception may be expected and handle...

Yahoo! Assistant 3.6 - 'yNotifier.dll' ActiveX Control Memory Corruption

source: https://www.securityfocus.com/bid/29065/info Yahoo! Assistant 'yNotifier.dll' ActiveX control is prone to a memory-corruption vulnerability. Successfully exploiting this issue may allow remote attackers to execute arbitrary code in the context of the application using the affected ActiveX...

Yahoo! Assistant 3.6 - yNotifier.dll ActiveX Control Memory Corruption

Yahoo! Assistant 3.6 - yNotifier.dll ActiveX Control Memory Corruption source: https://www.securityfocus.com/bid/29065/info Yahoo! Assistant 'yNotifier.dll' ActiveX control is prone to a memory-corruption vulnerability. Successfully exploiting this issue may allow remote attackers to execute...