Microsoft Works 7 WkImgSrv.dll ActiveX Remote BOF Exploit

Exploit for unknown platform in category remote exploits ========================================================= Microsoft Works 7 WkImgSrv.dll ActiveX Remote BOF Exploit ========================================================= MOV ESI,DWORD PTR SS:EBP+8 ; Do some other stuffs, we don't care...

Microsoft Works 7 - 'WkImgSrv.dll' ActiveX Remote Buffer Overflow

MOV ESI,DWORD PTR SS:EBP+8 ; Do some other stuffs, we don't care 00D473D8 LEA EDX,DWORD PTR SS:EBP-1C ; 00D473DB PUSH EDX 00D473DC PUSH EAX 00D473DD MOV DWORD PTR DS:ESI+2A0,EAX ; ============= 00D473E3 == MOV ECX,DWORD PTR DS:EAX ; Here is the problem,the data stored by EAX is referenced and mov...

CVE-2007-6339

The Akamai Download Manager aka DLM or dlmanager ActiveX control DownloadManagerV2.ocx before 2.2.3.5 allows remote attackers to force the download and execution of arbitrary code via unspecified "undocumented object parameters."...

Code injection

The Akamai Download Manager aka DLM or dlmanager ActiveX control DownloadManagerV2.ocx before 2.2.3.5 allows remote attackers to force the download and execution of arbitrary code via unspecified "undocumented object parameters."...

CVE-2007-6339

The CVE-2007-6339 entry is about the Akamai Download Manager ActiveX control (DownloadManagerV2.ocx) before version 2.2.3.5. The vulnerability allows a remote attacker to force the download and execution of arbitrary code via undocumented object parameters in the ActiveX control. Impact is arbitr...

CVE-2007-6339

The Akamai Download Manager aka DLM or dlmanager ActiveX control DownloadManagerV2.ocx before 2.2.3.5 allows remote attackers to force the download and execution of arbitrary code via unspecified "undocumented object parameters."...

iDefense Security Advisory 04.30.08: Akamai Download Manager Arbitrary Program Execution Vulnerability

iDefense Security Advisory 04.30.08 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 30, 2008 I. BACKGROUND Akamai Download Manager is an integral component of Akamai's global distribution service. It is used to deliver big files quickly and reliably to users around world. It has been...

Akamai Download Manager ActiveX Control < 2.2.3.5 Remote Code Execution

The Windows remote host contains the Download Manager ActiveX control from Akamai, which helps users download content. The version of this ActiveX control on the remote host reportedly allows downloading and automatic execution of arbitrary code. If an attacker can trick a user on the affected ho...

Path traversal

Multiple absolute path traversal vulnerabilities in certain ActiveX controls in WatchFire AppScan 7.0 allow remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the 1 CompactSave and 2 SaveSession method in one control, and the 3 saveRecordedExploreToFile...

CVE-2008-2015

Multiple absolute path traversal vulnerabilities in certain ActiveX controls in WatchFire AppScan 7.0 allow remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the 1 CompactSave and 2 SaveSession method in one control, and the 3 saveRecordedExploreToFile...

CVE-2008-2015

CVE-2008-2015 affects WatchFire AppScan 7.0 ActiveX controls. The vulnerability is multiple absolute path traversal via full pathnames passed to the CompactSave, SaveSession, and saveRecordedExploreToFile methods in different controls, enabling remote creation/overwriting of arbitrary files and p...

Integrity Clientless Security (ICS) Update 3.7.221.0

Check Point Integrity ™ Clientless Security ICS protects your Web site by detecting and disabling spyware processes and allowing you to enforce security policies before a user logs onto your network. Using ICS you can prevent users with potentially harmful software from accessing your Web site, a...

WatchFire Appscan 7.0 ActiveX Multiple Insecure Methods Exploit

No description provided by source. Multiple Insecure Methods in AppScan Watchfire Web Application Security v 7.0 Remote: Yes An arbitrary file overwrite has been discovered in an ActiveX control installed with the WatchFire Appscan v 7.0. by callAX - Fr33d0m Kn0wl3dg3 1s th3 r341 P0w3r HTML objec...

HP eSupportDiagnostics ActiveX unauthorized access

Unsafe ReadTextFile / ReadValue methods allow file system / registry access...

watchfire-insecure.txt

Multiple Insecure Methods in AppScan Watchfire Web Application Security v 7.0 Remote: Yes An arbitrary file overwrite has been discovered in an ActiveX control installed with the WatchFire Appscan v 7.0. by callAX - Fr33d0m & Kn0wl3dg3 1s th3 r341 P0w3r function Doit File = "c:\autoexec.bat"...

Code injection

Unspecified vulnerability in the HP HPeDiag aka eSupportDiagnostics ActiveX control in hpediag.dll in HP Software Update 4.000.009.002 and earlier allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors. NOTE: this might overlap CVE-2007-6513...

CVE-2008-0712

Unspecified vulnerability in the HP HPeDiag aka eSupportDiagnostics ActiveX control in hpediag.dll in HP Software Update 4.000.009.002 and earlier allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors. NOTE: this might overlap CVE-2007-6513...

CVE-2008-0712

CVE-2008-0712 affects HP Software Update HPeDiag ActiveX control (hpediag.dll) in Windows. A buffer overflow in the GetXmlFromIni method could allow remote code execution when a user loads a crafted INI file via an HTML page, under IE, on HP Software Update v4.000.009.002 or earlier. HP released ...

Path traversal

Absolute path traversal vulnerability in a certain ActiveX control in Zune allows user-assisted remote attackers to overwrite arbitrary files via the SaveToFile method. NOTE: the victim must explicitly allow the code to run...

CVE-2008-1933

Absolute path traversal vulnerability in a certain ActiveX control in Zune allows user-assisted remote attackers to overwrite arbitrary files via the SaveToFile method. NOTE: the victim must explicitly allow the code to run...