Design/Logic Flaw

The IBizEBank.FIProfile.1 ActiveX control in fiprofile20.ocx in IBiz E-Banking Integrator formerly IBiz OFX Integrator 2.0.2932 exposes the unsafe WriteOFXDataFile method, which allows remote attackers to overwrite arbitrary files via a full pathname in the argument. NOTE: some of these details a...

CVE-2008-1725

The CVE-2008-1725 entry concerns the IBiz E-Banking Integrator’s ActiveX control (IBizEBank.FIProfile.1) in fiprofile20.ocx, version 2.0.2932. The vulnerability arises from the unsafe WriteOFXDataFile method, which allows a remote attacker to overwrite arbitrary files by passing a full pathname a...

CVE-2008-1725

The IBizEBank.FIProfile.1 ActiveX control in fiprofile20.ocx in IBiz E-Banking Integrator formerly IBiz OFX Integrator 2.0.2932 exposes the unsafe WriteOFXDataFile method, which allows remote attackers to overwrite arbitrary files via a full pathname in the argument. NOTE: some of these details a...

Microsoft Windows hxvz.dll ActiveX控件堆溢出漏洞（MS08-023）

BUGTRAQ ID: 28606 CVECAN ID: CVE-2008-1086 Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Help的ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 Microsoft Help 2.5安装了以下ActiveX控件： ProgID：HxVz.HxTocCtrl.1 CLSID：314111B8-A502-11D2-BBCA-00C04F8EC294 文件：%PROGRAM DIR%\Common Files\Microsoft Shared\Help\hxvz.dll...

ibiz-insecure.txt

-------------------------------------------------------------------- IBiz E-Banking Integrator V2 ActiveX Edition Insecure Method Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose. Use it at your own risk. Author will be no...

IBiz E-Banking Integrator V2 ActiveX Edition Insecure Method Exploit

No description provided by source. -------------------------------------------------------------------- IBiz E-Banking Integrator V2 ActiveX Edition Insecure Method Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose. Use it ...

Flash Player < 8.0.42.0 / 9.0.124.0 Multiple Vulnerabilities (APSB08-11)

According to its version number, the instance of Flash Player on the remote Windows host is affected by multiple issues, including several that could allow for arbitrary code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

[Full-disclosure] iDefense Security Advisory 04.08.08: Microsoft HxTocCtrl ActiveX Control Invalid Param Heap Corruption Vulnerability

iDefense Security Advisory 04.08.08 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 08, 2008 I. BACKGROUND The HxTocCtrl ActiveX Control is a library used by the Microsoft Help engine. More information is available at the following website. http://en.wikipedia.org/wiki/MicrosoftHelp2 I...

Microsoft Windows multiple ActiveX elements security update

Code execution in hxvz.dll...

IBiz E-Banking Integrator 2.0 - ActiveX Edition Insecure Method

IBiz E-Banking Integrator 2.0 - ActiveX Edition Insecure Method -------------------------------------------------------------------- IBiz E-Banking Integrator V2 ActiveX Edition Insecure Method Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for...

IBiz E-Banking Integrator V2 ActiveX Edition Insecure Method Exploit

Exploit for unknown platform in category remote exploits ==================================================================== IBiz E-Banking Integrator V2 ActiveX Edition Insecure Method Exploit ====================================================================...

Tumbleweed SecureTransport vcst_eu.dll ActiveX控件远程栈溢出漏洞

BUGTRAQ ID: 28666 Tumbleweed SecureTransport是安全的文件传输解决方案，允许用户通过Internet传输敏感文件。 SecureTransport的FileTransfer ActiveX控件（vcsten.dll，CLSID：38681fbd-d4cc-4a59-a527-b3136db711d3）中存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 相关代码： interface IActiveXTransfer : IDispatch id0x00000007, helpstring"method TransferFile"...

Symantec AutoFix支持工具SYMADATA.DLL控件多个安全漏洞

BUGTRAQ ID: 28507,28509 CVECAN ID: CVE-2008-0312,CVE-2008-0313 Symantec AutoFix是一些Norton产品中所使用的用于排除Symantec客户端产品中问题的工具。 AutoFix支持工具中所捆绑的ActiveX控件（SYMADATA.DLL）实现上存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 控件为： Clsid：3451DEDE-631F-421c-8127-FD793AFC6CC8 文件：C:\PROGRA1\COMMON1\SYMANT1\SUPPOR1\SymAData.dll Version...

CDNetworks Nefficient Download ActiveX控件多个安全漏洞

BUGTRAQ ID: 28666 CDNetworks是亚洲最大的CDN服务供应商，提供各种在线游戏和视频服务。 CDNetworks所提供的ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 Neffycient...

IBiz E-Banking Integrator 2.0 - ActiveX Edition Insecure Method

-------------------------------------------------------------------- IBiz E-Banking Integrator V2 ActiveX Edition Insecure Method Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose. Use it at your own risk. Author will be no...

Memory corruption

The HxTocCtrl ActiveX control hxvz.dll, as used in Microsoft Internet Explorer 5.01 SP4 and 6 SP1, in Windows XP SP2, Server 2003 SP1 and SP2, Vista SP1, and Server 2008, allows remote attackers to execute arbitrary code via malformed arguments, which triggers memory corruption...

CVE-2008-1086

The HxTocCtrl ActiveX control hxvz.dll, as used in Microsoft Internet Explorer 5.01 SP4 and 6 SP1, in Windows XP SP2, Server 2003 SP1 and SP2, Vista SP1, and Server 2008, allows remote attackers to execute arbitrary code via malformed arguments, which triggers memory corruption...

CVE-2008-1086

The CVE-2008-1086 issue concerns the hxvz.dll ActiveX control (HxTocCtrl) used by Microsoft Help 2.5 and exposed in Internet Explorer on Windows XP SP2, Server 2003 SP1/SP2, Vista SP1, and Server 2008. The vulnerability is a memory corruption flaw triggered by malformed arguments to the ActiveX c...

CVE-2008-1086

The HxTocCtrl ActiveX control hxvz.dll, as used in Microsoft Internet Explorer 5.01 SP4 and 6 SP1, in Windows XP SP2, Server 2003 SP1 and SP2, Vista SP1, and Server 2008, allows remote attackers to execute arbitrary code via malformed arguments, which triggers memory corruption...

Stack overflow

Stack-based buffer overflow in the AutoFix Support Tool ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products, including Norton 360 1.0, AntiVirus 2006 through 2008, Internet Security 2006 through 2008, and System Works 2006 through 2008, allows remote attackers to execute...