10868 matches found
PT-2008-1509 · Macrovision · Installshield Installscript One-Click Install (Oci) Activex Control
Name of the Vulnerable Software and Affected Versions: Macrovision InstallShield InstallScript One-Click Install OCI ActiveX control version 12.0 before SP2 Description: The issue concerns the failure of the Macrovision InstallShield InstallScript One-Click Install OCI ActiveX control to validate...
chilkathttp-overwrite.txt
-------------------------------------------------------------------- ChilkatHttp ActiveX 2.3 Arbitrary Files Overwrite url: www.chilkatsoft.com Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose. Use it at your own risk...
Chilkat HTTP ChilkatHttp.dll ActiveX控件不安全调用漏洞
BUGTRAQ ID: 28546 Chilkat HTTP是用于与服务器通讯的HTTP客户端组件。 Chilkat HTTP组件的ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞非授权访问系统上的文件。 Chilkat HTTP组件的ChilkatHttp.ChilkatHttp.1和ChilkatHttp.ChilkatHttpRequest.1 ActiveX控件（ChilkatHttp.dll）没有正确地验证对SaveLastError方式的输入参数，如果用户受骗访问了恶意网页的话，就可能导致覆盖并破坏系统上的任意文件。 Chilkat Software...
Macrovision InstallShield InstallScript OCI控件不可信任库代码执行漏洞
BUGTRAQ ID: 28533 CVECAN ID: CVE-2007-5661 MacroVision InstallShield是很多软件厂商都在使用的安装程序解决方案。 InstallShield所安装的InstallScript One-Click Install ActiveX控件加载了不可信任的函数库，可能允许远程攻击者以当前登录用户的权限执行任意命令。 InstallShield InstallScript One-Click Install控件的属性如下： 文件：%WINDIR%\Downloaded Program Files\setup.exe...
CA BrightStor ARCserve Backup ListCtrl ActiveX (ListCtrl.ocx) AddColumn() Method Overflow
The version of the ListCtrl ActiveX control included with various CA products and installed on the remote host contains a buffer overflow that can be triggered by a long argument to the 'AddColumn' method. If an attacker can trick a user on the affected host into visiting a specially- crafted web...
CVE-2008-1647
The ChilkatHttp.ChilkatHttp.1 and ChilkatHttp.ChilkatHttpRequest.1 ActiveX controls in ChilkatHttp.dll 2.4.0.0, 2.3.0.0, and earlier in ChilkatHttp ActiveX expose the unsafe SaveLastError method, which allows remote attackers to overwrite arbitrary files. NOTE: some of these details are obtained...
Information disclosure
The ChilkatHttp.ChilkatHttp.1 and ChilkatHttp.ChilkatHttpRequest.1 ActiveX controls in ChilkatHttp.dll 2.4.0.0, 2.3.0.0, and earlier in ChilkatHttp ActiveX expose the unsafe SaveLastError method, which allows remote attackers to overwrite arbitrary files. NOTE: some of these details are obtained...
CVE-2008-1647
The CVE-2008-1647 entry concerns ChilkatHttp.ChilkatHttp.1 and ChilkatHttp.ChilkatHttpRequest.1 ActiveX controls in ChilkatHttp.dll versions 2.4.0.0, 2.3.0.0 and earlier. The vulnerability arises from exposing the unsafe SaveLastError method, which allows remote attackers to overwrite arbitrary f...
CVE-2008-1647
The ChilkatHttp.ChilkatHttp.1 and ChilkatHttp.ChilkatHttpRequest.1 ActiveX controls in ChilkatHttp.dll 2.4.0.0, 2.3.0.0, and earlier in ChilkatHttp ActiveX expose the unsafe SaveLastError method, which allows remote attackers to overwrite arbitrary files. NOTE: some of these details are obtained...
Real Player rmoc3260.dll ActiveX Control Remote Code Execution Exploit
No description provided by source. !-- Real Player rmoc3260.dll ActiveX Control Remote Code Execution ExploitHeap Corruption written by e.b. Tested on Windows XP SP2fully patched English, IE6, rmoc3260.dll version 6.0.10.45 Thanks to h.d.m. and the Metasploit crew -- html head titleReal Player...
realplayer_console.rb.txt
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' module Msf class...
realplayer-activexexec.txt
Real Player rmoc3260.dll ActiveX Control Remote Code Execution Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" +...
Design/Logic Flaw
The 1 ltmmCaptureCtrl Class, 2 ltmmConvertCtrl Class, and 3 ltmmPlayCtrl Class ActiveX controls ltmm15.dll 15.1.0.17 and earlier in LEADTOOLS Multimedia Toolkit 15 allow attackers to overwrite arbitrary files via the SaveSettingsToFile method...
CVE-2008-1605
The 1 ltmmCaptureCtrl Class, 2 ltmmConvertCtrl Class, and 3 ltmmPlayCtrl Class ActiveX controls ltmm15.dll 15.1.0.17 and earlier in LEADTOOLS Multimedia Toolkit 15 allow attackers to overwrite arbitrary files via the SaveSettingsToFile method...
CVE-2008-1605
CVE-2008-1605 affects LEADTOOLS Multimedia Toolkit 15 ActiveX controls (ltmmCaptureCtrl, ltmmConvertCtrl, ltmmPlayCtrl in ltmm15.dll
CVE-2008-1605
The 1 ltmmCaptureCtrl Class, 2 ltmmConvertCtrl Class, and 3 ltmmPlayCtrl Class ActiveX controls ltmm15.dll 15.1.0.17 and earlier in LEADTOOLS Multimedia Toolkit 15 allow attackers to overwrite arbitrary files via the SaveSettingsToFile method...
RealPlayer rmoc3260.dll ActiveX Control Heap Corruption
This module exploits a heap corruption vulnerability in the RealPlayer ActiveX control. By sending a specially crafted string to the 'Console' property in the rmoc3260.dll control, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download...
Real Player - rmoc3260.dll ActiveX Control Remote Code Execution
Real Player - rmoc3260.dll ActiveX Control Remote Code Execution Real Player rmoc3260.dll ActiveX Control Remote Code Execution Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 =...
Macrovision InstallShield InstallScript One-Click Install ActiveX Arbitrary Code Execution
The remote host contains the InstallScript One-Click Install ActiveX control distributed with Macrovision's InstallShield. The installed version of that control reportedly allows an attacker to download arbitrary DLL files from a website to be executed as part of a web install. If a remote attack...
