Yahoo! Music Jukebox 2.2 - AddImage() ActiveX Remote Buffer Overflow (1)

Yahoo! Music Jukebox 2.2 - AddImage ActiveX Remote Buffer Overflow 1 function unescape$s $res=strtoupperbin2hex$s; $g = roundstrlen$res/4; if $g != strlen$res/4$res.="00"; $out = ""; for $i=0; $i function gsc var hsta = 0x0c0c0c0c; var plc = unescape"%u4343%u4343"+...

Aurigma Image Uploader ImageUploader4.ocx ActiveX控件栈溢出漏洞

BUGTRAQ ID: 27539,27534,27533 Image Uploader是很多站点都在使用的用于上传文件的工具，MySpace重新包装了这个控件提供图形上传支持。 Image Uploader ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 MySpace.Uploader.4.1...

Yahoo! Music Jukebox 2.2 AddImage() ActiveX Remote BOF Exploit

No description provided by source. ?php // 0x48k-ymj by ... // based on /5043 // Bug discovered by Krystian Kloskowski h07 [email protected] function unescape$s $res=strtoupperbin2hex$s; $g = roundstrlen$res/4; if $g != strlen$res/4$res.="00"; $out = "";...

Yahoo! JukeBox MediaGrid ActiveX mediagrid.dll AddBitmap() BOF Exploit

Exploit for unknown platform in category remote exploits ====================================================================== Yahoo! JukeBox MediaGrid ActiveX mediagrid.dll AddBitmap BOF Exploit ====================================================================== Yahoo! JukeBox MediaGrid...

Yahoo! Music Jukebox 2.2 - AddImage() ActiveX Remote Buffer Overflow (2)

Yahoo! Music Jukebox 2.2 - AddImage ActiveX Remote Buffer Overflow 2 // HeapSpray - execute calculator calc.exe shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" + "%u4948%u4949%u4949%u4949%u4949%u4949%u5a51%u436a" + "%u3058%u3142%u4250%u6b41%u4142%u4253%u4232%u3241" +...

Yahoo! Music Jukebox 2.2 AddImage() ActiveX Remote BOF PoC Exploit

Exploit for unknown platform in category dos / poc ================================================================== Yahoo! Music Jukebox 2.2 AddImage ActiveX Remote BOF PoC Exploit ================================================================== Product homepage: http://music.yahoo.com/jukebo...

Yahoo! Music Jukebox 2.2 - AddImage() ActiveX Remote Buffer Overflow (PoC)

Yahoo! Music Jukebox 2.2 - AddImage ActiveX Remote Buffer Overflow PoC Product homepage: http://music.yahoo.com/jukebox/ Tested on:.. - Yahoo! Music Jukebox 2.2.2.056 - MS IE 6 Details:.. ---------------------------------------------------------------- Exception C0000005 ACCESSVIOLATION reading...

Yahoo! Music Jukebox 2.2 - 'AddImage()' ActiveX Remote Buffer Overflow (PoC)

Product homepage: http://music.yahoo.com/jukebox/ Tested on:.. - Yahoo! Music Jukebox 2.2.2.056 - MS IE 6 Details:.. ---------------------------------------------------------------- Exception C0000005 ACCESSVIOLATION reading 41414141 ---------------------------------------------------------------...

Information disclosure

The NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1 and earlier in Namo Web Editor in Sejoong Namo ActiveSquare 6 allows remote attackers to execute arbitrary code via a URL in the argument to the Install method. NOTE: some of these details are obtained from third party...

CVE-2008-0551

The NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1 and earlier in Namo Web Editor in Sejoong Namo ActiveSquare 6 allows remote attackers to execute arbitrary code via a URL in the argument to the Install method. NOTE: some of these details are obtained from third party...

CVE-2008-0551

CVE-2008-0551 documents a vulnerability in the NamoInstaller.NamoInstall.1 ActiveX control (NamoInstaller.dll, version 3.0.0.1 and earlier) used with Sejoong Namo ActiveSquare 6. The flaw allows remote attackers to trigger arbitrary code execution by passing a URL argument to the Install method. ...

CVE-2008-0551

The NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1 and earlier in Namo Web Editor in Sejoong Namo ActiveSquare 6 allows remote attackers to execute arbitrary code via a URL in the argument to the Install method. NOTE: some of these details are obtained from third party...

chilkatftp-insecure.txt

======================================================================= Chilkat FTP ActiveX 2.0 ChilkatCert.dll Insecure Method Web site : www.chilkatsoft.com=======================================================================Author: darkl0rd E-mail: [email protected] Tested on Windows XP...

Persits Software XUpload AddFile()方式远程栈溢出漏洞

BUGTRAQ ID: 27456 XUpload是功能强大的客户端上传ActiveX控件，允许用户同时上传多个文件。 XUpload的ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 XUpload的Persits.XUpload.2 ActiveX控件（XUpload.ocx）没有正确地处理传送给AddFile方式的输入参数，如果用户受骗访问了恶意网页并向该方式传送了超长字符串参数的话，就可能触发栈溢出，导致执行任意指令。 Persits XUpload 3.0.0.4 Persits XUpload 2.1.0.1 厂商补丁： Persits...

Chilkat FTP ActiveX 2.0 (ChilkatCert.dll) Insecure Method Exploit

Exploit for unknown platform in category remote exploits ================================================================= Chilkat FTP ActiveX 2.0 ChilkatCert.dll Insecure Method Exploit =================================================================...

SwiftView Viewer Plugin < 8.3.5 Buffer Overflow

A SwiftView Viewer ActiveX control and/or browser plug-in is installed on the remote Windows host. SwiftView Viewer is an application for viewing and printing print streams. According to its version, the SwiftView ActiveX control / browser plug-in currently installed is affected by a stack-based...

Chilkat FTP ActiveX 2.0 - 'ChilkatCert.dll' Insecure Method

======================================================================= Chilkat FTP ActiveX 2.0 ChilkatCert.dll Insecure Method Web site : www.chilkatsoft.com=======================================================================Author: darkl0rd E-mail: [email protected] Tested on Windows XP...

Skype Web内容区远程代码执行漏洞

BUGTRAQ ID: 27338 CVECAN ID: CVE-2007-5989 Skype是一款流行的P2P VoIP软件，可提供高质量的语音通讯服务。 Skype的ActiveX控件运行环境设置上存在漏洞，远程攻击者可能利用此漏洞在用户系统上执行任意指令。 Skype使用了Internet Explorer Web控件来渲染HTML内容并提供“add video to mood”和“add video to chat”功能。这些功能都是通过JS/ActiveX接口实现的，允许在IE的Local...

Chilkat FTP ActiveX 2.0 (ChilkatCert.dll) Insecure Method Exploit

No description provided by source. body bgcolor="000000" div align="center" precodespan style="font: 10pt verdana;"font color="00FF00"======================================================================= /font/divcenter h1 id="product"font color="00FF00" size="2"Chilkat FTP ActiveX 2.0...

Aurigma Image Uploader ActiveX Control < 4.5.70 Multiple Buffer Overflows

The remote host contains a version of the Aurigma Image Uploader ActiveX control that is reportedly affected by multiple stack buffer overflows. If a remote attacker can trick a user on the affected host into visiting a specially crafted web page, this issue could be leveraged to execute arbitrar...