Move Networks媒体播放器QMPUpgrade.dll ActiveX控件栈溢出漏洞

BUGTRAQ ID: 27438 Move Networks Media Player是一款网络流媒体播放器。 Move Networks的ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 Move Networks所安装的QMPUpgrade.Upgrade.1 ActiveX控件（QMPUpgrade.dll）没有正确地处理传送给Upgrade方式的参数，如果用户受骗访问了恶意网页并向该方式传送了超长参数的话，就可能触发栈溢出，导致执行任意指令。 Move Networks Move Media Player 1.0.0.1 Move Networ...

Aurigma Image Uploader ActiveX Control < 4.5.70 Multiple Buffer Overflows

The remote host contains a version of the Aurigma Image Uploader ActiveX control that is reportedly affected by multiple stack buffer overflows. If a remote attacker can trick a user on the affected host into visiting a specially crafted web page, this issue could be leveraged to execute arbitrar...

CVE-2008-0492

Stack-based buffer overflow in the Persits.XUpload.2 ActiveX control in XUpload.ocx 3.0.0.4 and earlier in Persits XUpload 3.0 allows remote attackers to execute arbitrary code via a long argument to the AddFile method. NOTE: some of these details are obtained from third party information...

Stack overflow

Stack-based buffer overflow in the Persits.XUpload.2 ActiveX control in XUpload.ocx 3.0.0.4 and earlier in Persits XUpload 3.0 allows remote attackers to execute arbitrary code via a long argument to the AddFile method. NOTE: some of these details are obtained from third party information...

CVE-2008-0492

CVE-2008-0492 affects the Persits XUpload ActiveX control (XUpload.ocx 3.0.0.4 and earlier). A stack-based buffer overflow is triggered by a long argument to the AddFile method, allowing remote code execution. The CVSS notes a network vector, no authentication, and partial impact to confidentiali...

Namo Web Editor NamoInstaller.dll ActiveX控件任意命令执行漏洞

BUGTRAQ ID: 27453 Namo Web Editor是一个软件包，允许Web应用人员为网站用户提供创建文档、上传文件等支持。 Namo Web Editor的ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞在用户系统上执行任意命令。 Namo Web Editor软件包中所安装的NamoInstaller.NamoInstall.1 ActiveX控件（NamoInstaller.dll）没有正确地验证对Install方式的输入参数，如果用户受骗访问了恶意网页并向该方式传送了恶意参数的话，就可能导致下载并执行恶意程序。 SJ NAMO Web Editor...

chilkatmail-insecure.txt

Chilkat Mail ActiveX 7.8 ChilkatCert.dll Insecure Method Exploit Site : www.chilkatsoft.com =================================================== Tested on Windows XP Professional SP2 , with Internet Explorer 6 Author : darkl0rd E-Mail : lldarkl0rdllatyahoodotcom SaveLastError Sub lose...

SwiftView ActiveX control and plug-in stack buffer overflow

Overview The SwiftView ActiveX control and plug-in contain a stack buffer overflow, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description SwiftView is software used to view or print PCL, HPGL, and TIFF files. SwiftSend is a product used f...

ImageShack Toolbar ImageShackToolbar.dll控件不安全方式漏洞

BUGTRAQ ID: 27439 ImageShack Toolbar是用于向ImageShack网站上传文件的浏览器内嵌工具栏。 ImageShack Toolbar的ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞获取系统文件。 ImageShack Toolbar所安装的ImageShackToolbar.FileUploader.1...

Chilkat Mail ActiveX 7.8 (ChilkatCert.dll) Insecure Method Exploit

No description provided by source. body bgcolor="000000" p align="center"bfont face="Verdana" color="00FF00" size="2"Chilkat Mail ActiveX 7.8 ChilkatCert.dll Insecure Method Exploit/font/b/p p align="center"bfont face="Verdana" size="2" color="00FF00"Site : a href="http://www.chilkatsoft.com"font...

Security feature bypass

A certain ActiveX control in Comodo AntiVirus 2.0 allows remote attackers to execute arbitrary commands via the ExecuteStr method...

CVE-2008-0470

A certain ActiveX control in Comodo AntiVirus 2.0 allows remote attackers to execute arbitrary commands via the ExecuteStr method...

Stack overflow

Stack-based buffer overflow in the QMPUpgrade.Upgrade.1 ActiveX control in QMPUpgrade.dll 1.0.0.1 in Move Networks Upgrade Manager allows remote attackers to execute arbitrary code via a long first argument to the Upgrade method. NOTE: some of these details are obtained from third party informati...

CVE-2008-0477

CVE-2008-0477 describes a stack-based buffer overflow in the QMPUpgrade.Upgrade.1 ActiveX control (QMPUpgrade.dll 1.0.0.1) used by Move Networks Upgrade Manager. An attacker can trigger arbitrary code execution by passing a long first argument to the Upgrade method, enabling remote code execution...

CVE-2008-0470

CVE-2008-0470 involves a vulnerability in Comodo Antivirus 2.0 where a specific ActiveX control allows remote attackers to execute arbitrary commands through the ExecuteStr method. The connected documents confirm the affected product and the root cause (ActiveX control enabling remote command exe...

CVE-2008-0470

A certain ActiveX control in Comodo AntiVirus 2.0 allows remote attackers to execute arbitrary commands via the ExecuteStr method...

CVE-2008-0477

Stack-based buffer overflow in the QMPUpgrade.Upgrade.1 ActiveX control in QMPUpgrade.dll 1.0.0.1 in Move Networks Upgrade Manager allows remote attackers to execute arbitrary code via a long first argument to the Upgrade method. NOTE: some of these details are obtained from third party informati...

Chilkat Mail ActiveX 7.8 - ChilkatCert.dll Insecure Method

Chilkat Mail ActiveX 7.8 - ChilkatCert.dll Insecure Method Chilkat Mail ActiveX 7.8 ChilkatCert.dll Insecure Method Exploit Site : www.chilkatsoft.com =================================================== Tested on Windows XP Professional SP2 , with Internet Explorer 6 Author : darkl0rd E-Mail :...

Chilkat Mail ActiveX 7.8 - 'ChilkatCert.dll' Insecure Method

Chilkat Mail ActiveX 7.8 ChilkatCert.dll Insecure Method Exploit Site : www.chilkatsoft.com =================================================== Tested on Windows XP Professional SP2 , with Internet Explorer 6 Author : darkl0rd E-Mail : lldarkl0rdllatyahoodotcom SaveLastError Sub lose...

Chilkat Mail ActiveX 7.8 (ChilkatCert.dll) Insecure Method Exploit

No description provided by source. body bgcolor="000000" p align="center"bfont face="Verdana" color="00FF00" size="2"Chilkat Mail ActiveX 7.8 ChilkatCert.dll Insecure Method Exploit/font/b/p p align="center"bfont face="Verdana" size="2" color="00FF00"Site : a href="http://www.chilkatsoft.com"font...