CVE-2008-0399

Multiple buffer overflows in Toshiba Surveillance Surveillix RecordSend ActiveX control MeIpCamX.DLL 1.0.0.4 allow remote attackers to execute arbitrary code via long arguments to the 1 SetPort and 2 SetIpAddress methods...

RTS Sentry PTZCamPanelCtrl ActiveX控件远程栈溢出漏洞

BUGTRAQ ID: 27304 RTS Sentry是系列视频监控和记录设备。 RTS Sentry的ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 RTS Sentry监控设备客户端所安装的PTZCamPanelCtrl ActiveX控件（CamPanel.dll）没有正确地处理对ConnectServer函数的输入参数，如果用户受骗访问了恶意站点并向该方式传送了超长user参数的话，就可能触发栈溢出，导致执行任意指令。 RTS Sentry CamPanel.dll 2.1.0.2 RTS Sentry ----------...

Toshiba Surveillix MeIpCamX.DLL ActiveX控件远程栈溢出漏洞

BUGTRAQ ID: 27360 Toshiba Surveillix是一套网络视频监控和记录设备。 Toshiba Surveillix的AcitveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 Toshiba Surveillix客户端所安装的MeIpCamX.RecordSend.1控件（MeIpCamX.dll）没有正确地验证对SetPort或SetIpAddress函数的输入，如果用户访问了恶意网页并向上述函数传送了超长的字符串参数的话，就可能触发栈溢出，导致执行任意指令。 Toshiba Surveillix MeIpCamX.DLL 1.0.4...

Race condition

Race condition in the Enterprise Tree ActiveX control EnterpriseControls.dll 11.5.0.313 in Crystal Reports XI Release 2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via the SelectedSession method, which triggers a buffer overflow...

CVE-2008-0379

Race condition in the Enterprise Tree ActiveX control EnterpriseControls.dll 11.5.0.313 in Crystal Reports XI Release 2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via the SelectedSession method, which triggers a buffer overflow...

CVE-2008-0380

CVE-2008-0380 affects the Digital Data Communications RtspVaPgCtrl ActiveX control (RtspVapgDecoder.dll 1.1.0.29). The vulnerability is a buffer overflow triggered by a long MP4Prefix property, allowing remote attackers to execute arbitrary code. The exploit is described in multiple sources as a ...

CVE-2008-0380

Buffer overflow in the Digital Data Communications RtspVaPgCtrl ActiveX control RtspVapgDecoder.dll 1.1.0.29 allows remote attackers to execute arbitrary code via a long MP4Prefix property...

CVE-2008-0379

CVE-2008-0379 affects Crystal Reports XI Release 2 (Crystal Reports XI, Enterprise Tree ActiveX control in EnterpriseControls.dll 11.5.0.313). The vulnerability is a race condition in the SelectedSession method that can trigger a buffer overflow, allowing remote attackers to cause a denial of ser...

CVE-2008-0379

Race condition in the Enterprise Tree ActiveX control EnterpriseControls.dll 11.5.0.313 in Crystal Reports XI Release 2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via the SelectedSession method, which triggers a buffer overflow...

PT-2008-2012 · Business Objects · Crystal Reports Xi Release 2

Name of the Vulnerable Software and Affected Versions: Crystal Reports XI Release 2 version 11.5.0.313 Description: The issue is related to a race condition in the Enterprise Tree ActiveX control, which can be exploited by remote attackers to cause a denial of service or possibly execute arbitrar...

Lycos FileUploader Control ActiveX Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================================= Lycos FileUploader Control ActiveX Remote Buffer Overflow Exploit ================================================================= Lycos FileUploader Control Buffer Overflow...

Crystal Reports 'EnterpriseControls.dll' ActiveX控件缓冲区溢出漏洞

BUGTRAQ ID: 27333 CNCAN ID:CNCAN-2008012103 Crystal Reports XI是一款用于专业数据报表应用程序。 Crystal Reports XI包含的ActiveX控件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 问题存在于"SelectedSession"方法中，在初始化这个组件中，在线程中存在竞争条件错误，同组件的4字节会被EIP覆盖，精心构建4字节数据，可能以应用程序进程权限执行任意指令。 Business Objects Crystal Reports XI Release 2 目前没有解决方案提供：...

Skype does not properly filter input from external websites

Overview The Skype client does not properly filter user-supplied input from websites that provide video content to Skype users. Description Skype is a peer-to-peer application that provides Voice over IP VoIP and Instant Messaging services. The Skype client is available for the Microsoft Windows,...

Microsoft Visual FoxPro vfp6r.dll ActiveX控件任意代码执行漏洞

BUGTRAQ ID: 27205 Visual FoxPro是微软发布的数据库开发工具。 Visual FoxPro的vfp6r.dll ActiveX控件没有正确地验证对foxcommand或DoCmd方式的输入参数，如果用户受骗访问了恶意站点的话，就可能导致执行任意指令。 Microsoft Visual FoxPro 6.0 Microsoft --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.microsoft.com/technet/security/ pre codespan...

Toshiba Surveillance Surveillix DVR 'MeIpCamX.dll' 1.0 - ActiveX Control Buffer Overflow

source: https://www.securityfocus.com/bid/27360/info Surveillix DVR 'MeIpCamX.DLL' ActiveX control is prone to multiple buffer-overflow vulnerabilities because the application fails to perform adequate boundary checks on user-supplied data. Successfully exploiting these issues allows remote...

crystal-dos.txt

Application: Crystal Reports XI Release 2 Enterprise Tree Control Remote BoF/Dos www.businessobjects.com Versions: 11 Platforms: Windows XP Professional Bug: buffer-overflow Exploitation: remote Date: 2007-01-16 Author: shinnai e-mail: shinnaiatautisticidotorg web: http://shinnai.altervista.org 1...

Macrovision InstallShield Update Service ActiveX Control Code Execution (CVE-2007-5660)

Macrovision InstallShield is a software tool for creating installers or software packages. This vulnerability is due to errors in the Macrovision InstallShield Update Service ActiveX Control when handling webpage scripts. To trigger this issue, an attacker may create a malicious web page that wil...

LinkedIn Toolbar IEContextMenu Buffer Overflow (CVE-2007-3955)

A buffer overflow vulnerability exists in LinkedIn Internet Explorer Toolbar. LinkedIn is a popular business-oriented networking site. This vulnerability is due to errors in the LinkedIn Internet Explorer Toolbar IEContextMenu ActiveX Control when handling overly long arguments sent to the search...

VideoLAN VLC axvlc.dll ActiveX Crafted Parameter Remote Code Execution (CVE-2007-6262)

VLC media player is a free multimedia player for various audio and video formats as well as DVDs, VCDs, and various streaming protocols. This vulnerability is due to recursive object release as a result from flaws in the VideoLAN VLC ActiveX Control. To trigger this issue, an attacker may create ...

Crystal Reports XI Release 2 (Enterprise Tree Control) - ActiveX Buffer Overflow (Denial of Service) (PoC)

Crystal Reports XI Release 2 Enterprise Tree Control - ActiveX Buffer Overflow Denial of Service PoC Application: Crystal Reports XI Release 2 Enterprise Tree Control Remote BoF/Dos www.businessobjects.com Versions: 11 Platforms: Windows XP Professional Bug: buffer-overflow Exploitation: remote...