VLC 0.86 < 0.86d ActiveX Remote Bad Pointer Initialization PoC

No description provided by source. !-- Core Security Technologiess - CoreLabs Advisory http://www.coresecurity.com/corelabs VLC Activex Bad Pointer Initialization Vulnerability Advisory Information Title: VLC Activex Bad Pointer Initialization Vulnerability...

CVE-2007-6224

The RealNetworks RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll, as shipped with RealPlayer 11, allows remote attackers to cause a denial of service browser crash via a certain argument to the GetSourceTransport method...

Design/Logic Flaw

The RealNetworks RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll, as shipped with RealPlayer 11, allows remote attackers to cause a denial of service browser crash via a certain argument to the GetSourceTransport method...

CVE-2007-6235

A certain ActiveX control in RealNetworks RealPlayer 11 allows remote attackers to cause a denial of service application crash via a malformed .au file that triggers a divide-by-zero error. NOTE: this might be related to CVE-2007-4904...

Design/Logic Flaw

A certain ActiveX control in RealNetworks RealPlayer 11 allows remote attackers to cause a denial of service application crash via a malformed .au file that triggers a divide-by-zero error. NOTE: this might be related to CVE-2007-4904...

CVE-2007-6228

Stack-based buffer overflow in the Helper class in the yt.ythelper.2 ActiveX control in Yahoo! Toolbar 1.4.1 allows remote attackers to cause a denial of service browser crash via a long argument to the c method...

CVE-2007-6224

CVE-2007-6224 affects RealNetworks RealAudioObjects.RealAudio ActiveX control (rmoc3260.dll) shipped with RealPlayer 11. A crafted argument to GetSourceTransport can cause a denial of service resulting in a browser crash. The vulnerable component is the RealAudio ActiveX control; impact is a part...

CVE-2007-6235

The CVE-2007-6235 issue concerns RealNetworks RealPlayer 11, specifically an ActiveX control that can be abused by a malformed .au file to trigger a divide-by-zero error, leading to an application crash (DoS). This is a remote-access vulnerability via a crafted multimedia file; the available conn...

CVE-2007-6235

A certain ActiveX control in RealNetworks RealPlayer 11 allows remote attackers to cause a denial of service application crash via a malformed .au file that triggers a divide-by-zero error. NOTE: this might be related to CVE-2007-4904...

CVE-2007-6228

The CVE-2007-6228 issue is a stack-based buffer overflow in the yt.ythelper.2 ActiveX control used by Yahoo! Toolbar 1.4.1. A long argument to the c() method can remotely trigger a denial of service (browser crash). Public documentation notes no patch from the vendor at the time of reports; users...

PT-2007-7124 · Realnetworks · Realplayer

Name of the Vulnerable Software and Affected Versions: RealPlayer version 11 Description: A certain ActiveX control in RealPlayer allows remote attackers to cause a denial of service, resulting in an application crash, via a malformed .au file that triggers a divide-by-zero error. Recommendations...

VideoLAN VLC Media Player 0.86 0.86d - ActiveX Remote Bad Pointer Initialization

VideoLAN VLC Media Player 0.86 0.86d - ActiveX Remote Bad Pointer Initialization var mm = null; if target != null var param1 = unescape"%u0505%u0505"; var salame = "defaultV"; var salame2 = 1; var salame3 = 0; ag = unescape"%uCCCC%uCCCC"; sh = unescape"%u9090%u909...

Microsoft Windows媒体数码版权管理ActiveX控件缓冲区溢出漏洞

Microsoft Windows Media Digital Rights Management是一款微软公司提供的媒体数字版权管理应用程序。 Microsoft Windows DRM包含的ActiveX控件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 问题是"drmstor.dll"库包含的ActiveX控件对StoreLicense方法的参数缺少充分边界检查，构建恶意的WEB页，诱使用户打开，可导致以应用程序进程权限执行任意指令。 Microsoft Windows Media DRM 目前没有解决方案提供：...

PT-2007-7113 · Realnetworks · Realplayer

Name of the Vulnerable Software and Affected Versions: RealPlayer version 11 Description: The issue allows remote attackers to cause a denial of service, resulting in a browser crash, by providing a certain argument to the GetSourceTransport method in the RealAudioObjects.RealAudio ActiveX contro...

Yahoo! Toolbar Helper类ActiveX控件远程缓冲区拒绝服务漏洞

Yahoo! Toolbar是基于浏览器的插件。 Yahoo! Toolbar Helper类ActiveX控件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 问题存在于Yahoo! Toolbar Helper类中的c方法中，构建超长字符串作为参数数据，并诱使用户访问，可导致以应用程序进程权限执行任意指令。 Yahoo! Toolbar 1.4.1 目前没有详细解决方案提供： http://toolbar.yahoo.com/ ---------------------- !-- written by e.b. -- html head script...

VideoLAN VLC Media Player 0.86 < 0.86d - ActiveX Remote Bad Pointer Initialization

var mm = null; if target != null var param1 = unescape"%u0505%u0505"; var salame = "defaultV"; var salame2 = 1; var salame3 = 0; ag = unescape"%uCCCC%uCCCC"; sh = unescape"%u9090%u9090%u9090%u9090%u9090%u9090%u9090%u9090%"; sz = sh.length 2;...

VLC 0.86 < 0.86d ActiveX Remote Bad Pointer Initialization PoC

Exploit for unknown platform in category dos / poc ============================================================== VLC 0.86 var mm = null; if target != null...

RealPlayer RMOC3260.DLL ActiveX控件导入拒绝服务漏洞

RealPlayer是一款流行的媒体播放程序。 RealPlayer包含的RMO3260.DLL ActiveX控件处理存在边界条件错误，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 问题存在于rmoc3260.ll中的GetSourceTransport函数中，构建恶意的文件，诱使用户打开，可导致应用程序崩溃。 Real Networks RealPlayer 11 目前没有解决方案提供： http://www.realnetworks.com/ 1，拷贝和粘贴如下代码到filepoc.wsf。 2，双击运行：...

Integrity Clientless Security (ICS) Update 3.7.193.0

Check Point Integrity ™ Clientless Security ICS protects your Web site by detecting and disabling spyware processes and allowing you to enforce security policies before a user logs onto your network. Using ICS you can prevent users with potentially harmful software from accessing your Web site, a...

VLC Activex Bad Pointer Initialization Vulnerability

Advisory ID Internal CORE-2007-1004 1. Advisory Information Title: VLC Activex Bad Pointer Initialization Vulnerability Advisory ID: CORE-2007-1004 Advisory URL: https://www.coresecurity.com/core-labs/advisories/vlc-activex--vulnerability Date published: 2007-12-03 Date of last update: 2007-12-03...