CVE-2007-6144

CVE-2007-6144 describes a heap-based buffer overflow in the PPlayer.XPPlayer.1 ActiveX control (pplayer.dll_1_work) used by Xunlei Thunder 5.7.4.401. An attacker can trigger arbitrary code execution by supplying a long string to the FlvPlayerUrl property. The vulnerability is tied to a heap overf...

real-overflow.txt

There are multiple stack overflows in the ierpplug.dll ActiveX Control. These issues were originally discovered by shinnai, http://www.securityfocus.com/bid/22811 and http://www.securityfocus.com/bid/21802. I am adding the Import and PlayerProperty functions to the list. This was tested on Window...

BitDefender Online Scanner 8 ActiveX Heap Overflow Exploit

Exploit for unknown platform in category remote exploits ========================================================== BitDefender Online Scanner 8 ActiveX Heap Overflow Exploit ==========================================================...

BitDefender Online Scanner 8 - ActiveX Heap Overflow

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- BitDefender OScan8.ocx / Oscan81.ocx ActiveX Exploit =-=-=-=-=-=-=-=-=-=-=-=-PRIVATE! NOT PUBLIC!=-=-=-=-=-=-=-=-=-=-=-=- http://research.eeye.com/html/advisories/published/AD20071120.html http://secunia.com/advisories/27717...

Tencent QQ 2006 LaunchP2PShare - Multiple Stack Buffer Overflow Vulnerabilities

Tencent QQ 2006 LaunchP2PShare - Multiple Stack Buffer Overflow Vulnerabilities / source: https://www.securityfocus.com/bid/26613/info Tencent QQ is prone to multiple stack-based buffer-overflow vulnerabilities because the application fails to perform adequate boundary checks on user-supplied dat...

richfx-overflow.txt

There are multiple stack overflows in the RichFX nprfxins.dll ActiveX Control. I almost positive that this control was installed with RealNetworks RealPlayer. This was tested on Windows XP SP2 fully patched and IE6. This control is marked safe for scripting. I have not tested code execution. PoC ...

BitDefender Online Anti-Virus Scanner ActiveX OScan8.ocx / OScan8.ocx InitX Method Arbitrary Code Execution

The remote host contains the 'BDSCANONLINE' ActiveX control, used by the BitDefender Online Scanner, a web-based virus scanner. The version of this control installed on the remote host fails to properly validate Unicode values passed to the 'InitX' function as a domain key. If a remote attacker c...

Tencent QQ 2006 LaunchP2PShare - Multiple Stack Buffer Overflow Vulnerabilities

/ source: https://www.securityfocus.com/bid/26613/info Tencent QQ is prone to multiple stack-based buffer-overflow vulnerabilities because the application fails to perform adequate boundary checks on user-supplied data. Successfully exploiting these issues allows remote attackers to execute...

BitDefender Online Scanner 8 - ActiveX Heap Overflow

BitDefender Online Scanner 8 - ActiveX Heap Overflow =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- BitDefender OScan8.ocx / Oscan81.ocx ActiveX Exploit =-=-=-=-=-=-=-=-=-=-=-=-PRIVATE! NOT PUBLIC!=-=-=-=-=-=-=-=-=-=-=-=-...

RealMedia RealPlayer 10.511 - ierpplug.dll PlayerProperty ActiveX Control Buffer Overflow

RealMedia RealPlayer 10.511 - ierpplug.dll PlayerProperty ActiveX Control Buffer Overflow source: https://www.securityfocus.com/bid/26586/info The RealPlayer ActiveX control is prone to a buffer-overflow vulnerability because the software fails to properly bounds-check user-supplied data before...

Lianzhong ConnectAndEnterRoom ActiveX stack overflow vulnerability(exp)-vulnerability warning-the black bar safety net

exeurl = InputBox "please input the download execution exe of the address:", "input","" 'code by NetPatch if exeurl "" then...

aurigma-overflows.txt

There are multiple stack overflows in the Aurigma ImageUploader 4.1 ActiveX control. I believe this control was installed by www.dotphoto.com. PoC as follows: ----------------------- function Check var s = "AAAA"; while s.length ----------------------- Elazar...

A ActiveX 0day exploit tools-vulnerability warning-the black bar safety net

Like 1 0. 5 The following version, this seems to only overflow once, the first time the overflow is successful, the second start will have a repair database hints, points to fix just, cancel. The last test using the"Windows button breakthrough expert" 4.5 K overflow is no problem, but"iecv.exe"th...

RealMedia RealPlayer 10.5/11 - 'ierpplug.dll' PlayerProperty ActiveX Control Buffer Overflow

source: https://www.securityfocus.com/bid/26586/info The RealPlayer ActiveX control is prone to a buffer-overflow vulnerability because the software fails to properly bounds-check user-supplied data before copying it to an insufficiently sized buffer. A remote attacker may exploit this...

RichFX Basic Player 1.1 - ActiveX Control Multiple Buffer Overflow Vulnerabilities

RichFX Basic Player 1.1 - ActiveX Control Multiple Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/26573/info RichFX Basic Player ActiveX Control is prone a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied...

RealPlayer ierpplug.dll ActiveX Exploit

No description provided by source. script language="javascript" eval"function RealExploit var user = navigator.userAgent.toLowerCase; ifuser.indexOf"msie 6"==-1&&user.indexOf"msie 7"==-1 return; ifuser.indexOf"nt 5."==-1 return; VulObject = "IER" + "PCtl.I" + "ERP" + "Ctl.1"; try...

RichFX Basic Player 1.1 - ActiveX Control Multiple Buffer Overflow Vulnerabilities

source: https://www.securityfocus.com/bid/26573/info RichFX Basic Player ActiveX Control is prone a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Successfully exploiting these issues allows remote attackers to execute...

Apple QuickTime RTSP Content-Type header stack buffer overflow

Overview Apple QuickTime contains a stack buffer overflow vulnerability that may allow a remote, unauthenticated attacker to execute arbitrary code or cause a denial-of-service condition. Description Real Time Streaming Protocol RTSP is a protocol that is used by streaming media systems. The Appl...

Aurigma Image Uploader 4.x - ActiveX Control Multiple Remote Stack Buffer Overflow Vulnerabilities

Aurigma Image Uploader 4.x - ActiveX Control Multiple Remote Stack Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/26537/info Aurigma Image Uploader ActiveX control is prone to multiple stack-based buffer-overflow vulnerabilities because it fails to perform adequate...

[Full-disclosure] Aurigma ImageUploader 4.1 Multiple stack overflows

There are multiple stack overflows in the Aurigma ImageUploader 4.1 ActiveX control. I believe this control was installed by www.dotphoto.com. PoC as follows: ----------------------- !-- written by e.b. -- html head script language="JavaScript" DEFER function Check var s = "AAAA"; while s.length...