edraw53-activex.txt

----------------------------------------------------------------------------- EDraw Office Viewer Component 5.3 "FtpDownloadFile" Remote BoF url: http://www.ocxt.com/officeviewer.php Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educationa...

EDraw Office Viewer ActiveX (officeviewer.ocx) HttpDownloadFileToTempDir Method Overflow

The remote host contains the EDraw Office Viewer Component, an ActiveX control for working with Microsoft Office documents. The version of this control installed on the remote host contains a buffer overflow that can be triggered by a long value for the first argument of the...

Yahoo! Messenger YVerInfo.dll ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in the Yahoo! Messenger ActiveX Control YVerInfo.dll 'Yahoo! Messenger YVerInfo.dll ActiveX Control Buffer Overflow', 'Description' = %q This module exploits a stack buffer overflow in the Yahoo! Messenger ActiveX Control YVerInfo.dll MSFLICENSE,...

Microsoft Visual Studio PDWizard.ocx ActiveX vulnerability

Added: 09/30/2007 CVE: CVE-2007-4891 BID: 25638 OSVDB: 37106 Background Microsoft Visual Studio is a product for facilitating software development on Windows operating systems. Problem ActiveX controls contained in the PDWizard.ocx file in Microsoft Visual Studio 6.0 expose the StartProcess metho...

Microsoft Visual Studio PDWizard.ocx ActiveX vulnerability

Added: 09/30/2007 CVE: CVE-2007-4891 BID: 25638 OSVDB: 37106 Background Microsoft Visual Studio is a product for facilitating software development on Windows operating systems. Problem ActiveX controls contained in the PDWizard.ocx file in Microsoft Visual Studio 6.0 expose the StartProcess metho...

Microsoft Visual Studio PDWizard.ocx ActiveX vulnerability

Added: 09/30/2007 CVE: CVE-2007-4891 BID: 25638 OSVDB: 37106 Background Microsoft Visual Studio is a product for facilitating software development on Windows operating systems. Problem ActiveX controls contained in the PDWizard.ocx file in Microsoft Visual Studio 6.0 expose the StartProcess metho...

Microsoft Visual Studio PDWizard.ocx ActiveX vulnerability

Added: 09/30/2007 CVE: CVE-2007-4891 BID: 25638 OSVDB: 37106 Background Microsoft Visual Studio is a product for facilitating software development on Windows operating systems. Problem ActiveX controls contained in the PDWizard.ocx file in Microsoft Visual Studio 6.0 expose the StartProcess metho...

Ask Toolbar ToolbarSettings ActiveX控件远程栈溢出漏洞

BUGTRAQ ID: 25785 Ask Toolbar是安装在Internet Explorer和Firefox浏览器上的搜索工具栏。 Ask Toolbar的ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 AskJeevesToolBar.SettingsPlugin.1 ActiveX控件（askBar.dll）在处理ShortFormat属性时存在栈溢出漏洞。如果用户受骗访问了恶意网页并向该属性传送了超过500字节的超长字符串的话，就可能触发这个溢出，导致执行任意指令。 Ask.com Ask Toolbar 4.0.2.53...

ebCrypt ActiveX控件任意文件覆盖及拒绝服务漏洞

BUGTRAQ ID: 25789,25787 ebCrypt是一套ActiveX组件集，为VisualBasic、VBScript、JScript等提供强加密算法。 ebCrypt的ActiveX控件实现上存在多个安全漏洞，远程攻击者可能利用这些漏洞控制用户系统或导致拒绝服务。 ebCrypt.ebcPRNGenerator.1 ActiveX控件（ebCrypt.dll）中的SaveToFile方式保存了参数所指定的文件，这可能导致覆盖并破坏系统上的任意文件；如果向AddString方式传送了不少于一个字符的话，还可能导致拒绝服务。以下是异常的dump： Access violati...

CVE-2007-5110

Absolute path traversal vulnerability in the EbCrypt.ebcPRNGenerator.1 ActiveX control in EBCRYPT.DLL 2.0.0.2087 and earlier in EB Design ebCrypt allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the SaveToFile method. NOTE: some of these detail...

Path traversal

Absolute path traversal vulnerability in the EbCrypt.ebcPRNGenerator.1 ActiveX control in EBCRYPT.DLL 2.0.0.2087 and earlier in EB Design ebCrypt allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the SaveToFile method. NOTE: some of these detail...

Stack overflow

Stack-based buffer overflow in the AskJeevesToolBar.SettingsPlugin.1 ActiveX control in askBar.dll in IAC Search & Media ask.com Ask Toolbar 4.0.2.53 and earlier allows remote attackers to execute arbitrary code via a long ShortFormat property value. NOTE: some of these details are obtained from...

Security feature bypass

A certain ActiveX control in EBCRYPT.DLL 2.0 in EB Design ebCrypt allows remote attackers to cause a denial of service crash via a string argument to the AddString method...

CVE-2007-5107

Stack-based buffer overflow in the AskJeevesToolBar.SettingsPlugin.1 ActiveX control in askBar.dll in IAC Search & Media ask.com Ask Toolbar 4.0.2.53 and earlier allows remote attackers to execute arbitrary code via a long ShortFormat property value. NOTE: some of these details are obtained from...

CVE-2007-5111

A certain ActiveX control in EBCRYPT.DLL 2.0 in EB Design ebCrypt allows remote attackers to cause a denial of service crash via a string argument to the AddString method...

CVE-2007-5107

Stack-based buffer overflow in the AskJeevesToolBar.SettingsPlugin.1 ActiveX control in askBar.dll in IAC Search & Media ask.com Ask Toolbar 4.0.2.53 and earlier allows remote attackers to execute arbitrary code via a long ShortFormat property value. NOTE: some of these details are obtained from...

CVE-2007-5107

The CVE-2007-5107 entry describes a stack-based buffer overflow in the AskJeevesToolBar.SettingsPlugin.1 ActiveX control (askBar.dll) used by the IAC/Ask Toolbar on Windows. A long ShortFormat property value allows remote code execution. Related CVE-2007-5108 is suspected to be the same issue, bu...

CVE-2007-5110

CVE-2007-5110 describes an absolute path traversal in the EB Design ebCrypt ActiveX control (EbCrypt.eb_c_PRNGenerator.1) within EBCRYPT.DLL 2.0.0.2087 and earlier. The vulnerability allows remote attackers to create or overwrite arbitrary files by passing a full pathname to the SaveToFile method...

CVE-2007-5111

The CVE-2007-5111 entry describes a vulnerability in the EB Design ebCrypt ActiveX control (EBCRYPT.DLL 2.0) where a string argument to the AddString method can be exploited by a remote attacker to cause a crash (DoS). The description specifies the affected component and the root cause (input han...

CVE-2007-5110

Absolute path traversal vulnerability in the EbCrypt.ebcPRNGenerator.1 ActiveX control in EBCRYPT.DLL 2.0.0.2087 and earlier in EB Design ebCrypt allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the SaveToFile method. NOTE: some of these detail...