CVE-2007-4890

Absolute directory traversal vulnerability in a certain ActiveX control in the VB To VSI Support Library VBTOVSI.DLL 1.0.0.0 in Microsoft Visual Studio 6.0 allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the SaveAs method. NOTE: contents can b...

Buffer overflow

Buffer overflow in the PhPInfo ActiveX control in PhPCtrl.dll in Callisto PhotoParade Player allows remote attackers to execute arbitrary code via the FileVersionof property...

HP ActiveX (hpqutil.dll ListFiles hpqutil.dll) Remote Heap Overflow PoC

No description provided by source. :. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: ActiveX hpqutil!ListFiles hpqutil.dll - Remote heap overflow. ============================================================= Internal ID: VULWAR200706041 introduction ------------...

HP - ActiveX hpqutil.dll ListFiles Remote Heap Overflow (PoC)

HP - ActiveX hpqutil.dll ListFiles Remote Heap Overflow PoC :. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: ActiveX hpqutil!ListFiles hpqutil.dll - Remote heap overflow. ============================================================= Internal ID: VULWAR200706041...

HP ActiveX (hpqutil.dll ListFiles hpqutil.dll) Remote Heap Overflow PoC

Exploit for unknown platform in category dos / poc ======================================================================= HP ActiveX hpqutil.dll ListFiles hpqutil.dll Remote Heap Overflow PoC ======================================================================= :. GOODFELLAS Security Research...

CVE-2007-1688

The CVE-2007-1688 entry concerns a buffer overflow in the PhPInfo ActiveX control (PhPCtrl.dll) used by Callisto PhotoParade Player. The vulnerability affects the PhPInfo ActiveX control and its FileVersionOf property, enabling remote code execution when a user opens a specially crafted page, per...

PhotoChannel Networks Photo Upload Plugin ActiveX control stack buffer overflows

Overview The PhotoChannel Networks Photo Upload Plugin ActiveX control contains multiple buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description PNI Digital Media, which is a division of PhotoChannel Networks, provides pho...

Microsoft MFC Library - CFileFind::FindFile Buffer Overflow

source: https://www.securityfocus.com/bid/25697/info The CFileFind::FindFile method in the MFC library for Microsoft Windows is prone to a buffer-overflow vulnerability because the method fails to perform adequate boundary checks of user-supplied input. Successfully exploiting this issue may allo...

Microsoft SQL Server sqldmo.dll ActiveX控件缓冲区溢出漏洞

BUGTRAQ ID: 25594 Apache HTTP Server是一款流行的Web服务器。 Microsoft SQL Server分布式管理对象OLE DLL（sqldmo.dll）中存在缓冲区溢出漏洞。如果用户受骗访问了恶意网页并向该控件的Start方式传送了超长字符的话，就可能触发这个溢出，导致执行任意代码。 Microsoft SQL Server 2005 SP2 Microsoft --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Microsoft MFC Library - CFileFind::FindFile Buffer Overflow

Microsoft MFC Library - CFileFind::FindFile Buffer Overflow source: https://www.securityfocus.com/bid/25697/info The CFileFind::FindFile method in the MFC library for Microsoft Windows is prone to a buffer-overflow vulnerability because the method fails to perform adequate boundary checks of...

Microsoft Visual Studio VB To VSI支持库ActiveX控件任意文件覆盖漏洞

BUGTRAQ ID: 25635 Microsoft Visual Studio是微软公司的开发工具套件系列产品，是一个基本完整的开发工具集，包括了软件整个生命周期中所需要的大部分工具。 Visual Studio中所安装的VB To VSI支持库（VBTOVSI.DLL）没有正确的验证某些方式的输入参数，允许用户使用Load方式做为参数加载本地机器的文件，然后使用SaveAs方式将其保存到任意位置。 Microsoft Visual Studio 6.0 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

CVE-2007-1688

Buffer overflow in the PhPInfo ActiveX control in PhPCtrl.dll in Callisto PhotoParade Player allows remote attackers to execute arbitrary code via the FileVersionof property...

PhotoParade Player PhPInfo ActiveX (PhPCtrl.dll) FileVersionof Property Overflow

The remote host contains the PhPInfo ActiveX control, included with the PhotoParade Player software for creating slideshows of digital pictures. The version of this control installed on the remote host reportedly contains an unspecified overflow in its 'FileVersionOf' property that could lead to...

HP - ActiveX 'hpqutil.dll' ListFiles Remote Heap Overflow (PoC)

:. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: ActiveX hpqutil!ListFiles hpqutil.dll - Remote heap overflow. ============================================================= Internal ID: VULWAR200706041 introduction ------------ GOODFELLAS security research team has...

Oracle Jinitiator 1.1.8 Vulnerabilities CVE-2007-4467 - Additional Information

US-CERT released an advisory on August 28, 2007 regarding multiple stack buffer overflows in the Oracle Jinitiator product Vulnerability Note VU474433/CVE-2007-4467. Due to limited public technical information on Jinitiator, no access to the Oracle support website, and maybe lack of cooperation...

Oracle Jinitiator ActiveX buffer overflow

Multiple stack based buffer overflows...

Stack overflow

Stack-based buffer overflow in agentdpv.dll 2.0.0.3425 in Microsoft Agent on Windows 2000 SP4 allows remote attackers to execute arbitrary code via a crafted URL to the Agent Agent.Control ActiveX control, which triggers an overflow within the Agent Service agentsrv.exe process, a different issue...

CVE-2007-3040

Stack-based buffer overflow in agentdpv.dll 2.0.0.3425 in Microsoft Agent on Windows 2000 SP4 allows remote attackers to execute arbitrary code via a crafted URL to the Agent Agent.Control ActiveX control, which triggers an overflow within the Agent Service agentsrv.exe process, a different issue...

CVE-2007-3040

This CVE affects Microsoft Agent on Windows 2000 SP4, via the Agent (Agent.Control) ActiveX in agentdpv.dll 2.0.0.3425. A crafted URL can trigger a stack-based overflow in the Agent Service (agentsrv.exe), allowing remote code execution with the caller’s privileges. The issue is tied to the Micro...

Microsoft Agent agentdpv.dll ActiveX控件畸形URL栈溢出漏洞（MS07-051）

BUGTRAQ ID: 25566 CVECAN ID: CVE-2007-3040 Microsoft Windows是微软发布的非常流行的操作系统。 Windows操作系统所安装的Microsoft Agent ActiveX控件用于使用动画字符引导用户了解如何使用计算机，该ActiveX控件注册如下： 文件：agentdpv.dll ProgID：Agent.Control CLASSID：D45FD31B-5C6E-11D1-9EC1-00C04FD7081F Microsoft...