CVE-2007-4034

The vulnerability CVE-2007-4034 affects Yahoo! Widgets’ ActiveX control YDPCTL.dll (YDPCTL.YDPControl.1) in Yahoo! Widgets before 4.0.5. A stack-based buffer overflow is triggered by a long argument to GetComponentVersion(), allowing remote execution of arbitrary code. Supported details in the co...

CVE-2007-4031

CVE-2007-4031 affects Nessus Vulnerability Scanner for Windows prior to 3.0.6.1, in the ScanCtrl ActiveX control (SCANCTRL.ScanCtrlCtrl.1 in scan.dll). The flaw allows directory traversal: an attacker who lures a user to a crafted page can cause deleteReport to send a .. path, enabling deletion o...

Nessus Vulnerability Scanner 3.0.6 - ActiveX Command Execution

Nessus Vulnerability Scanner 3.0.6 - ActiveX Command Execution Tested on Nessus 3.0.6 / IE 6 / XP SP2 Polish Just for fun ; -- obj.addsetConfig'shutdown -t 1000 -s -c "hello world ;" && pause', '', ''; obj.saveNessusRC"../../../../../../Documents and Settings/All Users/Menu...

Yahoo! Widgets Engine 4.0.3 YDPCTL.DLL ActiveX Control Buffer Overflow Vulnerability

Yahoo! Widgets Engine 4.0.3 YDPCTL.DLL ActiveX Control Buffer Overflow Vulnerability. CVE-2007-4034. Remote exploit for windows platform source: http://www.securityfocus.com/bid/25086/info Yahoo! Widgets Engine is prone to a buffer-overflow vulnerability because it fails to bounds-check...

Nessus Vulnerability Scanner 3.0.6 ActiveX Remote Delete File Exploit

No description provided by source. HTML !-- Nessus Vulnerability Scanner 3.0.6 ActiveX deleteReport 0day Remote Delete File Exploit Bug discovered by Krystian Kloskowski h07 [email protected] Tested on Nessus 3.0.6 / IE 6 / XP SP2 Polish Just for fun ; --...

Nessus Vulnerability Scanner 3.0.6 ActiveX Command Exec Exploit

No description provided by source. HTML !-- Nessus Vulnerability Scanner 3.0.6 ActiveX 0day Remote Code Execution Exploit Bug discovered by Krystian Kloskowski h07 [email protected] Tested on Nessus 3.0.6 / IE 6 / XP SP2 Polish Just for fun ; -- object id="obj"...

Nessus Vulnerability Scanner 3.0.6 ActiveX Command Exec Exploit

Exploit for unknown platform in category remote exploits =============================================================== Nessus Vulnerability Scanner 3.0.6 ActiveX Command Exec Exploit =============================================================== Tested on Nessus 3.0.6 / IE 6 / XP SP2 Polish Ju...

Nessus Vulnerability Scanner 3.0.6 - ActiveX Command Execution

Tested on Nessus 3.0.6 / IE 6 / XP SP2 Polish Just for fun ; -- obj.addsetConfig'shutdown -t 1000 -s -c "hello world ;" && pause', '', ''; obj.saveNessusRC"../../../../../../Documents and Settings/All Users/Menu Start/Programy/Autostart/exec.bat"; milw0rm.com 2007-07-27...

Yahoo! Widgets YDP YDPCTL.YDPControl.1 ActiveX (YDPCTL.dll) Buffer Overflow

The remote host contains the YDP ActiveX control, distributed as a part of Yahoo! Widgets. The version of this control installed on the remote host reportedly fails to validate input to the 'GetComponentVersion' method before storing it in a 512-byte buffer. If an attacker can trick a user on the...

CVE-2007-3302

The CallCode ActiveX control in caller.dll 3.0 before 20070713, and 3.0 SP1 before 3.0.5.81, in CA formerly Computer Associates eTrust Intrusion Detection allows remote attackers to load arbitrary DLLs on a client system, and execute code from these DLLs, via unspecified "scriptable functions."...

Code injection

The CallCode ActiveX control in caller.dll 3.0 before 20070713, and 3.0 SP1 before 3.0.5.81, in CA formerly Computer Associates eTrust Intrusion Detection allows remote attackers to load arbitrary DLLs on a client system, and execute code from these DLLs, via unspecified "scriptable functions."...

clever-overwrite.txt

------------------------------------------------------------------------------------------------- Clever Internet ActiveX Suite 6.2 CLINETSUITEX6.OCX Arbitrary file download/overwrite Exploit url: http://www.clevercomponents.com/home/news.asp author: shinnai mail: shinnaiatautisticidotorg site:...

Nessus Vulnerability Scanner 3.0.6 ActiveX Remote Delete File Exploit

Exploit for unknown platform in category remote exploits ===================================================================== Nessus Vulnerability Scanner 3.0.6 ActiveX Remote Delete File Exploit ===================================================================== Tested on Nessus 3.0.6 / IE 6 ...

CA ETrust Intrusion Detection Caller.dll控件远程代码执行漏洞

BUGTRAQ ID: 25050 CVECAN ID: CVE-2007-3302 CA的eTrust Intrusion Detection是功能强大的基于网络的入侵检测系统。 eTrust Intrusion Detection的ActiveX控制实现上存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 在安装eTrust Intrusion Detection时会注册以下ActiveX控件： 文件：Caller.dll Clsid：41266C21-18D8-414B-88C0-8DCA6C25CEA0...

CVE-2007-3302

The CallCode ActiveX control in caller.dll 3.0 before 20070713, and 3.0 SP1 before 3.0.5.81, in CA formerly Computer Associates eTrust Intrusion Detection allows remote attackers to load arbitrary DLLs on a client system, and execute code from these DLLs, via unspecified "scriptable functions."...

Nessus Vulnerability Scanner 3.0.6 - ActiveX Remote Delete File

Tested on Nessus 3.0.6 / IE 6 / XP SP2 Polish Just for fun ; -- obj.deleteReport"../../../../../../../test.txt"; //Deleting file: C:\test.txt alert"done"; milw0rm.com 2007-07-26...

Nessus Vulnerability Scanner 3.0.6 - ActiveX Remote Delete File

Nessus Vulnerability Scanner 3.0.6 - ActiveX Remote Delete File Tested on Nessus 3.0.6 / IE 6 / XP SP2 Polish Just for fun ; -- obj.deleteReport"../../../../../../../test.txt"; //Deleting file: C:\test.txt alert"done"; milw0rm.com 2007-07-26...

CVE-2007-3302

The CVE-2007-3302 issue affects CA eTrust Intrusion Detection’s CallCode ActiveX control (Caller.dll) and allows remote code execution by loading arbitrary DLLs via scriptable functions when the control is marked safe for scripting. Affected versions include Caller.dll 3.0 before 20070713 and 3.0...

LinkedIn IE工具栏IEContextMenu控件远程溢出漏洞

BUGTRAQ ID: 25032 LinkedIn是一个联网工具，帮助用户在线寻找各类工作或业务联系人。 LinkedIn的IEToolbar.IEContextMenu.1 ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户机器。 LinkedIn工具栏的IEToolbar.IEContextMenu.1（LinkedInIEToolbar.dll）控件在处理Search方式时将VARIANT用作了varBrowser参数，如果用户受骗访问了恶意网页的话就可能触发缓冲区溢出，导致在用户浏览器会话中执行任意指令。 LinkedIn IE Toolbar...

Path traversal

Absolute path traversal vulnerability in the Data Dynamics DDActiveReports2.ActiveReport.2 ActiveReports ActiveX control in arpro2.dll in ActiveReports 2.0 Professional Edition 2.5.0.1308 SP5 RC allows remote attackers to create or overwrite arbitrary files via a full pathname in an argument to t...