Akamai Download Manager ActiveX control buffer overflow

Overview The Akamai Download Manager ActiveX control contains a buffer overflow, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Akamai Download Manager is software designed to enhance the ability to download content. The Akamai...

Akamai Download Manager ActiveX Control < 2.2.1.0 Multiple Vulnerabilities

The Windows remote host contains the Download Manager ActiveX control from Akamai, which helps users download content. The version of this ActiveX control on the remote host reportedly contains two stack-based buffer overflow vulnerabilities. A remote attacker may be able to leverage these issues...

iDefense Security Advisory 04.16.07: Akamai Download Manager ActiveX Stack Buffer Overflow Vulnerability

Akamai Download Manager ActiveX Stack Buffer Overflow Vulnerability iDefense Security Advisory 04.16.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 16, 2007 I. BACKGROUND Akamai Technologies, Inc's provides distributed computing platform for global Internet content caching and...

IE (7 9+ Exes) NCTAudioFile2. AudioFile ActiveX Remo-vulnerability warning-the black bar safety net

/ ------------------------------------------------------------------------------------------------- PoC 7 9 Exes's / IE NCTAudioFile2. AudioFile ActiveX Remote Stack Overfl0w Auther: InTeL original Advisory: http://secunia.com/secuniaresearch/ Attack Vector: EIP smash Type: Remote Malicious...

Kaspersky AntiVirus SysInfo ActiveX控件信息泄露漏洞

Kaspersky Antivirus是一款流行的反病毒程序。 Kaspersky Antivirus ActiveX控件存在设计问题，远程攻击者可以利用漏洞获得敏感信息。 问题存在于如下控件中： ProgID: KL.SysInfo Clsid: BA61606B-258C-4021-AD27-E07A3F3B91DB File: C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\AxKLSysInfo.dll Version: 5.0.5.0...

Kaspersky AntiVirus SysInfo ActiveX控件任意文件越过过滤漏洞

Kaspersky Antivirus是一款流行的反病毒程序。 Kaspersky Antivirus ActiveX控件使用不安全方法，远程攻击者可以利用漏洞下载或删除系统任意文件。 问题存在于AxKLProd60.dll和AxKLSysInfo.dll中的ActiveX控件，攻击者可以构建恶意WEB页，诱使用户访问触发，并可以以系统权限下载或删除系统任意文件。 Kaspersky Internet Security 6.0 Kaspersky Anti-Virus 6.0 可采用自动更新获得修正： http://www.kaspersky.com/technews?id=203038...

IE NCTAudioFile2.AudioFile ActiveX Remote Overflow Exploit

No description provided by source. / ------------------------------------------------------------------------------------------------- PoC 79 Exes's / IE NCTAudioFile2.AudioFile ActiveX Remote Stack Overfl0w Auther: InTeL Original Advisory: http://secunia.com/secuniaresearch/ Attack Vector: EIP...

Microsoft Internet Explorer - NCTAudioFile2.AudioFile ActiveX Remote Overflow

Microsoft Internet Explorer - NCTAudioFile2.AudioFile ActiveX Remote Overflow / ------------------------------------------------------------------------------------------------- PoC 79 Exes's / IE NCTAudioFile2.AudioFile ActiveX Remote Stack Overfl0w Auther: InTeL Original Advisory:...

HP Mercury Quality Center multiple security vulnerabilities

SQL injection, ActiveX buffer overflow...

IE NCTAudioFile2.AudioFile ActiveX Remote Overflow Exploit

Exploit for unknown platform in category remote exploits ========================================================== IE NCTAudioFile2.AudioFile ActiveX Remote Overflow Exploit ========================================================== /...

Microsoft Internet Explorer - NCTAudioFile2.AudioFile ActiveX Remote Overflow

/ ------------------------------------------------------------------------------------------------- PoC 79 Exes's / IE NCTAudioFile2.AudioFile ActiveX Remote Stack Overfl0w Auther: InTeL Original Advisory: http://secunia.com/secuniaresearch/ Attack Vector: EIP smash Type: Remote Malicious webpage...

Yahoo Messenger AudioConf ActiveX control buffer overflow

Added: 04/12/2007 CVE: CVE-2007-1680 BID: 23291 OSVDB: 34319 Background Yahoo! Messenger is an instant messaging application. It includes the AudioConf ActiveX control which is provided by yacscom.dll. Problem A buffer overflow vulnerability in the AudioConf ActiveX control allows command executi...

Yahoo Messenger AudioConf ActiveX control buffer overflow

Added: 04/12/2007 CVE: CVE-2007-1680 BID: 23291 OSVDB: 34319 Background Yahoo! Messenger is an instant messaging application. It includes the AudioConf ActiveX control which is provided by yacscom.dll. Problem A buffer overflow vulnerability in the AudioConf ActiveX control allows command executi...

Yahoo Messenger AudioConf ActiveX control buffer overflow

Added: 04/12/2007 CVE: CVE-2007-1680 BID: 23291 OSVDB: 34319 Background Yahoo! Messenger is an instant messaging application. It includes the AudioConf ActiveX control which is provided by yacscom.dll. Problem A buffer overflow vulnerability in the AudioConf ActiveX control allows command executi...

Yahoo Messenger AudioConf ActiveX control buffer overflow

Added: 04/12/2007 CVE: CVE-2007-1680 BID: 23291 OSVDB: 34319 Background Yahoo! Messenger is an instant messaging application. It includes the AudioConf ActiveX control which is provided by yacscom.dll. Problem A buffer overflow vulnerability in the AudioConf ActiveX control allows command executi...

HP Mercury Interactive Quality Center Spider Module ActiveX control stack buffer overflow

Overview The HP Mercury Interactive Quality Center Spider Module ActiveX control contains a stack buffer overflow, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description HP Mercury Interactive Quality Center includes an ActiveX control...

WinDVD7 IASystemInfo.DLL ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in IASystemInfo.dll ActiveX control in InterVideo WinDVD 7. By sending an overly long string to the "ApplicationType" property, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current...

Stack overflow

Multiple stack-based buffer overflows in the SignKorea SKCrypAX ActiveX control module 5.4.1.2 allow remote attackers to execute arbitrary code via a long string in unspecified arguments to the 1 DownloadCert, 2 DecryptFileByKey, and 3 EncryptFileByKey functions, a different module and vectors th...

CVE-2007-1955

Multiple stack-based buffer overflows in the SignKorea SKCrypAX ActiveX control module 5.4.1.2 allow remote attackers to execute arbitrary code via a long string in unspecified arguments to the 1 DownloadCert, 2 DecryptFileByKey, and 3 EncryptFileByKey functions, a different module and vectors th...

CVE-2007-1955

Two CVEs concern SignKorea ActiveX controls and describe stack-based/buffer overflow vulnerabilities that enable remote code execution. CVE-2007-1955 affects SignKorea SKCrypAX ActiveX (module 5.4.1.2); the flaw is triggered by a long string argument to DownloadCert, DecryptFileByKey, or EncryptF...